Network has gone nuts!

Printable View

April 2nd, 2005, 08:25 AM
aeallison

Network has gone nuts!

Hey all, I am not real sure this is the right forum to list this in so if any of the Mods want to move it thats ok by me.

I have a simple home network with 2 computers each running win2k pro, SP4, patched up to date. For months I have used one computer to connect via dialup to the internet using internet connection sharing I connect the other machine to the internet through the first box. We have never had any problems until this afternoon when I tried to connect a friends win98 box into my network to access the internet. Suddenly my network is broken and no amount of restarts or reconfiguration manual or automatic will get the two to talk with each other again. when I look at the event logs on the first box I see:

Quote:

The master browser has received a server announcement from the computer MELTDOWN that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8F6F7A7F-A376-4C0A-. The master browser is stopping or an election is being forced.

Meltdown being the name of box 2 ;)

This may sound stupid, and I feel I should know how to make these boxes work together, never have I had this kind of problem, I have also tried to manually configure IP addresses for these two using the common 192.168.0.1 and 192.168.0.5 with a subnet mask of 255.255.255.0 for both, placing them both in a workgrop called HOME or whatever. Still they will not transfer packets between one another.

Someone please tell me what I am doing wrong before I go completely mad.
April 2nd, 2005, 09:03 AM
ghostmachine

Re: Network has gone nuts!

Quote:

Originally posted here by aeallison
Hey all, I am not real sure this is the right forum to list this in so if any of the Mods want to move it thats ok by me.

I have a simple home network with 2 computers each running win2k pro, SP4, patched up to date. For months I have used one computer to connect via dialup to the internet using internet connection sharing I connect the other machine to the internet through the first box. We have never had any problems until this afternoon when I tried to connect a friends win98 box into my network to access the internet. Suddenly my network is broken and no amount of restarts or reconfiguration manual or automatic will get the two to talk with each other again. when I look at the event logs on the first box I see:

Meltdown being the name of box 2 ;)

This may sound stupid, and I feel I should know how to make these boxes work together, never have I had this kind of problem, I have also tried to manually configure IP addresses for these two using the common 192.168.0.1 and 192.168.0.5 with a subnet mask of 255.255.255.0 for both, placing them both in a workgrop called HOME or whatever. Still they will not transfer packets between one another.

Someone please tell me what I am doing wrong before I go completely mad.

have a look http://www.eventid.net/display.asp?e...MRxSmb&phase=1
April 2nd, 2005, 10:00 AM
aeallison

Nice try but no cigar... the link you provided has to do with computers on a domain, and if I try to find out more about it they want to sell me a subscription. These are simply two computers on a home network that used to work fine and now will not. I have even gone so far as to reinstall windows on box 2. Same friggin errors....
April 2nd, 2005, 10:09 AM
foxyloxley

I assume thatyou have removed the third unit ?

When you added the third unit, what exactly did you do ?
When you removed it, did you reverse the above ?

What exactly, was your friends PC being used for ?
As the error message suggests that it had been set up as a DC ? and it doesn't like sharing ;)

Have you tried to set your box back to IP automatically, reboot, set the IP manually, reboot [again] and see if it starts to behave ?

Luck to you

I'm having a little [lots of] difficulty getting my network off the ground, again two PC's XP Pro on one, W2K Server on other.
April 2nd, 2005, 10:36 AM
aeallison

I removed the 98 machine instantly after my connection on box 2 was interrupted. I have been doing some googling of the problem and have come to the conclusion that the 98 box wanted to be the master browser in turn causing the conflicts with the other two machines. I have set both win2k boxes back to the static IP addresses they originally had. I even reinstalled windows on box 2 and got the same errors. One update though is that I did a search for box 2 from box one and it was found, although there have been zero packet transfers between the two. If I do a search from box 2 to try and find box 1 I get nothing.
April 2nd, 2005, 01:38 PM
sec_ware

Hi

In an initial step, I am trying to gather infos for this problem. To fix the idea,
I am thinking in the lines of a name resolution problem.

