Need Help with server network traffic

Hello,

I have been facing issues with my server network where my users are complaining about server hangs after accessing shared files from the folders. I saw my server and utilization of network ,RAM and CPU is average 15-30% and seems everything normal but I am not able to find what is the cause of this.

When I ping my server it shows lots of traffic . For example time= 57ms ,time=124ms,time=17ms

I dont know how to resolve this and it would be really great if you could help me in this matter.

Thanks in advance.

July 10th, 2015 12:21am

Hello Support,

I am using Windows server 2008 R2 .

Free Windows Admin Tool Kit Click here and download it now
July 10th, 2015 12:23am

Hi MOHD,

This issue may be caused by several conditions.

First, it is recommended that check if the server has reached the maximum access number. We may add the access number to see if the issue will disappear.

Second, we may check the resource monitor in the server, see the value of highest active time. If the value is high, this issue will happen.

Third, we may check if the network exist ARP spoofing. ARP spoofing would be easy to detect if you happen to know the MAC address of the default gateway. We may use arp a at a command prompt to make sure you had the right Mac address of the default gateway.

If you dont know the Mac address, we may use network monitor to catch packetsStart a network capture; Clear the ARP cache of any entries for the default gateway ("arp -d 192.168.0.1"); Initiate a connection to something on the other side of the default gateway ("ping microsoft.com"); Stop the capture and look to see if you got more than one ARP response when you ARP had for the default gateway.

More information about detecting ARP spoofing attacks:

http://blogs.technet.com/b/neilcar/archive/2007/07/05/detecting-arp-spoofing-attacks.aspx

Forth, we may use network monitor to check if the network exist network loop.

If you want to download the network monitor, you may click the link:

Network monitor download link:

https://www.microsoft.com/en-us/download/details.aspx?id=4865

Best regards,

Anne He

July 12th, 2015 11:22pm

Hello,

Thanks for your reply and could you please help me to do the following ,

1. How to add the access number to see if the issue will disappear because you said server has reached the maximum access number. I am unable to find out this on internet to increase the access number.

2. I did not get any result when I use "arp -a" in CMD and just to inform you that this domain is not on the internet.

Also would like to inform you that I have done broadcom teaming with the help of broadcom teaming software. It shows 6 gbps network.

Please help me to resolve this issue.

Thanks a lot in advance.

Free Windows Admin Tool Kit Click here and download it now
August 4th, 2015 1:31pm

There are multiple components involved when accessing file server and in your scenario it is advisable to troubleshoot every major component involved such as

a) Operating System both source (client) and target (file server)

b) Does the issue happens when file share accessed from different machines ?

c) can you reproduce issue with different user accounts on same machine and from different machines ?

d) can you reproduce issue with  Safe mode with networking

e) can you break the share (during off peak hours) and recreate the share and test ?

f) does the issue happens when accessing specific share --> specific file ? or specific share --> any file ?

g) when does the hang occurs ?, when accessing folder or when trying to copy or accessing file

h) Netmon or wireshark trace will be start of troubleshooting to isolate the traffic

e) any network tool ran on the switch should tell you whats happening on your network.

August 6th, 2015 2:18am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics