Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows Server 2003Windows 2000Windows NTSmall Business ServerVirtual ServerExchange ServerIISHost Integration ServerISA ServerSMSWSUSMOMWindows Media ServerSecurityCertification
Related Topics
SQL ServerMS WindowsMS OfficePC HardwareMore Topics ...

Windows Server Forum / Small Business Server / SBS 2000 / August 2004

Tip: Looking for answers? Try searching our database.

...link and traffic lights on switch and router flash heavily...

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Doug B -db- - 26 Aug 2004 15:37 GMT
I know my problem may be network related and not for this newsgroup but I'm
stumped and wonder if anyone else has had this experience.

Problem:

After about 2-3 hours sometimes longer, All link and traffic lights on
switch and router flash heavily and the internet can't be accessed. The
gateway or server IP's can't be pinged externally when it is down.

The only way found so far to clear the problem is to reboot the server.

Test with traffic monitor hooked to switch port shows an increase from >1%
running normal to 13% peak when the problem occurs.

With out going into detail I've taken other steps in trouble shooting and
believe it's down to the Server, Router or Switch but only a server reboot
clears this.

Dell Server: SBS2000, dual NIC. (ADSL Router is on external, Switch is on
internal NIC.)

Server is patched.

No virus detected.

Dell/Intel NIC drivers updated.

Dell firmware updated.

Thanks

db
Marina Roos [SBS-MVP] - 26 Aug 2004 18:57 GMT
Hi Doug,

This can be caused by a faulty network cable anywhere on the network.

Signature

Regards,

Marina
Microsoft SBS-MVP

> I know my problem may be network related and not for this newsgroup but I'm
> stumped and wonder if anyone else has had this experience.
[quoted text clipped - 28 lines]
>
> db
Doug B -db- - 27 Aug 2004 13:32 GMT
That was one of my 1st thoughts or a worm.

db

> Hi Doug,
>
[quoted text clipped - 34 lines]
> >
> > db
Dirk-Thomas Brown - 26 Aug 2004 19:03 GMT
Unless the switch is bad, I would be scanning those workstations for a
Trojan/worm.

Dirk-Thomas

>I know my problem may be network related and not for this newsgroup but I'm
> stumped and wonder if anyone else has had this experience.
[quoted text clipped - 28 lines]
>
> db
Jim Behning - 27 Aug 2004 02:13 GMT
To elaborate, Spybot Search and Destroy, Ad-aware and www.moosoft.com
The Cleaner with the latest definitions for all can help you dig out
infected machines. When I suspect problems I use all three and
sometimes some other stuff.

What brand of switch? Some of the better managed switches let you look
at packet traffic in real time or history. Ports that have an unsual
lot of traffic besides the server might indicate a problem device.

>Unless the switch is bad, I would be scanning those workstations for a
>Trojan/worm.
[quoted text clipped - 33 lines]
>>
>> db

Jim B. SBS  MVP
remove the mvp to send email
Doug B -db- - 27 Aug 2004 13:31 GMT
I did have one box that was full of crap that I'd cleaned up.

Dell Switch, unmanaged. All ports flash the same when the trouble occurs.
nothing to indicate a particular line.

db

> To elaborate, Spybot Search and Destroy, Ad-aware and www.moosoft.com
> The Cleaner with the latest definitions for all can help you dig out
[quoted text clipped - 46 lines]
> Jim B. SBS  MVP
> remove the mvp to send email
Jeff - 27 Aug 2004 06:08 GMT
Does NETSTAT show anything unusual when run on the server when this is
happening?

Jeff

>I know my problem may be network related and not for this newsgroup but I'm
> stumped and wonder if anyone else has had this experience.
[quoted text clipped - 28 lines]
>
> db
Doug B -db- - 27 Aug 2004 13:28 GMT
I'll check that.

I thought I had found it but apparently not. Thought it could be the result
of one of the windows updates since it began around the same time. Thanks
for all the ideas so far.

db

> Does NETSTAT show anything unusual when run on the server when this is
> happening?
[quoted text clipped - 34 lines]
> >
> > db
Doug B -db- - 30 Aug 2004 17:35 GMT
Thanks for the ideas and suggestions. I think I've resolved this issue. Here
is what I found.

Because I never installed SQL on this box the patch for w32.slammer wasn't
installed. It appears that another application may have installed MSDE 2000
which it turns out needs to be patched.

I ran across this when looking at the system processes and noticed that
sqlservr.exe was running and using 40% of the CPU while no users were
connected to the network. I rebooted,  installed the patches (MS02-061) and
so far the system is stable.

Thanks,
db
Doug B -db- - 30 Aug 2004 17:36 GMT
Thanks for the ideas and suggestions. I think I've resolved this issue. Here
is what I found.

Because I never installed SQL on this box the patch for w32.slammer wasn't
installed. It appears that another application may have installed MSDE 2000
which it turns out needs to be patched.

I ran across this when looking at the system processes and noticed that
sqlservr.exe was running and using 40% of the CPU while no users were
connected to the network. I rebooted,  installed the patches (MS02-061) and
so far the system is stable.

Thanks,
db
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.