Who’s Hogging Your Bandwidth?
Using the Internet to download TV “on demand” programmes using BBC iPlayer, 4OD or Sky Anytime on PC is a great new use of digital technology, but beware the bandwidth hogs. Applications may be soaking up your available bandwidth by using it for peer-to-peer delivery — without your knowledge.
For the last month or so, I’ve been worried about the steady flow of data leaking from my laptop. I first spotted it while the machine was supposedly idle — a little free application I use, Rokario’s Bandwidth Monitor, showed on its dynamically-updated graph that packets of data were leaving my laptop and being sent to the Internet. Sometimes it was just a low trickle, other times it used just about all the available upload bandwidth. I worried that a trojan was quietly distributing spam e-mails, or some other virus was at work, sending my private information to some unscrupulous hacker somewhere. Locking down the McAfee firewall stopped the flow — temporarily. After unlocking it again, the leak would begin once more after a period of time had passed. Virus scans turned up nothing. I installed Windows Defender and ran that. Still nothing untoward.
One of Windows Defender’s tools, Software Explorer, monitors all the software running on the computer. One of the items in the Network Connected Programs category was listed as belonging to Kontiki Inc and named “Delivery Manager”. The filename associated with this application was KService.exe. I began wondering if this file was something to do with my recent installation of the BBC iPlayer, which uses peer-to-peer technology to distribute its TV-on-demand programmes.
Peer-to-peer networking is designed to share download bandwidth between many machines. If you download a file — usually a video or audio file — using such a service, the file is stored on your hard drive and is then used to complete the downloads of the same file on other people’s machines so that not all the download demands are borne by just the one server (or the server farm) of the programme provider.
I realised that the trickle of outgoing data had appeared shortly after I’d installed the iPlayer — and also Channel 4′s 4OD service — on the laptop. The puzzling thing was: I’d configured the iPlayer not to use any bandwidth when the program wasn’t running, and I always closed it — and the 4OD software — down when not in use by clicking the icons in the System Tray and unloading them. Also, there were no downloaded BBC programs stored on my laptop — I’d deleted them after watching them — so if it was this “service” sending stuff out, what, exactly, was it sending?
Using Alt-Ctrl-Del, I opened Windows Task Manager, clicked the Processes tab and watched what was going on. Over 70 processes were running, including KService.exe, which regularly occupied some processor time. Locking down the firewall changed the state of the KService process — it remained loaded in memory, but fell idle. It was obviously the culprit.
I Googled “KService.exe” and found loads of items about it. It seems that Kontiki developed this bit of peer-to-peer software in 2000 and it’s been used by many a peer-to-peer networking service. Then in 2006 the company was bought by Verisign who, in turn, have licenced it not only to the BBC for use with the iPlayer, but also to Channel 4 for use with 4OD — and also Sky, for use with Sky Anytime on PC, their TV-on-demand service too. So they’re all using the same peer-to-peer delivery software.
The problem with the Kontiki Delivery Manager is that even after the shut-down of the parent application(s), the KService.exe file remains loaded in memory and continues to run. You may not realise it, but by agreeing to the various applications’ terms and conditions (and let’s be honest: who amongst us reads all that legal jargon?), you’ve given permission to the providers to install this software and make use of it in this way.
Of the three applications I’ve discussed here, only the BBC provides users with a method of curtailing peer-to-peer sharing. The BBC iPlayer Terms and Conditions state:
When you install the Download Manager you will also install peer-to-peer file sharing software from Verisign Inc. This software has a file share feature that enables other BBC iPlayer users to download BBC Content through your personal computer (using part of your upload bandwidth), via a secure link, to their personal computers. Other BBC iPlayer users and the BBC will not have the ability to access any files on your computer other than those relating to BBC iPlayer Content. The peer-to-peer functionality is automatically turned on as a default setting. You can change your settings so that the peer-to-peer functionality does not share files automatically when your computer boots up or when you close the BBC iPlayer Download Manager.
Channel 4′s Terms and Conditions say:
4oD uses peer to peer (“P2P”) technology. This allows content to be transferred directly from the computers of users of the Service (rather than through a website or directory). If you download Content to your computer, during the Licence Period, we may upload this from your computer (using part of your upstream bandwidth) for the purpose of transferring Content to other users of the Service. Please contact your Internet Service Provider (“ISP”) if you have any queries on this.
The Sky Anytime on PC Terms and Conditions state:
If you download and save content to your computer system (a “File”), during the license period for the relevant File, we may upload parcels of content from the File from your computer system for the purpose of transferring Files to other users of the Service.
This, I think, raises the interesting legal question of whether a 4OD and/or a Sky Anytime on PC user, having agreed to the terms, has a right to unload the KService.exe file to prevent sharing whenever that user wishes. Any legal eagles out there care to offer an opinion?
