Solved

Unable to connect to Server via RPC or DCOM

Posted on 2015-02-11
4
161 Views
Last Modified: 2015-05-02
We have applications that connect through DCOM and RPC to a main server, but this server is no longer allowing connections on port 135. I have performed a port test from several other machines in the same domain, but it is not accepting requests from anywhere. I have also attempted to Telnet using port 135 but this doesn't work either.

In addition to the above I have performed a netstat -a on the affected server and it states that there is a connection over port 135 to one of the domain controllers, but when I perform a port query to the affected server from the domain controller it comes back as not listening.

Finally I have performed a Wireshark capture on the server and when a SYN packet comes through the affected server responds with a RST ACK which also suggests that the port isn't listening.

Could anyone shed any light on how I might resolve this issue? I know that a reboot will fix the problem in the short term but in a week or so the problem will reappear, so I am looking for something a little more permanent.

Thanks in Advance
0
Comment
Question by:Martyn Lawson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 40604486
Don't know that I have a solution... but if I were looking at this, the next thing I'd look at would be 'netstat -ab' ... and see if I can find what might be misbehaving.  

And if it comes back reporting 'svchost.exe', might switch to 'netstat -ao'  (and I habitually use 'netstat -aon' so I don't have to wait for name resolution anyway), to get the PID, then ask 'tasklist /svc' which services are using that svchost process.
---
And attacking the problem from another direction, I might comb thru the Event Viewer, probably concentrated in the SYSTEM Event Log for errors, especially around the time the problem started.  I'm hoping there will be a DCOM error in there, which will probably give you the GUID of the component which is hanging.
0
 
LVL 20

Expert Comment

by:compdigit44
ID: 40606918
Where there any y change on the server recently?
Made sure the CPU & memory is not max'd at 100%
The server is not experience ephemeral port exhaustion
0
 

Accepted Solution

by:
Martyn Lawson earned 0 total points
ID: 40746330
In order to resolve this problem I implement hotfix KB2577795
0
 

Author Closing Comment

by:Martyn Lawson
ID: 40755961
The other comments didn't not resolve the problem and I was forced to reboot the server every five days to avoid applications failure
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question