d_tracy
asked on
TCP/IP Services Application terminates at boot
We had a server reboot overnight and encountered ntfs errors in the event log. I believe that I experienced some data corruption in relation to the unexpected reboot of the server. The RAID controllers have verified drive status, and the ntfs errors ceased after chkdsk. The OS is mirrored on an Intel controller and the Matrix Storage console indicates the 2 SATA drives are in a good state.
Due to this, some important network services are not functioning (DHCP / DNS / Network Auth / Routing to name a few).
I get the following at logon:
TCP/IP Services Application encountered a problem and needed to close.
szAppName : tcpsvcs.exe szAppVer : 5.2.3790.0 szModName : ntdll.dll
szModVer : 5.2.3790.3959 offset : 0004afb2
I have reset and reinstalled the IP stack (using KB 325356) to no avail. I have restored the tcpsvcs.exe & ntdll.dll from the original media (tcpsvcs was same size and date while ntdll.dll had been updated). When it did not resolve my problem, I put ntdll.dll back to the updated version.
Due to this, some important network services are not functioning (DHCP / DNS / Network Auth / Routing to name a few).
I get the following at logon:
TCP/IP Services Application encountered a problem and needed to close.
szAppName : tcpsvcs.exe szAppVer : 5.2.3790.0 szModName : ntdll.dll
szModVer : 5.2.3790.3959 offset : 0004afb2
I have reset and reinstalled the IP stack (using KB 325356) to no avail. I have restored the tcpsvcs.exe & ntdll.dll from the original media (tcpsvcs was same size and date while ntdll.dll had been updated). When it did not resolve my problem, I put ntdll.dll back to the updated version.
ASKER
Yes, another tech removed the NIC drivers and reinstalled them. I did rerun the CEICW after reinstalling the protocol stack. I have network and Internet access, and the DHCP & DNS clients work. The server services fail. I will attempt NIC driver update, but I have no errors in Device Manager and I do have access through both NICs currently.
ASKER
The driver update did not change the error at login or the functionality. Full Internet / LAN access, no routing, DHCP or authentication. I reran CEICW again.
d_tracy,
can you give me all related errors in the eventvwr, since the other solutions didn't help we'll need to dig deeper.
suppsaws
can you give me all related errors in the eventvwr, since the other solutions didn't help we'll need to dig deeper.
suppsaws
ASKER
Here is a sample of the log activity for the SysLog and AppLog for the 5 hours from system reset. It is a good sampling, many of the errors originated within that period. At 5:50 am the Event Log showed an unexpected reboot, ntfs errors starting, which ceased after the chkdsk.
Users had access to the server and data until about 7:50 AM. Since then, I have not been able to configure routing, DHCP server, or network authentication. I can log in at the server fine, but I did notice an AD event that makes me think that the TCP/IP Application is one of several problems causing this behavior.
SysLog.txt
AppLog.txt
Users had access to the server and data until about 7:50 AM. Since then, I have not been able to configure routing, DHCP server, or network authentication. I can log in at the server fine, but I did notice an AD event that makes me think that the TCP/IP Application is one of several problems causing this behavior.
SysLog.txt
AppLog.txt
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
hm, tried updating drivers and reinstalling the NIC?
did your rerun the CEICW?
Regards,
suppsaws