+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Wireless Networks Thread, Networking Issues in Technical; Hello all, My day has started off pretty badly. I have been having networking issues on and off now for ...
  1. #1

    Join Date
    May 2006
    Location
    West Bromwich
    Posts
    2,190
    Thank Post
    299
    Thanked 215 Times in 185 Posts
    Rep Power
    56

    Networking Issues

    Hello all,

    My day has started off pretty badly. I have been having networking issues on and off now for a while. It seems as though there is a broadcast storm happening which cripples the network. I have enabled the STP protocol but this doesn't seem to do anything. All the switches seem to be affected but restarting the switch with the servers connected generally resolves the issue.

    I'm not entirely sure what I need to look for and where to start troubleshooting an issue like this.

    My switches are SRW2048 switches.

    I have a number of things I could enable but not sure what they are and how they would affect the network. For example Flow control is currently off for all ports. Should i enable this. The STP setting has a few options as well. Which one is the right option?

    Hope someone can help me with this. It's driving me nuts!

    Thanks.

  2. #2


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,573
    Thank Post
    228
    Thanked 851 Times in 730 Posts
    Rep Power
    294
    unfortunately best think i can think to do is unplug network leads one by one (after trying to isolate which switch it is by unlinking them and watching the lights to cut down the number of cables you have to check) some kind teacher/cleaner/kid has probably looped the network

  3. Thanks to sted from:

    HodgeHi (4th May 2010)

  4. #3

    Join Date
    May 2006
    Location
    West Bromwich
    Posts
    2,190
    Thank Post
    299
    Thanked 215 Times in 185 Posts
    Rep Power
    56
    I forgot to mention that this problem occurred over the weekend. The Teachers came in this morning around 7-ish and could not log on. But it is very intermittent. It hasn't happened for a while now. But it's re-occurring frequently again at the moment. Sometimes 2-3 time a day.

  5. #4
    AngryITGuy's Avatar
    Join Date
    Oct 2007
    Location
    County Durham
    Posts
    311
    Thank Post
    54
    Thanked 73 Times in 44 Posts
    Rep Power
    30
    Agree with sted, you need to disconnect your switches from each other to try and isolate the problem on your network. Assuming its a cabling problem (ie a loopback) you will need to unplug the cables from the switch and watch for when the light show calms down!

    It could also be caused by a virus infected machine on the network, so running something like Wireshark will help to isolate any machines on your network that are broadcasting huge amounts of traffic and data across the network.

    Does the broadcast storm happen at any particular time of the day or is it just random?

    How many servers do you have at the school?

  6. Thanks to AngryITGuy from:

    HodgeHi (4th May 2010)

  7. #5
    mstarkie's Avatar
    Join Date
    Nov 2006
    Location
    Burnley
    Posts
    40
    Thank Post
    2
    Thanked 5 Times in 5 Posts
    Rep Power
    16
    I dont know the layout of your school but first thing worth checking is any work areas where staff/children can plug their own laptop in. Most common fault in my experience is people see a network cable dangling and plug it into the point next to the one its already plugged into (without realising).

    If nothing obvious you could set up a laptop on one of main switches on a repeating ping (ping -t) and start fault finding.

    However your switches are managed and there should be away to connect in to these directly and it should tell you what is at fault. But im not completely sure on this.

    Dont worry we have all been there.

    MS

  8. Thanks to mstarkie from:

    HodgeHi (4th May 2010)

  9. #6

    Join Date
    May 2006
    Location
    West Bromwich
    Posts
    2,190
    Thank Post
    299
    Thanked 215 Times in 185 Posts
    Rep Power
    56
    Thanks guys for the help. Really appreciated.

    I don't think that it is a cable looping issue though. I experienced this at my last place. The reason i don't think it is this is because when i reset the switch the problem goes away. This is without messing with any cables. If it was a looped cable the issue would surely come back as soon as the switch brings the looped data points back online?

    The virus thing may have something to it though. I will take a look at the Endpoint console and see what comes up.

    "Does the broadcast storm happen at any particular time of the day or is it just random?"

    It is very random, which is why I am beginning to suspect a possible virus. Maybe brought in on a memory stick which only starts being activated once plugged in?

    Is this plausible?

  10. #7
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,513
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    67
    Try running Agilent Network Analyzer, it will tell you where the broadcast traffic is coming from.

    Agilent | Free Download - Network Analyzer Software Standard Edition

    I leave it running, its very good to spot these kind of problems early as it has a good GUI.

    D

  11. 2 Thanks to danrhodes:

    cookie_monster (14th May 2010), HodgeHi (4th May 2010)

  12. #8
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,513
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    67
    Quote Originally Posted by HodgeHi View Post
    Thanks guys for the help. Really appreciated.

    I don't think that it is a cable looping issue though. I experienced this at my last place. The reason i don't think it is this is because when i reset the switch the problem goes away. This is without messing with any cables. If it was a looped cable the issue would surely come back as soon as the switch brings the looped data points back online?

