Random Network Disconnects MidwestTech 09.07.2007 16:18:01 Hello: I am having a problem diagnosing a random network disconnect for one of my Windows 2003 R2 Sp2 servers. It will randomly disconnect itself from the network and the only way I can seem to get it back up is to restart the box. Here is a portion of a netdiag with verbose logging turned on. I had to edit some portions out due to confidentiality. Gathering IPX configuration information. Querying status of the Netcard drivers... Passed Testing IpConfig - pinging the Primary WINS server... Failed Testing IpConfig - pinging the Secondary WINS server... Failed Testing Domain membership... Passed Gathering NetBT configuration information. Testing for autoconfiguration... Passed Testing IP loopback ping... Passed Testing default gateways... Failed Enumerating local and remote NetBT name cache... Passed Testing the WINS server Local Area Connection Sending name query to primary WINS server edited - Failed Sending name query to secondary WINS server edited - Failed Gathering Winsock information. Testing DNS Testing redirector and browser... Failed Testing DC discovery. Looking for a DC Gathering the list of Domain Controllers for domain 'edited' Testing trust relationships... Failed Testing Kerberos authentication... Passed Testing LDAP servers in Domain edited ... Gathering routing information Gathering network statistics information. Gathering configuration of bindings. Gathering RAS connection information Gathering Modem information Gathering Netware information Gathering IP Security information Tests complete. Computer Name: ITDSPSTEST01 DNS Host Name: itdspstest01.itd.edited.edited DNS Domain Name: itd.edited.edited System info : Microsoft Windows Server 2003 R2 (Build 3790) Processor : x86 Family 15 Model 33 Stepping 2, AuthenticAMD Hotfixes : Installed? Name Yes KB925902 Yes KB931836 Yes Q147222 No ServicePackUninstall Netcard queries test . . . . . . . : Passed Information of Netcard drivers: --------------------------------------------------------------------------- Description: HP NC7782 Gigabit Server Adapter Device: \DEVICE\{9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} Media State: Connected Device State: Connected Connect Time: 14 days, 00:22:41 Media Speed: 100 Mbps Packets Sent: 113026759 Bytes Sent (Optional): 0 Packets Received: 123022180 Directed Pkts Recd (Optional): 115599138 Bytes Received (Optional): 0 Directed Bytes Recd (Optional): 0 --------------------------------------------------------------------------- [PASS] - At least one netcard is in the 'Connected' state. Per interface results: Adapter : Local Area Connection Adapter ID . . . . . . . . : {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} Netcard queries test . . . : Passed Adapter type . . . . . . . : Ethernet Host Name. . . . . . . . . : itdspstest01 Description. . . . . . . . : HP NC7782 Gigabit Server Adapter Physical Address . . . . . : 00-19-BB-28-7B-1E Dhcp Enabled . . . . . . . : No DHCP ClassID . . . . . . . : Autoconfiguration Enabled. : Yes IP Address . . . . . . . . : edited Subnet Mask. . . . . . . . : 255.255.254.0 Default Gateway. . . . . . : edited Primary WINS Server. . . . : edited Secondary WINS Server. . . : edited Dns Servers. . . . . . . . : edited edited IpConfig results . . . . . : Failed Pinging the Primary WINS server edited - not reachable Pinging the Secondary WINS server edited - not reachable AutoConfiguration results. . . . . . : Passed AutoConfiguration is not in use. Default gateway test . . . : Failed Pinging gateway edited - not reachable No gateway reachable for this adapter. NetBT name test. . . . . . : Passed NetBT_Tcpip_{9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} ITDSPSTEST01 <00> UNIQUE REGISTERED edited <00> GROUP REGISTERED ITDSPSTEST01 <20> UNIQUE REGISTERED edited <1E> GROUP REGISTERED [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing. NetBios Resolution : via DHCP No remote names have been found. WINS service test. . . . . : Failed Sending name query to primary WINS server edited - Failed Sending name query to secondary WINS server edited - Failed The test failed. We were unable to query the WINS servers. IPX test : IPX is not installed on this machine. Global results: IP General configuration LMHOSTS Enabled. . . . . . . . : Yes DNS for WINS resolution. . . . : Enabled Node Type. . . . . . . . . . . : Broadcast NBT Scope ID . . . . . . . . . : Routing Enabled. . . . . . . . : No WINS Proxy Enabled . . . . . . : No DNS resolution for NETBIOS . . : No Domain membership test . . . . . . : Passed Machine is a . . . . . . . . . : Member Server Netbios Domain name. . . . . . : edited Dns domain name. . . . . . . . : edited Dns forest name. . . . . . . . : editd Domain Guid. . . . . . . . . . : {3DD53E8C-630F-4350-9E4A-edited} Domain Sid . . . . . . . . . . : S-1-5-21-1482476501-115176313-edited Logon User . . . . . . . . . . : Administrator Logon Domain . . . . . . . . . : ITDSPSTEST01 NetBT transports test. . . . . . . : Passed List of NetBt transports currently configured: NetBT_Tcpip_{9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} 1 NetBt transport currently configured. Autonet address test . . . . . . . : Passed PASS - you have at least one non-autoconfigured IP address IP loopback ping test. . . . . . . : Passed PASS - pinging IP loopback address was successful. Your IP stack is most probably OK. Default gateway test . . . . . . . : Failed [FATAL] NO GATEWAYS ARE REACHABLE. You have no connectivity to other network segments. If you configured the IP protocol manually then you need to add at least one valid gateway. NetBT name test. . . . . . . . . . : Passed No NetBT scope defined [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined. Winsock test . . . . . . . . . . . : Passed The number of protocols which have been reported : 16 Description: MSAFD Tcpip [TCP/IP] Provider Version :2 Max message size : Stream Oriented Description: MSAFD Tcpip [UDP/IP] Provider Version :2 Description: RSVP UDP Service Provider Provider Version :6 Description: RSVP TCP Service Provider Provider Version :6 Max message size : Stream Oriented Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A7175E2D-E699-4862-99CA-59AED5AC7A55}] SEQPACKET 0 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A7175E2D-E699-4862-99CA-59AED5AC7A55}] DATAGRAM 0 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}] SEQPACKET 1 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}] DATAGRAM 1 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{AFC84CF5-0B50-4D84-8772-478C278C4085}] SEQPACKET 2 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{AFC84CF5-0B50-4D84-8772-478C278C4085}] DATAGRAM 2 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0BBFCAB5-6DAE-442E-BE9F-3211CB7F4DA9}] SEQPACKET 3 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0BBFCAB5-6DAE-442E-BE9F-3211CB7F4DA9}] DATAGRAM 3 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{136295AC-DD30-43E9-954D-2AE07573F3FB}] SEQPACKET 4 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{136295AC-DD30-43E9-954D-2AE07573F3FB}] DATAGRAM 4 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3948780B-88E5-4320-B5EF-6DB97867BCC7}] SEQPACKET 5 Provider Version :2 Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3948780B-88E5-4320-B5EF-6DB97867BCC7}] DATAGRAM 5 Provider Version :2 Max UDP size : 65507 bytes DNS test . . . . . . . . . . . . . : Passed Interface {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} DNS Domain: DNS Servers: edited edited IP Address: Expected registration with PDN (primary DNS domain name): Hostname: itdspstest01.edited. [WARNING] Cannot find a primary authoritative DNS server for the name 'itdspstest01.edited.'. [ERROR_TIMEOUT] The name 'itdspstest01.edited.' may not be registered in DNS. (obviously it was disconnected from the network) The only clues I have is these events in Event Viewer. Event Type: Warning Event Source: DnsApi Event Category: None Event ID: 11166 Date: 7/9/2007 Time: 8:22:54 AM User: N/A Computer: ITDSPSTEST01 Description: The system failed to register host (A) resource records (RRs) for network adapter with settings: Adapter Name : {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} Host Name : itdspstest01 Primary Domain Suffix : edited DNS server list : edited, edited Sent update to server : edited IP Address(es) : edited The reason the system could not register these RRs was because of a security related problem. The cause of this could be (a) your computer does not have permissions to register and update the specific DNS domain name set for this adapter, or (b) there might have been a problem negotiating valid credentials with the DNS server during the processing of the update request. You can manually retry DNS registration of the network adapter and its settings by typing "ipconfig /registerdns" at the command prompt. If problems still persist, contact your DNS server or network systems administrator. For specific error code, see the record data displayed below. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 39 23 00 00 9#.. And message here as well Event Type: Warning Event Source: DnsApi Event Category: None Event ID: 11164 Date: 7/7/2007 Time: 12:55:10 AM User: N/A Computer: ITDSPSTEST01 Description: The system failed to register host (A) resource records (RRs) for network adapter with settings: Adapter Name : {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} Host Name : itdspstest01 Primary Domain Suffix : edited DNS server list : edited Sent update to server : <?> IP Address(es) : edited The reason the system could not register these RRs was because either (a) the DNS server does not support the DNS dynamic update protocol, or (b) the authoritative zone for the specified DNS domain name does not accept dynamic updates. To register the DNS host (A) resource records using the specific DNS domain name and IP addresses for this adapter, contact your DNS server or network systems administrator. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: b4 05 00 00 ´... I can do the ipconfig /registerdns ....I receive the same message regarding DnsApi but no disconnect. My production boxes also have the same DnsApi notification but without the disconnect issue. I have tried to narrow down the problem by just killing the network adapter and enabling it again but it still will not allow me to go anywhere without a complete system reboot. Post-reboot eveything functions without a problem. Hardware arcitechture is HP Blade bl25p. I am beginning to suspect a hardware issue but I don't have any evidence of such. No other suspicious network events have me puzzled. Any further t-shooting tips would be great. Thanks in advance, MidwestTech