- are you using NetBIOS via TCP/IP? ie is/was the traffic on 137-139 or 445?

- on box 1: are the computer browser-, workstation- and server-services running?

- on box 2: does ping box_1_name work? if not, does ping 192.168.0.1 work?
(I assume 192.168.0.1 is the IP of box 1). -> WINS resolution problem.

- One useful tool for troubleshooting NetBIOS problems is nbtstat[1], which is
part of the resource kit[1]. What does

Code:

> nbtstat -n > nbtstat -r

tell you (shows resolved names)?

Code:

> nbtstat -A 192.168.0.1 > nbtstat -a box_1_name

result?

As per the master browser issue. In theory ( :) ) there are announcements all 12-15 minutes[2,3].
Even if the Win98 caused a problem here, this issue should resolve itself automatically.
If a master browser is not found, an election is forced[4]. Next step: browstat/browcon[5].

In addition, try a "search for computers" but enter the IP rather than the name of box 1.

Cheers.

[1] http://www.microsoft.com/resources/d...f_tts_pjtk.asp
[2] http://www.microsoft.com/technet/arc...g/a06_brw.mspx
[3] http://www.microsoft.com/resources/d...i_brs_ECEA.asp
[4] http://www.microsoft.com/technet/arc...ng/ent421.mspx
[5] http://support.microsoft.com/default...b;en-us;818092
April 2nd, 2005, 02:22 PM
aeallison

Results for box 1:

Code:

nbstat -n NetBIOS Names Resolution and Registration Statistics ---------------------------------------------------- Resolved By Broadcast = 0 Resolved By Name Server = 0 Registered By Broadcast = 77 Registered By Name Server = 0

Code:

nbstat -r NetBIOS Names Resolution and Registration Statistics ---------------------------------------------------- Resolved By Broadcast = 0 Resolved By Name Server = 0 Registered By Broadcast = 77 Registered By Name Server = 0

Code:

nbstat -A 192.168.0.1 NetBIOS Names Resolution and Registration Statistics ---------------------------------------------------- Resolved By Broadcast = 0 Resolved By Name Server = 0 Registered By Broadcast = 77 Registered By Name Server = 0

Code:

nbstat -a innocent Local Area Connection: Node IpAddress: [192.168.0.1] Scope Id: [] NetBIOS Remote Machine Name Table Name Type Status --------------------------------------------- INNOCENT <00> UNIQUE Registered INNOCENT <20> UNIQUE Registered WORKGROUP <00> GROUP Registered WORKGROUP <1E> GROUP Registered MAC Address = 00-50-BA-4A-0F-F8 \Device\NetBT_Tcpip_{337580CB-3D98-4ECE-8FBE-67865980D55C}: Node IpAddress: [64.91.19.55] Scope Id: [] Host not found.

As for renewing itself its been over 4 hours without my changing anything and still is not working, funny thing is that box one shows both computers in My Network Places, but when I click on the icon for box 2 it just says //Meltdown not accesable network path not found. How did it get the name of box 2 without a network path? Box 2 only shows itself. no packets recieved on either box, many have been sent.

Browstat.exe only applies to win2k adv server and server, I don't have these on a domain.
April 2nd, 2005, 02:58 PM
sec_ware

Hi

I am puzzled by the outputs of nbtstat. Sorry for inquiring, but is the shown
result for nbtstat -n and nbtstat -A 192.168.0.1 really as is? What are
the results from box 2 (in particular the -a and -A options).

Just to make sure: NetBIOS over TCP/IP is activated and 137-139 (UDP and TCP, both
for simplicity) is allowed (on the local subnet)?

Let's try to enforce a new browser list and master (browstat does also work for win2k
workstation). For simplicity: shutdown box 2, restart box 1. (afterwards, do the same
switching box 2 <-> box 1) (maybe an overkill here ...) then, on box 1:

Code:

> nbtstat -RR > nbtstat -R > browstat status HOME > browstat elect [transport] HOME > browstat status HOME

the first browstat status HOME provides you with the transport address.

