{"id":15420,"date":"2025-11-08T17:44:00","date_gmt":"2025-11-08T16:44:00","guid":{"rendered":"https:\/\/www.palentino.es\/blog\/?p=15420"},"modified":"2025-11-08T17:47:01","modified_gmt":"2025-11-08T16:47:01","slug":"%e2%9a%a1-tu-red-va-lenta-asi-puedes-detectar-quien-esta-generando-trafico-broadcast-o-degradando-el-rendimiento","status":"publish","type":"post","link":"https:\/\/www.palentino.es\/blog\/%e2%9a%a1-tu-red-va-lenta-asi-puedes-detectar-quien-esta-generando-trafico-broadcast-o-degradando-el-rendimiento\/","title":{"rendered":"&#x26a1;\u00bfTu red va lenta? As\u00ed puedes detectar qui\u00e9n est\u00e1 generando tr\u00e1fico broadcast o degradando el rendimiento"},"content":{"rendered":"<p data-start=\"325\" data-end=\"684\">Cuando una red comienza a ralentizarse sin raz\u00f3n aparente, muchas veces la causa no est\u00e1 en el servidor, sino en <strong data-start=\"438\" data-end=\"531\">un equipo o switch que genera tr\u00e1fico broadcast excesivo, errores f\u00edsicos o bucles de red<\/strong>. Este tipo de tr\u00e1fico no solicitado \u2014a menudo llamado <em data-start=\"586\" data-end=\"600\">ruido de red<\/em>\u2014 puede saturar el ancho de banda y afectar a todos los dispositivos del segmento.<\/p>\n<p data-start=\"686\" data-end=\"833\">A continuaci\u00f3n te explico c\u00f3mo localizar el origen y diagnosticar si el problema viene de un <strong data-start=\"779\" data-end=\"789\">switch<\/strong> o de una <strong data-start=\"799\" data-end=\"828\">tarjeta de red defectuosa<\/strong> &#x1f447;<\/p>\n<p data-start=\"686\" data-end=\"833\">\n<p data-start=\"686\" data-end=\"833\"><!--more--><\/p>\n<hr data-start=\"835\" data-end=\"838\" \/>\n<h3 data-start=\"840\" data-end=\"889\">&#x1f9e0; 1&#xfe0f;&#x20e3; Switch gestionable vs no gestionable<\/h3>\n<p data-start=\"890\" data-end=\"1140\">Un <strong data-start=\"893\" data-end=\"915\">switch gestionable<\/strong> te permite <strong data-start=\"927\" data-end=\"963\">administrar y monitorizar la red<\/strong> mediante consola, web o SNMP. Con \u00e9l puedes ver estad\u00edsticas, errores por puerto, y limitar tr\u00e1fico broadcast.<br data-start=\"1074\" data-end=\"1077\" \/>Comandos \u00fatiles (en Cisco, Mikrotik, HP, D-Link Smart, etc.):<\/p>\n<div class=\"contain-inline-size rounded-2xl relative bg-token-sidebar-surface-primary\">\n<div class=\"sticky top-9\">\n<div class=\"absolute end-0 bottom-0 flex h-9 items-center pe-2\">\n<div class=\"bg-token-bg-elevated-secondary text-token-text-secondary flex items-center gap-4 rounded-sm px-2 font-sans text-xs\"><strong>show interfaces counters errors show mac address-table show storm-control<\/strong><\/div>\n<\/div>\n<\/div>\n<\/div>\n<p data-start=\"1223\" data-end=\"1315\">Podr\u00e1s detectar puertos con errores CRC, colisiones, tormentas broadcast o bucles f\u00edsicos.<\/p>\n<p data-start=\"1317\" data-end=\"1454\">En cambio, un <strong data-start=\"1331\" data-end=\"1356\">switch no gestionable<\/strong> no ofrece visibilidad: simplemente reenv\u00eda tramas sin mostrar qu\u00e9 puerto est\u00e1 saturando la red.<\/p>\n<hr data-start=\"1456\" data-end=\"1459\" \/>\n<h3 data-start=\"1461\" data-end=\"1515\">&#x1f9f0; 2&#xfe0f;&#x20e3; Diagn\u00f3stico desde la tarjeta de red (NIC)<\/h3>\n<p data-start=\"1516\" data-end=\"1544\">En <strong data-start=\"1519\" data-end=\"1543\">Windows (PowerShell)<\/strong>:<\/p>\n<div class=\"contain-inline-size rounded-2xl relative bg-token-sidebar-surface-primary\">\n<div class=\"sticky top-9\">\n<div class=\"absolute end-0 bottom-0 flex h-9 items-center pe-2\">\n<div class=\"bg-token-bg-elevated-secondary text-token-text-secondary flex items-center gap-4 rounded-sm px-2 font-sans text-xs\"><\/div>\n<\/div>\n<\/div>\n<div class=\"overflow-y-auto p-4\" dir=\"ltr\"><strong>Get-NetAdapterStatistics<\/strong><\/div>\n<\/div>\n<p data-start=\"1588\" data-end=\"1766\">Observa <strong>ReceiveErrors<\/strong>, <strong>OutgoingErrors<\/strong> o <strong>DiscardPackets<\/strong>. Si aumentan, puede haber una tarjeta defectuosa, cable da\u00f1ado o negociaci\u00f3n incorrecta (duplex\/speed).