4 Messages

Tuesday, October 10th, 2023 12:58 AM

Closed

Internet Data Usage Incorrect

Over the last week, I have watched my data usage jump to a ridiculous 450gb in 4 days of usage, only to mysteriously drop back down to 230 and now it has shot back up to 765.

What is going on at Xfinity to see such horrible data measurements?

Oldest First
Selected Oldest First

Gold Problem Solver

 • 

27.5K Messages

3 years ago

... What is going on at Xfinity to see such horrible data measurements?

I don't know, but you are not alone. See https://forums.xfinity.com/conversations/customer-service/data-usage-problem/65248627697e8c6b344613b3.

Please be aware that there are 2 kinds of responses in this Forum: Replies and Comments. When you Comment on a post by scrolling down to "Comment on this post here...", I am notified of your response. But if you select Reply, I am NOT notified and may not be aware of your response.

Problem Solver

 • 

1.5K Messages

@BruceW​ Something interesting.  After months of reporting around 80GB of use for the entire month (obviously not correct), I ran into your double data reported issue this months.  

Take a look at your arp table if you can on whatever you are using for a WAN.  Do you see ALL possible IP addresses and MACs in your DHCP pool on an Arista Networks device?  I got stuck on kind of a wonky subnet where I could see all MAC addresses on a switch.  What should you see?  Just your IP address and external gateway on the switch (and your internal gear) -- not every port on a switch. 

I spoofed the MAC to get on a different subnet.  See if that magically straightens out the data reporting over the next few days and report back.   

Update:  Welp, I can see all the ports on an Arista switch after about 30 minutes, however my firewall and intrusion detection is awfully silent.  I still think I'm looking at an amplification networking problem.

(edited)

Problem Solver

 • 

1.5K Messages

3 years ago

Promiscuous mode was the arp problem from utility where the config wasn't explicitly clear, but I can stop the double data count by MAC spoofing, getting an different IP, and ending up on another /21 DHCP pool range with IPV4 only -- at least according to the current stats and watching them climb, compared to data actually used.  Yes, I'm aware of the "supposed" 24 lag, but I was able to prove I can interrupt the double data count problem, and have it track fairly decently after that for at least 12 hours.  

You might try spoofing your IP address that way if you have the capability if you are having this problem.  How long that would "fix" it is unknown.

Why the previous subnet's data reporting was wrapped around the axle is unknown still too.   That data claimed is not present in the interface driver itself, so it's upstream from my gear. 

forum icon

New to the Community?

Start Here