RE: ISA has slowed down

  • From: Jim Harrison <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 29 Sep 2003 06:22:59 -0700

That's a real fine sniffer, but PSS can't use it or the output from it.
Open source applications can't be used for official support calls.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Mon, 29 Sep 2003 08:02:36 -0500
 "Quillman Shawn (RBNA/CIT1.1) *" <Shawn.Quillman@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org



Or got out and get Ethereal.  Darn fine freeware sniffer.
http://www.ethereal.com/  You have to load WinPCAP first, though, if you're
loading on a Windows box.

-Shawn

-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CIT1.1
38000 Hills Tech Drive
Farmington Hills, MI  48331
(248) 553-1164 (P)     (248) 848-2855 (F)
shawn.quillman@xxxxxxxxxxxx


-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Monday, September 29, 2003 8:55 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA has slowed down


http://www.ISAserver.org


Its part of the standard server distribution.
1. Properties of "My Network Places"
2. "Advanced", "Optional Networking Components"
3. "Management and Monitoring Tools", "Network Monitor Tools".

..if you want it for client OS's, you need the SMS version.
PSS is giving you access to that version, albeit time-bobmed.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Mon, 29 Sep 2003 08:59:52 +0200
 "William Robertson" <robertson.william@xxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org


Forgive me for hijacking this thread, but your comment about using NetMon on
the internal interface prompts my question...

Where does one get/purchase NetMon. I ask this because everytime I contact
PSS for any support they provide me with a TimeLimited version thereof,
which is great while it still works. But the damn thing keeps expiring and
this doesn't help me when I try to help myself.

Cheers
William R.

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: 27 September 2003 21:53 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA has slowed down

http://www.ISAserver.org


Hi Sachin,

The outbound traffic is most likely due to a worm. Run Netmon on the
internal interface and you'll see who the infected hosts are.

HTH,
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 


-----Original Message-----
From: Sachin Vaish [mailto:sachin.vaish@xxxxxxxxxx] 
Sent: Friday, September 26, 2003 5:01 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA has slowed down

http://www.ISAserver.org


Yes we have done this. We have noticed also terminal services no longer
works. But today we did something. We disabled all the users accessing
the internet and all of a sudden terminal services began to work and the
internet became very fast.

We are also noticing outbound traffic is massive. This maybe due to
virus?

Any chance of cleaning inbound and outbound ISA traffic?

Sachin Vaish
Vaioni Group Limited
m: 07811 214 679
t: 0870 160 0650
f: 0870 160 0651
w: http://www.vaioni.com 
a: 32 Leslie Hough Way
Manchester
M6 6AJ
 
The Nike "Swoosh" logo was designed by student Carolyn Davidson in 1964.
She was paid $35 Dollars.

-----Original Message-----
From: Ben Schorr [mailto:BMS@xxxxxxxxxxxxxxxx] 
Sent: 26 September 2003 10:02
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA has slowed down

http://www.ISAserver.org


Have you run Performance Monitor to see how your CPU, memory, disk usage
and network (for basics) are doing?


-Ben-
Ben M. Schorr
Director of Information Services
Damon Key Leong Kupchak Hastert
http://www.hawaiilawyer.com

 

-----Original Message-----
From: sachin vaish [mailto:sachin.vaish@xxxxxxxxxx] 
Sent: Thursday, September 25, 2003 22:45
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA has slowed down

http://www.ISAserver.org


HI

We have had ISA Server 2000 running for around 7 months with no trouble
at all. We know we have set this up correctly and are happy with th way
it has been running with around 50 users. Since August 2003 we have
added around 150 users, bring the total number of users up to 200 users.
Everything has been running fine since, up until 5 days ago. All the
users have seen a massive slowdown in internet speed. We have an 8MB
line to the internet so we know its not lack of bandwidth, even though
we have heavy web traffic. We were very confused because another one of
our sites which is much smaller had exactly the problem at the same
time, but thismay just be a coincidence. Since then we have found that
making the users install a firewall client and asking them to enable
"Use a proxy server for your LAN", in LAN Settings under Internet
options has improved the speed of the internet dramatically bringing the
services back to normal.

Our ISA setup is basic, as we are not in a corporate network. So there
is no domain, etc. But our ISA config is a little more complex, with MSN
and KAzaa enabled but restricted to useonly a percentage of the
bandwidth, but i dont see this as the problem as it has always been
there and has been used.

Can anyone shed light on what can be causing the problem?

Regards


Sachin

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
bms@xxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
sachin.vaish@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')

********************

IMPORTANT NOTICE:

 

This email (including any attachments) is meant only for the intended
recipient. It may also contain confidential and privileged information.
If you are not the intended recipient, any reliance on, use, disclosure,
distribution or copying of this email or attachments is strictly
prohibited. Please notify the sender immediately by email if you have
received this message by mistake and delete the email and all
attachments. 

 

Any views or opinions in this email are solely those of the author and
do not necessarily represent those of Vaioni Group Ltd (VGL) or its
associated group of companies (hereinafter referred to as "VNL & VML").
VGL accept no liability for the content of this email, or for the
consequences of any actions taken on the basis of the information
provided, unless that information is subsequently confirmed in writing.
Although every reasonable effort is made to keep its network free from
viruses, VGL accept no liability for any virus transmitted by this email
or any attachments and the recipient should use up-to-date virus
checking software. Email to or from this address may be subject to
interception or monitoring for operational reasons or for lawful
business practices. 

 

Vaioni Group Ltd is the parent company of the Vaioni Group of companies
and is registered in England & Wales No 4314251, with its address at 32
Leslie Hough Way, Salford University Business Park, Manchester, M6 6AJ

 

********************




------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
robertson.william@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

---------------------------------------------------------------------
Everything in this e-mail and attachments relating to the official 
business of Columbus Stainless is proprietary to the company. It is 
confidential, legally privileged and protected by law. Columbus 
Stainless does not own and endorse any other content. Views and 
opinions are those of the sender unless clearly stated as being that 
of Columbus Stainless. The person addressed in the e-mail is the sole 
authorised recipient.  Please notify the sender immediately if it has 
unintentionally reached you and do not read, disclose or use the 
content in any way. Whilst all reasonable steps are taken to ensure 
the accuracy and integrity of information and data transmitted 
electronically and to preserve the confidentiality thereof, no 
liability or responsibility whatsoever is accepted if information or 
data is,for whatever reason, corrupted or does not reach its intended
destination.
---------------------------------------------------------------------

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*

All mail from this domain is virus-scanned with RAV.
www.ravantivirus.com

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
shawn.quillman@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*

All mail from this domain is virus-scanned with RAV.
www.ravantivirus.com

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*



Other related posts: