Постоянно через VPN идет какой то левый трафик!

[catalyst]

Люди помогите, при загрузке компа и при включении vpn у меня сразу лампочка начинает моргать, система накачивает в 2 стороны, на прием и отправку, по 100  килобайт в минуту! Главное ничего такого не стоит что могло бы жрать трафик. В свойствах подлкючения (нетворк манагер) галочка Посылать эхо пакеты отключена. Посмотрев логи я так понял что все таки это эхо, но почему они такие большие?! 200 килобайт в минуту это ж дофига, трафик то не бесконечный!

daemon.log

(Нажмите, чтобы показать/скрыть)

Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  Wireless disabled by radio killswitch; disabled by state file
Nov 28 14:11:11 catalyst-laptop NetworkManager:    SCPlugin-Ifupdown: (143542560) ... get_connections.
Nov 28 14:11:11 catalyst-laptop NetworkManager:    SCPlugin-Ifupdown: (143542560) ... get_connections (managed=false): return empty list.
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin Novatel
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin Huawei
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin Option
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin Ericsson MBM
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin ZTE
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin MotoC
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin Gobi
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin Option High-Speed
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin Nokia
Nov 28 14:11:11 catalyst-laptop avahi-daemon[1014]: Found user 'avahi' (UID 105) and group 'avahi' (GID 111).
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin Sierra
Nov 28 14:11:11 catalyst-laptop avahi-daemon[1014]: Successfully dropped root privileges.
Nov 28 14:11:11 catalyst-laptop modem-manager: Loaded plugin Generic
Nov 28 14:11:11 catalyst-laptop avahi-daemon[1014]: avahi-daemon 0.6.25 starting up.
Nov 28 14:11:11 catalyst-laptop avahi-daemon[1014]: Successfully called chroot().
Nov 28 14:11:11 catalyst-laptop avahi-daemon[1014]: Successfully dropped remaining capabilities.
Nov 28 14:11:11 catalyst-laptop avahi-daemon[1014]: No service file found in /etc/avahi/services.
Nov 28 14:11:11 catalyst-laptop NetworkManager:    Ifupdown: get unmanaged devices count: 0
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (wlan0): driver supports SSID scans (scan_capa 0x01).
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  Wireless now disabled by radio killswitch
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (wlan0): new 802.11 WiFi device (driver: 'iwlagn')
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (wlan0): exported as /org/freedesktop/NetworkManager/Devices/0
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (wlan0): now managed
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (wlan0): device state change: 1 -> 2 (reason 2)
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (wlan0): bringing up device.
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (wlan0): deactivating device (reason: 2).
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (eth0): carrier is OFF
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (eth0): new Ethernet device (driver: 'r8169')
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (eth0): exported as /org/freedesktop/NetworkManager/Devices/1
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (eth0): now managed
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (eth0): device state change: 1 -> 2 (reason 2)
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (eth0): bringing up device.
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (eth0): preparing device.
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (eth0): deactivating device (reason: 2).
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (eth0): carrier now ON (device state 2)
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (eth0): device state change: 2 -> 3 (reason 40)
Nov 28 14:11:11 catalyst-laptop NetworkManager: <WARN>  default_adapter_cb(): bluez error getting default adapter: The name org.bluez was not provided by any .service files
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  modem-manager is now available
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  Trying to start the supplicant...
Nov 28 14:11:11 catalyst-laptop NetworkManager: <info>  (wlan0): supplicant manager state:  down -> idle
Nov 28 14:11:11 catalyst-laptop avahi-daemon[1014]: Network interface enumeration completed.
Nov 28 14:11:11 catalyst-laptop avahi-daemon[1014]: Registering HINFO record with values 'I686'/'LINUX'.
Nov 28 14:11:11 catalyst-laptop avahi-daemon[1014]: Server startup complete. Host name is catalyst-laptop.local. Local service cookie is 1703910256.
Nov 28 14:11:11 catalyst-laptop init: apport pre-start process (1157) terminated with status 1
Nov 28 14:11:12 catalyst-laptop init: apport post-stop process (1167) terminated with status 1
Nov 28 14:11:12 catalyst-laptop acpid: client connected from 1245[107:114]
Nov 28 14:11:12 catalyst-laptop gdm-binary[943]: WARNING: Unable to find users: no seat-id found
Nov 28 14:11:12 catalyst-laptop acpid: client connected from 1322[0:0]
Nov 28 14:11:15 catalyst-laptop acpid: client connected from 1322[0:0]
Nov 28 14:11:16 catalyst-laptop console-kit-daemon[950]: WARNING: Couldn't read /proc/947/environ: Failed to open file '/proc/947/environ': No such file or directory