Anyway — in my case, what was happening was that there were still some 4OD TV programmes (seven episodes of Spaced) stored on my laptop — even though they had expired and I could no longer watch them again myself, I’d forgotten to delete them — and Kontiki’s Delivery Manager was quietly sharing those programmes with other downloaders. While the BBC iPlayer’s settings give users the ability to restrict sharing, there’s no such setting available on either the 4OD service or Sky Anytime on PC either. The only way to completely stop sharing is to use Windows Task Manager to locate the process and use the “End Process” button to unload it! Hardly a convenient thing for novice or casual users to master — and they may well have a legitimate reason for wishing to do so. In fact, we all might.
Like many others, I’m on a specific usage package with my ISP. I get up to 30GB of bandwidth to play with per month, which I think is more than enough for my purposes. However, others will be on packages that have a much-reduced bandwidth allowance — my own provider’s cheapest package, for example, gives only 2GB per month. We’re all subject to “fair usage” policies, and these are policed in differing ways by ISPs, some much more aggressively than others. My laptop is only switched on during the evenings, but many users will have the iPlayer, the 4OD and/or the Sky Anytime software installed on PCs that are left on 24/7. If they’re not aware that their bandwidth allowance is being eaten up by KService constantly running in the background, they might be in for a shock when their ISPs either charge them for excess monthly bandwidth they didn’t know they’d used, or have their accounts suspended or closed down because their usage has been interpreted as having broken the ISP’s fair usage policy.
TV-on-demand is a handy service, but you need to be aware of the peer-to-peer situation! If you’re not worried about the use of your bandwidth for the purposes of peer-to-peer networking in this way, you need do nothing. However, if it does trouble you, here are a few advisory tips:
1) Delete all programmes from any download service as soon as you’ve watched them, so they’re no longer stored on your hard drive and available for sharing;
2) Use the BBC iPlayer’s settings to prevent sharing when the player is shut down;
3) If you want to prevent the 4OD and Sky Anytime on PC services from peer-to-peer sharing files after the applications have been shut down, use Alt-Ctrl-Del to open Windows Task Manager, click the Processes tab and locate KService.exe, highlight it and click “End Process” to shut it down and unload it from memory (you’ll get a dialog box warning you that some programs might become unstable if you do this, but my experience so far is that they won’t — the next time you fire up any of the download services, they’ll reload KService.exe when they need it).
Disclaimer: This information is provided in good faith and in an advisory capacity only — the author cannot be held responsible or liable for any damage caused to anyone’s computer or data, or for the breaking of any legal obligations, by the application of these suggestions.
Kevin says:
March 18th, 2008
4:54 pm
I’m glad you wrote about this.
It’s a more than a double edged sword this one Bob!
For example, we all want quick downloads but we don’t want the programmes using our bandwidtth in the background.
We can (generally) only get a speedy supply if many other users don’t mind us grabbing packets from their machine so are we obliged to do likewise?
Also, with the governments proposed “Three strikes and you’re out” plan, how can we be sure that the ISPs don’t mistake the P to P action of these programmes for the illegal file sharing variety and try to get us switched off?
I’ve seen the same thing happening on my machine and became so paranoid about it that I took off all the TV programme software. That way, there’s no reason for any bits or bytes going through the firewall without me knowing about it.
Somerset Bob says:
March 18th, 2008
8:48 pm
Many thanks for your comments, Kevin.
Yes, it is a conundrum.
Now I’ve had time to consider the situation, I’ve decided I actually don’t mind a little bit of legitimate peer-to-peer networking going on via my machines. Right now I’m pumping out a steady 1.2-1.6 kilobytes of data per second — it’s ER‘s latest (300th) episode, which I missed on TV because my Sky box failed to record the last available showing of it. I “rented” it from 4OD for 99p this afternoon — the first time I’ve paid to watch a TV download — and it was worth every penny to watch it when I wanted to.
I’m feeling OK about the P2P sharing that started again after I downloaded it because I know I’m helping another ER fan get what they want more efficiently, just as I had earlier.
But I’ve got 30GB of bandwidth to play with each month. The additional load will make little difference. For those with only 2GB a month, who are already likely to be using more of their available bandwidth with their own downloads of TV on demand, it might make all the difference.
Will my ISP, Pipex, interpret it as unfair usage? I hope not. The laptop’s not running 24/7, just in the evenings, mostly. But it’ll make for an interesting court case if they ever do dump me because of it!
PS: An afterthought — be funny, wouldn’t it, if iTunes started selling its songs using this model …
Anthony says:
September 12th, 2008
6:27 pm
I had installed it (4od), and forgot, then seen my usage go up. So I checked current bandwith: 1Mb up and about 40kb down. Killed Kservice.exe and it all stopped — up and down traffic. I knew it uploaded, but didn’t know it downloaded anything (apart from TV of course, but I haven’t downloaded anything for ages).
