Re: IP Flooding

I have isolated all workstations and the problem persists. Could be the NIC
in the server though??
"5150" <> wrote in message
news:...
> On Tue, 19 Aug 2003 13:20:23 GMT, "Hamish" <>
> wrote:
>
> >I have a Win2K server that is demonstrating signs of IP spoofing and
Denial
> >of Service. The server connects to the internet via a DUN connection
shared
> >using ICS. In the last two days the network has slowed to nothing and
> >several network apps including mail and web access have failed while
trying
> >to access resources on the server or on the external network.
> >
> > I have noticed that while the DUN connection is active the modem and DUN
> >properties indicates a constant stream of data being uploaded from the
> >server. The network functions normally when the DUN connection is
disabled.
> >
> >The problem is not ISP specific as I have tried alternates. There is no
> >firewall present (please no lectures, its not my network).
> >
> > Can anyone help me to isolate the cause of this problem?
> >
>
>
> How many machines do you have? If not too many, you might want to
> take the poor mans approach and just start unplugging them one by one
> to see if your problem goes away. I have experienced problems like
> this when I had a bad NIC card in a machine. If you have a lot of
> machines you should get yourself a packet sniffer / network analyzer.
>

Hamish