Nov 28 14:11:28 catalyst-laptop gnome-session[3223]: WARNING: Could not launch application 'gnome-volume-control-applet.desktop': Unable to start application: Произошёл сбой при выполнении процесса-потомка "gnome-volume-control-applet" (No such file or directory)
Nov 28 14:11:34 catalyst-laptop blueman-mechanism: Starting blueman-mechanism
Nov 28 14:11:34 catalyst-laptop blueman-mechanism: reload 0 0
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) starting connection 'lan'
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  (eth0): device state change: 3 -> 4 (reason 0)
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 1 of 5 (Device Prepare) scheduled...
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 1 of 5 (Device Prepare) started...
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 2 of 5 (Device Configure) scheduled...
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 1 of 5 (Device Prepare) complete.
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 2 of 5 (Device Configure) starting...
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  (eth0): device state change: 4 -> 5 (reason 0)
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 2 of 5 (Device Configure) successful.
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 3 of 5 (IP Configure Start) scheduled.
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 2 of 5 (Device Configure) complete.
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 3 of 5 (IP Configure Start) started...
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  (eth0): device state change: 5 -> 7 (reason 0)
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Beginning DHCP transaction (timeout in 45 seconds)
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  dhclient started with pid 4412
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 4 of 5 (IP6 Configure Get) scheduled...
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 3 of 5 (IP Configure Start) complete.
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 4 of 5 (IP6 Configure Get) started...
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 4 of 5 (IP6 Configure Get) complete.
Nov 28 14:11:50 catalyst-laptop dhclient: Internet Systems Consortium DHCP Client V3.1.2
Nov 28 14:11:50 catalyst-laptop dhclient: Copyright 2004-2008 Internet Systems Consortium.
Nov 28 14:11:50 catalyst-laptop dhclient: All rights reserved.
Nov 28 14:11:50 catalyst-laptop dhclient: For info, please visit http://www.isc.org/sw/dhcp/
Nov 28 14:11:50 catalyst-laptop dhclient:
Nov 28 14:11:50 catalyst-laptop NetworkManager: <info>  DHCP: device eth0 state changed (null) -> preinit
Nov 28 14:11:50 catalyst-laptop dhclient: Listening on LPF/eth0/00:03:0d:a4:f3:f5
Nov 28 14:11:50 catalyst-laptop dhclient: Sending on   LPF/eth0/00:03:0d:a4:f3:f5
Nov 28 14:11:50 catalyst-laptop dhclient: Sending on   Socket/fallback
Nov 28 14:11:54 catalyst-laptop dhclient: DHCPREQUEST of 172.16.3.43 on eth0 to 255.255.255.255 port 67
Nov 28 14:11:54 catalyst-laptop dhclient: DHCPACK of 172.16.3.43 from 172.16.0.1
Nov 28 14:11:54 catalyst-laptop dhclient: bound to 172.16.2.43 -- renewal in 38089 seconds.
Nov 28 14:11:54 catalyst-laptop NetworkManager: <info>  DHCP: device eth0 state changed preinit -> reboot
Nov 28 14:11:54 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 4 of 5 (IP4 Configure Get) scheduled...
Nov 28 14:11:54 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 4 of 5 (IP4 Configure Get) started...
Nov 28 14:11:54 catalyst-laptop NetworkManager: <info>    address 172.16.3.43
Nov 28 14:11:54 catalyst-laptop NetworkManager: <info>    prefix 24 (255.255.255.0)
Nov 28 14:11:54 catalyst-laptop NetworkManager: <info>    gateway 172.16.3.1
Nov 28 14:11:54 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 5 of 5 (IP Configure Commit) scheduled...
Nov 28 14:11:54 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 4 of 5 (IP4 Configure Get) complete.
Nov 28 14:11:54 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 5 of 5 (IP Configure Commit) started...
Nov 28 14:11:54 catalyst-laptop avahi-daemon[1014]: Joining mDNS multicast group on interface eth0.IPv4 with address 172.16.3.43.
Nov 28 14:11:54 catalyst-laptop avahi-daemon[1014]: New relevant interface eth0.IPv4 for mDNS.
Nov 28 14:11:54 catalyst-laptop avahi-daemon[1014]: Registering new address record for 172.16.2.44 on eth0.IPv4.
Nov 28 14:11:55 catalyst-laptop NetworkManager: <info>  (eth0): device state change: 7 -> 8 (reason 0)
Nov 28 14:11:55 catalyst-laptop NetworkManager: <info>  Policy set 'lan' (eth0) as default for routing and DNS.
Nov 28 14:11:55 catalyst-laptop NetworkManager: <info>  Activation (eth0) successful, device activated.
Nov 28 14:11:55 catalyst-laptop NetworkManager: <info>  Activation (eth0) Stage 5 of 5 (IP Configure Commit) complete.
Nov 28 14:11:55 catalyst-laptop ntpdate[4452]: can't find host ntp.ubuntu.com
Nov 28 14:11:55 catalyst-laptop ntpdate[4452]: no servers can be used, exiting
Nov 28 14:12:04 catalyst-laptop blueman-mechanism: Exiting
Nov 28 14:12:23 catalyst-laptop NetworkManager: <info>  Starting VPN service 'org.freedesktop.NetworkManager.pptp'...
Nov 28 14:12:23 catalyst-laptop NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.pptp' started (org.freedesktop.NetworkManager.pptp), PID 6336
