I am seeing similar traffic loads on my network at this hour, one of our MS SQL servers seemed to be sending a large amount of traffic out to the Internet. Still looking into it but too similar for me to avoid sending an e-mail. ------------------------------------------------- Kevin Welch kevinw@iserv.net Network Engineer The Iserv Company Desk Ph: 616.493.0577 Cell Ph: 616.437.3861 -----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Alex Rubenstein Sent: Saturday, January 25, 2003 1:04 AM To: hc Cc: nanog@merit.edu Subject: Re: Level3 routing issues? I dunno about that. But, I am seeing, in the last couple hours, all kinds of new traffic. like, customers who never get attacked or anything, all of a sudden: http://mrtg.nac.net/switch9.oct.nac.net/3865/switch9.oct.nac.net-3865.ht ml We are seeing this on ports all across out network -- nearly 1/2 our ports are in delta alarm right now. Anyone else? I will dig more to look at the traffic. On Sat, 25 Jan 2003, hc wrote:
Anyone seeing routing problems with Level3 at this hour? I just witnessed tons of prefixes behind level3's network withdraw. Any information on what is happening (if you know) would be great. Thanks!
-hc
-- Alex Rubenstein, AR97, K2AHR, alex@nac.net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --
Not just L3....Genuity is getting whacked. ELI is getting whacked. Somebody needs to be gelded. Andrew
On Sat, Jan 25, 2003 at 02:05:42AM -0500, Kevin Welch wrote:
I am seeing similar traffic loads on my network at this hour, one of our MS SQL servers seemed to be sending a large amount of traffic out to the Internet. Still looking into it but too similar for me to avoid sending an e-mail.
Same symptoms here. After disabling MS SQL, which required a reboot as the process didn't want to shut down normally, the traffic stopped. I found 3 boxes on our network that were generating massive amounts of traffic, all of which run MS SQL. -- Blaine Kahle blaine@binary.net 0x178AA0E0
MS SQL, or SQL Monitor? On Sat, 25 Jan 2003, Blaine Kahle wrote:
On Sat, Jan 25, 2003 at 02:05:42AM -0500, Kevin Welch wrote:
I am seeing similar traffic loads on my network at this hour, one of our MS SQL servers seemed to be sending a large amount of traffic out to the Internet. Still looking into it but too similar for me to avoid sending an e-mail.
Same symptoms here. After disabling MS SQL, which required a reboot as the process didn't want to shut down normally, the traffic stopped. I found 3 boxes on our network that were generating massive amounts of traffic, all of which run MS SQL.
-- Blaine Kahle blaine@binary.net 0x178AA0E0
-- Alex Rubenstein, AR97, K2AHR, alex@nac.net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --
I removed anything-SQL out of those sick microsoft boxes, and that put an end to the high traffic. As usual, servers had to be rebooted. Microsoft wins the Internet Disgrace Award of 2003. -hc Alex Rubenstein wrote:
MS SQL, or SQL Monitor?
On Sat, 25 Jan 2003, Blaine Kahle wrote:
On Sat, Jan 25, 2003 at 02:05:42AM -0500, Kevin Welch wrote:
I am seeing similar traffic loads on my network at this hour, one of our MS SQL servers seemed to be sending a large amount of traffic out to the Internet. Still looking into it but too similar for me to avoid sending an e-mail.
Same symptoms here. After disabling MS SQL, which required a reboot as the process didn't want to shut down normally, the traffic stopped. I found 3 boxes on our network that were generating massive amounts of traffic, all of which run MS SQL.
-- Blaine Kahle blaine@binary.net 0x178AA0E0
-- Alex Rubenstein, AR97, K2AHR, alex@nac.net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --
On Sat, Jan 25, 2003 at 02:57:16AM -0500, Alex Rubenstein wrote:
MS SQL, or SQL Monitor?
Are those two separate programs? I don't know; I'm not a windows guy. I just watched over the shoulders of a few other techs as they shut what appeared to be everything-MSSQL down. I just found the blinkenlights that were causing the problems, shut those lights off, and pointed the windows guys to the offending boxes :)
On Sat, 25 Jan 2003, Blaine Kahle wrote:
On Sat, Jan 25, 2003 at 02:05:42AM -0500, Kevin Welch wrote:
I am seeing similar traffic loads on my network at this hour, one of our MS SQL servers seemed to be sending a large amount of traffic out to the Internet. Still looking into it but too similar for me to avoid sending an e-mail.
Same symptoms here. After disabling MS SQL, which required a reboot as the process didn't want to shut down normally, the traffic stopped. I found 3 boxes on our network that were generating massive amounts of traffic, all of which run MS SQL.
-- Blaine Kahle blaine@binary.net 0x178AA0E0
-- Alex Rubenstein, AR97, K2AHR, alex@nac.net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --
-- Blaine Kahle blaine@binary.net 0x178AA0E0
Hey Blaine, On Sat, Jan 25, 2003 at 01:53:49AM -0600, Blaine Kahle wrote:
Same symptoms here. After disabling MS SQL, which required a reboot as the process didn't want to shut down normally, the traffic stopped. I found 3 boxes on our network that were generating massive amounts of traffic, all of which run MS SQL.
This may or may not prove useful: http://www.microsoft.com/Downloads/details.aspx?displaylang=en&FamilyID=DCFDCBE9-B4EB-4446-9BE7-2DE45CFA6A89 Cheers, --Adam -- Adam Korab
participants (7)
-
Adam Korab -
Alex Rubenstein -
Andrew Staples -
Blaine Kahle -
fingers -
hc -
Kevin Welch