RE: [afnog]Slow internet access

["Badru Ntege" <ntegeb at one2net.co.ug>]

Hi Cletus

The assumption here is that you are an end user and not a provider, can you
please clarify for if you are a provider I think the solution would be to
monitor your link for any unsual traffic.  You can do this using either
sniffer or ntop, if it is a virus you will find a few users using up most of
your available bandwidth.  Obviously the first move would then be to isolate
these to return your network to a reasonable service.

And pass on the good advise about how they need to clean their network
before reconnecting them.  Following that you could look at the traffic you
captured and should be able to place filters on your network or the provider
can place filters at their end to prevent external traffic congesting the
link.



-----Original Message-----
From: afnog-bounces at afnog.org [mailto:afnog-bounces at afnog.org]On Behalf
Of Mensah K. Agbessitse
Sent: Tuesday, September 09, 2003 6:47 PM
To: Cletus Okolie; woody at pch.net
Cc: afnog at afnog.org
Subject: Re: [afnog]Slow internet access


Hi Cletus,

My best site for antivirus software is http://housecall.trendmicro.com or
http://housecall.antivirus.com and do online scan. It will detect all
viruses on your PC.

For msblast which is running ping command in the background, you should be
seeing the byte sent(BS) for your connection on the Ethernet card higher
than the byte received(BR) in other words, BS > BR even if you are not
sending anything.

Thank You,

Bruno.


----- Original Message -----
From: "Cletus Okolie" <cletus_okolie at yahoo.com>
To: <woody at pch.net>
Cc: <afnog at afnog.org>
Sent: Tuesday, September 09, 2003 12:44 PM
Subject: [afnog]Slow internet access


> Hello Bill,
> My connection to the net suddenly became very slow
> such that it takes close to 3mins to open just a yahoo
> page. I complined to my ISP( Newskies UK) and was told
> by their agent here in Nigeria that it has to do with
> a virus msblast on the system.
> pls can anyone help out on how i can solve this
> problem.
>
> regards
> cletus
>
>
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
> __________________________________________________
> This is the Africa Network Operators' Group(AfNOG)
> technical discussion list.
> The AfNOG website is: <http://www.afnog.org>
>

__________________________________________________
This is the Africa Network Operators' Group(AfNOG)
technical discussion list.
The AfNOG website is: <http://www.afnog.org>
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.515 / Virus Database: 313 - Release Date: 9/1/2003

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.515 / Virus Database: 313 - Release Date: 9/1/2003

__________________________________________________
This is the Africa Network Operators' Group(AfNOG) 
technical discussion list.
The AfNOG website is: <http://www.afnog.org>