Restart the second machine, do the same. check with browstat status HOME
which machine is the master. I just have set up the same setup here, and this
procedure cleared the list, everything is running smoothly.

It's been a while I had to struggle with this (I am working with net use,
and never view the network neighbourhood), so I am shooting a bit in the dark.
More experienced people might know more efficient ways, better tools, ...
Good luck.

Cheers.
April 2nd, 2005, 04:01 PM
aeallison

If I disable the nic in box 2 I get this after disable/enable the nic on box 1:

Code:

Local Area Connection: Node IpAddress: [192.168.0.1] Scope Id: [] NetBIOS Local Name Table Name Type Status --------------------------------------------- INNOCENT <00> UNIQUE Registered INNOCENT <20> UNIQUE Registered WORKGROUP <00> GROUP Registered WORKGROUP <1E> GROUP Registered WORKGROUP <1D> UNIQUE Registered ..__MSBROWSE__.<01> GROUP Registered \Device\NetBT_Tcpip_{337580CB-3D98-4ECE-8FBE-67865980D55C}: Node IpAddress: [64.91.19.55] Scope Id: [] No names in cache

Then when I re enable the nic in box 2, in about 15 minutes I get an event message:

Quote:

The master browser has received a server announcement from the computer MELTDOWN that believes that it is the master browser for the domain on transport NetBT_Tcpip_{8F6F7A7F-A376-4C0A-. The master browser is stopping or an election is being forced.

Then box one gets this from nbtstat -n:

Code:

Local Area Connection: Node IpAddress: [192.168.0.1] Scope Id: [] NetBIOS Remote Machine Name Table Name Type Status --------------------------------------------- INNOCENT <00> UNIQUE Registered INNOCENT <20> UNIQUE Registered WORKGROUP <00> GROUP Registered WORKGROUP <1E> GROUP Registered MAC Address = 00-50-BA-4A-0F-F8 \Device\NetBT_Tcpip_{337580CB-3D98-4ECE-8FBE-67865980D55C}: Node IpAddress: [64.91.19.55] Scope Id: [] Host not found.

Then I look at box 2 again and it now is the master browser! How do I keep this from happening? Box 1 has to be the master browser, but it always loses the election. I don't have a modem for box 2, and I can't remove the modem in box one as it is an ISA modem and box 2 is PCI only. and even when box one wins and box 2 concedes I still cannot send packets either way. I am about to throw both of these out the window. I'm sorry but the Browstat package requires the .net framework and I don't have it installed on either box. Too large to download over a dialup conn.
April 2nd, 2005, 04:10 PM
sec_ware

Hi

You can omit one box from being part of the election using a
registry key change[1].

Code:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Browser\Parameters -> IsDomainMaster = Yes (on box one) -> MaintainServerList = No (on box two)

Quote:

I'm sorry but the Browstat package requires the .net framework and I don't have it installed on either box

That's a pity. I did not know that.

A (last) question:
Can you perform on box two an

Code:

> net use z: \\192.168.0.1\c$ /user:administrator

respectively 192.168.0.5 on box one?

Quote:

I still cannot send packets either way

Could you be more specific? You can ping I assume. Maybe the above net use
works. Are you refering to th internet connection sharing (box 2 via box 1 to internet)?

Cheers.

[1] http://www.winguides.com/registry/display.php/54/
April 2nd, 2005, 05:18 PM
aeallison

First off, to be completely clear, NetBios over TCP/IP is activated... How do I check that 137-139 (UDP and TCP) is allowed??

Quote:

Just to make sure: NetBIOS over TCP/IP is activated and 137-139 (UDP and TCP, both
for simplicity) is allowed (on the local subnet)?

I cannot ping either machine from either machine... erm

The packets I am refering to is seen when you open the network properties and view the connection status.

I made the Registry changes suggested and now the Computer Browser Service on box 2 fails with a Server Specific Error 2550.

When I try the command below on box 1 I get the following error.

Code:

> net use z: \\192.168.0.5\c$ /user:administrator

Quote:

System error 53 has occurred.

The network path was not found.
April 2nd, 2005, 05:35 PM
zENGER

Have you done a virus scan on both boxes? Seems odd that right after connecting an outside box that both of the others died. Sounds like you might have propogated a virus to them. I had a problem with a network that sounds very similar to what you're describing and it was the klez virus. Might want to get a bartPE disc with an updated virus scanner and check those two machines out.
April 2nd, 2005, 09:20 PM
morganlefay

Some thoughts
:idea:

I just had a problem with an xp network with a 98 box and these are some of the things I did to fix...

can you ping 127.0.0.01 on the boxes...???

Try and uninstall tcp\ip and reinstall\reconfigure.

Make sure both machines are in the same workgroup??

MLF
April 2nd, 2005, 09:33 PM
aeallison

I am definately getting closer. I downloaded updated nic drivers for box 1 and 2 and installed them. I can now transfer files between the two computers. The Browser Master Wars have ended with box 1 victorious. I am now haveing problems getting box 2 to connect to the internet through box 1's dialup connection, I can ping box 1 but cannot get past it at all. Have any ideas what may cause this problem, I have been at this since 5:00 CST yesterday. I am about ready to pass out but I really need to get the connection re-established so I can update the new install on box 2.
April 2nd, 2005, 09:38 PM
morganlefay

maybe its a permssions thing...is the user of box 2 added to the local users of box 1

You said it was a new install...maybe just remove the user and then add again?

MLF

edit>

found this...refers to xp...but then references windows computers in the article has more links too

http://support.microsoft.com/default...b;en-us;310651
April 2nd, 2005, 11:27 PM
aeallison

I am not sure... I have created users and permissions, I can access shares on both computers, so I don't think thats it. I have even run programs over the network. I just can't seem to connect to the internet.

Sorry, morganlefay the link you provided doesn't work.

Quote:

found this...refers to xp...but then references windows computers in the article has more links too

http://support.microsoft.com/default...b;en-us;310651
April 2nd, 2005, 11:37 PM
morganlefay

http://support.microsoft.com/default...b;en-us;310651

sorry try this :rolleyes:
April 3rd, 2005, 03:08 AM
aeallison

Ok... I have configured ICS exactly as Microsoft instructs. I have done evrything I can think of to get box 2 to connect to the internet through box 1. I have even installed an Intel Pro100s Server Adaptor NIC in box 2, then again in box one. Still no internet... I have uninstalled TCP/IP, Client for Microsoft Networks, and File and Printer Sharing on both boxes and re enabled. I have tried different LAN cables and changed out my switch with another. I have installed new drivers and visited windows update on box 1 (I can't on box 2) any hotfixes that I could find to download for installation in box 2 has been done.

Help me please :(

[shadow]UPDATE![/shadow]

You would never guess in a million years how I got this mess fixed :D

Ahh, ok I'll tell ya...

As you know I was getting the 2 boxes to share files and run programs over the LAN connection, and for some unforseen reason ICS refused to work after all of my efforts and all the threatening gestures I made towards these two while brandishing a screwdriver very menacingly. My eyes were watering and burning from all of the reading I was forced into, still to absolutely no avail. I finally went into the Help applet that I very seldom ever look at and I was slapped in the face by something so stupid and redundant that if anyone would have suggested this to me I would have laughed them right outa the country. I configured Box 1 to accept incoming VPN connections and in turn configured box 2 to create a VPN tunnel through my LAN connection with a different IP Address in the same pool as the LAN. By unchecking the option to use the default gateway on a remote network I in essance created a dual duplex connection that finally allows me to connect to the Internet. I am writing this post from Box 2!!

I am curious about your opinions of how I dumbshi**d my way into a reliable Internet connection. ;)