I use P2P quite a bit, but hadn’t done this month — and then my 70GB allowance was breached (I had a mail). I was a bit shocked as it’s only about 1/2 way through the month. And then every day I got another message saying I had used another GB and would be charged. I then ensured I had disabled P2P and torrent applications, but the PC, sometimes two (2nd which had also had 4od on), had been left on 24/7.
I’m not in the house in the day, so I know I don’t use much when P2P isn’t open — but it’s clocking up to a GB a day. Will see how it pans out now. I have set a scheduler for my P2P usage, meaning I only use it in free time (12-8AM) and disabled Kservice, so hopefully I should see a huge drop — if not, I dont know what’s up.
Has really annoyed me, as I am paying through the teeth for that bandwidth and maybe now I know why. I may have even been increasing my usage allowance just to supplement 4OD’s P2P network, in which case I should charge them — but yes, I know I agreed to this. Should learn from this: like the free things aren’t always best for you!
Somerset Bob says:
September 13th, 2008
7:56 am
Hi Anthony — thanks for your comments. I have to say that I think maybe there’s been more going on there than just 4od using kservice.exe. A gigabyte per day of traffic sounds overly excessive just for 4od. I’m not sure about it downloading material to your machine when you haven’t asked it to — I can understand it uploading if you kept (i.e. forgot you had) copies of Channel 4 TV shows on your machine, because sharing like that is what it’s intended to do, but I’m pretty certain it shouldn’t be downloading unsolicited shows to your machine without telling you and thereby using it as a sort of “storage bin” to spread the load for its P2P sharing without your knowledge.
As the Kservice module has been around on the internet for a while, and has been used in the past by many (for want of a better word) illegal P2P networks, I wonder if this has made it more easily hijackable by malware — do you scan your machines regularly with a decent anti-virus/trojan/etc checker? Maybe there’s something on there using Kservice.exe to send out thousands of illicit e-mails or something, and is receiving back info on whether the addresses are “live” and then uploading that info back to the trojan’s owner?
I don’t know if Kservice can actually be used in that way, but we’re told hackers are very sophisticated these days, so it wouldn’t surprise me!
Anyway, I’d be interested to hear how things pan out for you.
amy says:
November 3rd, 2008
9:17 pm
Hi,
Thanks for writing about this. I was worried because since I have been watching quite a few things on 4oD, my laptop has been sending me warnings saying that my memory was full. Apparently when you watch something it gets stored on your computer and will take up memory. Is there any way that I can control this? I have lost about 10GB of free space on my hard drive without really downloading or installing anything like that much.
Amy
Somerset Bob says:
November 4th, 2008
9:39 am
Hi amy,
Thanks for your comment.
It sounds like there are two issues to address here — one is the use of your laptop’s RAM or Random Access Memory, and the other is your hard drive.
When you get system messages telling you your ‘memory’ is full, it’s most probably referring to your RAM. RAM is used by the computer’s operating system — it loads itself into RAM when the computer boots up, and then when you open applications, they are also loaded into RAM (the memory that is on chips) so that they can respond to your commands very quickly. As applications are unloaded (closed), they should release the RAM they were allocated — but often, they don’t. They sometimes stay in RAM in case you need them again. As time goes by and more and more bits of programs stay in RAM, the amount of available RAM runs low and warning messages start appearing. A re-boot often solves the problem, at least temporarily.
Your hard drive is your computer’s permanent storage area. Everything is stored there — including any TV shows or films you download using 4OD – until you delete them. My recommendation is to always delete TV shows and films after watching them. This will free up the space they were taking up on the hard drive. (They’re not permanently stored in RAM, though I daresay chunks of them are transferred (‘buffered’) into RAM while you’re watching them, to facilitate the smooth running of the images. It depends on how good your video card is — these days, they too have their own on-board memory chips that handle the processing of images, to take some of the load off the central processor chip.)
Operating systems like Windows XP use a lot of RAM just to run the computer, so if your laptop has a relatively small amount of RAM, it might begin to be filled up quite quickly once you start running applications as well. My machines have 2GB of RAM each, and they seem to cope OK.
Downloaded TV shows and films can also take up quite a lot of storage space on your hard drive too, especially if you don’t delete them. Another thing that can eat into hard drive space is the creation of temporary files. Applications often create files with the .tmp extension for various operations, and they don’t always delete them after they’ve finished with them. You might benefit from running a disk cleanup application such as Windows XP’s built-in application (Start/Accessories/System Tools/Disk Cleanup), which should identify any unwanted clutter on your hard drive and safely remove it.
Hope this helps!