Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 379
  • Last Modified:

SBS2011 Server losing packets

Hello, so this customer of mine has a Windows network with SBS2011 Essentials on the server and W7 64bit on 3 clients.

There was a lag problem for all software on the clients connected with the server, so we tested it all by pinging and there's a heavy loss of packets when you ping the server from any client.

This doesn't happen when clients ping each other: no loss whatsoever.

Also, it doesn't happen if you ping a client from the server, so it's one-way only.

The packet loss seems to be totally random, it won't happen for an hour then start to happen every few minutes.

On average, I'd say about 5% of the packets is lost, but the loss happens in waves, so it's heavily felt on the client machines.

We tried changing switches and cables, disabling all non-essential services on the server but still we couldn't find the cause of this. We used Process Hacker and other tools, but to no avail.

The network is behind a Zyxel firewall, but it shouldn't interfere at all with the LAN.

So can anybody help me diagnose this? Thanks.
0
Daniele Brunengo
Asked:
Daniele Brunengo
  • 7
  • 3
  • 3
2 Solutions
 
David AtkinIT ProfessionalCommented:
Hello,

I'd start by checking that your NIC drivers are up-to-date.  I'd think about swapping out the NIC as well to rule it out.

What switches do you have on site and how many?
0
 
Daniele BrunengoIT Consultant, Web DesignerAuthor Commented:
Thanks.

About the switches, they have all been bypassed in one of our tests, we tried connecting all to the same switch, also changing the switch, and it still happens. Drivers are up to date. Trying another NIC is one thing we didn't try.

Right now I'm off-site though, so I can only work remotely. Is there anything software-wise you think I could try out?
0
 
Chris HInfrastructure ManagerCommented:
Packet loss even after all that troubleshooting is almost guaranteed hardware.   You could check in device manager and see what you have your flow control, frame size, etc set to.  Although, I'm confident David's suggestion above about replacing your interface card is the best bet.  

In the worse case scenario, you could even have a bad onboard NIC or PCI bus.
0
Who's Defending Your Organization from Threats?

Protecting against advanced threats requires an IT dream team – a well-oiled machine of people and solutions working together to defend your organization. Download our resource kit today to learn more about the tools you need to build you IT Dream Team!

 
Daniele BrunengoIT Consultant, Web DesignerAuthor Commented:
I can try that on saturday. What seems strange to me though is the fact that the loss is only with client pinging server and not with server pinging client. I am just now pinging two clients from the server and I have 100% passed: at the same time I am pinging server from each client and I have 95% on one and 94% on the other.
0
 
Daniele BrunengoIT Consultant, Web DesignerAuthor Commented:
Sorry, my colleague just told me he already tried with two different NICs, same problem.
0
 
Chris HInfrastructure ManagerCommented:
Interesting... Try disabling windows firewall temporarily?  Test and see.  Do both server and client have IPv6 enabled?  Are you ping via Hostname or IP?

Make sure to clean up superfluous pointer records in your dns.

EDIT:

http://www.networksteve.com/forum/topic.php/Packet_Loss_-_Server_2012_&_HyperV/?TopicId=39878&Posts=9

Take a look at that also.  This seems to be a common issue but I've never heard of it.  The two culprits in most cases are ipv6 and dns, either misconfigured or duplicate pointer/host records
0
 
David AtkinIT ProfessionalCommented:
IPv6 would have been my next suggestion as well.

If you have any Anti-Virus installed on the server then temporarily disable this as well just to rule it out.

If you go on task manager and look at the network performance, is it doing anything unusual? Or is it relatively low activity?

Is the network gigabit?
0
 
Daniele BrunengoIT Consultant, Web DesignerAuthor Commented:
The ping has been done via ip usually. Windows Firewall has been disabled on domain level.

I have been testing with IPv6 but disabling it doesn't seem to do the trick as it did for a guy in the page you found.

I still have to check dns.
0
 
Daniele BrunengoIT Consultant, Web DesignerAuthor Commented:
Antivirus has been disabled together with most Services.Network's gigabit.

One importante thing I forgot to mention: safe mode with networking makes the problem go away.
0
 
David AtkinIT ProfessionalCommented:
I'd refer back to the drivers again then.  When you replaced the network card was it the same model of card using the same driver?
0
 
Chris HInfrastructure ManagerCommented:
I would go with an entirely different brand and chipset of network card (preferably intel if you're not already) and install the latest drivers from the website.

Also, not sure about windows 2012, but you used to have to do cleanup after p2v for windows.  I'm wondering, since microsoft's OS has strayed the user so far from the kernel, if going from 08 to 12 has installed some form of virtual or TAP devices for any of your legacy hardware.  Try taking a look at everything network related, delete and re-install in device manager.

How to show orphaned and hidden devices in device manager:
http://support.microsoft.com/kb/315539

set devmgr_show_nonpresent_devices=1
start devmgmt.msc
Click Show hidden devices on the View menu in Device Manager
0
 
Daniele BrunengoIT Consultant, Web DesignerAuthor Commented:
We tried with 2 Intel cards and a Realtek chipset card. No change.

We're going to format everything tomorrow, it's taking too much time to diagnose this.
0
 
Daniele BrunengoIT Consultant, Web DesignerAuthor Commented:
So after formatting everything's perfect. Still would have loved to know what the hell was wrong in the previous setup, but we inherited it and were on a schedule. I'll distribute points since you were all quite helpful and it was a learning experience.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 7
  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now