1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Network traffic problem

Discussion in 'Networking' started by sandipde, May 5, 2005.

Thread Status:
Not open for further replies.
Advertisement
  1. sandipde

    sandipde Thread Starter

    Joined:
    May 5, 2005
    Messages:
    2
    Hi,

    I am a network administrator of a Software Company
    and using Symentec Corporate Edition 2000.
    It is updated on regural basis for every nodes on our
    network and our network consists with one Cisco PIX
    Firewall which is connected with Cisco switch and all
    the computers are connected with the cisco switch.
    Every Nodes on our network using PIX internal IP
    Address i.e. 192.168.0.2 as a Getway and accessing
    broadband(256 KBps) internet, no Proxy is installed
    over here.

    Now the problem, that we are facing for last two days
    are when more number of PCs are starting on LAN, the
    packet broabcusting is increasing upto 900KBps which
    is showing on firewall inside interface traffic
    monitoring software and internet access speed is
    becoming slow.

    After Scaning all the machine no Virus or Spyware or
    worm is being detected.

    please help me by proper susession.

    Regards,
     
  2. blin

    blin

    Joined:
    Aug 3, 2003
    Messages:
    272
    you may also want to use network monitor to find the problem.

    here is the case study we had. quoted from http://www.howtonetworking.com/casestudy/spywareblockinternet1.htm

    Case Study - Trojan and spyware block accessing the Internet

    Situation: Small Company has a Linksys router connecting to the Internet. In the early morning, accessing to the Internet seems to work fine. After half hour or one hour, accessing to the Internet is slow and slower. Eventually, no one in the office can access the Internet. The temporary solution is reset the router or reboot all computers.

    Investigation: 1. We checked and tested all hardware connections such as NIC and cabling. They are OK and they don’t have any issues to share files and printers.

    2. TCP/IP configuration looks good too. Used nslookup to check the status of DNS and it looked good.

    3. Network Monitor and the log of the router listed a lot of packets sent to the router.

    Resolution: Based on the Network Monitor and log, we found the problem computer with many Trojan and spyware. After we cleaned the computer and install a firewall, they don’t have the same issue any more. A happy ending!

    Related Topics

    Troubleshooting Internet Access
    Troubleshooting Spyware
     
  3. ShavedApe

    ShavedApe

    Joined:
    Apr 12, 2005
    Messages:
    96
    some software has to be sending the data.

    try sniffing the traffic to see what it is
     
  4. sandipde

    sandipde Thread Starter

    Joined:
    May 5, 2005
    Messages:
    2
    Thanks. We are trying to ferret out the intruding trojan/spyware. Any ideas on Anti virus software.
    sandipde
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/359465

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice