Help please!

[Shaun Martin]

I play an online game and before break, everything worked fine.  There was no significant packet loss / latency issues with the application pre break; however, since returning from break, the application is constantly losing connection.  Did SIUE change anything with their network?  This is very frustrating.

I have a linksys router in my room that I have used pre break and post break.  The settings were not changed other than the WEP.  I called linksys and we determined that it is not the router's problem since we tested the application out while I was directly connected to SIUE's network and I still experienced this problem.

If there is ANYTHING I could do to change this, PLEASE LET ME KNOW.

Thank you very much,
Shaun

[Michael Kennedy]

martins wrote:
Did SIUE change anything with their network?

Yep.  They added a a ton more clients.  I bet the new freshmen are all taking advantage of the new speed they've been given and will soon accumulate enough porn to lay off the downloading for a while.

[PatelA]

a ton more clients? Where exactly did they put them?  Before break approximately 3000 people lived on campus and after break approximately 3000 live on campus.  At 3am there's no other significant drain on bandwidth.  Why am I still downloading at 3-5k/sec with AIM disconnecting every 10 minutes, and low bandwidth sites like holdempoker.com keep booting me off for having a slow connection?  

And again nothing has changed in my computer setup.

[raptor]

I've seen the bandwith numbers, I can assure you that there is a  heck of a lot of traffic during the day and into the night untill about 5 or 6 am.

Scott

[PatelA]

fantastic... what changed?

[raptor]

As far as I know nothing, that's what I saw last semester.  Its just heavy bandwith usage.

Scott

[Peter Motyka]

Does OIT happen run MRTG against the edge routers?  That might help users schedule their high bandwidth usage around peak times.  I like MRTG, it makes pretty pictures: http://motyka.org/mrtg/

[Shaun Martin]

I just ran a speed test just now.  I never got numbers like this last semester.  :-(

Results:

26 kbps DL speed
102 kbps upload speed


...

[Peter Motyka]

I'd be curious to see what the speed rating is elsewhere on campus.  Try the library or labs to see if QoS policies are throttling traffic to/from the reshalls.

[Shaun Martin]

First of all,  english please :-)

Secondly, I tested the computer labs in Prairie and they seem to be working fine.

This entire weekend, the internet has been horrible for me.  I've been experiencing alot of lag spikes.  It looks like things are going well and then BAM, huge lag spike. :-/

For example:

The ping on my VoIP program goes from a constant 41ish to pinging anywhere from 1000 up to 10000 lol.  Would they have changed anything within their networking?  Maybe a security measure or something?  I really do not kow that much about networking.

I took my laptop to a buddies room and plugged into his data jack and things worked fine.  I also tried the study lounge and things worked fine there also.  Could something be wrong with the data jack in my room?  Please help oh knowledgable CAOS people.  :-D

[raptor]

Its possible, but if your getting a connection its highly unlikely that your jack is causing slow speeds.  Most likely ( and I know i keep saying this sorry but,) its high bandwith usage from people who are on the same switch as you.  From what I understand they have been working on getting Fiber Optic line connected out in the dorms and CV, but I don't think its been finished yet.

Scott

[Shaun Martin]

Even during the weekend at say... around 3-4ish am?  :-?

[Geoff Schreiber]

Actually, it's quite possible it's the jack...  Your jack may have lost full duplex mode which then means it is possible for both the switch and the connected device to sense the wire and transmit at exactly the same time and result in a collision. Collisions can cause runts, FCS, and alignment errors due to the frame not being completely copied to the wire, which results in fragmented frames. It may be an issue with the cabling which causes marginal performance and high packet loss/collision counts.  Make sure your network adapter is set to auto-negotiate, as a computer set to full and a switch to half or vice-versa will also cause performance drops.  If you hook up to the other jack in your dorm room what happens? There's no guarantee your "buddy's" room is on the same switch as yours, nor that the other jack in your room is either, but it's more likely that way...

[Shaun Martin]

My network card is set to auto negotiate and I'm still experiencing the same problem while directly connected?  I just want to make sure that it's the jack for sure because I don't want to be charged 55 dollars for having the tech show up and nothing wrong with it.