Re: Random Network Disconnects "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 12.07.2007 04:37:50 Read inline please. In news:21011DE5-3EF9-48A6-85E0-09B8EFAD22A9[ at ]microsoft.com, MidwestTech <MidwestTech[ at ]discussions.microsoft.com> typed: [Quoted Text] > Hello: > > I am having a problem diagnosing a random network disconnect for one > of my Windows 2003 R2 Sp2 servers. It will randomly disconnect > itself from the network and the only way I can seem to get it back up > is to restart the box. > You have edited out all the information that would give us a clue to your issue. I cannot tell if you have adhered to the basic rule of all Active Directory domain members, that all members only use DNS servers that support the AD domain. This would explain a lot of your issues. An unedited ipconfig /all would help immensely I would also suggest that if this server is not connected to a gigabit switch that yo turn Auto sense off and set the speed the switch supports and nake sure you have the latest drivers for the adapters installed.. > Per interface results: > > Adapter : Local Area Connection > Adapter ID . . . . . . . . : > {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} > > Netcard queries test . . . : Passed > > Adapter type . . . . . . . : Ethernet > Host Name. . . . . . . . . : itdspstest01 > Description. . . . . . . . : HP NC7782 Gigabit Server Adapter > Physical Address . . . . . : 00-19-BB-28-7B-1E > Dhcp Enabled . . . . . . . : No > DHCP ClassID . . . . . . . : > Autoconfiguration Enabled. : Yes > IP Address . . . . . . . . : edited > Subnet Mask. . . . . . . . : 255.255.254.0 > Default Gateway. . . . . . : edited > Primary WINS Server. . . . : edited > Secondary WINS Server. . . : edited > Dns Servers. . . . . . . . : edited > edited > > IpConfig results . . . . . : Failed > Pinging the Primary WINS server edited - not reachable > Pinging the Secondary WINS server edited - not reachable > > AutoConfiguration results. . . . . . : Passed > AutoConfiguration is not in use. > > Default gateway test . . . : Failed > Pinging gateway edited - not reachable > No gateway reachable for this adapter. > Default gateway test . . . . . . . : Failed > > [FATAL] NO GATEWAYS ARE REACHABLE. > You have no connectivity to other network segments. > If you configured the IP protocol manually then > you need to add at least one valid gateway. > > DNS test . . . . . . . . . . . . . : Passed > Interface {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} > DNS Domain: > DNS Servers: edited edited > IP Address: Expected registration with PDN (primary > DNS domain name): > Hostname: itdspstest01.edited. > [WARNING] Cannot find a primary authoritative DNS server > for the name > 'itdspstest01.edited.'. [ERROR_TIMEOUT] > The name 'itdspstest01.edited.' may not be registered in > DNS. > > (obviously it was disconnected from the network) > > The only clues I have is these events in Event Viewer. > > Event Type: Warning > Event Source: DnsApi > Event Category: None > Event ID: 11166 > Date: 7/9/2007 > Time: 8:22:54 AM > User: N/A > Computer: ITDSPSTEST01 > Description: > The system failed to register host (A) resource records (RRs) for > network adapter > with settings: > > Adapter Name : {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} > Host Name : itdspstest01 > Primary Domain Suffix : edited > DNS server list : > edited, edited > Sent update to server : edited > IP Address(es) : > edited #.. > > And message here as well > > Event Type: Warning > Event Source: DnsApi > Event Category: None > Event ID: 11164 > Date: 7/7/2007 > Time: 12:55:10 AM > User: N/A > Computer: ITDSPSTEST01 > Description: > The system failed to register host (A) resource records (RRs) for > network adapter > with settings: > > Adapter Name : {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90} > Host Name : itdspstest01 > Primary Domain Suffix : edited > DNS server list : > edited > Sent update to server : <?> > IP Address(es) : > edited > > The reason the system could not register these RRs was because > either (a) the DNS server does not support the DNS dynamic update > protocol, or (b) the authoritative zone for the specified DNS domain > name does not accept dynamic updates. > > To register the DNS host (A) resource records using the specific DNS > domain name and IP addresses for this adapter, contact your DNS > server or network systems administrator. -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================