Re: A Lot of Traffic on Network

From: Dave (noone_at_nowhere.com)
Date: 07/19/04 

Date: Mon, 19 Jul 2004 18:18:29 -0000

does this happen often? have you checked out the machines that are
generating the traffic to see if they are infected?? or could it be related
to some good application that is just doing something funky?

if they are just hubs then a sniffer program on any port of the hub should
point to the culprit. just be sure they aren't really switches. on the
bigger switches and hubs i have seen there is usually a port activity light
that would show which port was active which should help find the bad one.

"MNA" <someone@somewhere.com> wrote in message
news:udPKKtbbEHA.3148@TK2MSFTNGP10.phx.gbl...
> Thanks Dave for your resonse!
> Actually our network administrator quit. till we hire someone i have to
look
> at these things. Right now we have to pull the network cables one at a
time
> but its very time consuming as we have almost 30 users connected to two
> hubs. I was wondering i can find a tool which can tell me which computer
is
> generating most of the traffic on the network we may unplug only that one.
>
> regards,
> Mna
> "Dave" <noone@nowhere.com> wrote in message
> news:q8OdnQLmr_tSbWbdRVn-oQ@crocker.com...
> > a network sniffer program, management software for your router/switch,
> look
> > at the lights on the router/hub/switch, just pull network plugs one at a
> > time in network closet, monitor with some other management tool, too
many
> > options, not enough information... how big of a network, how connected,
> what
> > type of clients, what type of management tools??? have you scanned all
> > machines for viruses, trojans, etc?
> >
> > "MNA" <someone@somewhere.com> wrote in message
> > news:etK3tbabEHA.3016@tk2msftngp13.phx.gbl...
> > > Hi,
> > > We have this weired problem that some times one of the computer, in
our
> > > network, generates a lot of traffic. We are unable to findout which
> > computer
> > > is generating that traffice so we have to shutdown all the computers
and
> > > switch them on one by one but this is very painfull. Can anyone please
> > guide
> > > how we can find out such computers using some kind of software?
> > >
> > > Any help will be highly appreciated
> > >
> > > Regards,
> > > Mna
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Update: UDP 770 Potential Worm
    ... > I still believe that the packets may be the result ... with the goal of knocking machines ... the network immediately after the 'attack', ... destined to port if you haven't sniffed it somehow? ...
    (Incidents)
  • Re: all ip addresses of machines in the local network
    ... database onto different machines residing in the same network. ... I expect that you would know the IP range for your network. ... the particular port. ... Amit Khemka -- onyomo.com ...
    (comp.lang.python)
  • RE: Blocking SMT Connections by clients
    ... > worthy of a blacklisting. ... The network is regularly ... > to construct a packet filter to do this - block any machines INSIDE ... > the network from making TCP connections to REMOTE hosts on port 25.. ...
    (microsoft.public.isa.configuration)
  • Re: security question
    ... address may be just a NAT for a larger network behind it, ... Unisite Internet Presence Provider ... As long as you open your port 22 to the world, ... machines or networks that need the access. ...
    (linux.redhat)
  • Re: Hubs work, switch does not
    ... > other machines connect to. ... > connected together to put everyone on the network. ... > the hubs with a 16 port switch. ...
    (microsoft.public.windowsxp.network_web)