Forum Home
Press F1
 
Thread ID: 63814 2005-11-23 10:40:00 Woosh & mystery upload traffic!!!! HELP! Tumbleweed (9292) Press F1
Post ID Timestamp Content User
406835 2005-11-23 10:40:00 Hi,

I was wondering if anyone could help on the following problem.

I logged on to woosh to check my monthly usage after my modem dropped in speed back to the 56k cap and was shocked to discover I had uploaded almost 3gig in 3 days!!!! There goes my monthly data allowance!!!!

I find this very hard to believe as I don't upload much except the odd file to my web site and its never over 200k per file. I didn't not have Kazaa running (in any event I limit the upload sharing to 1 file at any one time & max 1k/s. I dont play online multiplayer games (anyone with Woosh can tell u that the latency is not good at all).

I rang woosh only to be told they could not refund/return my upload usage as they simply did not believe me! BASTARDS! I have done a virus scan (panda), I use sygate pro firewall, and a number of anti-spyware progs. No problems found bar a couple of adware cookies.

I know I did not upload anything with intent and as I was downloading over those days I think I would have noticed any upload activity as it would impact on my download performance yes?

Is there any windows XP command or log file that will show detailed traffic activity including the amount of data and to what IP address. I can't seem to find anything in Sygate's logs that show the amount of data uploaded or downloaded. I want to be able to prove Woosh wrong and it this sorted.

Cheers,

Pissed off Woosh customer!
Tumbleweed (9292)
406836 2005-11-23 10:52:00 Just a hunch, but by chance are you running a wireless network? If its not secure then I bet someone is logging in and making the most of it! DangerousDave (697)
406837 2005-11-23 11:19:00 Just a hunch, but by chance are you running a wireless network? If its not secure then I bet someone is logging in and making the most of it!

Hey, thanks for that. Um yes its woosh wireless. What do you mean "secure" at my end or theirs? I have anti-virus and a good firewall! Please explain. If its woosh's fault for insecure network that i want a friggin refund.

If someone else has hijacked my account then would the ISP have a record of differing connections/ip address ???

Cheers
Tumbleweed (9292)
406838 2005-11-23 18:44:00 He means secure at your end.

There is a lil hobby amongst a certain contingent of people called wardriving. What they do is drive around finding insecure wireless networks; and either mark it for others to use, or use it.

The security has nothing to do with your computer (well little), its mainly based around the settings of your router/modem.

The ISP may have records

But in the end, the onus is on you to secure your network... iirc the ISP is not responsible for that side of it.
Myth (110)
406839 2005-11-23 20:31:00 If a person just has the woosh wireless internet connection, but does not have a wireless home network doesn't that mean it should be very difficult to intercept or hijack that connection? That is, the supplied Woosh modem only connects to your computer using a ethernet cable.

Do you connect your computer(s) to the woosh modem via wireless technology as well?

I thought wardrivers only could gain access to unsecured wireless LAN's, not direct wireless modem <-> ISP connections. Well that is my understanding at least. :)
Jen (38)
406840 2005-11-23 20:55:00 yeh was wondering that.......... drcspy (146)
406841 2005-11-23 21:12:00 Thanks guys but it I still feel helpless here . I'll be damned if I am going to let this one drop! I wont pay for hard erned dosh for someone else to use my account/modem when I have taken all resonable steps to secure my computer .

How do you make a wireless modem more secure??? Should I have theft insurance on my broadband account? All I want to do is find out what excatly happened and take that evidence back to woosh .

I'll ask again, is there a log made by windows that records by traffic usage?

Thanks
Tumbleweed (9292)
406842 2005-11-23 21:14:00 War drivers will target a WAP (Wireless Access Point)
My understanding of a WAP is, anywhere that a wireless signal is sent/received from.

I am not 100% sure in the case of Woosh as I have never used there service but I would have figured they would have encryption etc in place already

However, even some encrypted sessions can be broken into with the right type of software

As far as logs, I don't think there are any by default. A quick look around in Google does mention 3rd party software however
Myth (110)
406843 2005-11-23 21:40:00 There's this (http://stumbler.net/) but this may only work with wireless networks / some wireless cards, not wireless internet. Speedy Gonzales (78)
406844 2005-11-24 01:01:00 Woosh is not WiFi. It's a different band, for a start. It's not really susceptible to wardriving. I suspect Tumbleweed doesn't have a network using WiFi to be broken into.

If someone (a) has a Woosh "modem", and (b) knows Tumbleweed's username and password they can login and use T's account. The logins will be recorded. The MAC should be recorded, and show if this was happening. Can you find your login times, and compare with the times you know you were on.

Unfortunately, Woosh's records will be right. :( The uploads will have been done from T's account. Most likely, from T's computer. I'd look very hard for nasty software. I don't think I would use Kazaa, ever. ;)
Graham L (2)
1 2