Network Troubleshooting
This page contains a list of pages giving information about how to troubleshoot network problems.
For example, it could refer to pages saying "if you see a lot of ARP traffic, you might have machines infected with a virus on your network", or "if you are getting slow responses for HTTP requests, you should look for this on the network".
Beginner?
New to network troubleshooting? Read the /Overview.
"Mysterious" traffic
-
Some networks might have a lot of what Wireshark identifies as "Intel ANS probe" traffic. ANS is Intel's "Advanced Networking Services," which provides load balancing, aggregation, and failover for their line of NICs:
Virus behavior
- Several viruses send a lot of ARP traffic in an attempt to discover hosts to infect; see the ArpFlooding page.
Other sources of network flooding
- Broken or misconfigured software can also cause networks or firewalls to flood; see the "NetworkFlooding" page.
External links
In Cisco's Internetwork Troubleshooting Handbook, the Overview section provides a good general problem-solving model. The Principles of Troubleshooting at InetDaemon.Com shows how to apply the scientific method to network troubleshooting.