Unable to copy file directly via UNC, but I can if I go through a different PC

Confusing enough title?  Hopefully my explanation will be clearer.

There is a scheduled task that runs weekly on a server at our office that attempts to pull a text file from a PC (WXP) at one of our remote locations.  It is simply a batch file and the line that copies the file goes something like this:

copy \\10.1.0.1\share\textfile.txt c:\folder_on_server

Nothing too crazy, right?  It does this for multiple locations and all of them work except for one.  That one particular location fails every week.  The file is roughly 7MB in size.

I've tried opening the UNC where the text file is located via Windows Explorer on both the server and my workstation and then dragging and dropping the file.  It gets about half way and then just hangs.

Now here's the weird part.  Let's say I remotely log on to another computer at the same location as the PC that I'm unable to copy the file from.  If I open the UNC of the folder that has the file I can drag and drop it to the computer that I'm logged on to.  Even weirder, from that same remote machine that I'm logged on to, if I open the UNC of the server I can drag and drop the text file from the problem PC to the server and it copies without a problem.

I've never heard of anything like this.  Can anyone help?
brstoresAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Roy BeneVP/Director - IT | ISOCommented:
If you do ping -a hostname to the server from that workstation (the one having issues), what is the result? It sounds like a DNS issue. If you UNC to the IP address (\\IP_address\share\file) does it work? Also, you may want to verify your routes and perform a test transfer with ipxfer to ensure packets are actually going through for a full transfer.
brstoresAuthor Commented:
The name doesn't resolve, but I'm not sure it's a DNS issue.  The batch file is doing everything via IP.  When I drag an drop the file it starts transferring, gets to about 50% and then dies.  If it was a DNS issue it wouldn't be able to see the remote workstation (or the workstation wouldn't be able to see the server) at all.
Roy BeneVP/Director - IT | ISOCommented:
If you are doing everything via IP, it absolutely would be able to see the server. If the name does not resolve, then that is a problem. However, you're right; if the batch file does everything via IP, and it connects and starts the transfer initially, then DNS would have nothing to do with the issue at hand.

Have you tried copying any other files from any other location on that particular PC just to test?

Does that PC have a static or a dynamic IP assigned?
Need More Insight Into What’s Killing Your Network

Flow data analysis from SolarWinds NetFlow Traffic Analyzer (NTA), along with Network Performance Monitor (NPM), can give you deeper visibility into your network’s traffic.

brstoresAuthor Commented:
I have tried copying other files of the same size and got the same result.  I just successfully copied 155 files that were less than 10KB each (240KB total) directly to my computer without using the intermediate computer.

The IP is static.
Roy BeneVP/Director - IT | ISOCommented:
Is there a DHCP server at that site (or one it can use)? Can we try a dynamic IP?
brstoresAuthor Commented:
No there isn't.  What difference do you think it would make?

I just did another test.  I opened the remote machine via Windows explorer and I was able to successfully copy the file to it.  However, when I try to copy it back to my PC it will not complete.
Roy BeneVP/Director - IT | ISOCommented:
DHCP would just be a test to eliminate a bad IP, duplicate IP that you weren't informed about (which happens all the time with static IP's unless you have that IP reserved) etc. this is an unorthodox scenario. Most times, unorthodox troubleshooting tends to help resolve the issue (fair, as the problem makes no sense, so who's to say the solution will/should?).

I've seen this issue before a couple times. It 'could be' a lot of things. I do not know your logical layout, so I'm including things I've resolved this issue with before. Once there was a situation where the AV scanned files being copied/written, and saw something it didn't like a quarter of the way through the copy and stopped the copy. I've seen data limits set on a connection through throttling which prevented the entire file being copied. Again, it could be anything.

So back to the issue at hand... if you copy the file from the remote PC to yours, this initially worked as I understand, but now it does not?
brstoresAuthor Commented:
This is a fairly controlled environment.  Me or someone on my staff are the only people that would be installing network connected equipment.  There is nothing on the network that is conflicting with the IP address.

