Solved

Unable to connect to Server via RPC or DCOM

Posted on 2015-02-11
4
137 Views
Last Modified: 2015-05-02
We have applications that connect through DCOM and RPC to a main server, but this server is no longer allowing connections on port 135. I have performed a port test from several other machines in the same domain, but it is not accepting requests from anywhere. I have also attempted to Telnet using port 135 but this doesn't work either.

In addition to the above I have performed a netstat -a on the affected server and it states that there is a connection over port 135 to one of the domain controllers, but when I perform a port query to the affected server from the domain controller it comes back as not listening.

Finally I have performed a Wireshark capture on the server and when a SYN packet comes through the affected server responds with a RST ACK which also suggests that the port isn't listening.

Could anyone shed any light on how I might resolve this issue? I know that a reboot will fix the problem in the short term but in a week or so the problem will reappear, so I am looking for something a little more permanent.

Thanks in Advance
0
Comment
Question by:Martyn Lawson
  • 2
4 Comments
 
LVL 29

Expert Comment

by:Rich Weissler
Comment Utility
Don't know that I have a solution... but if I were looking at this, the next thing I'd look at would be 'netstat -ab' ... and see if I can find what might be misbehaving.  

And if it comes back reporting 'svchost.exe', might switch to 'netstat -ao'  (and I habitually use 'netstat -aon' so I don't have to wait for name resolution anyway), to get the PID, then ask 'tasklist /svc' which services are using that svchost process.
---
And attacking the problem from another direction, I might comb thru the Event Viewer, probably concentrated in the SYSTEM Event Log for errors, especially around the time the problem started.  I'm hoping there will be a DCOM error in there, which will probably give you the GUID of the component which is hanging.
0
 
LVL 19

Expert Comment

by:compdigit44
Comment Utility
Where there any y change on the server recently?
Made sure the CPU & memory is not max'd at 100%
The server is not experience ephemeral port exhaustion
0
 

Accepted Solution

by:
Martyn Lawson earned 0 total points
Comment Utility
In order to resolve this problem I implement hotfix KB2577795
0
 

Author Closing Comment

by:Martyn Lawson
Comment Utility
The other comments didn't not resolve the problem and I was forced to reboot the server every five days to avoid applications failure
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

Suggested Solutions

OfficeMate Freezes on login or does not load after login credentials are input.
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now