Slow file Access to Win2008 from Win2008
Hi Guys
Have this odd issue with slow file access from a Windows 2008 server from a Windows 2008 server.
The source server is also a DC and has DFS installed.
I'm experience slow file browsing and access from a windows 2008 server. There are 4 almost identical servers that access this 2008 server 2x 2003 and 2x 2008. The 2003 servers are fine and never seem to have any issues, both of the 2008 servers have issues. It seems to be that once the 2008 servers have cached the dfs referral they will be fine until the cache has expired. The 2008 servers are both in the same subnet and there is no replica outside of the subnet currently.
The only information which shows what may be the problem was a network monitor trace which shows the following.
7027 8:54:36 a.m. 23/08/2010 44.4489435 System 192.168.4.20 192.168.4.44 SMB SMB:C; Nt Create Andx, FileName = \server\swcff1.ico {SMB:863, SMBOverTCP:3, TCP:2, IPv4:1}
7028 8:54:36 a.m. 23/08/2010 44.4494444 System 192.168.4.44 192.168.4.20 SMB SMB:R; Nt Create Andx, FID = 0x0005 (\server\swcff1.ico@#7027)
7029 8:54:36 a.m. 23/08/2010 44.4498336 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query File Info, Query File Standard Info, FID = 0x0005 (\server\swcff1.ico@#7027)
7030 8:54:36 a.m. 23/08/2010 44.4501090 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query File Info, Query File Standard Info, FID = 0x0005 (\server\swcff1.ico@#7027)
7031 8:54:36 a.m. 23/08/2010 44.4506007 System 192.168.4.20 192.168.4.44 SMB SMB:C; Close, FID = 0x0005 , FileName=\server\swcff1.ic
7032 8:54:36 a.m. 23/08/2010 44.4509175 System 192.168.4.44 192.168.4.20 SMB SMB:R; Close, FID = 0x0005 , FileName=\server\swcff1.ic
7033 8:54:36 a.m. 23/08/2010 44.4516156 System 192.168.4.20 192.168.4.44 DFSC DFSC:Get DFS Referral Request, FileName: \server\Networkapps$, MaxReferralLevel: 4 {SMB:864, SMBOverTCP:3, TCP:2, IPv4:1}
7034 8:54:36 a.m. 23/08/2010 44.5125996 svchost.exe 172.16.1.159 192.168.4.20 RDP RDP:Windows stub parser: Requires full Common parsers. See the "How Do I Change Parser Set Options(Version 3.3 or before) or Configure Parser Profile (Version 3.4)" help topic for tips on loading these parser sets. {TCP:8, IPv4:7}
7035 8:54:36 a.m. 23/08/2010 44.5577786 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Get Dfs Referral - NT Status: System - Error, Code = (549) STATUS_NOT_FOUND {SMB:864, SMBOverTCP:3, TCP:2, IPv4:1}
7036 8:54:36 a.m. 23/08/2010 44.5585591 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query Path Info, Query File Basic Info, Pattern = \server\swcff1.ico {SMB:247, SMBOverTCP:3, TCP:2, IPv4:1}
7037 8:54:36 a.m. 23/08/2010 44.5590645 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query Path Info, Query File Basic Info {SMB:247, SMBOverTCP:3, TCP:2, IPv4:1}
7038 8:54:36 a.m. 23/08/2010 44.5593254 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query Path Info, Query File Standard Info, Pattern = \server\swcff1.ico {SMB:865, SMBOverTCP:3, TCP:2, IPv4:1}
7039 8:54:36 a.m. 23/08/2010 44.5596685 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query Path Info, Query File Standard Info {SMB:865, SMBOverTCP:3, TCP:2, IPv4:1}
7040 8:54:36 a.m. 23/08/2010 44.5601769 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query Path Info, Query File Basic Info, Pattern = \server\swcff1.ico {SMB:249, SMBOverTCP:3, TCP:2, IPv4:1}
7041 8:54:36 a.m. 23/08/2010 44.5605527 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query Path Info, Query File Basic Info {SMB:249, SMBOverTCP:3, TCP:2, IPv4:1}
7042 8:54:36 a.m. 23/08/2010 44.5612740 System 192.168.4.20 192.168.4.44 DFSC DFSC:Get DFS Referral Request, FileName: \server\Networkapps$, MaxReferralLevel: 4 {SMB:866, SMBOverTCP:3, TCP:2, IPv4:1}
7043 8:54:36 a.m. 23/08/2010 44.6534561 svchost.exe 192.168.4.20 172.16.1.159 RDP RDP:Windows stub parser: Requires full Common parsers. See the "How Do I Change Parser Set Options(Version 3.3 or before) or Configure Parser Profile (Version 3.4)" help topic for tips on loading these parser sets. {TCP:8, IPv4:7}