No.  It has never worked for this particular location.  There is a process that generates this file on the PC at the remote location.  The server then runs a task that copies it and processes it.  This works perfectly at our other 17 locations, just not this particular site.
CotillionCommented:
Have you tried logging into the problem PC remotely and trying to upload the file to the server, rather than having the server download the file from the PC?
brstoresAuthor Commented:
Yes.  It fails either way.
CotillionCommented:
Does anything come up in the event log in either system when the copy fails?
brstoresAuthor Commented:
Good question.  Not sure why, but I'd never thought to look before.  I just checked the logs on the workstation and the server.  Unfortunately there was nothing in either  related to this problem.
CotillionCommented:
In that case, are you able to check if there are any logs on the router at the remote site?

Also, have you done the good old reboot of the workstation? I will probably have no impact, but worth a try.. it is MS after all :P
brstoresAuthor Commented:
We don't manage the router our ISP does.  I know that there are no specific rules in the config that involve that PC.  I also have no problem transferring the same file from another computer which is behind that same router.

I have tried restarting it and it makes no difference.
pgm554Commented:
Download a copy of iperf and test between machines for packet loss.

https://iperf.fr/
Jackie ManIT ManagerCommented:
Run a ipconfIg /all command in the remote PC which has problem and post back the results.

Post also the results for the remote PC which has no problem.
brstoresAuthor Commented:
@pgm554, here are the iperf results.

Accepted connection from 10.14.0.5, port 3094
[  5] local 10.6.0.252 port 5201 connected to 10.14.0.5 port 3095
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.01   sec   252 KBytes  2.04 Mbits/sec
[  5]   1.01-2.01   sec   189 KBytes  1.55 Mbits/sec
[  5]   2.01-3.01   sec   189 KBytes  1.55 Mbits/sec
[  5]   3.01-4.01   sec   219 KBytes  1.80 Mbits/sec
[  5]   4.01-5.01   sec   222 KBytes  1.82 Mbits/sec
[  5]   5.01-6.01   sec   189 KBytes  1.55 Mbits/sec
[  5]   6.01-7.00   sec   189 KBytes  1.55 Mbits/sec
[  5]   7.00-8.00   sec   189 KBytes  1.55 Mbits/sec
[  5]   8.00-9.00   sec   223 KBytes  1.83 Mbits/sec
[  5]   9.00-10.02  sec   218 KBytes  1.76 Mbits/sec
[  5]  10.02-10.12  sec  0.00 Bytes  0.00 bits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.12  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.12  sec  2.03 MBytes  1.68 Mbits/sec                  receiver

Open in new window


I don't think there is any packet loss.  Also, packet loss would cause me to not be able to copy the file to the problem machine, which I can do with no problem.  I just can't copy it from the problem machine.
brstoresAuthor Commented:
@Jackie Man

Problem machine:
Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
        Physical Address. . . . . . . . . : 00-1B-78-B7-7B-69
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 10.14.0.5
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 10.14.0.1
        DNS Servers . . . . . . . . . . . : 10.6.0.246
                                            8.8.8.8

Open in new window


Other machine:
Ethernet adapter Local Area Connection 3:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Intel(R) I350 Gigabit Network Connection
#3
   Physical Address. . . . . . . . . : E4-1F-13-ED-75-A4
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::7191:6528:8b02:d87c%14(Preferred)
   IPv4 Address. . . . . . . . . . . : 10.6.0.252(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Default Gateway . . . . . . . . . : 10.6.0.1
   DHCPv6 IAID . . . . . . . . . . . : 384048915
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-17-63-B7-6D-E4-1F-13-ED-75-A2

   DNS Servers . . . . . . . . . . . : 10.6.0.246
                                       8.8.8.8
   NetBIOS over Tcpip. . . . . . . . : Enabled

Open in new window


Keep in mind that the other machine could have been any of the multiple computers that I'm unable to copy the file to.
pgm554Commented:
You're crossing subnets.
Are you using routers or switches?
If switches are you running layer two or layer 3 ?

You might want to try a differnt copy program too like robocopy or ShadowCopy  and see if there is a difference too.
brstoresAuthor Commented:
Correct.  The computer that I'm attempting to copy the file from is at a different location.  Each of our locations is set up with a distinct IP address range.  There are routers at each of our locations.  Those router are managed by our ISP.

