Networking IP issue

[mortus]

I am having troubles with a network I setup. I had them setup as DHCP and everything was working fine for about four months. Then problems started happening. While this particular PC was connected it would flood the network (All of the lights on the switch would light up and blink frequently). The server IP would not stick defaulting back to 0.0.0.0, as did all the other PC's connected to the switch. I assigned static IP's and sitll came up with nothing. After rebooting the server and all of the PC's and downing the switch several times, I finally got a solid static IP scheme. Everything seemed to be back to normal for a few days. Now after about 2 days later the same thing happened. I am not sure if this is virus related, but corporate NAV is not picking it up if it is. All of the PC's are giving back a 0.0.0.0 or IP address is in use (No matter what IP I assign to the systems). This also happened about 3 weeks prior to this latest problem, but after sevral hours of rebooting the systems it came back to normal. Thanks for the help

[Agent_Embryo]

Sounds like it could be a Virus or a Trojan that caused the broadcasting. Try scanning the PCs with The Cleaner and Spybot Search & Destroy. It also sounds like something is corrupting the IP stack on the computers, but I could be wrong. What kind of switch is it? Maybe it could have something to do with it.

[mortus]

It is a new switch from Netgear. I think you are right about the trojan/virus. I asked someone else and they said the same thing. Thanks for your help.

[Bill in SD, CA]

The Cleaner

Bill

[mortus]

It was as symantec calls it the w32.opaserv virus. I also had the Eek virus in there. Both were from an old PC which we hooked up weeks ago. Took awhile to clean it off of the network and get everyone back to normal. Thanks for the help.

[mortus]

I ran the cleaner, updated Nav on all the PC's, ran spybot and even ran trend micro. I am getting an IP on the PC's and it has been working for several weeks consistently. Yesterday this happened again. The Local IP's stick, and the Server's IP sticks, but network browsing is slower then normal. Looking at the computers on the network is slow, and some of them are not showing up. Only about four of the PC's see eachother consistently. It is a netgear wireless router with DHCP turned off, and the IP schemes are correct without any of them conflicting. The wireless router ties into a netgear 16 port switch where all of the PC's and server is connected. Thanks for the help

[Mickwish]

A failing NIC can flood the network with packets and cause chaos. As can a failing DHCP server.

If you suspect a particular NIC, remove it form the network for a short while and see if the problem resolves, then reintroduce it and see what happens. If it's the router, the only solution is to try another one and see if it helps.

Still wonder about trojans though. Did you try Symantec's online check? It's definitely up-to-date.

Cheers
Mick

[John Prophet]

could it be what they call a 'chattering nic'?

[Mickwish]

The term is "blathering" I think, JP. Sort of like me.

Cheers
Mick

[mortus]

It all started from a chattering NIC, but I resolved that months ago. The network was flooded, and IP's were not sticking. Perhaps it is the Router though. I will definately take it off of the network and see if the problem persists. I will update this thread tomorrow with the results. Thanks for the help.