FTP Service Floods the T1

[wooddsw]

Just encountered a problem today with our FTP site exceeding our T1 bandwidth capacity and impacting all connectivity. When the FTP service is stopped processing goes back to normal. This FTP site is used for SalesLogix CRM and there are no files in any of the directories where staging of synchronization occurs.

I'm curious is anyone has suggestion for troubleshooting this. I've done some performance monitor statistics but not sure if I'm looking at the righ counter.

ie.
CPU avg 7%
Network outbound packets is about 30%
FPT bytes sent/sec avg 211575
Current Connections avg 62 but no one is on it.

External ping response of the firewals avgs 1145ms with 25% packet loss with FTP site started

External ping response of the firewall avg 15ms with 0 packet loss without FTP site stopped.

Any other suggestions for how to troubleshoot this would be greatly appreciated.

 

[itsp1965]

Have you checked your event logs, IIS logs, Firewall logs for a lot invalid logon requests to your FTP site. Check the FTP directory structure for any folders/files that haven't been there before. Have someone perform accounting on your routers to check which IP is generating the most traffic against your FTP site. Hope this helps.