How to detect high bandwidth causing slow Internet connection

All of sudden, Internet connection is really slow. File transferring or application access within LAN is no issue. Having 20 users, there is OK for no Internet connection temporarily. The network structure is simple, Internet > Cisco 837 ADSL router > Cisco PIX 501 firewall > 3COM 24 ports normal switch > 20 hosts.

With only one host direct connect to PIX 501 firewall, the Internet connection is fast, PING result shown avg 20ms.

With only one host direct connect to 3COM switch alone and unplug all other RJ45 cable, the result is same as above.

With all hosts connected to the 3COM switch, the Internet connection is really slow, and ping result shown above 1000ms.

After works, all employees gone home, the Internet connection is fast, ping result shown avg 20ms.

I am not quite sure which host is utilising high bandwidth causing the Internet connections is damn slow.

Please help
Who is Participating?
rindiConnect With a Mentor Commented:
Check the workstations for malware and p2p software that might be downloading software. Use adaware, Spybot S&D, and hijackthis for that. You can also use wireshark to analyze the LAN, that should give you an idea of which PC's use most bandwidth.

You can paste the log of the hijackthis of the suspected PC here.
lrmooreConnect With a Mentor Commented:
NTOP may give you better indicators of where all the traffic is coming from
Forced accept.

EE Admin
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.