bioinc client outgoing traffic.

Message boards : Questions and problems : bioinc client outgoing traffic.
Message board moderation

To post messages, you must log in.

AuthorMessage
sam

Send message
Joined: 3 Sep 10
Posts: 7
United States
Message 35198 - Posted: 12 Oct 2010, 20:31:53 UTC

I just noticed that from 1500-1600EST boinc client sent 1.7GB of outgoing traffic with 95.2MB of incoming. that is per kasperky 11 (kis11).

is kis11 burping or do I have a problem of a furtive nature?

NOTE: boincmgr is also showing 875.5MB incoming traffic, for the day, and 47.2MB outgoing.

NOTE: I have a fios connection, so 1.7GB would not take long given the distant end with reasonable connectivity.

NOTE: 2x5870 gpus that can somewhat explain loads of traffic, but not ~2GB in one hour.

lastly, for the month boinc client has a startling 8.6GB outgoing traffic, 220.8MB incoming.

has anyone seen anything like this or have recommendation how I can better police the traffic outgoing under the boinc umbrella?


thanks.
ID: 35198 · Report as offensive
Les Bayliss
Help desk expert

Send message
Joined: 25 Nov 05
Posts: 1654
Australia
Message 35201 - Posted: 12 Oct 2010, 21:30:17 UTC - in response to Message 35198.  

Are you sure that this isn't just the 2 parts of BOINC talking to each other? (The client & the manager.)
Try pulling the phone line out of the computer. If the traffic continues, then it's just as above.

ID: 35201 · Report as offensive
sam

Send message
Joined: 3 Sep 10
Posts: 7
United States
Message 35204 - Posted: 12 Oct 2010, 22:34:53 UTC - in response to Message 35201.  

Are you sure that this isn't just the 2 parts of BOINC talking to each other? (The client & the manager.)
Try pulling the phone line out of the computer. If the traffic continues, then it's just as above.



I assume you are asking to disconnect the computer and what you ask makes sense; however and unfortunately, after reviewing the past month, I see other inordinate in/out traffic via boinc client though sporadic--not everyday. so to disconnect might not be a reasonable test as I would not be able to crunch for most of that given limited supply of WUs for gpus. wouldn't client/mngr traffic be about the same everyday?

NOTE: the indicators began almost to the day I starting using collatz. previously ran dnetc for months and had no spikes, at least nothing like these. does collatz do something different regarding boinc client/manager traffic? I have two days 8GB plus outbound for a total of 23.3GB outbound in two weeks last month--all running collatz but listed as boinc client, not boinc.exe.

so, to give some idea, the apparent norm days are less than 100MB in/out.

with the sporadic nature of this spike in traffic, could that still be the client/manager related?

NOTE: same project throughout, running 24/7.

thanks.


ID: 35204 · Report as offensive
Les Bayliss
Help desk expert

Send message
Joined: 25 Nov 05
Posts: 1654
Australia
Message 35208 - Posted: 13 Oct 2010, 1:14:14 UTC - in response to Message 35204.  
Last modified: 13 Oct 2010, 1:14:28 UTC

Disconnecting the phone line would only need to be for a minute or so, as BOINC talks to itself at, I think 1/10 second intervals. It's how the manager (gui), finds out what the client (worker part / daemon) is doing, so that it can tell you.

However, as you've now said that it began after starting Collatz work, you'd be better off asking them about what their work entails in the way of net traffic.
ID: 35208 · Report as offensive
sam

Send message
Joined: 3 Sep 10
Posts: 7
United States
Message 35215 - Posted: 13 Oct 2010, 17:03:09 UTC - in response to Message 35208.  

Disconnecting the phone line would only need to be for a minute or so, as BOINC talks to itself at, I think 1/10 second intervals. It's how the manager (gui), finds out what the client (worker part / daemon) is doing, so that it can tell you.

However, as you've now said that it began after starting Collatz work, you'd be better off asking them about what their work entails in the way of net traffic.


it has been only a day, but still no response from that project.

is it possible boinc internal traffic could amount to 9GB+ in a day, outbound? the number of WUs crunched is steady throughout this month so this is not about abnormal WU crunching here and there. is boinc internal traffic susceptible to anything close to 31GB outbound traffic in one month with spikes approaching 10GB? what could account for the absurd amount of upbound traffic minus unscrupulous interaction with the machine in question via the client?

I have 32GB of outbound traffic since march under the boinc client umbrella and 31GB of that in the month ending yesterday crunching collatz--only collatz.

how secure is boinc?
ID: 35215 · Report as offensive
Les Bayliss
Help desk expert

Send message
Joined: 25 Nov 05
Posts: 1654
Australia
Message 35216 - Posted: 13 Oct 2010, 17:22:54 UTC - in response to Message 35215.  

If BOINC wasn't secure, then there'd be LOTS of posts about it, instead of just yours.

As it's only outbound traffic, and lots of it, then it may be malware, and not BOINC. Do a thorough search of your computer for virus, trojan, and other nasties. Your computer may have be zombied, and is being used to re-distribute stuff for cyber criminals.

ID: 35216 · Report as offensive
sam

Send message
Joined: 3 Sep 10
Posts: 7
United States
Message 35227 - Posted: 14 Oct 2010, 16:05:08 UTC - in response to Message 35216.  

If BOINC wasn't secure, then there'd be LOTS of posts about it, instead of just yours.

As it's only outbound traffic, and lots of it, then it may be malware, and not BOINC. Do a thorough search of your computer for virus, trojan, and other nasties. Your computer may have be zombied, and is being used to re-distribute stuff for cyber criminals.



les, thanks for the response, but come on, secure, as in inviolable? I did not know such s/w existed. but with that said, I did not say boinc insecure; I asked.

you also assume most catch or are even looking for or have the tools to notice. however, I agree that if I am the only person who has ever questioned the security of boinc then I have more investigating on this end.

this problem started just over 1month ago after I started working with one of the projects. is it not possible for a project to exploit the situation via the boinc client which must be granted privileged status to work? NOTE: I am not suggesting that is what happened. still working the particulars.

what I see is 31GB that traversed my otherwise guarded s/w firewall using the trusted boinc client.

of course by the nature of my request I am open to the possibility that something iffy in the works hence my push to get answers both from boinc and collatz.

my internet suite is kis11 which I think does an ok job of finding issues which I have run (kis that is) for years. never a problem until recently.

again, thank you for the time and recommendation.


ID: 35227 · Report as offensive

Message boards : Questions and problems : bioinc client outgoing traffic.

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.