I attempted to copy the file with robocopy.  It failed as well.  The error stated that the network name was no longer available.  I was running a continuous ping to the remote machine the entire time and there was no packet loss.
Matt VCommented:
What anti-virus are you running on the problem PC?
pgm554Commented:
Sounds like the router to me.
Can you reboot it?
Gerwin Jansen, EE MVETopic Advisor Commented:
Hi, quite a strange issue this is. Do you have the possibility to copy the file from the WXP machine to your server? So try and initiate the copy from the remote location. Just curious whether a copy the other way around would stall as well.
brstoresAuthor Commented:
@Matt V
Symantec Endpoint Protection 12.1.5.
(Awesoem avatar, BTW)
pgm554Commented:
>What anti-virus are you running on the problem PC?
Symantec AV Endpoint has been known to screw up things royally from time to time.

Symantec Endpoint Protection 12.1.5.

Yup,turn it off.
Gerwin Jansen, EE MVETopic Advisor Commented:
Same AV on other machines that work? Then AV would not be the issue.
brstoresAuthor Commented:
@pgm554 I can't restart the router during the day.  We run a chain of grocery stores and doing so would take down our ability to process credit cards.  I have engaged our ISP so they can look at the router while I'm transferring the file to see if there is anything weird going on.  I will have them look at it first and then perform an overnight reboot if it is deemed necessary.
pgm554Commented:
Try it .
Symantec is notorious for these types of issues.
Matt VCommented:
That specific issue is known to occur with Symantec EP.  You actually have to remove it from the PC to test.

https://support.microsoft.com/en-us/kb/961293

Talks about server, but there are other articles on other sites mentioning workstations as well.
brstoresAuthor Commented:
@pgm554/Gerwin Jansen
I have tried disabling the antivirus on the remote machine and it didn't help.  The same antivirus is deployed enterprise-wide.
Matt VCommented:
You have to un-install it to test.  Disabling it does not fix it.  

If that is the fix, then there is something specific on that machine interacting with the Symantec product.
brstoresAuthor Commented:
I removed SEP from the machine, rebooted it and tried the copy again.  It still failed.
brstoresAuthor Commented:
@Gerwin Jansen If I initiate the copy from the remote machine to the server it works every time.  I would really like to have the server initiate the copy for the purposes of the process that is using these files.  It just makes more sense to do it that way.
Gerwin Jansen, EE MVETopic Advisor Commented:
Just a thought - you could maybe compress that 7Mb file on the remote machine (scheduled task) and then transfer it from the server side. Depending on the file type compression could make it a lot smaller so you can transfer it successfully.
brstoresAuthor Commented:
It's actually a 220 MB text file that's being compressed down to 7 MB.
Gerwin Jansen, EE MVETopic Advisor Commented:
I see, already compressed ;)
brstoresAuthor Commented:
I've found that I'm able to FTP to the remote machine and download it that way.  I've modified my script on the server and while not an ideal solution because it differs from the way the other 17 locations are configured, I suppose it works.  Short of replacing the computer (which I will do someday), I don't know what the solution could be.
eeRootCommented:
Is there anything logged in the remote machine's system or security log when the file transfer fails?  And could these files be in use or locked by an application or process on the source PC?
brstoresAuthor Commented:
I've checked the logs on both the remote machine and the server.  There aren't any errors in either.  The file that is being copied is a zipped report export.  Nothing would be using this particular file.
Jackie ManIT ManagerCommented:
Is there an outbound firewall rule at the server side?

Or

Any file permission issue of the logon user at the server side for the destinated zip file?
brstoresAuthor Commented:
I don't manage the firewall, but I have checked with our ISP and there are no firewall rules.

There are no permissions set on the particular file that was prevent the copying of the file.  

Keep in mind that this issue is not specific to the file in question.  It will happen while trying to copy any file roughly over 5MB in size.
Jackie ManIT ManagerCommented:
Any internet security or antuvirus software installed in server?

Any windows firewall?
brstoresAuthor Commented:
The server has Symantec Endpoint Protection.  I don't think that's the issue though since there is no problem copying any files from any of the other 17 locations.

