Random Network Disconnects

Hello:

I am having a problem diagnosing a random network disconnect for one of my
Windows 2003 R2 Sp2 servers. It will randomly disconnect itself from the
network and the only way I can seem to get it back up is to restart the box.

Here is a portion of a netdiag with verbose logging turned on. I had to
edit some portions out due to confidentiality.


Gathering IPX configuration information.
Querying status of the Netcard drivers... Passed
Testing IpConfig - pinging the Primary WINS server... Failed
Testing IpConfig - pinging the Secondary WINS server... Failed
Testing Domain membership... Passed
Gathering NetBT configuration information.
Testing for autoconfiguration... Passed
Testing IP loopback ping... Passed
Testing default gateways... Failed
Enumerating local and remote NetBT name cache... Passed
Testing the WINS server
Local Area Connection
Sending name query to primary WINS server edited - Failed
Sending name query to secondary WINS server edited - Failed
Gathering Winsock information.
Testing DNS
Testing redirector and browser... Failed
Testing DC discovery.
Looking for a DC
Gathering the list of Domain Controllers for domain 'edited'
Testing trust relationships... Failed
Testing Kerberos authentication... Passed
Testing LDAP servers in Domain edited ...
Gathering routing information
Gathering network statistics information.
Gathering configuration of bindings.
Gathering RAS connection information
Gathering Modem information
Gathering Netware information
Gathering IP Security information

Tests complete.


Computer Name: ITDSPSTEST01
DNS Host Name: itdspstest01.itd.edited.edited
DNS Domain Name: itd.edited.edited
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : x86 Family 15 Model 33 Stepping 2, AuthenticAMD
Hotfixes :
Installed? Name
Yes KB925902
Yes KB931836
Yes Q147222
No ServicePackUninstall


Netcard queries test . . . . . . . : Passed

Information of Netcard drivers:


---------------------------------------------------------------------------
Description: HP NC7782 Gigabit Server Adapter
Device: \DEVICE\{9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}

Media State: Connected

Device State: Connected
Connect Time: 14 days, 00:22:41
Media Speed: 100 Mbps

Packets Sent: 113026759
Bytes Sent (Optional): 0

Packets Received: 123022180
Directed Pkts Recd (Optional): 115599138
Bytes Received (Optional): 0
Directed Bytes Recd (Optional): 0


---------------------------------------------------------------------------
[PASS] - At least one netcard is in the 'Connected' state.



Per interface results:

Adapter : Local Area Connection
Adapter ID . . . . . . . . : {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}

Netcard queries test . . . : Passed

Adapter type . . . . . . . : Ethernet
Host Name. . . . . . . . . : itdspstest01
Description. . . . . . . . : HP NC7782 Gigabit Server Adapter
Physical Address . . . . . : 00-19-BB-28-7B-1E
Dhcp Enabled . . . . . . . : No
DHCP ClassID . . . . . . . :
Autoconfiguration Enabled. : Yes
IP Address . . . . . . . . : edited
Subnet Mask. . . . . . . . : 255.255.254.0
Default Gateway. . . . . . : edited
Primary WINS Server. . . . : edited
Secondary WINS Server. . . : edited
Dns Servers. . . . . . . . : edited
edited

IpConfig results . . . . . : Failed
Pinging the Primary WINS server edited - not reachable
Pinging the Secondary WINS server edited - not reachable

AutoConfiguration results. . . . . . : Passed
AutoConfiguration is not in use.

Default gateway test . . . : Failed
Pinging gateway edited - not reachable
No gateway reachable for this adapter.

NetBT name test. . . . . . : Passed
NetBT_Tcpip_{9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}
ITDSPSTEST01 <00> UNIQUE REGISTERED
edited <00> GROUP REGISTERED
ITDSPSTEST01 <20> UNIQUE REGISTERED
edited <1E> GROUP REGISTERED
[WARNING] At least one of the <00> 'WorkStation Service', <03>
'Messenger Service', <20> 'WINS' names is missing.

NetBios Resolution : via DHCP

No remote names have been found.

WINS service test. . . . . : Failed
Sending name query to primary WINS server edited - Failed
Sending name query to secondary WINS server edited - Failed
The test failed. We were unable to query the WINS servers.
IPX test : IPX is not installed on this machine.


Global results:


IP General configuration
LMHOSTS Enabled. . . . . . . . : Yes
DNS for WINS resolution. . . . : Enabled
Node Type. . . . . . . . . . . : Broadcast
NBT Scope ID . . . . . . . . . :
Routing Enabled. . . . . . . . : No
WINS Proxy Enabled . . . . . . : No
DNS resolution for NETBIOS . . : No



Domain membership test . . . . . . : Passed
Machine is a . . . . . . . . . : Member Server
Netbios Domain name. . . . . . : edited
Dns domain name. . . . . . . . : edited
Dns forest name. . . . . . . . : editd
Domain Guid. . . . . . . . . . : {3DD53E8C-630F-4350-9E4A-edited}
Domain Sid . . . . . . . . . . : S-1-5-21-1482476501-115176313-edited
Logon User . . . . . . . . . . : Administrator
Logon Domain . . . . . . . . . : ITDSPSTEST01


NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}
1 NetBt transport currently configured.


