Computing.Net > Forums > Windows Server 2003 > one or more machines choking the network

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

one or more machines choking the network

Reply to Message Icon

Name: rajoo_sh
Date: May 27, 2009 at 07:40:50 Pacific
OS: windows server 2003
CPU/Ram: Core 2 Duo
Product: Intel / ASSEMBLED
Subcategory: General
Comment:

Hi,

In a win2k3 domain, we have one DC, one File Server and one ISA server for proxying. There are 75+ windows XP SP2 workstations. All with McAfee updated 8.0 or 8.5.

From last 3 - 4 days the network suddenly becomes terribly slow. I scanned DC, File Server and ISA Server. Found some viruses in file server, all cleaned / deleted by McAfee.

Restarting the DC improves the performance for sometime.

Is there any tool available for checking which machine is flooding the network?

Please help
Regards



Sponsored Link
Ads by Google

Response Number 1
Name: wanderer
Date: May 27, 2009 at 07:52:27 Pacific
Reply:

Are you running managed or unmanaged switches? A managed switch will give you port stats.

Your network management/network design is wrong if your servers are getting infected.


0

Response Number 2
Name: rajoo_sh
Date: May 27, 2009 at 08:02:42 Pacific
Reply:

Hi,
Thanks for the reply

We are using unmanaged D-Link DES 1024D switches.
I suspect its a virus activity on one of the machines that I'm not able to trace. Is there any tool available which can let me know the exact traffic generated machines wise in the network.

Regards.


0

Response Number 3
Name: scurlaruntings
Date: May 27, 2009 at 10:13:44 Pacific
Reply:

Use Wireshark or Network Monitor. Wireshark will tell you in very
granular detail the activity on the wire and the packets traversing
your LAN.

Additionally your firewall (depending on what you are using) may be able to give you some insight. As if this is virus activity its fairly safe to assume most of that traffic may be destined for the internet.


0

Response Number 4
Name: jefro
Date: May 27, 2009 at 14:23:50 Pacific
Reply:

Run perfmon mmc on remote machines if wireshark is of no help.

RDP to taskman might take a bit longer maybe.

"Best Practices", Event viewer, host file, perfmon, antivirus, anti-spyware, Live CD's, backups, are in my top 10


0

Response Number 5
Name: rajoo_sh
Date: May 28, 2009 at 00:53:23 Pacific
Reply:

Thanks everyone,

I'll use these tools and suggestions and get back.

Thanks and Regards


0

Related Posts

See More



Sponsored Link
Ads by Google
Reply to Message Icon

Disk management problem. ... Disk data usage analysis



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Server 2003 Forum Home


Sponsored links

Ads by Google


Results for: one or more machines choking the network

Can't Browse Network or any machine www.computing.net/answers/windows-2003/cant-browse-network-or-any-machine/3064.html

Server 2003 loses all network connections www.computing.net/answers/windows-2003/server-2003-loses-all-network-connections/9270.html

my client don't work in my network www.computing.net/answers/windows-2003/my-client-dont-work-in-my-network/4846.html