Home page logo
/

basics logo Security Basics mailing list archives

RE: NETWORK BROADCST
From: "David Gillett" <gillettdavid () fhda edu>
Date: Mon, 27 Mar 2006 12:26:40 -0800

  Do you have Spanning Tree Protocol enabled?

  Do you have a captured traffic sample (from a sniffer such as
Ethereal?

David Gillett
 

-----Original Message-----
From: chetan.kamra () gmail com [mailto:chetan.kamra () gmail com] 
Sent: Saturday, March 25, 2006 7:29 AM
To: security-basics () securityfocus com
Subject: NETWORK BROADCST

Hi All,
Today i faced a weired problem in network.

I have Current network 
                                                           
                  CISCO PIX
                      |
                                                              
  1 * D Link Switch 16ports(10/100/1000)
         |        |        |        |
6 * Dlink 24port (10/100) with 2(10/100/1000) Uplink Ports


I saw all my ports in all switch are blinking very badly.

We monitor them regularly but today i think the traffic was 
more or may be network storm

All Network Computers was not able to access any resources on 
same network or Internet.

They were not able to ping eachother.

I took folllowing steps to clean this situation.

1. Unplugged Switches from backbone Switch ie(D Link Switch 
16ports(10/100/1000) 2. All switch ports lights were stable then.
3. Plugged them in one by one.
4. After 5 switch in last one when I plugged it again all 
switches started blinking.
5. I unpluged 6th switch and all are stable again.
6.But 6th switch switch was still badly blinking.
7. I then removed one by one patchcord from 6th switch.
8. After removing from interface 7th and 8th, ,Suddenly 
switch started acting normal.
9. And then i plugged it in Uplink port and HURREY all things 
are working good.

I think Then machines on 6th Switch 7th and 8th switchport 
are effected from Virus or spyware.


What do you all say .

And if agreed with me please provide me some solution to 
clean such virus, and to control network storms.

Thanks
LIFE

--------------------------------------------------------------
-------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE 
The Norwich University program offers unparalleled Infosec 
management education and the case study affords you unmatched 
consulting experience. 
Tailor your education to your own professional goals with 
degree customizations including Emergency Management, 
Business Continuity Planning, Computer Emergency Response 
Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
--------------------------------------------------------------
-------------



---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
  • NETWORK BROADCST chetan . kamra (Mar 27)
    • RE: NETWORK BROADCST David Gillett (Mar 28)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]