Security Basics mailing list archives

NETWORK BROADCST


From: chetan.kamra () gmail com
Date: 25 Mar 2006 15:29:07 -0000

Hi All,
Today i faced a weired problem in network.

I have Current network 
                                                           
                  CISCO PIX
                      |
                                                                1 * D Link Switch 16ports(10/100/1000)
         |        |        |        |
6 * Dlink 24port (10/100) with 2(10/100/1000) Uplink Ports


I saw all my ports in all switch are blinking very badly.

We monitor them regularly but today i think the traffic was more or may be network storm

All Network Computers was not able to access any resources on same network or Internet.

They were not able to ping eachother.

I took folllowing steps to clean this situation.

1. Unplugged Switches from backbone Switch ie(D Link Switch 16ports(10/100/1000)
2. All switch ports lights were stable then.
3. Plugged them in one by one.
4. After 5 switch in last one when I plugged it again all switches started blinking.
5. I unpluged 6th switch and all are stable again.
6.But 6th switch switch was still badly blinking.
7. I then removed one by one patchcord from 6th switch.
8. After removing from interface 7th and 8th, ,Suddenly switch started acting normal.
9. And then i plugged it in Uplink port and HURREY all things are working good.

I think Then machines on 6th Switch 7th and 8th switchport are effected from Virus or spyware.


What do you all say .

And if agreed with me please provide me some solution to clean such virus, and to control network storms.

Thanks
LIFE

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: