Network bogged down - slowing down some client PCs

Posted on 2017-04-11
Last Modified: 2017-04-17
I am working on a network that consists mainly of 2 stacks of 6 Dell PowerConnect 6224 switches. There are also a few other independent 6224's that connect to the stacks via CAT6 cable. I know when we're having an issue because the lights on the front of the switch will change. Typically they flash fairly slowly and not really in sequence. When they're having an issue, they pulse much more frequently and almost (if not totally) in complete sequence. This seems to be happening on all switches.

It's affecting the network here in that things are running much slower than usual (it's intermittent on some workstations). Mine seems completely unaffected. Others are slow in opening network applications, printing, and even some are slow opening local apps (Word, Excel, PPT).

The switches have spanning tree portfast enabled.

The network had been running fine until last Friday and I honestly can't think of anything that changed.

How can I find the source of this problem and get it corrected?
Question by:street9009
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
  • 2

Expert Comment

by:Lee Ingalls
ID: 42088176
On the switch -- check the port statistics of the workstations that are experiencing the intermittent issues.
Are those ports experiencing packet errors/loss/drops?
What is showing up in the Event Viewers - Windows Logs of those same workstations when you filter for Critical, Warning, Errors?

Author Comment

ID: 42088206
It's a lot of workstations. I don't want to underestimate how many it is but I'd say it's more than half of our network (some are just more vocal than others obviously). We haven't found anything out of the ordinary in event viewer or on the ports themselves.

Here's statistics for one of the ports that has an issue:

Receive Statistics
Total Bytes(Octets)      163202131      
Unicast Packets      609258      
Multicast Packets      668      
Broadcast Packets      1383      
Packets with Errors      0      
Packets Discarded      7      
Transmit Statistics
Total Bytes(Octets)      522517034      
Unicast Packets      751359      
Multicast Packets      58472      
Broadcast Packets      129920      
Packets Discarded      13
LVL 29

Expert Comment

ID: 42088271
You should get a tool like Wireshark or PRTG into use so that you can start monitoring the traffic. That may start to give you an idea of what's going on.
Do you have a plan for Continuity?

It's inevitable. People leave organizations creating a gap in your service. That's where Percona comes in.

See how relies on Percona to:
-Manage their database
-Guarantee data safety and protection
-Provide database expertise that is available for any situation


Expert Comment

by:Lee Ingalls
ID: 42088289
I spent several months addressing intermittent slow network.
It feels like chasing a ghost...
What's the environment look like?
Server OS?
Workstation OS?
Storage environment? SAN, NAS or DAS?
Updated NIC drivers, etc
I used IOMeter, Wireshark and Performance Monitor to capture data.
Depending on the environment I can provide more detail.

Author Comment

ID: 42088311

I spent several months addressing intermittent slow network.
It feels like chasing a ghost...

Boy, you got that right.

The environment consists of several servers, all physical boxes. There are a couple Hyper-V servers running on one of them but they aren't asked to do much. Servers are a mix of Server 2008 R2 (2), Server 2012 (1), and Server 2012 R2 (the rest). All servers have their own physical RAID (SAN, NAS, etc.). There are several shares that get mapped to network drives (standard).

No changes to drivers on any of the servers that I am aware of. There is one new box in the mix but it's now been turned off just to be sure there's nothing there causing an issue. It's not in production... yet.

Workstations are primarily Windows 7 but there are some Windows 10 (I am one of them). Windows 10 does seem to be unaffected by this. There are Windows 7 stations that are fine and some that aren't, but I've yet to find a Windows 10 that was slow. Could be coincidental.
LVL 29

Expert Comment

ID: 42088313
A weird random issue I have seen happen before required simply disabling IPv6 on the NIC of the domain controller.

Author Comment

ID: 42088314

A weird random issue I have seen happen before required simply disabling IPv6 on the NIC of the domain controller.

It's disabled on both already. It's typically not left on for any machines with a static IP. DHCP doesn't hand out IPv6.

Author Comment

ID: 42088668

All servers have their own physical RAID (SAN, NAS, etc.).

Sorry, that should read NO SAN, NAS, etc.

I'm starting to believe that whatever the issue is, Windows 7 is more susceptible to it. I haven't seen a single 10 client that has an issue. May try to upgrade one and see what happens.

Accepted Solution

Lee Ingalls earned 500 total points
ID: 42088676
Windows 7 clients with Windows 2008 r2 servers has an issue with SMB2. It can be disabled by registry entry. Additionally, TCP and UDP checksum offloading can be disabled on the NIC's. This combination made a significant improvement for me!

Author Closing Comment

ID: 42095395
We made these changes via Group Policy (registry entries) and pushed them out. It does seem to have helped. I'm a little concerned that this is still masking an underlying problem (as we had no issue until 10 days ago) but the network does seem more stable and the users that were complaining are no longer having trouble.

Thanks for pointing us in this direction!

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question