Possible Virus outbreak! Please help

[brettums]

my network is subdivided into 12 VLANs. One of the VLANS seems to be sluggish..... Basically ALL PCs on this network have been doing intensive memory spikes. I'm kinda dead in the water here.... I'm not sure what to look for, what tool to use or what....

In the mean time I've tried the following and came up with a temporarily solution..... First tried to use ethereal and sniffed packets on the subnet but again, I got info, but it's like reading a foreign language.... In stead I've ended up turn machines off whih run on this subnet. Any other recommendations?

-Brett

 

[vipergg]

Hopefully you have managable switches otherwise you are SOL and will just have to start pulling users one at a time . If the switch is managable clear the counters and start looking for someone who is doing a lot more traffic and or broadcasts than anyone else . If you have a layer 3 device , cisco router you can turn on ip route cache (ip route-cache flow) on the interfaces that feed your vlans . To look at the flow and see what conversations are happening and if certain addresses look like they are going to addressess they should be just do the command "show ip cache flow" , this will give you a whole table of data flows to look at and see if anything pops out at you.

 

[brettums]

I have two 3750 switches which have been turned on for Layer 3 switching......

I'm trying to do the commands you had suggested.... I can't get any to work.... (I apologize I'm a novice at this).