Products

Evoq Content Overview Content Creation Workflow Asset Management Mobile Responsive Personalization Content Analytics SEO Integrations Security Website PerformanceEvoq Engage Overview Community Management  Dashboard  Analytics  Member Profile Gamification Advocate Marketing Community Engagement  Ideas  Answers  Discussions  Groups  Wikis  Events Mobile ReadyDNN Support PackagesEvoq: CMS FeaturesEvoq OnDemandCompare DNN's CMS Products

Solutions

Content Management SystemMulti-Channel PublishingDigital MarketingOnline Community ManagementIntranet Software SolutionOur CustomersPrime

Resources

Test DrivesSchedule A DemoDocumentation CenterWebinarsWhite PapersProduct ManualsRequest PricingData SheetsCase StudiesEvoq Preferred Products Content Management Ecommerce Forms Identity Management and Authentication Site Management Social Themes

Partners

DNN Partners Partner Directory Become a DNN Partner Partner Program Overview  Hosting  Implementation  ISV  Training  Competencies

Community

Participate Ask a Question Forums Community Showcase DNN MVP  Program Overview  Lifetime MVPs  Honorary MVPs Subscribe to DNN Digest Advisory Groups  Awareness Advisory Group  Developer Advisory Group  Partner Advisory Group  Technology Advisory GroupLearn Documentation Wiki Community Blog Video Library Project History Development RoadmapDownload DNN Store Language Packs Manuals Nightly BuildsSecurity Policies Security Center

Blog

About

News Press Releases News Coverage Press KitCareersContact DNN

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Erratic Webserver Traffic DNN6 and IIS7Erratic Webserver Traffic DNN6 and IIS7
Previous
 
Next
New Post
2/15/2012 5:18 PM
 
CBOSS Inc.


Joined: 3/31/2010
Posts: 466

I have been looking at this issue since my DNN 6 upgrades. I did some research that pointed me to capture the network traffic using Microsoft Network Monitor 3.4

I noticed that on my webhost is communicating heavily with another internal IP on mynetwork. Using both TCP and TDS protocols… I am not accusing DNN6 (although it might be the issue... not sure)

Below are the details I captured… you will notice that the process w3wp.exe is the culprit and there are 18 instances of it running:

3126   4:54:56 PM 2/15/2012 2.1671876     w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive]Flags=...A...., SrcPort=63149, DstPort=1433, PayloadLen=1, Seq=3886024385 - 3886024386, Ack=3766684642, Win=63914  {TCP:133, IPv4:11}

3127   4:54:56 PM 2/15/2012 2.1672758     w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive]Flags=...A...., SrcPort=62963, DstPort=1433, PayloadLen=1, Seq=1444766245 - 1444766246, Ack=1965770833, Win=64781  {TCP:134, IPv4:11}

3129   4:54:56 PM 2/15/2012 2.1675016     w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=1433, DstPort=62963, PayloadLen=0, Seq=1965770833, Ack=1444766246, Win=64759       {TCP:134, IPv4:11}

3130   4:54:56 PM 2/15/2012 2.1675031     w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=1433, DstPort=63149, PayloadLen=0, Seq=3766684642, Ack=3886024386, Win=64315       {TCP:133, IPv4:11}

3307   4:54:57 PM 2/15/2012 2.2700442     w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive]Flags=...A...., SrcPort=1433, DstPort=62963, PayloadLen=1, Seq=1965770832 - 1965770833, Ack=1444766246, Win=64759  {TCP:134, IPv4:11}

3308   4:54:57 PM 2/15/2012 2.2700454     w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive]Flags=...A...., SrcPort=1433, DstPort=63149, PayloadLen=1, Seq=3766684641 - 3766684642, Ack=3886024386, Win=64315  {TCP:133, IPv4:11}

3309   4:54:57 PM 2/15/2012 2.2700619     w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=62963, DstPort=1433, PayloadLen=0, Seq=1444766246, Ack=1965770833, Win=64781       {TCP:134, IPv4:11}

3310   4:54:57 PM 2/15/2012 2.2700677     w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=63149, DstPort=1433, PayloadLen=0, Seq=3886024386, Ack=3766684642, Win=63914       {TCP:133, IPv4:11}

3553   4:54:57 PM 2/15/2012 2.4167691     w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive]Flags=...A...., SrcPort=62750, DstPort=1433, PayloadLen=1, Seq=2308437906 - 2308437907, Ack=1189649423, Win=63589  {TCP:139, IPv4:11}

3554   4:54:57 PM 2/15/2012 2.4169791     w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=1433, DstPort=62750, PayloadLen=0, Seq=1189649423, Ack=2308437907, Win=65535       {TCP:139, IPv4:11}

3588   4:54:57 PM 2/15/2012 2.5717851     w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive]Flags=...A...., SrcPort=1433, DstPort=62750, PayloadLen=1, Seq=1189649422 - 1189649423, Ack=2308437907, Win=65535  {TCP:139, IPv4:11}

3589   4:54:57 PM 2/15/2012 2.5718045     w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=62750, DstPort=1433, PayloadLen=0, Seq=2308437907, Ack=1189649423, Win=63589       {TCP:139, IPv4:11}

25373  4:55:26 PM 2/15/2012 32.1680004    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive]Flags=...A...., SrcPort=63149, DstPort=1433, PayloadLen=1, Seq=3886024385 - 3886024386, Ack=3766684642, Win=63914  {TCP:133, IPv4:11}

25374  4:55:26 PM 2/15/2012 32.1680067    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive]Flags=...A...., SrcPort=62963, DstPort=1433, PayloadLen=1, Seq=1444766245 - 1444766246, Ack=1965770833, Win=64781  {TCP:134, IPv4:11}