Windows firewall is disabled.
Gerwin Jansen, EE MVETopic Advisor Commented:
I guess a multi volume zip would be a option. Set it to create a 1Mb volume size. 7zip command line version can do that using the -v1m option. Maybe this will work for you.
brstoresAuthor Commented:
True.  I've already come up with a workaround by using FTP to download the file.  However, I posted this problem to this site to resolve the networking issue.  I have been in IT for many years and have never seen anything like this before.  My hope was to bounce this off of as big of an audience as possible to see if anyone else had ever encountered this.
pgm554Commented:
Well ,if you have the right switch(port mirror) ,we can try a Wireshark capture.
Gerwin Jansen, EE MVETopic Advisor Commented:
I did not encounter such an issue before, I'm out of suggestions, best of luck solving it.
brstoresAuthor Commented:
Wireshark is a good idea.  I just did two captures.  One from a location that doesn't have this problem and the one that does.  The one that works looks like a fairly normal capture.  A couple errors here and there, nothing too bad.  The one that is having a problem has TONS of errors.  The ones that are most prevalent are:

TCP Dup ACK
TCP Fast Retransmission
TCP Out-Of_order
TCP Previous segment not captured.
TCP Retransmission
TCP Spurious Retransmission

As I've said, I don't have problems copying files from other computers at that location.   I can also copy this (any) file from the problem PC to another PC in the same building without a problem.  I'm only having this problem when copying from the problem PC to something outside of the building.
eeRootCommented:
Can the problem PC maintain a constant ping with large packets to its default gateway without packet loss?  Try these commands and see if any test pings fail.  (replace x.x.x.x with the problem PC's default gateway)

ping x.x.x.x -n 20 -l 4096
ping x.x.x.x -n 20 -l 8192
ping x.x.x.x -n 20 -l 16384
pgm554Commented:
>I can also copy this (any) file from the problem PC to another PC in the same building without a problem.  I'm only having this problem when copying from the problem PC to something outside of the building.

So there is only one problem PC or it can be any PC within that building that attempts to copy using http over the wan?
Gerwin Jansen, EE MVETopic Advisor Commented:
About your ethernet adapter details above, is the 'other machine' on the same location as the 'problem machine'? I guess not but if so then the default gateway of the problem machine is different. Your primary DNS server is your own, right? The .246 one I mean. You also have a Google DNS server, tried an OpenDNS server instead of that one?
Jackie ManIT ManagerCommented:
Can you post the full result for running the ipconfig /all command?

it seems to the location where the problem PC lives has a change in the static IP address which is different from the original value stored at NetBIOS info of the server.
Jackie ManIT ManagerCommented:
Are you using LMHOSTS in your server storing the computer name and corresponding static IP address of the remote computer?
Jackie ManIT ManagerCommented:
It is a typical name resolution problem.

https://technet.microsoft.com/en-us/library/cc940089.aspx

Or

The router of the remote site where the problem PC lives no longer do the port forwarding job to the problem PC
brstoresAuthor Commented:
@eeRoot  No problem with the pings whatsoever.

@pgm554 There is only this one PC that I'm having this problem with.  I'm not copying via HTTP.  The problem occurs when I'm dragging and dropping files via Explorer or copying them from a command prompts.

@Gerwin Jansen The other machine is at the same location and therefore has the same gateway.  The DNS settings are the same for every single PC in our organization, including the 17 other PC's that I'm able to copy the same file from every week.  Plus, all copy commands are using IP's not FQDN's.

@Jackie Man
C:\Documents and Settings\user>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : S414
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
        Physical Address. . . . . . . . . : 00-1B-78-B7-7B-69
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 10.14.0.5
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 10.14.0.1
        DNS Servers . . . . . . . . . . . : 10.6.0.246
                                            8.8.8.8

Open in new window

There is no name lookup necessary.  Everything is using IP addresses.  There are no ports being blocked nor forwarded.  All of our sites are connected via VPN.  There are no restrictions in place that would stop inter-site traffic.
Jackie ManIT ManagerCommented:
Have you tried to modify the MTU?
brstoresAuthor Commented:
I have not.  It's set to the default 1500 right now.  What would you recommend changing it to?  Is there any way to test the changes without rebooting the PC?  If not, then I'm not going to be able to test this until late this evening.
pgm554Commented:
If it's only that one PC,have you tried updating the NIC drivers , using another card or changing the switch port??
Jackie ManIT ManagerCommented:
Your remote site uses tplink router?

Your MTU value at remote site is a bit high.

You need to find out the right value by trial and error.

Run the following command in command prompt.

 ping www.tp-link.com -f -l xxxx

Where xxxx=1492 on first attempt.

If your results shows wording of .... fragmented...., reduce the value by 10 or 12 each time, and run the above command again to see whether you see the "fragmented" wording. It will be the correct value if you do not see the wording.

