12

The resource monitor shows that a svchost is consuming all of the bandwidth. How can I check which of these services is the one responsible for this?

My resource monitor showing the service host process:

enter image description here

Improve this question
5
  • I see windows update, some "background intelligent transfer service" and "Computer Browser" (strangely named)... but unless there's some options you've got turned off, you'll probably need another tool to check
    – Xen2050
    Mar 15, 2016 at 7:03
  • Do you mean bandwidth or CPU usage?
    – root
    Mar 16, 2016 at 16:20
  • I mean network bandwidth. My total bandwidth is 3Mbps
    – TZubiri
    Mar 16, 2016 at 18:55
  • @Johnny Bravo, you know, the svchost is consuming only 3 percents of bandwidth according to your resource monitor's photo.
    – Arani
    Jun 12, 2016 at 9:54
  • 1
    @Tom The resource monitor is incorrectly assuming my total bandwidth is 100MBps. It's actually 3Mbps
    – TZubiri
    Jun 13, 2016 at 0:16

4 Answers 4

Reset to default
13
+50

You can force the services running in the shared instance of svchost.exe to use their own instance of svchost.exe. This will permit you to view each service's bandwidth use separately. Do this with the command:

sc config <servicename> type= own

Note: The space in type= own is intentional.

For example, to run the Background Intelligent Transfer Service service in its own instance of svchost.exe, run:

sc config BITS type= own

For the change to take effect the service must be restarted. To do that immediately use:

net stop <servicename>
net start <servicename>

Using a process of elimination, isolate several services until you find the one consuming the bandwidth. To return the service to the default "shared" instance of svchost.exe, use the command:

sc config <servicename> type= share
Improve this answer
2
  • 1
    Tip: Windows Update Service is named wuauserv.
    – David Refoua
    Apr 11, 2017 at 21:17
  • @tomas Did this help you find out what was wrong? If so, please consider giving the answer flag.
    – I say Reinstate Monica
    Aug 19, 2017 at 3:35
3

Process Traffic Monitor is a free process traffic monitoring tool from which can show you which process or application is utilizing more network traffic.

You need to have WinPCap installed for it to work.

You can get the tool from here .

Improve this answer
3
  • 1
    The problem is, that many windows sarvices are hosted withing the same process
    – Liero
    Jun 10, 2016 at 14:28
  • Also i guess it wont monitor services, just applications
    – M at
    Jun 11, 2016 at 23:12
  • Processes. Usually, that's more than enough to determine what causes a BW problem.
    – Overmind
    Jun 14, 2016 at 5:47
3

You may be able to use Netstat to also help determine what is using the bandwidth.

Example below.

Open cmd.exe and Type.

netstat -o -n

enter image description here

Now find the PID with the most connections.

enter image description here

This should help you find what is using the bandwidth. Just kill the Process or dig deeper to see what the process is using the bandwidth for.

Netstat Switches used. More Switches here

-n : Displays active TCP connections, however, addresses and port numbers are expressed numerically and no attempt is made to determine names.

-o : Displays active TCP connections and includes the process ID (PID) for each connection. You can find the application based on the PID on the Processes tab in Windows Task Manager. This parameter can be combined with -a, -n, and -p.

Improve this answer
1

Netlimiter is free and a great option to monitor the bandwidth usage per application. You can limit the bandwidth usage per application as well.

enter image description here

Improve this answer
1
  • Will it monitor the services ? I don't think so
    – M at
    Jun 11, 2016 at 23:11

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .