Finding the bandwidth bandit
- From: "Jim in Arizona" <tiltowait@xxxxxxxxxxx>
- Date: Thu, 6 Aug 2009 10:28:47 -0700
Out network consists of about 30 users (PCs) on an internal network which
goes out via a linksys router to the internet through a dual T1 (running at
3mb up and down).
For a few months now we've been experiencing severe bandwidth loss during
the course of the day and I have been unable to find the cause. A few days
ago I walked from comptuer to computer to see if I could find the user
responsible but was unable to. I did find one user running FrostWire, a form
of P2P file sharing software but after uninstalling the software and
removing the installation rights from that user, the problem did not go away
so it's still somewhere else on the network. I have, through the process of
elimination, determined that it is not either one of my two servers doing
it.
Our bandwidth speeds will drop pretty low, looking like this (I took speed
tests yesterday via qwest's speed test site from my workstation)
Time Download/Upload
8:39AM 2.745/2.597
9:42AM 2.207/1.204
10:44AM 2.003/1.090
12:13PM 0.915/0.845
2:08PM 1.826/0.584
These speeds from yesterday aren't too bad except for the upload speeds.
They're usually much worse. Often, the download speeds are down to 0.300 or
so with the upload speeds a bit worse .. around 200K. So far, right now (as
I type this), no one seems to be sucking up the bandwidth. The speed test
right now check in at 2.707/1.593 DOWN/UP.
My boss seems to think that my efforts aren't working in getting results
(which they aren't) and although I have offered the solution of temporarily
installing an ISA server over the weekend to see if we can catch the culprit
that way, my boss asked me if we should bring in some 'experts'. Maybe he
didn't read my entire email.
In any case, if I were to bring in some 'experts', what would they be able
to do?
My network looks like this:
LinkSys Router --- Switches ---
Workstations and Domain Controller
-
-
Internet ----- ADTRAN ------ Switch ----- Web/FTP Server
-
-
----------
Teleconference Equipment
Its my plan to place an ISA server in place of the Linksys router on a
temporary basis until I find the person responsible.
The Web/FTP Server and Teleconference equipment have public IPs so that's
why they're not behind the linksys router. I know for sure that the
teleconference equipment is not the culprit as it takes a specific amount of
bandwidth up when running and I know what that is. Also, I know its behind
the linksys because when the bandwidth is really bad, I can power cycle the
linksys router or just unplug the LAN cable from it for a few moments and
then plug it back in and our bandwidth is back up and running normally for a
short while until the bad PC reconnects to whatever systems it's
communicating with on the net.
So? Any ideas on how to do this other than ISA? I'm not good at using packet
sniffing software like wireshark and even if I could, where would I plug a
laptop running such software into? Swiches only route to predefined ports so
I would need an old style hub in between the switch and linksys router,
which I don't have.
Back to my last question, what would an 'expert' even do if we could call
one in?
.
- Follow-Ups:
- Re: Finding the bandwidth bandit
- From: Bill Kearney
- Re: Finding the bandwidth bandit
- From: Phillip Windell
- Re: Finding the bandwidth bandit
- Prev by Date: Re: W32Time Errors
- Next by Date: Re: Finding the bandwidth bandit
- Previous by thread: W32Time Errors
- Next by thread: Re: Finding the bandwidth bandit
- Index(es):
Relevant Pages
|