7044 8:54:36 a.m. 23/08/2010 44.6699308 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Get Dfs Referral - NT Status: System - Error, Code = (549) STATUS_NOT_FOUND {SMB:866, SMBOverTCP:3, TCP:2, IPv4:1}
7045 8:54:36 a.m. 23/08/2010 44.6705636 System 192.168.4.20 192.168.4.44 SMB SMB:C; Nt Create Andx, FileName = \server\swcff1.ico {SMB:867, SMBOverTCP:3, TCP:2, IPv4:1}
7046 8:54:36 a.m. 23/08/2010 44.6711122 System 192.168.4.44 192.168.4.20 SMB SMB:R; Nt Create Andx, FID = 0x4003 (\server\swcff1.ico@#7045)
7047 8:54:36 a.m. 23/08/2010 44.6713944 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query File Info, Query File Basic Info, FID = 0x4003 (\server\swcff1.ico@#7045)
7048 8:54:36 a.m. 23/08/2010 44.6716584 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query File Info, Query File Basic Info, FID = 0x4003 (\server\swcff1.ico@#7045)
7049 8:54:36 a.m. 23/08/2010 44.6718308 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query File Info, Query File Standard Info, FID = 0x4003 (\server\swcff1.ico@#7045)
7050 8:54:36 a.m. 23/08/2010 44.6721280 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query File Info, Query File Standard Info, FID = 0x4003 (\server\swcff1.ico@#7045)
When the servers are browsing correctly you don't see the get referral request or the status not found errors.
Things I've tried.
Disabling SMB2
Disabling server cert signing
Referencing the non dfs share
Have this odd issue with slow file access from a Windows 2008 server from a Windows 2008 server.
The source server is also a DC and has DFS installed.
I'm experience slow file browsing and access from a windows 2008 server. There are 4 almost identical servers that access this 2008 server 2x 2003 and 2x 2008. The 2003 servers are fine and never seem to have any issues, both of the 2008 servers have issues. It seems to be that once the 2008 servers have cached the dfs referral they will be fine until the cache has expired. The 2008 servers are both in the same subnet and there is no replica outside of the subnet currently.
The only information which shows what may be the problem was a network monitor trace which shows the following.
7027 8:54:36 a.m. 23/08/2010 44.4489435 System 192.168.4.20 192.168.4.44 SMB SMB:C; Nt Create Andx, FileName = \server\swcff1.ico {SMB:863, SMBOverTCP:3, TCP:2, IPv4:1}
7028 8:54:36 a.m. 23/08/2010 44.4494444 System 192.168.4.44 192.168.4.20 SMB SMB:R; Nt Create Andx, FID = 0x0005 (\server\swcff1.ico@#7027)
7029 8:54:36 a.m. 23/08/2010 44.4498336 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query File Info, Query File Standard Info, FID = 0x0005 (\server\swcff1.ico@#7027)
7030 8:54:36 a.m. 23/08/2010 44.4501090 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query File Info, Query File Standard Info, FID = 0x0005 (\server\swcff1.ico@#7027)
7031 8:54:36 a.m. 23/08/2010 44.4506007 System 192.168.4.20 192.168.4.44 SMB SMB:C; Close, FID = 0x0005 , FileName=\server\swcff1.ic
7032 8:54:36 a.m. 23/08/2010 44.4509175 System 192.168.4.44 192.168.4.20 SMB SMB:R; Close, FID = 0x0005 , FileName=\server\swcff1.ic
7033 8:54:36 a.m. 23/08/2010 44.4516156 System 192.168.4.20 192.168.4.44 DFSC DFSC:Get DFS Referral Request, FileName: \server\Networkapps$, MaxReferralLevel: 4 {SMB:864, SMBOverTCP:3, TCP:2, IPv4:1}
7034 8:54:36 a.m. 23/08/2010 44.5125996 svchost.exe 172.16.1.159 192.168.4.20 RDP RDP:Windows stub parser: Requires full Common parsers. See the "How Do I Change Parser Set Options(Version 3.3 or before) or Configure Parser Profile (Version 3.4)" help topic for tips on loading these parser sets. {TCP:8, IPv4:7}
7035 8:54:36 a.m. 23/08/2010 44.5577786 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Get Dfs Referral - NT Status: System - Error, Code = (549) STATUS_NOT_FOUND {SMB:864, SMBOverTCP:3, TCP:2, IPv4:1}
7036 8:54:36 a.m. 23/08/2010 44.5585591 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query Path Info, Query File Basic Info, Pattern = \server\swcff1.ico {SMB:247, SMBOverTCP:3, TCP:2, IPv4:1}
