Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

SBS2008 drops network briefly twice a day

Posted on 2013-05-30
6
Medium Priority
?
570 Views
Last Modified: 2016-11-23
I have an SBS2008 machine that is once or twice daily dropping its network connection. The times are a bit suspicious, but not similar enough to nail down by... see screen grab showing times.

The symptoms users report are
Outlook Exchange reports its is off line and then comes back on in a minute or two (time not confirmed).
Their legacy database locks as it doesn't like being disconnected, and has to be contrl-alt-deleted (so far not corruptions - but its just a matter of time)

I believe it happens simultaneously for all users, but there are only three or four and the database lock shows after the fact the next time they go to use it if it was open, and users don't always notice the Exchange Offline notification.


Trolling through the event log, I find that these events coincide with Exchange reporting the following error:

No DNS servers could be retrieved from network adapter 00000000-0000-0000-0000-000000000000. Check if the computer is connected to a network and Get-NetworkConnectionInfo returns any results.


BUT what leads me to think its a hardware fault is that it ALWAYS coincides with an entry to the effect that the nic was offline and was being reinstated: in summary here  er the System Events immediatly before and after

DCOM was unable to communicate with the computer Dell4.mydomn.local using any of the configured protocols.


Dynamic registration or deregistration of one or more DNS records failed with the following error:
No DNS servers configured for local system.

Broadcom NetXtreme Gigabit Ethernet: The network link is down.  Check to make sure the network cable is properly connected.

Broadcom NetXtreme Gigabit Ethernet: Network controller configured for 100Mb full-duplex link.

The system detected that network adapter Local Area Connection was connected to the network, and has initiated normal operation.
(I have copied the full text of the event logs in the attached file)


I found that powersaving was ticked ON for the nic, so turned this OFF at the suggestion of the database support company, and the issue did not occur for a few days so I thought I had cracked it, but alas its back.

I had very similar thoughts to this post : http://chicagotech.net/netforums/viewtopic.php?f=2&t=14761
so tried turning off NetBIOS over TCP without any improvement [does the server need a reboot for this to take effect?]


All the other hardware settings are defaults (flow control off, speed auto etc) It is an onboard nic in the Dell server I think...


Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

C:\Users\netadmin>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : SERVER1
   Primary Dns Suffix  . . . . . . . : mydomn.local
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : mydomn.local

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
   Physical Address. . . . . . . . . : B8-AC-6F-97-5C-89
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::acc9:8675:d149:87e4%10(Preferred)
   Link-local IPv6 Address . . . . . : fe80::cd66:76ed:fde2:9915%10(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.100.1(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.100.254
   DHCPv6 IAID . . . . . . . . . . . : 263761007
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-8B-43-A6-B8-AC-6F-97-5C-89

   DNS Servers . . . . . . . . . . . : fe80::cd66:76ed:fde2:9915%10
                                       192.168.100.1
   NetBIOS over Tcpip. . . . . . . . : Disabled

Tunnel adapter Local Area Connection* 8:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : isatap.{2CE7A217-8541-4A96-B51A-0C7F81F79
641}
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes


Pinging every 5 minutes to the router gateway (254). a local printer, a workstation and google did not miss a ping even over the time an event occurred - but the 5 minutes may not have been fine enough to catch it [Anyone know how to set a scheduled task to run more often than 5 minutely?]
I might try running this script instead as suggested here
http://www.experts-exchange.com/Networking/Windows_Networking/Internet_Protocols/Q_26959500.html

I have replaced the switch with a new decent gigabit, but the router is a 2007 Dynalink ADSL modem router so may be my next point of attack. I have turned logging on in the router, but couldn't get snmp to catch the syslogs.


Also could not see how to run the Get-NetworkConnectionInfo as suggested by the event log...

Judging by the Help offered by the event it is a hardware issue on the network card in the server.

Throw a new Nic into the server and be done with it? (Suggestions on spec?)

Any other ideas?

TIA
--
Bruce Metelerkamp

PS Apologies for the typing - retyped this as I lost the entire hours work attempting to submit the question on iPad  :(
NICDOWN.txt
0
Comment
Question by:broozm
  • 4
  • 2
6 Comments
 

Author Comment

by:broozm
ID: 39207240
Not sure if the file uploaded with the question... so here it is again
Photo-Skitch-Document.png
0
 

Author Comment

by:broozm
ID: 39209490
Just now off to the site to upgrade the driver to Broadcom provided driver:
http://www.broadcom.com/support/ethernet_nic/netxtreme_server.php
0
 
LVL 30

Expert Comment

by:pgm554
ID: 39209594
>Broadcom NetXtreme Gigabit Ethernet: Network controller configured for 100Mb full-duplex link.

Never use a GIG card set to manual,it's auto only or nothing.

EVERYTHING needs to be set to auto on the network.

EVERYTHING !
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 

Accepted Solution

by:
broozm earned 0 total points
ID: 39209635
It was definitely set to Auto aleardy (that 100MB report was from the event log once it reconnected.)

The new driver has now been applied successfully, and I have more options in the nic config, including "Auto Negotiation" which it is set on.
And I have powered right down and come back ok.

I found out that the server was patched directly to the router/modem, so I moved it to the switch.
Now I see it has connected at 1G. :)

So now I await any further errors.
0
 
LVL 30

Expert Comment

by:pgm554
ID: 39209662
You will probably see a speed up in the network too.
0
 

Author Closing Comment

by:broozm
ID: 39252610
Applying the manufacturer's network interface card driver resolved the problem.. no-one suggested this.
I was a bit wary of applying a driver that was not supplied by the Dell support channel, but it turned out well.
No further drop outs.
0

Featured Post

[Webinar] Cloud Security

In this webinar you will learn:

-Why existing firewall and DMZ architectures are not suited for securing cloud applications
-How to make your enterprise “Cloud Ready”, and fix your aging DMZ architecture
-How to transform your enterprise and become a Cloud Enabler

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Make the most of your online learning experience.
This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

916 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question