Solved

Excessive network traffic from workstation on W2000 Domain

Posted on 2004-08-04
4
271 Views
Last Modified: 2010-04-11
Here's an interesting situation thats got me stumped:

To facilitate the move of two employees, I physically switched the location of their Win98 workstations on our W2000 server domain. Prior to the move, both employees worked on their workstations, and everything was fine. After the move, one of the workstations, as soon as it started up, generated so much traffic on the LAN that no one could access the server. Even the offending workstation itself could not see the domain controller to log on.

Note that just moments before, in its previous location, this was not an issue.

To eliminate faulty wiring or some other hardware issue, I hooked up another workstation in this same location. No problem.

I checked the workstation for spyware, viruses, and programs running at startup that might communicate with the network. I removed what little spyware there was, there were no viruses or unecessary programs running at startup.

Any ideas? I thought about the network card, but it was working fine just moments before, and shows no indications of a problem.

Thanks,
Bill
0
Comment
Question by:westone
4 Comments
 
LVL 5

Accepted Solution

by:
dullz earned 250 total points
Comment Utility
Connect to the network and type 'netstat -e' and see if you get many errors or discards.  If so I would replace the network card.

Another solution is to run a packet sniffing progam on that computer (like http://www.ethereal.com/) to see what traffic its putting out on the network.
0
 
LVL 1

Expert Comment

by:cazzer
Comment Utility
Are you connected by a switch or a hub? If it's a switch, try rebooting it.
0
 
LVL 1

Expert Comment

by:tropsmr2
Comment Utility
I agree, run Ethereal.  Fastest way to see what is happening.  Also, check for SASSER infection - that chews up a ton of network bandwidth (should be happening in both locations though).
0
 

Author Comment

by:westone
Comment Utility
I replaced the NIC and it is fine now. I guess it didn't like being moved.

When the existing NIC was pulled out, it was covered in cobwebs! I've seen some dusty PCs, this one looked like the inside of a haunted house!

Thanks,
Bill
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now