|
Posted by lelo on November 28, 2005, 5:55 pm
If you were Registered and logged in, you could reply and use other advanced thread options
You are correct in the assumption that I'm not experienced in using a
protocol analyzer and I take no offense to the statement. It was the
free ethereal protocol analyzer that I used but other than hints from
other inexperienced people I know very little of it's correct usage.
Any ideas will be greatly appreciated.
Hansang Bae wrote:
> lelo wrote:
>
> > We have a network that consists of 300+ workstations, mostly win xp,
> > 10 servers (file, email, antivirus, and sus) and about 20 network
> > printers. Linking these w/s are a combination of switches and hubs
> > (90% 10/100 switches although there are still a few 10/100 hubs
> > present). All of these workstations, switches, and servers are
> > interspersed throughout two 7 story buildings. We are connected to
> > the internet by a full T1 line. Lately, at certain times of the day
> > (never at a fixed time and never on a predetermined day), our
> > internet access slows to a point where everyone on the network is
> > crawling. Our internet access has never behaved like this. The number
> > of machines has not increased significantly on our network in one
> > year. I was advised to use a protocol sniffer which I did and found
> > nothing out of the ordinary other than high ARPage from our servers.
> > I've checked for machines with viruses and found none. Does someone
> > know of something else to look for on the protocol sniffer or for
> > that matter anything else that might help me out?
>
>
> What was the utilization on the router interface facing your Internet
> connection? Not sure what protocol analyzer you used, but I'm not sure
> what you mean by "nothing out of the ordinary" The way you phrased
> this post (no offense meant) tells me you may not know - fully - what
> to look for in the traces. But if you use Ethereal (for example) and
> watch the router interface with the T1 connection, you will see traffic
> patterns. Perhaps there is someone is clogging it up with P2P
> programs, for example.
>
> --
>
> hsb
>
>
> "Somehow I imagined this experience would be more rewarding" Calvin
> **************************ROT13 MY ADDRESS*************************
> Due to the volume of email that I receive, I may not not be able to
> reply to emails sent to my account. Please post a followup instead.
> ********************************************************************
| 
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map