Source: http://www.tp-link.tw/article/?faqid=190
pgm554Commented:
Run this on affected PC and post results

http://netspeed.stanford.edu:7123/
Jackie ManIT ManagerCommented:
The info below might be useful for you.

Here's a dirty hack to figure out your MTU. Start by looking at your current MTU setting. Open a command prompt with Administrative privledges and then run the command as follows:

netsh interface ipv4 show subinterfaces
You'll see something like:

   MTU  MediaSenseState   Bytes In  Bytes Out  Interface
------  ---------------  ---------  ---------  -------------
  1500                1  8864896253  1116506364  Local Area Connection
With that knowledge you'll note that your MTU is currently set to 1500. If that's what your ISP works with... you should be able to ping sites like msn.com or google.com with a packet size of 1500 without fragmenting the packet.

ping www.google.com -f -l 1500
If you see an error message like: Packet needs to be fragmented but DF set. You know you need to go smaller. So, subtract 8 & try again... until you find a valid MTU. Once you find the one that gives you a reply without complaining about needing to be fragmented... it's time to change your MTU. Back to the admin command prompt... and we do this: (replace 1464 with whatever you came up with)

netsh interface ipv4 set subinterface "Local Area Connection" mtu=1464 store=persistent
If you just want to test this out... without committing changes... skip the store=persistent bit... and a reboot will set it back the way it was. You can also manually set it back to whatever you started with...

Once you know what your ISP's MTU is... you should then do the same for any tunnel-interfaces you have. VPN tunnels add their overhead and so the usable MTU is a few bytes less. If you're using a hardware VPN gateway of some sort, it may automatically set the MTU... and you may not be able to set it manually.

Keep in mind, that I also did not address "jumbo frames"... which can have a MTU of 9000 or more. Most ISPs do not allow jumbo-frames unless you have a higher end business account.

I don't know if that will work for everyone... but it "worked for me"

Source: http://serverfault.com/questions/444395/connection-drops-while-transferring-large-files-to-one-server-on-a-network
brstoresAuthor Commented:
None of these solutions resolved the issue and it still remains to the day.  The only way I've been able to get the file to copy is by setting up a script to copy it to another system and then copying it from there.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
brstoresAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for brstores's comment #a41361190

for the following reason:

No solutions provided resolved the issue.
Gerwin Jansen, EE MVETopic Advisor Commented:
If there's no solution, this question should be deleted instead
pgm554Commented:
I just looked at the iperf stats,are you going across a wan of some sorts?

Accepted connection from 10.14.0.5, port 3094
[  5] local 10.6.0.252 port 5201 connected to 10.14.0.5 port 3095
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-1.01   sec   252 KBytes  2.04 Mbits/sec
[  5]   1.01-2.01   sec   189 KBytes  1.55 Mbits/sec
[  5]   2.01-3.01   sec   189 KBytes  1.55 Mbits/sec
[  5]   3.01-4.01   sec   219 KBytes  1.80 Mbits/sec
[  5]   4.01-5.01   sec   222 KBytes  1.82 Mbits/sec
[  5]   5.01-6.01   sec   189 KBytes  1.55 Mbits/sec
[  5]   6.01-7.00   sec   189 KBytes  1.55 Mbits/sec
[  5]   7.00-8.00   sec   189 KBytes  1.55 Mbits/sec
[  5]   8.00-9.00   sec   223 KBytes  1.83 Mbits/sec
[  5]   9.00-10.02  sec   218 KBytes  1.76 Mbits/sec
[  5]  10.02-10.12  sec  0.00 Bytes  0.00 bits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  5]   0.00-10.12  sec  0.00 Bytes  0.00 bits/sec                  sender
[  5]   0.00-10.12  sec  2.03 MBytes  1.68 Mbits/sec          


This  is one of my production systems:

C:\iperf>iperf -c 192.168.1.122 -t 60
------------------------------------------------------------
Client connecting to 192.168.1.122, TCP port 5001
TCP window size: 8.00 KByte (default)
------------------------------------------------------------
[180] local 192.168.1.2 port 18885 connected with 192.168.1.122 port 5001
[ ID] Interval       Transfer     Bandwidth
[180]  0.0-60.0 sec  2.13 GBytes   305 Mbits/sec
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Networking

From novice to tech pro — start learning today.