I've having a strange problem. At 5 pm everyday all my PC's slow down to a crawl for 10 to 20 minutes. Then they come back fine. The only thingk I can think is something is running on the network at that time. Outlook keeps giving the connecting to server error, internet takes for ever for things to come up... etc
I don't have any processes running then that I can find unless the guy before me hide something somewhere. Auto updates go at midnight, sql tasks run after midnight backups start at 7.
I was thinking of setting up a snort server or something liek that to view the traffic to see if I can pin point whats going on? I this a good idea or is there a better way to trap and evaluate the traffic? I have a mix of managed and unmanaged switches.