Viewing 3 reply threads
  • Author
    Posts
    • #13786
      Charles Carmichael
      Participant
      Member Points: 0
      Rank:

      I’m looking for a way to identify the source of a user/device that may be hammering an Exchange 2007 server with RPC requests. We have a small SBS 2008 SP2 server with about 20 mailboxes. Lately RPC requests in Exchange have gone through the roof (scale is 100.0) and spikes between 50-100 for 15 users. Seems ridiculously high to me. Is there an easy way to identify the source that is creating so many requests?

    • #13787
      Timothy Warner
      Moderator
      Member Points: 660
      Rank: 2

      Hey Maphias. Have you considered installing Microsoft Network Monitor on your Exchange Server and running a trace for RPC packets? The trace will tell you exactly which computers the requests are coming from.

      Let me know,
      Tim

    • #13792
      Michael Pietroforte
      Keymaster
      Member Points: 32,919
      Author of the year 2018
      Rank: 4

      Network Monitor is certainly a great choice. This tool helped me many times to troubleshoot odd network issues. WireShark is another great network monitoring tool although it is more difficult to use than NetMon. It is helpful if you need statistics over longer periods of time.
      In your case you might want to use a specialized tool. There is a free monitoring tool for troubleshooting Exchange: Microsoft Exchange Server User Monitor, better known as ExMon.

    • #13809
      Sitaram Pamarthi
      Participant
      Member Points: 13
      Rank: 1

      Like Michael said, Exmon is the right choice. It gives you the source(computer) of high RPC traffic.

Viewing 3 reply threads
  • You must be logged in to reply to this topic.
© 4sysops 2006 - 2022

CONTACT US

Please ask IT administration questions in the forums. Any other messages are welcome.

Sending

Log in with your credentials

or    

Forgot your details?

Create Account