Hi there,
Was’nt sure whehter this would fall under Lotus issue, but thought I’d give it a try …
We have a machine (or machines) sending out viruses … it could be one of our servers or any of the 175 PC’s on the network.
Is there any network monitoring tool that could help us pin-point to the machine that could be sending these messages/ viruses out?
Any help would be appreciated …
Thank you!
Subject: Virus detection
Try to look in the headers. If it’s a server then it should be listed in the Received header. If it’s a client, try to check the log files. Try to trace back the Message ID and you should find out which IP connected to your SMTP server. If message tracking is enabled, try that to find out from where the message is originating.
/stijn.
Subject: Virus detection
Get a network sniffer tool e.g. LanSpy, it will show you which PCs have port 25 open (assuming the virus is using port 25 for sending). Another good tool is Wireshark aka Ethereal, let it monitor the network for about 15 minutes and then analyse the output.
Other than that, you should do a virus scan. If the virus is not too new use a standalone scanner such as Mcafee Stinger.