<\/p>\n<p data-start=\"1768\" data-end=\"1781\">En <strong data-start=\"1771\" data-end=\"1780\">Linux<\/strong>:<\/p>\n<div class=\"contain-inline-size rounded-2xl relative bg-token-sidebar-surface-primary\">\n<div class=\"sticky top-9\">\n<div class=\"absolute end-0 bottom-0 flex h-9 items-center pe-2\">\n<div class=\"bg-token-bg-elevated-secondary text-token-text-secondary flex items-center gap-4 rounded-sm px-2 font-sans text-xs\"><strong>ethtool -S eth0<\/strong><\/div>\n<\/div>\n<\/div>\n<\/div>\n<p data-start=\"1810\" data-end=\"1862\">Busca contadores como crc_errors o frame_errors.<\/p>\n<hr data-start=\"1864\" data-end=\"1867\" \/>\n<h3 data-start=\"1869\" data-end=\"1916\">&#x1f9e9; 3&#xfe0f;&#x20e3; An\u00e1lisis del tr\u00e1fico con Wireshark<\/h3>\n<p data-start=\"1917\" data-end=\"1978\">Captura en un punto de la red y filtra por tr\u00e1fico broadcast:<\/p>\n<div class=\"contain-inline-size rounded-2xl relative bg-token-sidebar-surface-primary\">\n<div class=\"sticky top-9\">\n<div class=\"absolute end-0 bottom-0 flex h-9 items-center pe-2\">\n<div class=\"bg-token-bg-elevated-secondary text-token-text-secondary flex items-center gap-4 rounded-sm px-2 font-sans text-xs\"><strong>eth.dst == ff:ff:ff:ff:ff:ff<\/strong><\/div>\n<\/div>\n<\/div>\n<\/div>\n<p data-start=\"2016\" data-end=\"2039\">Tambi\u00e9n puedes filtrar:<\/p>\n<div class=\"contain-inline-size rounded-2xl relative bg-token-sidebar-surface-primary\">\n<div class=\"sticky top-9\">\n<div class=\"absolute end-0 bottom-0 flex h-9 items-center pe-2\">\n<div class=\"bg-token-bg-elevated-secondary text-token-text-secondary flex items-center gap-4 rounded-sm px-2 font-sans text-xs\"><strong>arp || nbns || mdns || llmnr || dhcp<\/strong><\/div>\n<\/div>\n<\/div>\n<\/div>\n<p data-start=\"2085\" data-end=\"2313\">Si observas miles de tramas por segundo desde una sola direcci\u00f3n MAC, ese host est\u00e1 <strong data-start=\"2169\" data-end=\"2209\">inyectando tr\u00e1fico broadcast an\u00f3malo<\/strong>.<br data-start=\"2210\" data-end=\"2213\" \/>Identifica la MAC y luego usa arp -a o la tabla del switch para encontrar su IP o puerto f\u00edsico.<\/p>\n<hr data-start=\"2315\" data-end=\"2318\" \/>\n<h3 data-start=\"2320\" data-end=\"2360\">&#x2699;&#xfe0f; 4&#xfe0f;&#x20e3; Diagn\u00f3stico desde el switch<\/h3>\n<p data-start=\"2361\" data-end=\"2379\">Usa comandos como:<\/p>\n<div class=\"contain-inline-size rounded-2xl relative bg-token-sidebar-surface-primary\">\n<div class=\"sticky top-9\">\n<div class=\"absolute end-0 bottom-0 flex h-9 items-center pe-2\">\n<div class=\"bg-token-bg-elevated-secondary text-token-text-secondary flex items-center gap-4 rounded-sm px-2 font-sans text-xs\"><strong>show interfaces counters errors show interfaces status<\/strong><\/div>\n<\/div>\n<\/div>\n<\/div>\n<p data-start=\"2443\" data-end=\"2640\">Si un puerto muestra muchos errores de entrada, CRC o broadcasts, probablemente el problema est\u00e9 all\u00ed.<br data-start=\"2545\" data-end=\"2548\" \/>Activa <strong data-start=\"2555\" data-end=\"2572\">Storm Control<\/strong> para limitar los paquetes broadcast por puerto y proteger la red.<\/p>\n<hr data-start=\"2642\" data-end=\"2645\" \/>\n<h3 data-start=\"2647\" data-end=\"2687\">&#x1f50c; 5&#xfe0f;&#x20e3; Prueba f\u00edsica y aislamiento<\/h3>\n<p data-start=\"2688\" data-end=\"2937\">Desconecta los cables sospechosos uno por uno.