Solved

SBS2008 drops network briefly twice a day

Posted on 2013-05-30
6
552 Views
Last Modified: 2016-11-23
I have an SBS2008 machine that is once or twice daily dropping its network connection. The times are a bit suspicious, but not similar enough to nail down by... see screen grab showing times.

The symptoms users report are
Outlook Exchange reports its is off line and then comes back on in a minute or two (time not confirmed).
Their legacy database locks as it doesn't like being disconnected, and has to be contrl-alt-deleted (so far not corruptions - but its just a matter of time)

I believe it happens simultaneously for all users, but there are only three or four and the database lock shows after the fact the next time they go to use it if it was open, and users don't always notice the Exchange Offline notification.


Trolling through the event log, I find that these events coincide with Exchange reporting the following error:

No DNS servers could be retrieved from network adapter 00000000-0000-0000-0000-000000000000. Check if the computer is connected to a network and Get-NetworkConnectionInfo returns any results.


BUT what leads me to think its a hardware fault is that it ALWAYS coincides with an entry to the effect that the nic was offline and was being reinstated: in summary here  er the System Events immediatly before and after

DCOM was unable to communicate with the computer Dell4.mydomn.local using any of the configured protocols.


Dynamic registration or deregistration of one or more DNS records failed with the following error:
No DNS servers configured for local system.

Broadcom NetXtreme Gigabit Ethernet: The network link is down.  Check to make sure the network cable is properly connected.

Broadcom NetXtreme Gigabit Ethernet: Network controller configured for 100Mb full-duplex link.

The system detected that network adapter Local Area Connection was connected to the network, and has initiated normal operation.
(I have copied the full text of the event logs in the attached file)


I found that powersaving was ticked ON for the nic, so turned this OFF at the suggestion of the database support company, and the issue did not occur for a few days so I thought I had cracked it, but alas its back.

I had very similar thoughts to this post : http://chicagotech.net/netforums/viewtopic.php?f=2&t=14761
so tried turning off NetBIOS over TCP without any improvement [does the server need a reboot for this to take effect?]


All the other hardware settings are defaults (flow control off, speed auto etc) It is an onboard nic in the Dell server I think...


Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

C:\Users\netadmin>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : SERVER1
   Primary Dns Suffix  . . . . . . . : mydomn.local
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : mydomn.local

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
   Physical Address. . . . . . . . . : B8-AC-6F-97-5C-89
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::acc9:8675:d149:87e4%10(Preferred)
   Link-local IPv6 Address . . . . . : fe80::cd66:76ed:fde2:9915%10(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.100.1(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.100.254
   DHCPv6 IAID . . . . . . . . . . . : 263761007
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-8B-43-A6-B8-AC-6F-97-5C-89

   DNS Servers . . . . . . . . . . . : fe80::cd66:76ed:fde2:9915%10
                                       192.168.100.1
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 8:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{2CE7A217-8541-4A96-B51A-0C7F81F79
641}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes


Pinging every 5 minutes to the router gateway (254). a local printer, a workstation and google did not miss a ping even over the time an event occurred - but the 5 minutes may not have been fine enough to catch it [Anyone know how to set a scheduled task to run more often than 5 minutely?]
I might try running this script instead as suggested here
http://www.experts-exchange.com/Networking/Windows_Networking/Internet_Protocols/Q_26959500.html

I have replaced the switch with a new decent gigabit, but the router is a 2007 Dynalink ADSL modem router so may be my next point of attack. I have turned logging on in the router, but couldn't get snmp to catch the syslogs.


Also could not see how to run the Get-NetworkConnectionInfo as suggested by the event log...

Judging by the Help offered by the event it is a hardware issue on the network card in the server.

Throw a new Nic into the server and be done with it? (Suggestions on spec?)

Any other ideas?

TIA
--
Bruce Metelerkamp

PS Apologies for the typing - retyped this as I lost the entire hours work attempting to submit the question on iPad  :(
NICDOWN.txt
0
Comment
Question by:broozm
  • 4
  • 2
6 Comments
 

Author Comment

by:broozm
ID: 39207240
Not sure if the file uploaded with the question... so here it is again
Photo-Skitch-Document.png
0
 

Author Comment

by:broozm
ID: 39209490
Just now off to the site to upgrade the driver to Broadcom provided driver:
http://www.broadcom.com/support/ethernet_nic/netxtreme_server.php
0
 
LVL 30

Expert Comment

by:pgm554
ID: 39209594
>Broadcom NetXtreme Gigabit Ethernet: Network controller configured for 100Mb full-duplex link.

Never use a GIG card set to manual,it's auto only or nothing.

EVERYTHING needs to be set to auto on the network.

EVERYTHING !
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Accepted Solution

by:
broozm earned 0 total points
ID: 39209635
It was definitely set to Auto aleardy (that 100MB report was from the event log once it reconnected.)

The new driver has now been applied successfully, and I have more options in the nic config, including "Auto Negotiation" which it is set on.
And I have powered right down and come back ok.

I found out that the server was patched directly to the router/modem, so I moved it to the switch.
Now I see it has connected at 1G. :)

So now I await any further errors.
0
 
LVL 30

Expert Comment

by:pgm554
ID: 39209662
You will probably see a speed up in the network too.
0
 

Author Closing Comment

by:broozm
ID: 39252610
Applying the manufacturer's network interface card driver resolved the problem.. no-one suggested this.
I was a bit wary of applying a driver that was not supplied by the Dell support channel, but it turned out well.
No further drop outs.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Join & Write a Comment

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now