Autonet address test . . . . . . . : Passed
PASS - you have at least one non-autoconfigured IP address


IP loopback ping test. . . . . . . : Passed
PASS - pinging IP loopback address was successful.
Your IP stack is most probably OK.


Default gateway test . . . . . . . : Failed

[FATAL] NO GATEWAYS ARE REACHABLE.
You have no connectivity to other network segments.
If you configured the IP protocol manually then
you need to add at least one valid gateway.


NetBT name test. . . . . . . . . . : Passed
No NetBT scope defined
[WARNING] You don't have a single interface with the <00> 'WorkStation
Service', <03> 'Messenger Service', <20> 'WINS' names defined.


Winsock test . . . . . . . . . . . : Passed
The number of protocols which have been reported : 16
Description: MSAFD Tcpip [TCP/IP]
Provider Version :2
Max message size : Stream Oriented
Description: MSAFD Tcpip [UDP/IP]
Provider Version :2
Description: RSVP UDP Service Provider
Provider Version :6
Description: RSVP TCP Service Provider
Provider Version :6
Max message size : Stream Oriented
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{A7175E2D-E699-4862-99CA-59AED5AC7A55}] SEQPACKET 0
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{A7175E2D-E699-4862-99CA-59AED5AC7A55}] DATAGRAM 0
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}] SEQPACKET 1
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}] DATAGRAM 1
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{AFC84CF5-0B50-4D84-8772-478C278C4085}] SEQPACKET 2
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{AFC84CF5-0B50-4D84-8772-478C278C4085}] DATAGRAM 2
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{0BBFCAB5-6DAE-442E-BE9F-3211CB7F4DA9}] SEQPACKET 3
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{0BBFCAB5-6DAE-442E-BE9F-3211CB7F4DA9}] DATAGRAM 3
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{136295AC-DD30-43E9-954D-2AE07573F3FB}] SEQPACKET 4
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{136295AC-DD30-43E9-954D-2AE07573F3FB}] DATAGRAM 4
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{3948780B-88E5-4320-B5EF-6DB97867BCC7}] SEQPACKET 5
Provider Version :2
Description: MSAFD NetBIOS
[\Device\NetBT_Tcpip_{3948780B-88E5-4320-B5EF-6DB97867BCC7}] DATAGRAM 5
Provider Version :2

Max UDP size : 65507 bytes


DNS test . . . . . . . . . . . . . : Passed
Interface {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}
DNS Domain:
DNS Servers: edited edited
IP Address: Expected registration with PDN (primary DNS
domain name):
Hostname: itdspstest01.edited.
[WARNING] Cannot find a primary authoritative DNS server for the
name
'itdspstest01.edited.'. [ERROR_TIMEOUT]
The name 'itdspstest01.edited.' may not be registered in DNS.

(obviously it was disconnected from the network)

The only clues I have is these events in Event Viewer.

Event Type: Warning
Event Source: DnsApi
Event Category: None
Event ID: 11166
Date: 7/9/2007
Time: 8:22:54 AM
User: N/A
Computer: ITDSPSTEST01
Description:
The system failed to register host (A) resource records (RRs) for network
adapter
with settings:

Adapter Name : {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}
Host Name : itdspstest01
Primary Domain Suffix : edited
DNS server list :
edited, edited
Sent update to server : edited
IP Address(es) :
edited

The reason the system could not register these RRs was because of a
security related problem. The cause of this could be (a) your computer does
not have permissions to register and update the specific DNS domain name set
for this adapter, or (b) there might have been a problem negotiating valid
credentials with the DNS server during the processing of the update request.

You can manually retry DNS registration of the network adapter and its
settings by typing "ipconfig /registerdns" at the command prompt. If problems
still persist, contact your DNS server or network systems administrator. For
specific error code, see the record data displayed below.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 39 23 00 00 9#..

And message here as well

Event Type: Warning
Event Source: DnsApi
Event Category: None
Event ID: 11164
Date: 7/7/2007
Time: 12:55:10 AM
User: N/A
Computer: ITDSPSTEST01
Description:
The system failed to register host (A) resource records (RRs) for network
adapter
with settings:

Adapter Name : {9513B44C-BF62-4FC2-A9BD-9BB66CF20E90}
Host Name : itdspstest01
Primary Domain Suffix : edited
DNS server list :
edited
Sent update to server : <?>
IP Address(es) :
edited

The reason the system could not register these RRs was because either (a)
the DNS server does not support the DNS dynamic update protocol, or (b) the
authoritative zone for the specified DNS domain name does not accept dynamic
updates.

To register the DNS host (A) resource records using the specific DNS domain
name and IP addresses for this adapter, contact your DNS server or network
systems administrator.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: b4 05 00 00 ´...


I can do the ipconfig /registerdns ....I receive the same message regarding
DnsApi but no disconnect. My production boxes also have the same DnsApi
notification but without the disconnect issue. I have tried to narrow down
the problem by just killing the network adapter and enabling it again but it
still will not allow me to go anywhere without a complete system reboot.
Post-reboot eveything functions without a problem. Hardware arcitechture is
HP Blade bl25p. I am beginning to suspect a hardware issue but I don't have
any evidence of such. No other suspicious network events have me puzzled.
Any further t-shooting tips would be great.


Thanks in advance,

MidwestTech



.