CPU Firewall 100% utilized when win2k machines are connected to LAN

A

Alex

I have some (4) win98, (3) win2000 machines connected to a small LAN. I have
a XP machine with two NICs working as a firewall, sharing network connection
thru a cable modem.

Win98 machines are working ok but the problem I'm having now, is that when I
connect any win2000 machine of the 3, the firewall machine (ISC) gets CPU
100% of utilization, and when disconnected, everything gets normal again.

Server (firewall) is using 3com nic cards, and win2000 are using davicom and
realtek nics.

Any idea how I can fix this? seems that some kind of DNS is no working or
something like that.

Thanks in advance

Alex
 
S

SteveC

Alex said:
I have some (4) win98, (3) win2000 machines connected to a small LAN. I have
a XP machine with two NICs working as a firewall, sharing network connection
thru a cable modem.

Win98 machines are working ok but the problem I'm having now, is that when I
connect any win2000 machine of the 3, the firewall machine (ISC) gets CPU
100% of utilization, and when disconnected, everything gets normal again.

Server (firewall) is using 3com nic cards, and win2000 are using davicom and
realtek nics.

Any idea how I can fix this? seems that some kind of DNS is no working or
something like that.

Thanks in advance

Alex
Hello,

When you connect your w2k machine, do the lights of your hub or
switch indicate any activity or collisions?

The win2k could be transmitting a lot of information which may
explain the high CPU utilization on the XP.

regards,

SteveC
======
If at first you don't succeed, forget skydiving
 
A

Alex

Not really, it starts to work ok, but in the next few minutes, server
machine (XP Firewall) starts to slow down until not responding. but as soon
as I disconnect the win2k machine from the hub, the server start responding
normally.

I should mention that the network used to be working ok, but the server got
damage and we reinstall all OS.

Should I set up IPs manually?

thanks in advance

Alex
 
J

Jim Hungerford

ICS is WAYYY overrated. I can't see using a dedicated piece of hardware for
a firewall unless you have an enterprise that requires multiple apps to have
access to multiple private and public networks. In that case, you'd want to
use a Checkpoint or similar firewall app.

Spend $60 and get a LinkSys firewall box. No fuss, no muss, no effort. It
just WORKS.

--
Regards,

Jim Hungerford, A+, MCP
http://www.screenshotmovies.com
Screenshot FLASH movies for Technical Support
 
S

SteveC

Hello,

Run Task Manager on the XP machine.
Go to the processes Tab. Click on the column CPU. This will sort
your display by CPU usage. System idle process should be listed at
the top running about 99% if you have nothing else running.

Do the same thing on the w2k machine.

Connect the w2k machine to the hub and see what processes if any
start hogging the CPU on both machines.

What are you doing on the w2k machine when it's connected to the hub?
Just letting it sit idle? Or surfing the Internet? It may be
interesting to let the w2k machine sit idle and see what happens.

regards,

SteveC
======
If at first you don't succeed, forget skydiving
 
S

Steve Duff [MVP]

This is a classic symptom of Blaster / Sobig / Welchia / etc. worms.
Have you done a complete scan using a current definition set?

Steve Duff, MCSE
Ergodic Systems, Inc.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top