• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2970
  • Last Modified:

How to detect high bandwidth causing slow Internet connection

All of sudden, Internet connection is really slow. File transferring or application access within LAN is no issue. Having 20 users, there is OK for no Internet connection temporarily. The network structure is simple, Internet > Cisco 837 ADSL router > Cisco PIX 501 firewall > 3COM 24 ports normal switch > 20 hosts.

With only one host direct connect to PIX 501 firewall, the Internet connection is fast, PING result shown avg 20ms.

With only one host direct connect to 3COM switch alone and unplug all other RJ45 cable, the result is same as above.

With all hosts connected to the 3COM switch, the Internet connection is really slow, and ping result shown above 1000ms.

After works, all employees gone home, the Internet connection is fast, ping result shown avg 20ms.

I am not quite sure which host is utilising high bandwidth causing the Internet connections is damn slow.

Please help
2 Solutions
Check the workstations for malware and p2p software that might be downloading software. Use adaware, Spybot S&D, and hijackthis for that. You can also use wireshark to analyze the LAN, that should give you an idea of which PC's use most bandwidth.


You can paste the log of the hijackthis of the suspected PC here.
NTOP may give you better indicators of where all the traffic is coming from
Forced accept.

EE Admin

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now