Over the last few days we have been seeing an increase in network traffic over our WAN. The to greatest protocol offenders are microsoft-ds and netbios-ssn.
All of the new/problemed traffic is being directed at our file server which is a WIndows server 2003 box. Our file server is not a domain controller - nor does it host any user functions other than being a file server.
Here is a look at the traffic to that box.
192.168.18.135 192.168.16.250 microsoft-ds 445 TCP 30.05 MB 13%
192.168.18.193 192.168.16.250 microsoft-ds 445 TCP 28.93 MB 13%
192.168.18.30 192.168.16.250 microsoft-ds 445 TCP 21.18 MB 9%
192.168.18.136 192.168.16.250 microsoft-ds 445 TCP 20.85 MB 9%
192.168.18.170 192.168.16.250 microsoft-ds 445 TCP 20.64 MB 9%
192.168.18.240 192.168.16.250 microsoft-ds 445 TCP 20.5 MB 9%
192.168.18.215 192.168.16.250 microsoft-ds 445 TCP 19.58 MB 9%
192.168.18.187 192.168.16.250 microsoft-ds 445 TCP 6.64 MB 3%
192.168.18.200 192.168.16.250 microsoft-ds 445 TCP 5.0 MB 2%
192.168.18.30 192.168.16.250 microsoft-ds 445 TCP 3.47 MB 2%
192.168.18.135 192.168.16.252 microsoft-ds 445 TCP 997.6 KB <1%
192.168.18.171 192.168.16.252 microsoft-ds 445 TCP 917.54 KB <1%
192.168.18.179 192.168.16.250 microsoft-ds 445 TCP 557.24 KB <1%
192.168.18.159 192.168.16.250 netbios-ssn 139 TCP 20.13 MB 16%
192.168.18.195 192.168.16.250 netbios-ssn 139 TCP 20.03 MB 16%
192.168.18.130 192.168.16.250 netbios-ssn 139 TCP 19.69 MB 16%
192.168.18.180 192.168.16.250 netbios-ssn 139 TCP 16.46 MB 13%
192.168.18.217 192.168.16.250 netbios-ssn 139 TCP 15.57 MB 13%
192.168.18.144 192.168.16.250 netbios-ssn 139 TCP 12.1 MB 10%
192.168.18.175 192.168.16.250 netbios-ssn 139 TCP 6.3 MB 5%
192.168.18.206 192.168.16.250 netbios-ssn 139 TCP 5.44 MB 4%
192.168.18.173 192.168.16.250 netbios-ssn 139 TCP 4.87 MB 4%
192.168.18.157 192.168.16.250 netbios-ssn 139 TCP 2.32 MB 2%
192.168.18.178 192.168.16.252 netbios-ssn 139 TCP 293.79 KB <1%
Any help with this would be greatly appreciated.
If you need any other info, let me know,
Jonathan
Start Free Trial
