Trouble in the network

[Arne And]

Hi

I was just woundering if there is any good programs that can scan my
internal network for overload.

The last time I have encounter that many of my computers has been slow when
accessing some of my file servers etc. Am running all win2000 domain
(server - workstations with the lates sp and patches)

Regards

-AA-

 

[Herb Martin]

Hi

I was just woundering if there is any good programs that can scan my
internal network for overload.

Depends on what you mean by "scan".

If you wish to see the bandwidth usage, the built
in server (might need install) NetMon or free programs
like Ethereal can show you this.

The last time I have encounter that many of my computers has been slow when
accessing some of my file servers etc. Am running all win2000 domain
(server - workstations with the lates sp and patches)

Usually this is something else, unless you have many clients
on the same network(s).

 

[Arne And]

Hmm well. My CPU is going "bananas". When NS service is running, the CPU is
100 %. When I termenate it, it gos back to normal around 15%.

This is kind of stupid question, but am not sure what am gonna "scan" for
hehe.

The last few days some users have been complaining about "slow" network.
They say that is takes a loong time to get some files from a fileserver etc.
I allso use NetOp to remote controll my server from a workstation. And I
have lost the connection to this exact server. (The TCP/IP connection where
lost it says)

I have never been infected by any virus. Am running all Windows 2000 server
/ pro on workstation. Everyone is fully patch and with the lates SP. Allso
running anti-virus on everthing.

My fear is that I have been infected with a worm of somekind, but not sure.

So I would like to scan my network of "unnatural behavior". Like if there
is many TCP packed that is slowing down my internal network.
Not sure if you understand, but its hard to explane when am not sure what am
gonna scan for.

-regards

-AA-

 

[Herb Martin]

So I would like to scan my network of "unnatural behavior". Like if there

is many TCP packed that is slowing down my internal network.
Not sure if you understand, but its hard to explane when am not sure what am
gonna scan for.

Well the canonical answer to that is some sort of
Intrusion Detection System (IDS) like the free Snort.
(Snort.org or WinSnort) but takes a bit of experience
using it before you are likely to know what to look
for and how to interpret the results.

Don't let that stop you but rather just recognize that
even if it doesn't solve this problem it may help
next time....

 

[javier lucas]

hello
i dont know how to help in this issue, but sometimes i have the same
problem.

Do you know some free soft to view the bandwidth usage of the network (for
example, the 20%) in order to detect when the usage are higher than normal?

thanks

 

[Phillip Windell]

Hmm well. My CPU is going "bananas". When NS service is running, the CPU is
100 %. When I termenate it, it gos back to normal around 15%.

This is kind of stupid question, but am not sure what am gonna "scan" for
hehe.

More than likely your problem stems from virus infections or infections of
Spyware/Adware. Also "poorly" written software can peak the CPU when the
software screws up. True "bandwidth" bottlenecks on a LAN are much more
rare than people think,...many so-called bandwidth problems turn out to be
other things,...as I believe yours is.

 

[Herb Martin]

NetMon on NT 4.0 servers and later.

Ethereal.

You can also search Google for something like

[ "network monitor" netmon ethereal microsoft: ]

....or...

[ free "network monitor" | sniffers netmon ethereal microsoft: ]

This will likely give you some alternatives to netmon
and Ethereal which will run on a Microsoft system.

 

[Herb Martin]

More than likely your problem stems from virus infections or infections of
Spyware/Adware. Also "poorly" written software can peak the CPU when the
software screws up. True "bandwidth" bottlenecks on a LAN are much more
rare than people think,...many so-called bandwidth problems turn out to be
other things,...as I believe yours is.

Phillip is correct.

I said something similar at the beginning of this thread
but since I went on to answer the question about network
monitors and such, it might have been missed that I, along
with Philip, expect the problem will lie elsewhere.

Perhaps with something as simple as bad name resolution
(e.g., WINS and or DNS server.)

 

[Arne And]

Will do.

Thanx to you all.

regards

-AA-

NetMon on NT 4.0 servers and later.

Ethereal.

You can also search Google for something like

[ "network monitor" netmon ethereal microsoft: ]

...or...

