Solved

sporadic network drops

Posted on 2007-03-26
6
244 Views
Last Modified: 2010-04-10
The problem I'm having is that several times a day, my workstations drop from the network. This appears to be completely sporadic and nothing out of the ordinary is running when this occurs. Users who are connected to my Exchange 2003 server through Outlook get a delay in send/recieve and then it tells them the Exchange server is unavailable. They reboot and all is fine.

This doesn't only happen with my email server. It happens with my flie server and my domain controller as well. What could be the cause of this? I ran a packet analyzer and couldn't find anything out of the ordinary. All workstations are identical running XP.
0
Comment
Question by:lenivan
  • 3
  • 2
6 Comments
 
LVL 17

Expert Comment

by:RDAdams
ID: 18796302
Are they running on a switch or hub?  Wireless or wired?
0
 

Author Comment

by:lenivan
ID: 18796331
They are wired and connected to jacks in the wall which connect out to managed switches. The managed switches are connect to a backbone switch which all the servers and firewall are plugged into.
0
 
LVL 12

Accepted Solution

by:
NetAdmin2436 earned 500 total points
ID: 18803257
I know you said they drop randomly... but do they ALL drop at the same time? Or are they dropping by a single computer instance at a time?

When they drop from the network, is there IP addresses what they should be? This would identify a rouge DHCP server somewhere (Some printers, routers/firewalls, ect..have built in DHCP servers, disable them)
-When they drop next time, do a start-->run --> cmd --> ipconfig/all

Flush DNS on DNS server(s) and workstations.
start --> run --> cmd --> ipconfig/flushdns
Verify that all clients DNS is set to your Internal DNS server ONLY. This is done with DHCP scope options. Then your internal DNS server should use forwarders to your ISP DNS if it can't resolve it. This is set in DNS.


Hope this helps.
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 

Author Comment

by:lenivan
ID: 18803337
No, they don't all drop at the sime time. Seems completely random.

When they drop from the network, their IP address is what it should be. No issues there. I've checked every router, switch and hub and disabled DHCP on them (unless there's a rouge device that I can't find).

I flushed the DNS before, but did it again just now just to make sure. The problem continues to occur.

Anything else I can try or look for?
0
 
LVL 12

Expert Comment

by:NetAdmin2436
ID: 18803769
Hmmm...Is every single computer droping? or just some? Are they all on one particular switch?

I've seen a bad cable cause this type of behavior, but if it's happening to many or all computers i'd tend to think it's something else. But check the uplink cables from switch to switch for sure and cables to servers. This is where a good cable tester is handy to have around.

You can check the speed and duplex on the switches and NIC's. Normally Auto should do, but you can force 100mb full or half and see if it helps. They must match for each NIC to respected port on the switch.

Otherwise it might be time to start disabling client/server firewalls, antivirus/antispyware software. Disabling the service ensures it gets disabled.

Tried rebooting switches/servers?
0
 

Author Comment

by:lenivan
ID: 18803891
we've got 200 computer, but only about half are dropping. They are all connected to different managed switches, but all the switches are connected to 1 backbone switch. The servers are connected directly to the backbone switch.

All the switches are 5 years old and I will be replacing the backbone switch in the next day or two. I guess it could be a bad cable. When I replaced the backbone switch, I will replace the Cat5e cables on all the switches with new Cat6 cables.

Hope this will make a difference. Any other suggestions?
I will report my findings after the hardware replacement.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Join & Write a Comment

I was recently sitting at a desk at work with one of my colleagues and needed some information on my home computer. He watched as I turned on my home computer, established a remote session into it, got the information I needed and then shut it down …
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now