This is puzzling me, and I'm not sure this is quite the right place to start.
According to System Monitor, I'm seeing a lot of bytes go out of my machine, over 10% of what is coming in, and that's only using Firefox as browser.
I don't regard that as reasonable; even allowing for large blocks, I've no assurance that I'm not leaking real data. I'd estimate my system has sent something like 60G of something to somewhere without my wishing it to, and I'm not happy about it.
Sometimes I see an up spike for no apparent reason, perhaps after I've been looking at a file. It's the sort of thing I'd expect to see if there was a data logger in action, or a continuous dribble of outward traffic.
Right now, in a recent start-up with little done, I see from System Monitor: total received 117.2MiB in, total sent 13.6 MiB. But there have been bigger numbers.
A reasonable website to request ratio might be nearer to 1% than 10%, IMO.
Annoyingly, I find it impossible to install a working wireshark or netatop component of atop, because mint is missing a working component for the data capture - at least, it was beyond my competence to get them to work.
So far as I know I have turned off any options to monitor components, such as Firefox's preference Advanced/ Data Choices/ Enable Crash Reporter.
What I do see is this:
mint@mint ~ $ ps aux | grep zeitgeist
mint 10893 0.0 0.0 4428 836 pts/2 S+ 01:37 0:00 grep --colour=auto zeitgeist
which (in the absence of explicit documentation explaining the colour scheme) I don't understand, but it look as though the zpyware might be lurking in there despite my best efforts.
I'm also experiencing a lot of drag in Firefox, really slow responses & slow rendering, as if something is hogging resources (apart from constantly killing the Flash container), often 100% cpu on one or both of dual processor units. It doresn't help that I have nvidia gpu with nouveau, and attempts to bring in a nonfree (working) driver just cause cinnamon to crash.
System Monitor does not always agree with top on use of resources. I suspect system-monitor may possibly be buggy, but I don't know.
atop tends to flag up high cpu usage (I knew that), but also a lot of swap thrash (which seems unneccessary, but I often blame Firefox impolite memory-grabs). This with 8G memory & ample fast working swap file, using a live Mint 15.
I've done, with only limited success:
sudo sysctl -w vm.swappiness=10
sudo sysctl -w vm.vfs_cache_pressure=50
sudo sysctl -w vm.overcommit_memory=2
Still, I'm frequently seeing 100% load on cpu, swapping cpu each few seconds (there a watchdog system that stops the chip from roasting, but neverthess I might see one cpu working for quite a long time).
I've run rkhunter & chkroot, but seen nothing untoward.
Is anyone else experiencing what looks like data loss?
Can anyone offer advice about how to proceed?
In particular, can anyone offer advice on how to get net stats capture working for wireshark/netatop in a live edition?
All this is in Mint 15 (64 and 32), live dvd or usb on a capable laptop.