IT Employment

Ask something
Discussion Locked

TCP/ip traffic

0 helpful
3 replies

by etsaner

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We have 2 sites about 1400km apart and linked via WAN. On Saturday afternoons our offices are empty (bandwith usage is minimal. Our logs have reported that b/width usage was everaging 100% during this period. What could be the cause? (faulty routers, ,loops,hacking, etc)

3 replies

by ab3_tek

What wan technology are you using?(leased line, frame relay, ATM)? Where are the logs being generated from (the LAN or the WAN)?

by mindskills

Check the log files from your side and other side of WAN, what Ip address were being used during this period. If there is any anonymous Ip is present then there is a possibility of hacking. Check the the other side position during this time period, how much load was there ?

by rzan

What kind of WAN Infrastructure (Frame Relay, ATM, Leased Line, etc.) And what are the logs stating exactly? If you see excessive icmp echo pings, then someone is performing a Denial of Service attack using ping of death. Consider installing a firewall at both ends of the WAN to filter out malicious attacks by blocking certain ports.

This discussion is closed to new replies.