Phantom upload SBS2003 Premium wISA installed

Discussion in 'Windows Small Business Server' started by Brian Tennant, Mar 22, 2005.

  1. I have SBS2003 premium w ISA installed
    It seem that my SBS is uploading data~ so much that OWA doesn't work and
    browsing is timing out. mail seems to be getting through but it is hard to
    say because I am disabling and enabling the WAN to try and see what the
    problem is.
    I do have the exchange server running though I've stopped the out going mail
    and there is still uploading.
    I talked to the DSL guys (Telco) and they say it is me uploading
    I have 5 IP addresses and when I disable the SBS box WAN the access is fast.
    When I re enable the WAN sometimes right away and sometimes after a couple
    minutes the same thing happens. the taskmanager says that .15% of the
    100Mbps is steadily going through. The DSL guys said it was about 170 k
    through my 128k upload bandwidth. (I am very close to the CO)

    Trend Micro CMS is up to date and reports nothing
    I changed all of the user passwords while on the LAN only.

    How can I find out what program is uploading data? (and Kill it)

    Brian Tennant, Mar 22, 2005
    1. Advertisements

  2. To be clear, because I didn't see the relevance of mentioning the 5 IP
    address's... when you say you have 5 IP address's (public) you aren't using
    them as your network workstation IP's correct?

    Dirk-Thomas Brown, Mar 22, 2005
    1. Advertisements

  3. Sorry, I added that saying the other four public IP's work great when the
    SBS box is offline. I was isolating the SBS. To be clear Public IP's on he
    WAN private on the LAN.
    Brian Tennant, Mar 23, 2005
  4. netstat -an

    What connections are established?
    SuperGumby [SBS MVP], Mar 23, 2005
  5. You can set ISA logging to log *all* traffic, instead of dropped packets. Do
    it for a short period, as the logfile might get large in a hurry.
    Les Connor [SBS Community Member - SBS MVP], Mar 23, 2005
  6. Brian Tennant

    Chris Guest

    It could also be a client machine on the LAN and not the SBS server itself.
    Pull the LAN tap and see if the problem goes away. If so, you may have an
    infected client machine (virus or spyware).

    Have you been surfing the web on the SBS server? If so, you may have spyware
    on it as well. Do you see any processes using alot of CPU time when the WAN
    gets congested?

    Chris, Mar 23, 2005
  7. Thanks ALL! It has stopped!

    As far as I can figure out ~
    I had isolated the server from the LAN and Stopped outgoing mail but I guess
    I was inpatient and not seeing instant results & I thought it was something
    else. Seems that a couple big mail messages (w tiff files) were being sent
    to a mailbox of a vendor that continually is maxed out. I froze the process
    and deleted the Email with NDRs and rebooted the system. I don't Know if
    this was it for sure but it seems to be the case. I have instructed the
    employees how to make tiffs into pdfs and thus reducing the file sizes.

    Thanks agian for the help!

    Brian Tennant, Mar 23, 2005
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.