Trouble in the network

  • Thread starter Thread starter Arne And
  • Start date Start date
A

Arne And

Hi

I was just woundering if there is any good programs that can scan my
internal network for overload.

The last time I have encounter that many of my computers has been slow when
accessing some of my file servers etc. Am running all win2000 domain
(server - workstations with the lates sp and patches)

Regards

-AA-
 
Arne And said:
Hi

I was just woundering if there is any good programs that can scan my
internal network for overload.
Click to expand...

Depends on what you mean by "scan".

If you wish to see the bandwidth usage, the built
in server (might need install) NetMon or free programs
like Ethereal can show you this.
The last time I have encounter that many of my computers has been slow when
accessing some of my file servers etc. Am running all win2000 domain
(server - workstations with the lates sp and patches)
Click to expand...

Usually this is something else, unless you have many clients
on the same network(s).
 
Hmm well. My CPU is going "bananas". When NS service is running, the CPU is
100 %. When I termenate it, it gos back to normal around 15%.

This is kind of stupid question, but am not sure what am gonna "scan" for
hehe.

The last few days some users have been complaining about "slow" network.
They say that is takes a loong time to get some files from a fileserver etc.
I allso use NetOp to remote controll my server from a workstation. And I
have lost the connection to this exact server. (The TCP/IP connection where
lost it says)

I have never been infected by any virus. Am running all Windows 2000 server
/ pro on workstation. Everyone is fully patch and with the lates SP. Allso
running anti-virus on everthing.

My fear is that I have been infected with a worm of somekind, but not sure.

So I would like to scan my network of "unnatural behavior". Like if there
is many TCP packed that is slowing down my internal network.
Not sure if you understand, but its hard to explane when am not sure what am
gonna scan for.

-regards

-AA-
 
So I would like to scan my network of "unnatural behavior". Like if there
is many TCP packed that is slowing down my internal network.
Not sure if you understand, but its hard to explane when am not sure what am
gonna scan for.
Click to expand...

Well the canonical answer to that is some sort of
Intrusion Detection System (IDS) like the free Snort.
(Snort.org or WinSnort) but takes a bit of experience
using it before you are likely to know what to look
for and how to interpret the results.

Don't let that stop you but rather just recognize that
even if it doesn't solve this problem it may help
next time....
 
hello
i dont know how to help in this issue, but sometimes i have the same
problem.

Do you know some free soft to view the bandwidth usage of the network (for
example, the 20%) in order to detect when the usage are higher than normal?

thanks
 
Arne And said:
Hmm well. My CPU is going "bananas". When NS service is running, the CPU is
100 %. When I termenate it, it gos back to normal around 15%.

This is kind of stupid question, but am not sure what am gonna "scan" for
hehe.
Click to expand...

More than likely your problem stems from virus infections or infections of
Spyware/Adware. Also "poorly" written software can peak the CPU when the
software screws up. True "bandwidth" bottlenecks on a LAN are much more
rare than people think,...many so-called bandwidth problems turn out to be
other things,...as I believe yours is.
 
NetMon on NT 4.0 servers and later.

Ethereal.

You can also search Google for something like

[ "network monitor" netmon ethereal microsoft: ]

....or...

[ free "network monitor" | sniffers netmon ethereal microsoft: ]

This will likely give you some alternatives to netmon
and Ethereal which will run on a Microsoft system.
 
Phillip Windell said:
More than likely your problem stems from virus infections or infections of
Spyware/Adware. Also "poorly" written software can peak the CPU when the
software screws up. True "bandwidth" bottlenecks on a LAN are much more
rare than people think,...many so-called bandwidth problems turn out to be
other things,...as I believe yours is.
Click to expand...

Phillip is correct.

I said something similar at the beginning of this thread
but since I went on to answer the question about network
monitors and such, it might have been missed that I, along
with Philip, expect the problem will lie elsewhere.

Perhaps with something as simple as bad name resolution
(e.g., WINS and or DNS server.)
 
Will do.

Thanx to you all.

regards

-AA-


Herb Martin said:
NetMon on NT 4.0 servers and later.

Ethereal.

You can also search Google for something like

[ "network monitor" netmon ethereal microsoft: ]

...or...

[ free "network monitor" | sniffers netmon ethereal microsoft: ]

This will likely give you some alternatives to netmon
and Ethereal which will run on a Microsoft system.

--
Herb Martin


javier lucas said:
hello
i dont know how to help in this issue, but sometimes i have the same
problem.

Do you know some free soft to view the bandwidth usage of the network (for
example, the 20%) in order to detect when the usage are higher than normal?

thanks

"scan"
for
Click to expand...
And
I
Click to expand...
scan
my been
slow
Click to expand...
Click to expand...
 
Let us know what you like best. I usually use Netmon
because it is included, Etherreal, or WinDump (command
line).

--
Herb Martin


Arne And said:
Will do.

Thanx to you all.

regards

-AA-


Herb Martin said:
NetMon on NT 4.0 servers and later.

Ethereal.

You can also search Google for something like

[ "network monitor" netmon ethereal microsoft: ]

...or...

[ free "network monitor" | sniffers netmon ethereal microsoft: ]

This will likely give you some alternatives to netmon
and Ethereal which will run on a Microsoft system.

--
Herb Martin


javier lucas said:
hello
i dont know how to help in this issue, but sometimes i have the same
problem.

Do you know some free soft to view the bandwidth usage of the network (for
example, the 20%) in order to detect when the usage are higher than normal?

thanks

"Herb Martin" <[email protected]> escribió en el mensaje
So I would like to scan my network of "unnatural behavior". Like if
there
is many TCP packed that is slowing down my internal network.
Not sure if you understand, but its hard to explane when am not sure
what
am
gonna scan for.

Well the canonical answer to that is some sort of
Intrusion Detection System (IDS) like the free Snort.
(Snort.org or WinSnort) but takes a bit of experience
using it before you are likely to know what to look
for and how to interpret the results.

Don't let that stop you but rather just recognize that
even if it doesn't solve this problem it may help
next time....



--
Herb Martin


Hmm well. My CPU is going "bananas". When NS service is running,
Click to expand...
the
CPU
is
100 %. When I termenate it, it gos back to normal around 15%.

This is kind of stupid question, but am not sure what am gonna "scan"
for
hehe.

The last few days some users have been complaining about "slow" network.
They say that is takes a loong time to get some files from a fileserver
etc.
I allso use NetOp to remote controll my server from a workstation.
Click to expand...
And
I
have lost the connection to this exact server. (The TCP/IP connection
where
lost it says)

I have never been infected by any virus. Am running all Windows 2000
server
/ pro on workstation. Everyone is fully patch and with the lates SP.
Allso
running anti-virus on everthing.

My fear is that I have been infected with a worm of somekind, but not
sure.

So I would like to scan my network of "unnatural behavior". Like if
there
is many TCP packed that is slowing down my internal network.
Not sure if you understand, but its hard to explane when am not sure
what
am
gonna scan for.

-regards

-AA-


"Herb Martin" <[email protected]> skrev i melding
Hi

I was just woundering if there is any good programs that can
Click to expand...
scan
my
internal network for overload.

Depends on what you mean by "scan".

If you wish to see the bandwidth usage, the built
in server (might need install) NetMon or free programs
like Ethereal can show you this.

The last time I have encounter that many of my computers has been
slow
when
accessing some of my file servers etc. Am running all win2000 domain
(server - workstations with the lates sp and patches)

Usually this is something else, unless you have many clients
on the same network(s).

--
Herb Martin



Regards

-AA-
Click to expand...
Click to expand...
Click to expand...
 
Arne And said:
I was just woundering if there is any good programs that can scan my
internal network for overload.
The last time I have encounter that many of my computers has been slow when
accessing some of my file servers etc. Am running all win2000 domain
(server - workstations with the lates sp and patches)
Click to expand...

Try netcrunch from adrem. You will find full free 30 days trial. Enought to
find what is going wrong.

days
 
Hi

we had a similar problem with XP clients.
We found the error was we forget to put as DNS the ip of domain controller.
try it.

thks
 
javier lucas said:
Hi

we had a similar problem with XP clients.
We found the error was we forget to put as DNS the ip of domain controller.
try it.
Click to expand...

No, if that worked it was an accident or idiosyncratic
to YOUR network.

The key would be setting the CORRECT DNS server
whether it is your DC or not.

A DC is not required to be a DNS server and you might
make things worse, or as bad, by setting the DC without
understanding what was going on.
 
Back
Top