|
Question : Protocol analysing problem
|
|
Ok gurus,
I am attempting to find a solution that will assist me in troubleshooting network traffic congestion. Ideally I would like to be able to monitor Source and Destination addresses, protocol used, port, and anything else you can think of that would aid me in determining what network node is producing the most traffic, then what type of traffic and to where.
Now before you think of a snap answer, there are a few small issues that are the cause of my problems
- 2 Gateways (one Cisco 806 and one ISA server)
- This is a switched network and unfortunately these are unmanaged switches(HP Procurve 2324)
- Often times problems are intermittent so the solution needs to monitor traffic in real-time
- All operating systems are Windows
So far each software package I have tried will only allow me to see broadcast packets (ie. ARP / UDP or all packets to and from the monitoring station). And that does me no good.
Maybe there is something out there that includes a remote agent?
Anyway, any help would be greatly appreciated
Omogg
|
Answer : Protocol analysing problem
|
|
omogg,
Sorry, I didn't mean to imply anywhere that you would not know what a hub is.
It's just that <I'm> confused about seeing this behavior from a hub, didn't think it should be like that. And since I've read about some problems with hubs acting as switches in the past I thought maybe changing to a different brand/model could work (that was the solution for the other guy).
You seem to have tested everything I can think of... Promiscuous thing was gonna be my next guess yet the changing NIC test eliminated that as probable cause.. But I do have one remark: The "agreed upon description of your network setup" does not contain 2 hubs, but rather 1 hub and 1 switches, yet you state that "Tried laptop in several different ports on both hubs" ?
What second hub, are there two hubs linked together where 1 hub is now drawn?
And what OS is on the laptop?
The D-Link DE-816TP seems fine, I don't know of any probs with it except the general thing that hubs might be weird about connecting different speed ports (i.e. info from 10 Mbit ports <---> 100 Mbit ports, autosensing or not), which is probably not the case for you..
|
|
|
|
|
