top connections/machines in realtime

[racy]

Hi There,

I had a big problem today with my Isa Server 2004.
My CPU was at 100 % and I check it out that it was the firewall service , not the web cache service.

I realized that it was a virus creating a lot of sessions and the Isa server was closing them according to the connection limits policy.

I tried to use isa server reports to discover my top Ten users/machines (it could be the infected machines) and the report didnt catch the information because the data is not avaliable for today day (it must process the data on a specific time).

How can I know my top connections/machines in realtime ?

Best Regards

Racy

 

[Knutern]

The way i did catch the sinners when i experienced the same once, was using the network monitor.

Cheers
Knutern

 

[racy]

Thank You Knutern,


I used ethereal and it works !!

Microsoft should improve their reports in Isa Server.


Thank you again



Best Regards

Racy