    The virus thing may have something to it though. I will take a look at the Endpoint console and see what comes up.

    "Does the broadcast storm happen at any particular time of the day or is it just random?"

    It is very random, which is why I am beginning to suspect a possible virus. Maybe brought in on a memory stick which only starts being activated once plugged in?

    Is this plausible?

    It seems more plausable that it may be a faulty NIC on a computer or printer that is getting turned on at a certain time and flooding the network with broadcast traffic, use the tool above and you will be able to track where all the traffic is origionating.

  13. Thanks to danrhodes from:

    HodgeHi (4th May 2010)

  14. #9
    AngryITGuy's Avatar
    Join Date
    Oct 2007
    Location
    County Durham
    Posts
    311
    Thank Post
    54
    Thanked 73 Times in 44 Posts
    Rep Power
    30
    Quote Originally Posted by HodgeHi View Post

    It is very random, which is why I am beginning to suspect a possible virus. Maybe brought in on a memory stick which only starts being activated once plugged in?

    Is this plausible?
    Very much so if the virus has created a 'autorun.inf' file on the memory stick the virus will run eachtime it is plugged in!

    We had a similar problem here a few years back during an OFSTED Inspection think the suspect file being ran was called 'win.exe' which came from an infected memory stick and ended up infecting networked machines!

    Does sound like your problem is likely to be a virus of some sorts, hope you find the source of the problem soon!
    Last edited by AngryITGuy; 4th May 2010 at 11:09 AM.

  15. Thanks to AngryITGuy from:

    HodgeHi (4th May 2010)

  16. #10
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,513
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    67
    Yeah, there has been an increase of these annoying things running autorun.inf from usb sitcks lately! Just about had my fill of them now, its time to think of something new!

    D

  17. #11

    Join Date
    May 2006
    Location
    West Bromwich
    Posts
    2,190
    Thank Post
    299
    Thanked 215 Times in 185 Posts
    Rep Power
    56
    Thanks guys.

    @ DanRhodes,

    Thanks for the heads up with this app. Will give it a shot as soon as i get some time.

    @ AngryITGuy,

    This is interesting. You mention the 'autorun.inf'. I have recently been dealing with this all over Staff memory Sticks. I have Endpoint configured to scan on access but it fails to pick them up or delete them. I am leaning more and more to the virus thing as we chat. But I won't rule out other things. IE our main server (DC) is running really slow which also has the endpoint admin console installed. I know, it's not probably recommended but we didn't have another server at the time

    In the 6 weeks I will be moving this across to a different server (along with the print queues )

  18. #12
    AngryITGuy's Avatar
    Join Date
    Oct 2007
    Location
    County Durham
    Posts
    311
    Thank Post
    54
    Thanked 73 Times in 44 Posts
    Rep Power
    30
    Scanning the servers would also be a good bet but you might want to leave that till after school as it's likely to slow down your netowork, but then again if it's already slow will anyone notice?

    You might want to setup a machine to ping one of the servers overnight to see if the problem still occurs with no users on the network this should indicate if its a problem with your switches/servers rather than client machines.

    Something like Colasoft Ping Tool would do nicely its free and has a graphical interface to show you the response times.

  19. #13
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,196
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    Quote Originally Posted by danrhodes View Post
    Try running Agilent Network Analyzer, it will tell you where the broadcast traffic is coming from.

    Agilent | Free Download - Network Analyzer Software Standard Edition

    I leave it running, its very good to spot these kind of problems early as it has a good GUI.

    D

    Agilent Network Analyzer looks good, does it need to be on a box that's plugged into a switch port that's set to promiscuous mode?

  20. #14
    danrhodes's Avatar
    Join Date
    Sep 2008
    Location
    Wath Upon Dearne
    Posts
    1,513
    Thank Post
    157
    Thanked 181 Times in 150 Posts
    Rep Power
    67
    No just plug it into any port it does not need it to be on promiscuous mode that I am aware, I have always just plugged it in and off you go.

    D

  21. #15
    kennysarmy's Avatar
    Join Date
    Oct 2005
    Location
    UK
    Posts
    1,286
    Thank Post
    80
    Thanked 45 Times in 31 Posts
    Rep Power
    30
    I am trying to get hold of the Network Analyzer Software Standard Edition software - but can't seem to see a download link on their site

    Can anyone email me it or help please?

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Issues Wireless networking to Windows 2008 Server
    By VanLerswin in forum Windows Server 2008
    Replies: 1
    Last Post: 29th April 2010, 02:51 PM
  2. Replies: 5
    Last Post: 15th November 2008, 05:23 PM
  3. networking PDA's & security issues
    By projector1 in forum Hardware
    Replies: 3
    Last Post: 12th April 2008, 10:18 AM
  4. Macs & Networking Issues
    By edusites in forum Mac
    Replies: 8
    Last Post: 3rd February 2008, 11:10 AM
  5. Networking Icons
    By StewartKnight in forum General Chat
    Replies: 6
    Last Post: 23rd October 2007, 10:54 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •