Networks

Ask something
Discussion Locked

Internal machine broadcast to the web

0 helpful
1 reply

by elemzy 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
i have an ISA server as my proxy, and connects wkstations using firwall client, recently i got a message from our isp that a machine is constantly uploading to the web and which is affecting our bandwidth. i was actually shown the statistic which was captured the cisco router. this broadcast occurs during the work hours. the isa report however did not show any machine as sending broadcast. can this be a virus, and if not, Is there any utility to know which machine is sending this broadcast?

1 reply

by curlergirl

Do you know what port the packets were going out on? This would be important in tracking down what is causing the traffic. Different programs use different IP ports to communicate, so it would help to know the port first. One thing you might wantto check in general is whether there are users in your organization who are using instant messaging services like AOL or MSN Instant Messenger - these programs generate a lot of traffic because they are constantly checking for messages. If someone has these programs loaded, it wouldn't necessary show up in your ISA server statistics, because instant messenger services use different ports. Hope this helps!

This discussion is closed to new replies.