RE: NETWORK BROADCST

Do you have Spanning Tree Protocol enabled?

Do you have a captured traffic sample (from a sniffer such as
Ethereal?

David Gillett


-----Original Message-----
From: chetan.kamra@xxxxxxxxx [mailto:chetan.kamra@xxxxxxxxx]
Sent: Saturday, March 25, 2006 7:29 AM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: NETWORK BROADCST

Hi All,
Today i faced a weired problem in network.

I have Current network

CISCO PIX
|

1 * D Link Switch 16ports(10/100/1000)
| | | |
6 * Dlink 24port (10/100) with 2(10/100/1000) Uplink Ports


I saw all my ports in all switch are blinking very badly.

We monitor them regularly but today i think the traffic was
more or may be network storm

All Network Computers was not able to access any resources on
same network or Internet.

They were not able to ping eachother.

I took folllowing steps to clean this situation.

1. Unplugged Switches from backbone Switch ie(D Link Switch
16ports(10/100/1000) 2. All switch ports lights were stable then.
3. Plugged them in one by one.
4. After 5 switch in last one when I plugged it again all
switches started blinking.
5. I unpluged 6th switch and all are stable again.
6.But 6th switch switch was still badly blinking.
7. I then removed one by one patchcord from 6th switch.
8. After removing from interface 7th and 8th, ,Suddenly
switch started acting normal.
9. And then i plugged it in Uplink port and HURREY all things
are working good.

I think Then machines on 6th Switch 7th and 8th switchport
are effected from Virus or spyware.


What do you all say .

And if agreed with me please provide me some solution to
clean such virus, and to control network storms.

Thanks
LIFE

--------------------------------------------------------------
-------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec
management education and the case study affords you unmatched
consulting experience.
Tailor your education to your own professional goals with
degree customizations including Emergency Management,
Business Continuity Planning, Computer Emergency Response
Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
--------------------------------------------------------------
-------------



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------

Relevant Pages

  • RE: IP address conflicts
    ... If you get a network vendor like Network Hardware Resale ... >> It's amazing how money will appear out of thin air if certain oxen get ... the switch you are suggesting I cannibalise uses the EtherToken ... When dealing with a bureaucracy I have found the most effective method is ...
    (freebsd-questions)
  • Re: ConnectComputer Problem
    ... I'm a little confused by your network configuration. ... Switch2 --- SBS Server ... switch has internet access all the time, the second switch has the client ... NICs ...
    (microsoft.public.windows.server.sbs)
  • Re: Help with long term network problem
    ... Using a CNET network switch connected to a CNet Wireless G router Model ... Having the chart listing all of the computers is a great start. ... /all" shows only an Intel 2200BG WiFi connection - no Ethernet is apparent. ...
    (microsoft.public.windowsxp.network_web)
  • Re: LAN ip subnet is moving off from a bigger enterprise
    ... The host company runs Cisco ... Connect your switch to this ... At the CBO the network is 10.23.1.x and the gateway ... WS1 WS3 SBS HP4000 ...
    (microsoft.public.windows.server.sbs)
  • Re: Ethernet network wiring ?s
    ... >> the planned network is designed correctly and for my own education on ... >> find I that I have a hub in my office that I used at some point in the ... > A switch is an active device. ... > the ports that have the ethernet address the message is intended ...
    (comp.sys.mac.hardware.misc)