0
For some reason I have a very slow network (~10kbps over a 100mbps network). It only happens in office hours which leads me to believe that someone is bottlenecking the network. I need to find out who it is. I have approximately 60 nodes on the network and all PCs are connected to a main switch which then connects to our main router. I am interested in any suggestions on how to find out the cause of this very slow network. I have heard of using wireshark but I am not sure how to use it at all so any suggestions would be very helpful and links to any resources where I could learn would be invaluable. Thanks in advance.
1Turn off the router and see who complains about utorrent not working ;) – DavidPostill – 2015-10-09T10:46:07.310
Possible duplicates: Monitor and control internet traffic in a small office, Software to monitor internet usage, Desktop Internet traffic measurement software and PC based router/gateway that supports Lawful Intercept?
– DavidPostill – 2015-10-09T10:51:58.560Horses for courses. Wireshark is not an appropriate tool to use as the first step in diagnosing performance issues. Looking at basic traffic stats and counters on your router is the place to start. – qasdfdsaq – 2015-10-09T11:46:05.860
@DavidPostill, good reply I like it, ive also had a look at the links and there is some good advice. – Anthony Broadbent – 2015-10-09T12:56:50.297
@qasdfdsaq I probably should have said but the internet connection is working fine. If I plug a device into the router there is no speed issue. This is just on the internal network. – Anthony Broadbent – 2015-10-09T12:56:54.200
In that case (sorry, everyone else seems to have assumed internet-related problem) start off with basic network diagnostics. Between which points is it slow? What is the latency, packet loss, link rate and mode and other basic performance figures? – qasdfdsaq – 2015-10-09T16:16:36.850
Could it be an ARP storm or something like that, which only affects the LAN? That should be visible without any additional setup by just sniffing LAN traffic, as the issue would be caused by excess broadcast traffic flooding the LAN.
– zagrimsan – 2015-10-10T13:08:17.553