Windows 2000 server causing network crash

[rcertz]

I have a Win2k Server sp4 that has all of a sudden begun broacast storming the network every 90 min or so. I reboot it and all is fine for roughly 90 min. Then the switch lights up like a christmas tree again. I plug the cat5 into anther port, same thing. I changed the nic, and all patches are applied. The only things hosting are Exchange2000, and an oracle database. There are no event logs so I don't know where to go next. When the server crashes, it take the enrire wan with it. Site to site vpns stop working, internet, everything. Somebody please push me in the right directon!!!

 

[itecs]

Do you have a Network Sniffer application that could help you isolate the network traffic causing the crash? Have you considered corruption or infection of a virus?

 

[rcertz]

I did turn up w32/sdbot.worm, and cleaned and deleted it. Although the symptoms dont seem to go with the problem I am having. Currently Im scanning a second time. I have not thought about a corruption. Any advise on a good sniffer to use?

 

[rcertz]

I think I found the fix. The server has been up for 12 hours. I will post my resolution after 24 hours of stability.

 

[rcertz]

Changing the nic did nothing. Same with trying a different port in the switch. After running symantec antivirus I turned up 2 instances w32/sdbot.worm, I erradicated the worm. However I still had the issue of crashing. There was no data corruption either. Pestpatrol turned up nothing as well. However after running Active Ports,

http://www.protect-me.com/freeware.html

I noticed two applications running connecting to unknown ip addresses on questionable ports. I ended the processes. Renamed the .exe so they would not run, then rebooted. That seemed to stabalize the system. I also tightened the security in my firewall futher. It has been fine for over 24 hours as of this typing. Knock on wood.