7037 8:54:36 a.m. 23/08/2010 44.5590645 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query Path Info, Query File Basic Info {SMB:247, SMBOverTCP:3, TCP:2, IPv4:1}
7038 8:54:36 a.m. 23/08/2010 44.5593254 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query Path Info, Query File Standard Info, Pattern = \server\swcff1.ico {SMB:865, SMBOverTCP:3, TCP:2, IPv4:1}
7039 8:54:36 a.m. 23/08/2010 44.5596685 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query Path Info, Query File Standard Info {SMB:865, SMBOverTCP:3, TCP:2, IPv4:1}
7040 8:54:36 a.m. 23/08/2010 44.5601769 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query Path Info, Query File Basic Info, Pattern = \server\swcff1.ico {SMB:249, SMBOverTCP:3, TCP:2, IPv4:1}
7041 8:54:36 a.m. 23/08/2010 44.5605527 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query Path Info, Query File Basic Info {SMB:249, SMBOverTCP:3, TCP:2, IPv4:1}
7042 8:54:36 a.m. 23/08/2010 44.5612740 System 192.168.4.20 192.168.4.44 DFSC DFSC:Get DFS Referral Request, FileName: \server\Networkapps$, MaxReferralLevel: 4 {SMB:866, SMBOverTCP:3, TCP:2, IPv4:1}
7043 8:54:36 a.m. 23/08/2010 44.6534561 svchost.exe 192.168.4.20 172.16.1.159 RDP RDP:Windows stub parser: Requires full Common parsers. See the "How Do I Change Parser Set Options(Version 3.3 or before) or Configure Parser Profile (Version 3.4)" help topic for tips on loading these parser sets. {TCP:8, IPv4:7}
7044 8:54:36 a.m. 23/08/2010 44.6699308 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Get Dfs Referral - NT Status: System - Error, Code = (549) STATUS_NOT_FOUND {SMB:866, SMBOverTCP:3, TCP:2, IPv4:1}
7045 8:54:36 a.m. 23/08/2010 44.6705636 System 192.168.4.20 192.168.4.44 SMB SMB:C; Nt Create Andx, FileName = \server\swcff1.ico {SMB:867, SMBOverTCP:3, TCP:2, IPv4:1}
7046 8:54:36 a.m. 23/08/2010 44.6711122 System 192.168.4.44 192.168.4.20 SMB SMB:R; Nt Create Andx, FID = 0x4003 (\server\swcff1.ico@#7045)
7047 8:54:36 a.m. 23/08/2010 44.6713944 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query File Info, Query File Basic Info, FID = 0x4003 (\server\swcff1.ico@#7045)
7048 8:54:36 a.m. 23/08/2010 44.6716584 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query File Info, Query File Basic Info, FID = 0x4003 (\server\swcff1.ico@#7045)
7049 8:54:36 a.m. 23/08/2010 44.6718308 System 192.168.4.20 192.168.4.44 SMB SMB:C; Transact2, Query File Info, Query File Standard Info, FID = 0x4003 (\server\swcff1.ico@#7045)
7050 8:54:36 a.m. 23/08/2010 44.6721280 System 192.168.4.44 192.168.4.20 SMB SMB:R; Transact2, Query File Info, Query File Standard Info, FID = 0x4003 (\server\swcff1.ico@#7045)
When the servers are browsing correctly you don't see the get referral request or the status not found errors.
Things I've tried.
Disabling SMB2
Disabling server cert signing
Referencing the non dfs share
ASKER
Hi evilsi
I've already disabled smb2 on both servers but it didn't help this particular problem, thanks for the idea though.
I've already disabled smb2 on both servers but it didn't help this particular problem, thanks for the idea though.
Hi,
Have you tried temporarily disabling the firewall on the server 2008 reading the dfs share or when forcing a dfs update?
Regards
Have you tried temporarily disabling the firewall on the server 2008 reading the dfs share or when forcing a dfs update?
Regards
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
This can be caused by SMB v2 and a stupid windows bug that still isnt fixed. Try this:
To disable SMB 2.0 on Windows Vista or Windows Server 2008 systems that are acting as the “server”, navigate to the registry key : HKLM\System\CurrentControl
Create a REG_DWORD value called Smb2. Set the value to 0 to disable SMB 2.0 and 1 to enable SMB 2.0.
Reboot the server.
This can easily be reverted if required but has solved a few issues with file copy speed and enumeration faults.
To disable SMB v2 on a client you can run the following commands
sc config lanmanworkstation depend= bowser/mrxsmb20/nsi
sc config mrxsmb10 start= disabled
Regards
Si.