Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm not a network profressional, so please excuse any wrong language.

I was debugging why my DNS traffic was a constant 160Kbps on our corporate network. I opened up a wireshark trace, and I see one PC of a coworker broadcasting HTTP [RST] packets to one of our DMZ servers at the rate of 1000 a second.

He restarted his machine, and as soon as it went offline, the server started broadcasting [DUP] [ACK] packets, until he came back online. It then resumed the HTTP [RST] packets.

Apparently this server has been doing this kind of behavior since it went live. I believe it did this with a printer and an access point as well.

Can anyone explain why this behavior is occurring? Any solutions?

The initial research was done because there have been "bandwidth issues" and I wonder if this is contributing.

share|improve this question
    
Sounds like the server needs to be reinstalled to me. –  Harry Johnston Jun 8 '12 at 23:54
    
Broadcasting? Are you absolutely sure that it's broadcasting? What's the destination MAC address on the frame? –  Shane Madden Jun 9 '12 at 0:01
    
Well, we found out it was actually a Lexmark printer that was displaying the IP of a server... Not sure if it was Broadcast or not, but I figured it was because I could see the packets from my PC with Wireshark. –  IronicMuffin Jun 11 '12 at 13:32

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.