25375  4:55:26 PM 2/15/2012 32.1682526    w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=1433, DstPort=62963, PayloadLen=0, Seq=1965770833, Ack=1444766246, Win=64759       {TCP:134, IPv4:11}

25376  4:55:26 PM 2/15/2012 32.1682535    w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=1433, DstPort=63149, PayloadLen=0, Seq=3766684642, Ack=3886024386, Win=64315       {TCP:133, IPv4:11}

25418  4:55:27 PM 2/15/2012 32.2459174    w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive]Flags=...A...., SrcPort=1433, DstPort=63149, PayloadLen=1, Seq=3766684641 - 3766684642, Ack=3886024386, Win=64315  {TCP:133, IPv4:11}

25419  4:55:27 PM 2/15/2012 32.2459246    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=63149, DstPort=1433, PayloadLen=0, Seq=3886024386, Ack=3766684642, Win=63914       {TCP:133, IPv4:11}

25420  4:55:27 PM 2/15/2012 32.2461435    w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive]Flags=...A...., SrcPort=1433, DstPort=62963, PayloadLen=1, Seq=1965770832 - 1965770833, Ack=1444766246, Win=64759  {TCP:134, IPv4:11}

25421  4:55:27 PM 2/15/2012 32.2461588    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=62963, DstPort=1433, PayloadLen=0, Seq=1444766246, Ack=1965770833, Win=64781       {TCP:134, IPv4:11}

25496  4:55:27 PM 2/15/2012 32.4175869    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive]Flags=...A...., SrcPort=62750, DstPort=1433, PayloadLen=1, Seq=2308437906 - 2308437907, Ack=1189649423, Win=63589  {TCP:139, IPv4:11}

25497  4:55:27 PM 2/15/2012 32.4178091    w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=1433, DstPort=62750, PayloadLen=0, Seq=1189649423, Ack=2308437907, Win=65535       {TCP:139, IPv4:11}

25582  4:55:27 PM 2/15/2012 32.5484440    w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive]Flags=...A...., SrcPort=1433, DstPort=62750, PayloadLen=1, Seq=1189649422 - 1189649423, Ack=2308437907, Win=65535  {TCP:139, IPv4:11}

25583  4:55:27 PM 2/15/2012 32.5484565    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=62750, DstPort=1433, PayloadLen=0, Seq=2308437907, Ack=1189649423, Win=63589       {TCP:139, IPv4:11}

38513  4:55:56 PM 2/15/2012 62.1675986    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive]Flags=...A...., SrcPort=62963, DstPort=1433, PayloadLen=1, Seq=1444766245 - 1444766246, Ack=1965770833, Win=64781  {TCP:134, IPv4:11}

38514  4:55:56 PM 2/15/2012 62.1676280    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive]Flags=...A...., SrcPort=63149, DstPort=1433, PayloadLen=1, Seq=3886024385 - 3886024386, Ack=3766684642, Win=63914  {TCP:133, IPv4:11}

38515  4:55:56 PM 2/15/2012 62.1677961    w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=1433, DstPort=62963, PayloadLen=0, Seq=1965770833, Ack=1444766246, Win=64759       {TCP:134, IPv4:11}

38516  4:55:56 PM 2/15/2012 62.1678432    w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=1433, DstPort=63149, PayloadLen=0, Seq=3766684642, Ack=3886024386, Win=64315       {TCP:133, IPv4:11}

38575  4:55:57 PM 2/15/2012 62.3217327    w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive]Flags=...A...., SrcPort=1433, DstPort=63149, PayloadLen=1, Seq=3766684641 - 3766684642, Ack=3886024386, Win=64315  {TCP:133, IPv4:11}

38576  4:55:57 PM 2/15/2012 62.3217465    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=63149, DstPort=1433, PayloadLen=0, Seq=3886024386, Ack=3766684642, Win=63914       {TCP:133, IPv4:11}

38577  4:55:57 PM 2/15/2012 62.3217800    w3wp.exe      10.140.240.16 10.140.0.10   TCP    TCP:[Keep alive]Flags=...A...., SrcPort=1433, DstPort=62963, PayloadLen=1, Seq=1965770832 - 1965770833, Ack=1444766246, Win=64759  {TCP:134, IPv4:11}

38578  4:55:57 PM 2/15/2012 62.3217950    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive ack]Flags=...A...., SrcPort=62963, DstPort=1433, PayloadLen=0, Seq=1444766246, Ack=1965770833, Win=64781       {TCP:134, IPv4:11}

38721  4:55:57 PM 2/15/2012 62.4172055    w3wp.exe      10.140.0.10   10.140.240.16 TCP    TCP:[Keep alive]Flags=...A...., SrcPort=62750, DstPort=1433, PayloadLen=1, Seq=2308437906 - 2308437907, Ack=1189649423, Win=63589  {TCP:139, IPv4:11}

What does this mean and how can I stop the crazy network traffic from occurring... any resources to look at?  Again, not sure if this is DNN related.

 
New Post
2/15/2012 5:22 PM
 
CBOSS Inc.


Joined: 3/31/2010
Posts: 466

Here is a screen grab of the resource monitor to show the traffic...

 
 
New Post
2/18/2012 4:19 AM
 
Antony Slater


www.webpc.net
Joined: 9/21/2004
Posts: 499
Bit drastic but what happens to the traffic if you stop your DNN sites? Then try stopping individual sites and see if that narrows the cause.

On your sites do you have any modules that draw in data from somewhere else eg news feeds, stock quote feed and is cached locally?

Has something been removed/ turned off on the other server or firewall changed?

Have you run a malware scan on your server?

HTH
Antony
 
 Page 1 of 1
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Erratic Webserver Traffic DNN6 and IIS7Erratic Webserver Traffic DNN6 and IIS7


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out