Link to home
Start Free TrialLog in
Avatar of supportodq
supportodq

asked on

duplicate name has been detected on the TCP network - event id 4319

Hi,
i started seeing this error in event viewer 4319 for a few weeks on my server.
And it may or may not be the cause of some computers disconnecting from athe network and not finding shared drives (a reboot on those machines fixes the problem).
It's a Windows Server 2008 R2 (Service Pack1), its a secondary DC on our network.
it has 4 Network cards, and is a host to 3 virtual machines (Hyper-V).

Event Viewer

Log Name:      System
Source:        NetBT
Date:          8/7/2012 8:44:08 AM
Event ID:      4319
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      ODQFARP.ODQ.interne
Description:
A duplicate name has been detected on the TCP network.  The IP address of the computer that sent the message is in the data. Use nbtstat -n in a command window to see which name is in the Conflict state.

nbtstat -n Result


C:\Users\vdavidescu>nbtstat -n

Local Area Connection 2:
Node IpAddress: [169.254.96.143] Scope Id: []

                NetBIOS Local Name Table

       Name               Type         Status
    ---------------------------------------------
    ODQFARP        <00>  UNIQUE      Registered
    ODQINTERNE     <00>  GROUP       Registered
    ODQINTERNE     <1C>  GROUP       Registered
    ODQFARP        <20>  UNIQUE      Registered
    ODQINTERNE     <1B>  UNIQUE      Registered

Local Area Connection 6:
Node IpAddress: [192.168.62.102] Scope Id: []

                NetBIOS Local Name Table

       Name               Type         Status
    ---------------------------------------------
    ODQFARP        <00>  UNIQUE      Registered
    ODQINTERNE     <00>  GROUP       Registered
    ODQINTERNE     <1C>  GROUP       Registered
    ODQFARP        <20>  UNIQUE      Registered
    ODQINTERNE     <1B>  UNIQUE      Registered

Local Area Connection 7:
Node IpAddress: [192.168.62.166] Scope Id: []

                NetBIOS Local Name Table

       Name               Type         Status
    ---------------------------------------------
    ODQFARP        <00>  UNIQUE      Registered
    ODQINTERNE     <00>  GROUP       Registered
    ODQINTERNE     <1C>  GROUP       Registered
    ODQFARP        <20>  UNIQUE      Registered
    ODQINTERNE     <1B>  UNIQUE      Registered

Local Area Connection 8:
Node IpAddress: [192.168.62.205] Scope Id: []

                NetBIOS Local Name Table

       Name               Type         Status
    ---------------------------------------------
    ODQFARP        <00>  UNIQUE      Registered
    ODQINTERNE     <00>  GROUP       Registered
    ODQINTERNE     <1C>  GROUP       Registered
    ODQFARP        <20>  UNIQUE      Registered
    ODQINTERNE     <1B>  UNIQUE      Registered
Avatar of Iradat Siddiqui
Iradat Siddiqui
Flag of India image

delete machine from AD and re-add.
Avatar of supportodq
supportodq

ASKER

Hi
thanks for that but I do not have the WINS Server installed. Either as a "server role" (On our main DC Windows server 2003 R2) or as a "server feature" (On our secondary DC Windows server 2008 R2) installed.

in the KB article you linked it says:
1. Delete the static mappings
2. Clean the WINS database
3. Disable the WINS client

This alarms me a bit, mainly because I don't know what this dose, will this screw up my network mappings/rights at all and is it good to do this outside of production hours?

thanks
Make sure that you can communicate to the host by one NIC only. The other 3 physical NICs, if they are connected to the same network segment, should be configured for virtual machines only by disabling “Allow management operating system to share this adapter” in the Virtual Network Manager.
User generated imagespaperov:
Here is a printscreen of whats going on in Virtual Network Manager on my server. If I disable this checkbox will it change anything on the virtual machines or on the host? do I have to reboot either? any downtime?

chubby_informer:
delete machine from AD and re-add.
Actually if it is a duplicate machine on the network with the same name, i'm trying to find out which machine it is (either name or ip would help). any ideas how?
No, disabling this checkbox won’t change anything for the virtual machines and you don’t need to restart. It will only prevent the host from using this network connection.

In my opinion you don’t have a duplicated machine name; the warning is generated by having a multi-hosted server in the same domain. By disabling the sharing of the additional adapters you should fix the problem.

You need to have only one active connection to the host.
spaperov
i disabled #1 (in image above) it was ok.
then i disabled #2 and i lost remote network connection with the host
so freaked out, i went physically to the server and re-enabled it.
there might be a shared network card between 2 virtuals or even with the host?!
ASKER CERTIFIED SOLUTION
Avatar of Svet Paperov
Svet Paperov
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Although i didn't solve my problem, I still see the error in event viewer NetBT (4319), spaperov's suggestion is good. Since my collegue confirmed to me that there are 4 physical network cards in the server, only 2 are connected (problems with the initial configuration). Aand each NIC is shared : #1)  the Host and a virtual machine and #2) between 2 virtual machines.
The ideal thing is to re-connect the other 2 network cards, dedicate one to the host, and each of the 3 others to a virtual server.
And configure a static record in the DNS for the host...