Re: DC floods LAN

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thanks for the reply Ace.

The first time around I don't remember which patches they were, the second
time around was yesterday with the lates patches from MS. The problem seems
to have happened only at the first reboot after the patches. After rebooting
again the problem disappears.

We aren't using WINS across the network, there are no replication partners
configured.

I guess a workaround is to ensure rebooting any server twice rather than
once :)

SB

"Ace Fekay [Microsoft Certified Trainer]" wrote:

In news:8319A987-42B5-4978-B000-D9B52BA7FACA@xxxxxxxxxxxxx,
sir-bob <sirbob@xxxxxxxxxxxxxxxxxxxxxxxxx>, posted the following:
Hi All:

Hope this is the correct forum for this post.

We have experienced the following problem on a number of occasions
now and up until this point have not found a solution.

After patching a Server 2003 R2 Domain Controller and rebooting the DC
essentially runs a DOS on the LAN. After a reboot the problem clears
again. I have captured this traffic on one of the DC's that caused
this problem. The capture showed thousands of packets per second.

The packets were all UDP from the DC to 224.0.1.24, the source and
destination port was 42.

Has anyone else experienced this or perhaps know what the cause may
be?

Thanks
SB

I have not seen this, but FYI, TCP and UDP port 42 are the WINS replication
ports. WINS uses these ports for communication between replication partners.
And IP 224.0.0.0 through 239.255.255.255 is the multicast range.

Are you using WINS? If so, do you have more than one WINS server? If so, are
they replication partners?

If WINS is not installed, can use netstat, or TCPView (free download) to
identify which exe is broadcasting.

Do you remember which patch was installed that you believe started the
broadcasts?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@xxxxxxxxxxxxxxxxxxxxxxx

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.


.

Relevant Pages

  • 5.3 on Compaq AP400 hangs on reboot.
    ... "ACPI disabled by blacklist. ... problem with rebooting] but when the ACPI panic happes ... <Parallel port bus> on ppc0 ... can't assign resources ...
    (freebsd-questions)
  • Re: VB6 Run-time errors after microsoft patches and updates
    ... solution so can someone help me troubleshoot what recent patches may be doing ... patch the thing starts working bug free. ... Rebooting also seems to help. ... I have now looked at two tablets ...
    (microsoft.public.vb.general.discussion)
  • Re: Question about a Windows 2003 server with service problems after applying latest patches
    ... I don't think uninstalling the patches would ... > Windows Update and rebooted the server. ... > several messages about corrupt registry hives that windows would attempt ... > rebooting multiple times but I get the same problems each time. ...
    (microsoft.public.windows.server.general)
  • Re: A new model for ports and kernel security?
    ... > functionality to what I was suggesting and I thank them for that. ... > - patches are not a real solution. ... if there is an urgent patch to the kernel then ... > try and grab the port and error if they can't get it. ...
    (Linux-Kernel)
  • OSs corrupted after installing patches in sun blade 150 m/c
    ... Have updated patches from our local machine which is having all the ... Rebooting with command: boot -s ... Copyright 1983-2003 Sun Microsystems, Inc. ... skipping system dump - no dump device configured ...
    (SunManagers)