A Needle in a Hay Stack: Network Slow as if being flooded!

[cdarney]

We have a network made up of multiple vlans on multipe types of switches and hubs (2950, 2924, 2600, 1900, 5000, 4000). I'm not getting any critical errors on switches through CWSI however network starts to crawl. Seems to affect IP primarily. Will crawl for weeks then RSM (RSM on 5000) will eventually be overloaded and bring entire network to it's knees.

We are looking at port settings compared to device NIC settings. Windows Security Patches and Virus Updates have been applied.

Any ideas? Sniffing isn't turning anything up.

Any help would be appreciated. Thanks -- Darney

[pcanters]

Even though you have patches etc applied, It still sounds like Welchia virus to me.

Check in task manager of workstations if DLLhost is running...That'll tip you off that it is.

It exhibits the type of stuff that you are talking about.