[ free "network monitor" | sniffers netmon ethereal microsoft: ]

This will likely give you some alternatives to netmon
and Ethereal which will run on a Microsoft system.

--
Herb Martin

hello
i dont know how to help in this issue, but sometimes i have the same
problem.

Do you know some free soft to view the bandwidth usage of the network (for
example, the 20%) in order to detect when the usage are higher than normal?

thanks

"scan"
for

And

I

scan

my been
slow

 

[Herb Martin]

Let us know what you like best. I usually use Netmon
because it is included, Etherreal, or WinDump (command
line).

--
Herb Martin

Will do.

Thanx to you all.

regards

-AA-

NetMon on NT 4.0 servers and later.

Ethereal.

You can also search Google for something like

[ "network monitor" netmon ethereal microsoft: ]

...or...

[ free "network monitor" | sniffers netmon ethereal microsoft: ]

This will likely give you some alternatives to netmon
and Ethereal which will run on a Microsoft system.

--
Herb Martin

hello
i dont know how to help in this issue, but sometimes i have the same
problem.

Do you know some free soft to view the bandwidth usage of the network (for
example, the 20%) in order to detect when the usage are higher than normal?

thanks

"Herb Martin" <[email protected]> escribió en el mensaje
So I would like to scan my network of "unnatural behavior". Like if
there
is many TCP packed that is slowing down my internal network.
Not sure if you understand, but its hard to explane when am not sure
what
am
gonna scan for.

Well the canonical answer to that is some sort of
Intrusion Detection System (IDS) like the free Snort.
(Snort.org or WinSnort) but takes a bit of experience
using it before you are likely to know what to look
for and how to interpret the results.

Don't let that stop you but rather just recognize that
even if it doesn't solve this problem it may help
next time....



--
Herb Martin


Hmm well. My CPU is going "bananas". When NS service is running,

the
CPU

is
100 %. When I termenate it, it gos back to normal around 15%.

This is kind of stupid question, but am not sure what am gonna "scan"
for
hehe.

The last few days some users have been complaining about "slow" network.
They say that is takes a loong time to get some files from a fileserver
etc.
I allso use NetOp to remote controll my server from a workstation.

And

I
have lost the connection to this exact server. (The TCP/IP connection
where
lost it says)

I have never been infected by any virus. Am running all Windows 2000
server
/ pro on workstation. Everyone is fully patch and with the lates SP.
Allso
running anti-virus on everthing.

My fear is that I have been infected with a worm of somekind, but not
sure.

So I would like to scan my network of "unnatural behavior". Like if
there
is many TCP packed that is slowing down my internal network.
Not sure if you understand, but its hard to explane when am not sure
what
am
gonna scan for.

-regards

-AA-


"Herb Martin" <[email protected]> skrev i melding
Hi

I was just woundering if there is any good programs that can

scan

my
internal network for overload.

Depends on what you mean by "scan".

If you wish to see the bandwidth usage, the built
in server (might need install) NetMon or free programs
like Ethereal can show you this.

The last time I have encounter that many of my computers has been
slow
when
accessing some of my file servers etc. Am running all win2000 domain
(server - workstations with the lates sp and patches)

Usually this is something else, unless you have many clients
on the same network(s).

--
Herb Martin



Regards

-AA-

 

[dave]

I was just woundering if there is any good programs that can scan my
internal network for overload.
The last time I have encounter that many of my computers has been slow when
accessing some of my file servers etc. Am running all win2000 domain
(server - workstations with the lates sp and patches)

Try netcrunch from adrem. You will find full free 30 days trial. Enought to
find what is going wrong.

days

 

[javier lucas]

Hi

we had a similar problem with XP clients.
We found the error was we forget to put as DNS the ip of domain controller.
try it.

thks

 

[Herb Martin]

Hi

we had a similar problem with XP clients.
We found the error was we forget to put as DNS the ip of domain controller.
try it.

No, if that worked it was an accident or idiosyncratic
to YOUR network.

The key would be setting the CORRECT DNS server
whether it is your DC or not.

A DC is not required to be a DNS server and you might
make things worse, or as bad, by setting the DC without
understanding what was going on.