Network Analyser Tools

[Jimathy]

I've got an issue with one or two users on a network who constantly complain of slow network file access, particularly in the afternoons.

The network currently comprises of two sites link via a VPN over an Enta ADSL connection. There are 4 files servers, two in each site, which use DFS-R on Windows Server 2003 R2.

Our hunch is that one of these users issue maybe that his workstation is trying to access a file/printer/something on the remote site when it shouldn't do. However without the correct tool we have no way of verifying this.

The main culprit application seems to be AutoCAD 2010 on Windows 7, both 64-bit. When the user saves or switches a file AutoCAD will hang for 5-30 seconds, like I said this only ever seems to happen in the afternoon.

 

[ruffneck]

wireshark

 

[PistolPete]

+1 for wireshark. Run a capture on the PC in question and get them to repeat what happens then take the capture away and see if that throws anything up

 

[Ev0]

Wireshark for network capture, maybe run filemon/regmon on the machine at the same time to see what file and reg operations are going on during the slowness.

 

[paradigm]

Whilst I too would use wireshark, if all he wants is a realtime view of the TCP stack then tcpview would be simpler to use.

 

[SMN]

Mirror all switchports to 0/48 (For example) and plumb that into an ntop box an see which naughty people are doing what. If you have the ability to do so, rrdtool could be useful also.