<br data-start=\"2734\" data-end=\"2737\" \/>Cuando la red se estabilice, el \u00faltimo cable desconectado te indica el origen del problema.<br data-start=\"2828\" data-end=\"2831\" \/>Tambi\u00e9n puede tratarse de un <strong data-start=\"2860\" data-end=\"2876\">bucle f\u00edsico<\/strong> (dos puertos unidos entre s\u00ed) o una <strong data-start=\"2913\" data-end=\"2936\">NIC mal configurada<\/strong>.<\/p>\n<hr data-start=\"2939\" data-end=\"2942\" \/>\n<h3 data-start=\"2944\" data-end=\"2975\">&#x1f9ee; 6&#xfe0f;&#x20e3; Monitoreo avanzado<\/h3>\n<p data-start=\"2976\" data-end=\"2998\">Usa herramientas como:<\/p>\n<ul>\n<li data-start=\"3001\" data-end=\"3130\"><strong data-start=\"3001\" data-end=\"3011\">ntopng<\/strong>, <strong data-start=\"3013\" data-end=\"3021\">PRTG<\/strong>, <strong data-start=\"3023\" data-end=\"3037\">SolarWinds<\/strong>, <strong data-start=\"3039\" data-end=\"3072\">ManageEngine NetFlow Analyzer<\/strong>: muestran en tiempo real qui\u00e9n genera tr\u00e1fico excesivo.<\/li>\n<li data-start=\"3133\" data-end=\"3242\"><strong data-start=\"3133\" data-end=\"3156\">Advanced IP Scanner<\/strong> o <strong data-start=\"3159\" data-end=\"3179\">Angry IP Scanner<\/strong>: identifican dispositivos activos y respondiendo en broadcast.<\/li>\n<\/ul>\n<hr data-start=\"3244\" data-end=\"3247\" \/>\n<h3 data-start=\"3249\" data-end=\"3268\">&#x1f4a1; Conclusi\u00f3n<\/h3>\n<p data-start=\"3269\" data-end=\"3642\">Un exceso de tr\u00e1fico broadcast o errores de enlace puede arrastrar a toda una red local.<br data-start=\"3357\" data-end=\"3360\" \/>La soluci\u00f3n pasa por <strong data-start=\"3381\" data-end=\"3396\">monitorizar<\/strong>, <strong data-start=\"3398\" data-end=\"3417\">analizar tramas<\/strong> y <strong data-start=\"3420\" data-end=\"3449\">aislar el puerto afectado<\/strong>.<br data-start=\"3450\" data-end=\"3453\" \/>Con un switch gestionable y herramientas adecuadas, podr\u00e1s ver qu\u00e9 equipo est\u00e1 <strong data-start=\"3532\" data-end=\"3565\">inyectando tr\u00e1fico no deseado<\/strong> y restaurar el rendimiento de la red antes de que el problema se propague.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cuando una red comienza a ralentizarse sin raz\u00f3n aparente, muchas veces la causa no est\u00e1 en el servidor, sino en un equipo o switch que genera tr\u00e1fico broadcast excesivo, errores f\u00edsicos o bucles de red. Este tipo de tr\u00e1fico no solicitado \u2014a menudo llamado ruido de red\u2014 puede saturar el ancho de banda y afectar a todos los dispositivos del segmento. A continuaci\u00f3n te explico c\u00f3mo localizar el origen y diagnosticar si el problema viene de un switch o de una tarjeta de red defectuosa &#x1f447;<\/p>\n","protected":false},"author":1,"featured_media":13606,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1415],"tags":[],"class_list":["post-15420","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sin-categoria-es"],"_links":{"self":[{"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/posts\/15420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/comments?post=15420"}],"version-history":[{"count":3,"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/posts\/15420\/revisions"}],"predecessor-version":[{"id":15423,"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/posts\/15420\/revisions\/15423"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/media\/13606"}],"wp:attachment":[{"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/media?parent=15420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/categories?post=15420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palentino.es\/blog\/wp-json\/wp\/v2\/tags?post=15420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}