My Ubuntu machine is uploading huge amounts of data to the internet

Question

I have been using Linux for about 5 years now but i am not very skilled with the commands to monitor and figure out internal issues.

I recently was having trouble with the internet. My roommates were complaining about internet being very slow. For some reason i checked my task manager and it said i uploaded 731 GB of data. I am not sure what it was. Its not doing it right now.

I do not know when it uploaded 731GB of data. Is there a way to figure out the history of the past few days to see when my computer uploaded that much data.

The issue here is not that my internet is slow but who(Process) and most importantly "WHEN" did it/they upload soo much data.

I have used NetHogs/ntop commands to make sure there is no process trying to upload data currently but i dont know how to check the history.

Thank you :)

EDIT: Its doing it again. Here is the screenshot of Nethogs command

Answer 1

I would start with WireShark:

Wireshark is the world's foremost network protocol analyzer. It lets you see what's happening on your network at a microscopic level. It is the de facto (and often de jure) standard across many industries and educational institutions.

Basically, this tool helps you to find out where the data goes. Here's how to install WireShark on Ubuntu.

Answer 2

May be you Torrent client is seeding continuously when you're connected to internet.

Use Wireshark to see the traffic's content (in addition to the remote address, but not the local process).

for that reason i use Network Monitor.