Do you have Spanning Tree Protocol enabled?
Do you have a captured traffic sample (from a sniffer such as
Ethereal?
David Gillett
-----Original Message-----
From: chetan.kamra@gmail.com [mailto:chetan.kamra@gmail.com]
Sent: Saturday, March 25, 2006 7:29 AM
To: security-basics@securityfocus.com
Subject: NETWORK BROADCST
Hi All,
Today i faced a weired problem in network.
I have Current network
CISCO PIX
|
1 * D Link Switch 16ports(10/100/1000)
| | | |
6 * Dlink 24port (10/100) with 2(10/100/1000) Uplink Ports
I saw all my ports in all switch are blinking very badly.
We monitor them regularly but today i think the traffic was
more or may be network storm
All Network Computers was not able to access any resources on
same network or Internet.
They were not able to ping eachother.
I took folllowing steps to clean this situation.
1. Unplugged Switches from backbone Switch ie(D Link Switch
16ports(10/100/1000) 2. All switch ports lights were stable then.
3. Plugged them in one by one.
4. After 5 switch in last one when I plugged it again all
switches started blinking.
5. I unpluged 6th switch and all are stable again.
6.But 6th switch switch was still badly blinking.
7. I then removed one by one patchcord from 6th switch.
8. After removing from interface 7th and 8th, ,Suddenly
switch started acting normal.
9. And then i plugged it in Uplink port and HURREY all things
are working good.
I think Then machines on 6th Switch 7th and 8th switchport
are effected from Virus or spyware.
What do you all say .
And if agreed with me please provide me some solution to
clean such virus, and to control network storms.
Thanks
LIFE
--------------------------------------------------------------
-------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec
management education and the case study affords you unmatched
consulting experience.
Tailor your education to your own professional goals with
degree customizations including Emergency Management,
Business Continuity Planning, Computer Emergency Response
Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
--------------------------------------------------------------
-------------
---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
