RE: Sniffing out a firewall problem

[Thomas Ray <thomas.ray () tcud state tx us>]

There is plenty of sniffer software out there that is free. But if you
already know which NIC is causing this, why bother sniffing? just replace
the card. that's the fastest way to fix it. if you have multiple NIC's in
the box, replace one at a time until the problem goes away.

if the NIC is giving you a broadcast storm, it's usually defective. it could
also possibly be the patch cable too, so yes, it won't be easy to
troubleshoot.

how would I trblshoot it?
-replace all patch cables
  if the problem goes away, you know the cause

-replace NIC's one at a time
  if the problem goes away, you know the cause

-if your problem still exists after doing the above, and you have a large
network, it's time to start sniffing if you can't trace the problem to a
specific system

tom


> Reply-To: <ayoung () veros com>
> From: aryoung () veros com (Alan Young)
> To: <firewall-wizards () nfr com>
> Date: Wed, 31 Oct 2001 09:46:25 -0800
> Subject: [fw-wiz] Sniffing out a firewall problem.
>
> Hi All
> We have been experiencing a firewall failure due to a NIC card that is
> apparently chattering and creating an extremely high number of 
> excessive
> collisions.
>
> What is the best way to debug this?
> We need to install a sniffer program on a PC somewhere, right?
> I have checked and sniffer software appears to be very expensive?
> Is there freeware that is available for Win32?
>
> This is definitely a job for the wizards.
>
> Alan R. Young
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards