Re: Seriously Wierd Issue

2011-03-17 Thread Kurt Buff
...@activenetwerx.com] Sent: Wednesday, March 16, 2011 8:52 PM To: NT System Admin Issues Subject: RE: Seriously Wierd Issue Turns out there is an agent on every workstation that does a heartbeat check every 5 secs back to the main IP and every 5 mins to update processor, memory, disk stats, etc

Re: Seriously Wierd Issue

2011-03-17 Thread Richard Stovall
813-341-1270 Fax -Original Message- From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Wednesday, March 16, 2011 8:52 PM To: NT System Admin Issues Subject: RE: Seriously Wierd Issue Turns out there is an agent on every workstation that does a heartbeat check

Re: Seriously Wierd Issue

2011-03-17 Thread Kurt Buff
: Seriously Wierd Issue Turns out there is an agent on every workstation that does a heartbeat check every 5 secs back to the main IP and every 5 mins to update processor, memory, disk stats, etc Lol, me thinks that setting was implemented by a software designer that never scaled

RE: Seriously Wierd Issue

2011-03-16 Thread James Hill
captures, one during the day when the problem occurs and one after 4 or 5 pm. From: gswe...@acts360.com [mailto:gswe...@acts360.com] Sent: Wednesday, 16 March 2011 1:38 PM To: NT System Admin Issues Subject: RE: Seriously Wierd Issue Yeah I am going to connect one to the main switch

RE: Seriously Wierd Issue

2011-03-16 Thread gsweers
, March 16, 2011 2:04 AM To: NT System Admin Issues Subject: RE: Seriously Wierd Issue I'd run it on a PC first. Capture the traffic when you try to browse to a web page then have a look through the capture. You'll be able to see when it resolves the dns address and basically what happens after

RE: Seriously Wierd Issue

2011-03-16 Thread Ziots, Edward
...@lifespan.org Cell:401-639-3505 From: gswe...@acts360.com [mailto:gswe...@acts360.com] Sent: Wednesday, March 16, 2011 9:17 AM To: NT System Admin Issues Subject: RE: Seriously Wierd Issue Good idea.. Limits the traffic down so I can see it easier. Will let you know. Thanks! Greg

RE: Seriously Wierd Issue

2011-03-16 Thread gsweers
To: NT System Admin Issues Subject: RE: Seriously Wierd Issue You can also install Fiddler on the PC Client, and look at the http traffic being sent and the HTTP error codes, but I agree looking at Layer 3 traffic is first, before looking at Layer 7. Z Edward E. Ziots CISSP, Network +, Security

RE: Seriously Wierd Issue

2011-03-16 Thread Joseph L. Casale
Turns out there is an agent on every workstation that does a heartbeat check every 5 secs back to the main IP and every 5 mins to update processor, memory, disk stats, etc Lol, me thinks that setting was implemented by a software designer that never scaled past his own devel box:) ~ Finally,

RE: Seriously Wierd Issue

2011-03-16 Thread gsweers
Brandon, FLĀ  33509 813-657-0849 Office 813-758-6850 Cell 813-341-1270 Fax -Original Message- From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Wednesday, March 16, 2011 8:52 PM To: NT System Admin Issues Subject: RE: Seriously Wierd Issue Turns out there is an agent

RE: Seriously Wierd Issue

2011-03-16 Thread James Hill
: RE: Seriously Wierd Issue Ok here is what we found... All of the workstation traffic for port 80 was getting timed out connecting to an IP address. Turns out there is an agent on every workstation that does a heartbeat check every 5 secs back to the main IP and every 5 mins to update

RE: Seriously Wierd Issue

2011-03-16 Thread gsweers
, March 16, 2011 9:41 PM To: NT System Admin Issues Subject: RE: Seriously Wierd Issue Does anyone have suggestion on a site, course, material on reading in detail the information you get from Wireshark. I see some huge potential in diagnosing errors/issues but I will be honest and say that most

Re: Seriously Wierd Issue

2011-03-15 Thread Christopher Bodnar
Have you connected a machine directly to the cable modem and tested? Same issue during the day? Chris Bodnar, MCSE Technical Support III Distributed Systems Service Delivery - Intel Services Guardian Life Insurance Company of America Email: christopher_bod...@glic.com Phone: 610-807-6459 Fax:

RE: Seriously Wierd Issue

2011-03-15 Thread Kim Longenbaugh
I think you're on the right track looking at the firewall, since the problem doesn't happen going to internal sites, which don't go across it. Maybe the firewall is doing some sort of packet inspection which is taking some time to complete but doesn't put much load on it. It's odd that the

RE: Seriously Wierd Issue

2011-03-15 Thread gsweers
To: NT System Admin Issues Subject: RE: Seriously Wierd Issue I think you're on the right track looking at the firewall, since the problem doesn't happen going to internal sites, which don't go across it. Maybe the firewall is doing some sort of packet inspection which is taking some time to complete

RE: Seriously Wierd Issue

2011-03-15 Thread James Hill
Have you run wireshark on one of the pc's? It might help. Might not too but it's an avenue to try. From: gswe...@acts360.com [mailto:gswe...@acts360.com] Sent: Wednesday, 16 March 2011 12:40 PM To: NT System Admin Issues Subject: RE: Seriously Wierd Issue Yeah we have plugged

RE: Seriously Wierd Issue

2011-03-15 Thread gsweers
Fax From: James Hill [mailto:j.h...@coffeeclub.com.au] Sent: Tuesday, March 15, 2011 11:04 PM To: NT System Admin Issues Subject: RE: Seriously Wierd Issue Have you run wireshark on one of the pc's? It might help. Might not too but it's an avenue to try. From: gswe...@acts360.com [mailto:gswe