how to debug  a large number of net statistics server sessions error-out

tucktech
tucktech used Ask the Experts™
on
Hello, I am looking at a server that was restarted 7 days ago and has the stats below.  This is a DC that has connections to a remote DC via a VPN and has about 40 laptops via wifi connected.  The server provides AD, file shares and print services.   I know we have had major issues with our ISP but not sure how to identify the errors.  What is the best method in sequence order to help identify these errors?


Statistics since 3/6/2016 4:20:31 AM

Sessions accepted                  7
Sessions timed-out                 296
Sessions errored-out               9460

Kilobytes sent                     44870064
Kilobytes received                 1854635

Mean response time (msec)          0

System errors                      0
Permission violations              184060
Password violations                3

Files accessed                     63200062
Communication devices accessed     0
Print jobs spooled                 0

Times buffers exhausted

  Big buffers                      0
  Request buffers                  0

The command completed successfully.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
IT Consultant
Commented:
per the statistics above, the server was basically a file server rather than an AD controller, though in most situations the file sharing sessions were over slow links in idle status hence reconnection and re-access to the same files were not uncommon.

in addition, it also shows some users often tried to access files without proper permissions. it could be a real security alert or it may indicate some of the shared files are not given sufficient permissions to remote users.

Author

Commented:
Thanks Bing CISM / CISSP,

Ok, I get the security issues and will track those down.

Is there any guide or documentation I could refer to to help me resolve these issues?

Yes, some of this is over slow links and a link that has a bad connection but I do have some problems locally and I want to remove any bad issues, any thoughts on how to debug?
bbaoIT Consultant

Commented:
you actually don't need any sophisticated tools kit to troubleshot the issues, just some basic tools and a good understanding about your network topology can help you do that.

here is a good starting point to learn the easaential tools.

https://www.pluralsight.com/blog/it-ops/network-troubleshooting-tools

in your scenario, PING and TRACERT can help you work out the bottleneck from point A to B across your network though they are just two basic commands.
Become a Microsoft Certified Solutions Expert

This course teaches how to install and configure Windows Server 2012 R2.  It is the first step on your path to becoming a Microsoft Certified Solutions Expert (MCSE).

Author

Commented:
I have completed pings, traceroutes, nslookups and they all seem to work well.  Not sure how to track down were the errors are comming from, would a wireshark tell me?
bbaoIT Consultant

Commented:
permission and timeout issues can be logged in the Windows Event Logs including System, Security and even Applications. please have a check over there.

Author

Commented:
ends up being the way the server was originally setup and that the hardware had issues too.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial