Solved

Network Slowness on my T1 Circuit

Posted on 2010-09-08
6
688 Views
Last Modified: 2012-05-10
I have a T1 and as of the past few days its been very slow.  I have a solarwinds network performance montior installed and its telling me that my transmit rate on my T1 is at 97%.  When looking at my netflow data it lists my top 5 transmitters.  See below:  They are all yahoo mail servers:

Top 5 Transmitters
Last 15 Minutes
    Endpoint Total Bytes Total Packets Percent
  mta-v3.mail.vip.mud.yahoo.com (66.94.237.64)  483.4 Kbytes 11.977 K packets 16.91%
  mta-v2.mail.vip.mud.yahoo.com (66.94.236.34)  453.1 Kbytes 11.26 K packets 15.85%
  mta-v1.mail.vip.ac4.yahoo.com (67.195.168.31)  449.8 Kbytes 11.235 K packets 15.74%
  mta-v1.mail.vip.sk1.yahoo.com (74.6.136.65)  443.8 Kbytes 11.072 K packets 15.53%
  mta-v1.mail.vip.re4.yahoo.com (206.190.54.127)  429.8 Kbytes 10.733 K packets 15.04%

Can anyone explain this?  Why 5 different yahoo servers are 5 biggest trasmitters?  I guess I could block these addresses on the firewall.   Any thoughts?

0
Comment
Question by:denver218
6 Comments
 
LVL 24

Expert Comment

by:rfc1180
ID: 33630837
>Can anyone explain this?  Why 5 different yahoo servers are 5 biggest trasmitters?

It is either legit or not, you would only know this. If this is not normal, then you can always contact yahoo

bguthrie@neteng01 ~ $ whois 206.190.54.127 | grep -i abuse
OrgAbuseHandle: NETWO857-ARIN
OrgAbuseName:   Network Abuse
OrgAbusePhone:  +1-408-349-3300
OrgAbuseEmail:  network-abuse@cc.yahoo-inc.com
OrgAbuseRef:    http://whois.arin.net/rest/poc/NETWO857-ARIN


This could be related to a virus outbreak, an attack, etc

Billy
0
 
LVL 7

Accepted Solution

by:
rcombis earned 500 total points
ID: 33630850
Here are some thoughts.

Maybe one of your computers in your network is spamming?

Maybe one or more of your users is sending attachments out via yahoo mail?

Is this inbound or outbound transmission?

Can you get a list of internal IPs to see who is hogging the bandwidth?  (Is your monitor inside or outside of your firewall?  Maybe you could set up an internal monitor to narrow down who is using what bandwidth?  After you narrow it down you could look at those few machines to get a better idea of what the user/users is doing that is hogging up bandwidth)

Think about upgrading.  I had a client that had a T1 line.  We installed a business class cable modem that was 1/5 of the price and 20-30 times faster.
0
 
LVL 4

Author Comment

by:denver218
ID: 33635622
My monitor is on the outside, I have netflow configured on my Cisco Router.  I wanted to cofnigure netflow on my cisco pix so I could monitor the inside LAN by the PIX 506E doesn't support netflow.  Any ideas on how I can analyze the inside LAN?  Thanks.
0
Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

 
LVL 36

Expert Comment

by:ArneLovius
ID: 33651394
ntop on a linux box connected to a span port that mirrors the PIX internal port
0
 
LVL 4

Author Comment

by:denver218
ID: 33664260
This ended up to be an ISP issue.  When I would do a simple ping to www.google.com I got replies but they were about 1000ms.  I called the ISP and I'm not sure what they did but things magically got back to normal.  They claim they didn't do anything.  As far as why those yahoo servers were the 5 biggest tranmitters on my network, this is because employees that work there have thier yahoo email forwarded to their blackberry.  
0
 
LVL 4

Author Closing Comment

by:denver218
ID: 33664264
Ended up being an ISP issue
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Port forwarding in Cisco RV215w 2 45
EIGRP Summary 2 43
discontiguous network and EIGRP 12 63
Root STP in Cisco switch maintenance 2 46
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now