Nov 28 14:12:23 catalyst-laptop NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.pptp' just appeared, activating connections
Nov 28 14:12:23 catalyst-laptop NetworkManager: <info>  VPN plugin state changed: 1
Nov 28 14:12:23 catalyst-laptop NetworkManager: <info>  VPN plugin state changed: 3
Nov 28 14:12:23 catalyst-laptop NetworkManager: <info>  VPN connection 'internet' (Connect) reply received.
Nov 28 14:12:23 catalyst-laptop pptp[6344]: nm-pptp-service-6336 log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Nov 28 14:12:23 catalyst-laptop NetworkManager:    SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Nov 28 14:12:23 catalyst-laptop NetworkManager:    SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
Nov 28 14:12:23 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Nov 28 14:12:23 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Nov 28 14:12:23 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Nov 28 14:12:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Nov 28 14:12:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Nov 28 14:12:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 5940).
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  VPN connection 'internet' (IP Config Get) reply received.
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  VPN Gateway: 192.168.3.1
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  Tunnel Device: ppp0
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  Internal IP4 Address: 213.80.241.159
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  Internal IP4 Prefix: 32
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  Internal IP4 Point-to-Point Address: 172.16.1.1
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  Maximum Segment Size (MSS): 0
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  Internal IP4 DNS: 83.222.3.94
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  Internal IP4 DNS: 217.23.65.3
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  DNS Domain: '(none)'
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  Login Banner:
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  -----------------------------------------
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  (null)
Nov 28 14:12:24 catalyst-laptop NetworkManager: <info>  -----------------------------------------
Nov 28 14:12:25 catalyst-laptop NetworkManager: <info>  VPN connection 'internet' (IP Config Get) complete.
Nov 28 14:12:25 catalyst-laptop NetworkManager: <info>  Policy set 'internet' (ppp0) as default for routing and DNS.
Nov 28 14:12:25 catalyst-laptop NetworkManager: <info>  VPN plugin state changed: 4
Nov 28 14:12:25 catalyst-laptop nm-dispatcher.action: Script '/etc/NetworkManager/dispatcher.d/01ifupdown' exited with error status 1.
Nov 28 14:13:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:677]: Echo Request received.
Nov 28 14:13:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 6 'Echo-Reply'
Nov 28 14:13:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:677]: Echo Reply received.
Nov 28 14:14:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:677]: Echo Reply received.
Nov 28 14:15:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:677]: Echo Request received.
Nov 28 14:15:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 6 'Echo-Reply'
Nov 28 14:15:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:677]: Echo Reply received.
Nov 28 14:16:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:677]: Echo Request received.
Nov 28 14:16:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 6 'Echo-Reply'
Nov 28 14:16:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:677]: Echo Reply received.
Nov 28 14:17:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:677]: Echo Request received.
Nov 28 14:17:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 6 'Echo-Reply'
Nov 28 14:17:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:677]: Echo Reply received.
Nov 28 14:18:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:677]: Echo Reply received.
Nov 28 14:18:24 catalyst-laptop pptp[6354]: nm-pptp-service-6336 log[logecho:pptp_ctrl.c:679]: no more Echo Reply/Request packets will be reported.

[Frank]

iftop и netstat в руки

[catalyst]

netstat
Активные соединения с интернетом (w/o servers)
Proto Recv-Q Send-Q Local Address Foreign Address State     
tcp        0      0 catalyst-laptop.l:44858 192.168.3.1:1723        ESTABLISHED
raw        0      0 catalyst-laptop.loc:gre 192.168.3.1:*           1         
______________________________________________

iftop

                12.5Kb          25.0Kb          37.5Kb          50.0Kb    62.5Kb
└───────────────┴───────────────┴───────────────┴───────────────┴───────────────
catalyst-laptop.local      => 192.168.3.1                4.12Kb  4.13Kb  5.02Kb
                           <=                            4.26Kb  4.22Kb  5.10Kb

_______________________________________________

все что я понял так это то что он постоянно посылает и принимает эхо пакеты на шлюз VPN. Че делать? Раньше не было такого

[Frank]

Установлено постоянное соединение с 192.168.3.1 на порт 1723. Чтобы выяснить, что за процесс установил соединение, см.
sudo netstat -pta
Может это и есть VPN соединение?
Точно трафик покажет tcpdump

[AnrDaemon]

Это служебный процесс, на сколько я помню.