[Geoff Schreiber]

Have you ran HiJackThis to make sure you don't have any spyware draining your connection?

[Shaun Martin]

I've ran spybot and Adaware.  Nothing major came up that would be sucking my bandwidth.

[raptor]

There are a few pain in the butt spyware apps that adaware and spybot won't detect and they DEFINATELY suck osme serious bandwidth.  The only way to detect them would be Hijack This.    here is a link, but be careful this is a powerfull app.

http://www.merijn.org/files/hijackthis.zip

[Geoff Schreiber]

raptor is right - if you'll run that and post the log, we can help sort through them...I'll be surprised if it doesn't show part of your problem...

[Shaun Martin]

k, giving it a try now.

I'll post the log afterwards.

EDIT: Here is the log:

Logfile of HijackThis v1.99.1
Scan saved at 5:40:11 PM, on 1/18/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\AIM95\aim.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Shaun\My Documents\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.camelotherald.com/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Common Files\Network Associates\TalkBack\TBMon.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [AIM (R)] C:\PROGRA~1\AIM95\aim.exe -cnetwait.odl
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:\Program Files\VisualRoute\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: AIM (R) - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM95\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

[Shaun Martin]

bump

[Geoff Schreiber]

Shaun, I don't see anything really out of the ordinary, there's a bunch of junk that doesn't *need* to be there, but nothing that should slow you down...  Did you install any new software over break? Updates to McAfee or anything?

[Shaun Martin]

I left my desktop in my dorm room over break so I didn't add/remove anything from it.

There's a technician from STC coming here today to check out the data jack.  I'll let you know how that goes.

EDIT:

K, He came and checked the data jack with some device.  He said it was running fine and left...

 

[raptor]

OK,

I noticed you are running McAfee.  The university (through OIT) now offers Sophos.  In fact it's somewhat illegal to still be using McAfee.  I know there are some people who do not like Sophos (Lamonica).  Though it does take a little more system resources (about 10meg's memory) there have been several instances where upon installation viruses were detected that McAfee completely looked over.

It is available for download at www.siue.edu/anti-virus

In your case, it is also quite possible that one of your services Windows in running could have been hijacked.  I have seen more than one instance of lsass and svchost having been hijacked and sucking bandwith.  I also noticed you have an HP machine and the Hp Software Update service was running.  Though it is unlikely, that app could be downloading automatic updates causing your lack of bandwidth.  

The best way to see if it is your machine or if its network traffic etc, would be too bring another macine in (a friends or a laptop) that you know is not having problems and see what it does.

*Techinical Note* The thingy the STC tested your jack with is probably whats known as a fluke.

If you have any questions let me know.

Scott

[Geoff Schreiber]

It's only illegal if the version of McAfee this student is running isn't his copy, but the university's....

Also, Fluke is a manufacturer of said testing devices, that's not what the devices are called... There's no telling what he used to test the jack...there's too many options.

[Shaun Martin]

The HP stuff is for my printer and the McAfee was downloaded from SIUE when they offered it.  I'll try switching to sophos and see what happens.

[PatelA]

I'm in the labs at the EB and Science building this semester and they run fine.  The labs in Woodland aren't all that great but the speeds are definately higher than in my room.

This is ridiculous.  When I built my new computer I didn't put a dialup modem in there since it wasn't necessary.  This weekend I'm going to put a modem in it from another computer and just dial into the SIU isp because it's going to run faster.

I've got my residents circulating a petition complaining about the internet in Woodland.

Anyone else interested in passing this through their respective areas?

[Shaun Martin]

I'd be willing to send a petition around in Prairie.  Just send me the info at shmarti@siue.edu or if you are going to the CAOS meeting tonight, I will be there.

[Bryan]

as much fun as petitions can be, it's not going to do a damn bit of good.  SIUE won't do anything unless there is a good reason to do so.  As I recall the only good reason to ever do anything involved money, and spending it usually wasn't an option.

[PatelA]

When you know the right people, you can get anything done.  Get 500 residents to sign a petition complaining about the poor internet services and you'll get people to listen to you.