Anyone seen what Loveletter can do to a network? Had a meltdown today - a couple of infected PCs were trying to scan network drives on Netware servers... at some points the MSM saw 14Gbps in/out of traffic, in (even with a maxed port channel config which we had its rated at 8Gbps in full-duplex!). Amazingly enough, the network was still alive (barely) despite all that was going on - IPX and IP (NCP) storms from the PCs... took a while to figure out cause some PCs got updated Netware client sofware in the morning. It took a whole of Sniffer work with span to figure out which were the culprits - got the lingering feeling there's more out there though. Average traffic that passes the MSMs are about 1.5-2Gbps on normal days. Wondering what others have experienced - we had no auto-generation of tons of emails to deal with, yet it was enough to cause tons of traffic. In each case - we would see a lot of Requests made on the Netware monitor by the infected PC/user, with no open files or data transfer actually taking place. Regards, Adrian _________________________________ FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
