Bad NIC?

Cyphos
Dec 16, 8:46 am show options

Newsgroups: comp.os.linux.networking
From: "Cyphos" <mweich...@gmail.com> - Find messages by this author
Date: 16 Dec 2005 05:46:55 -0800
Local: Fri, Dec 16 2005 8:46 am
Subject: Bad NIC?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Remove | Report Abuse

Hi guys,


I have a very troubling problem with my network at work. It seems that
every morning when our traffic begins to get going. The network goes
completely down. I cannot ping anything. I see the activity light on
the switch and ethernet card lit up, with no problems. I restart my DS
server, and we're back online.

I've checked the eventlog, and everything is fine.


Any ideas anyone? I could really use your help here.


Thanks,
Cyp.

Use sniffer to analyze type of traffic, network monitor is fine, probably
your dc is infected with worm.


"Cyphos" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> Cyphos
> Dec 16, 8:46 am show options
>
> Newsgroups: comp.os.linux.networking
> From: "Cyphos" <mweich...@gmail.com> - Find messages by this author
> Date: 16 Dec 2005 05:46:55 -0800
> Local: Fri, Dec 16 2005 8:46 am
> Subject: Bad NIC?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Remove | Report Abuse
>
> Hi guys,
>
>
> I have a very troubling problem with my network at work. It seems that
> every morning when our traffic begins to get going. The network goes
> completely down. I cannot ping anything. I see the activity light on
> the switch and ethernet card lit up, with no problems. I restart my DS
> server, and we're back online.
>
> I've checked the eventlog, and everything is fine.
>
>
> Any ideas anyone? I could really use your help here.
>
>
> Thanks,
> Cyp.
>

>Use sniffer to analyze type of traffic, network monitor is fine, probably
>your dc is infected with worm.

I have ethereal installed. But I don't know what I'm looking for. What
are some clues that would indicate I have a worm installed?

use ethereal to analyze all trafic witch is going out and in of your server,
I never used ethereal, usualy big smtp traffic indicates worm infection,
also you can netstat command, but netstat won't indicate some types of
attacks. I prefer to use Network Monitor because it comes with windows
2003.

"Cyphos" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> >Use sniffer to analyze type of traffic, network monitor is fine,
> >probably
>>your dc is infected with worm.
>
> I have ethereal installed. But I don't know what I'm looking for. What
> are some clues that would indicate I have a worm installed?
>

>I have a very troubling problem with my network at work. It seems that
>every morning when our traffic begins to get going. The network goes
>completely down. I cannot ping anything. I see the activity light on
>the switch and ethernet card lit up, with no problems. I restart my DS
>server, and we're back online.

>I've checked the eventlog, and everything is fine.

>Use sniffer to analyze type of traffic, network monitor is fine, probably
>your dc is infected with worm.

I've looked at the traffic, and can't find any signs of a worm. Any
other ideas? Or is it a bad nic?

Thanks,
Cyp.

If you see the activity light on the switch it means that nic is transfering
data or recieves it just analyse what kind data it is and you will find the
problem. Run sniffer when server becomes unavible to other computers, but
led shows that it transmits data.


"Cyphos" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com...
> >I have a very troubling problem with my network at work. It seems that
>>every morning when our traffic begins to get going. The network goes
>>completely down. I cannot ping anything. I see the activity light on
>>the switch and ethernet card lit up, with no problems. I restart my DS
>>server, and we're back online.
>
>>I've checked the eventlog, and everything is fine.
>
>>Use sniffer to analyze type of traffic, network monitor is fine, probably
>>your dc is infected with worm.
>
> I've looked at the traffic, and can't find any signs of a worm. Any
> other ideas? Or is it a bad nic?
>
> Thanks,
> Cyp.
>

>If you see the activity light on the switch it means that nic is transfering
>data or recieves it just analyse what kind data it is and you will find the
>problem. Run sniffer when server becomes unavible to other computers, but
>led shows that it transmits data.

Thanks Simas.