WinXP SP2 lost communication.

K

klmgrp2001

Windows XP SP2 (dhcp client 10.1.1.14) communicate Windows Server 2003
SP1 (dhcp server 10.1.1.1)using PCANYWHERE.
Communication was interrupted and after while dhcp ip address was
changed to 169.254.214.137.
After while dhcp address was restored.

Any idea what was a problem?
Are there any way to find is this a hardware (cable, NIC) problem?
Thanks a lot.

Here is a network capture when it happened:

"47919","11:24:43.902586","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=58986 Ack=6543398 Win=65184 Len=8"
"47951","11:24:44.510421","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=59242 Ack=6543398 Win=65184 Len=8"
"47952","11:24:44.526391","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=59250 Ack=6543398 Win=65184 Len=8"
"47953","11:24:47.856389","10.1.1.14","10.1.1.1","TCP","[TCP
Retransmission] pammrpc > pcanywheredata [PSH, ACK] Seq=57802
Ack=6543398 Win=65184 Len=1460"
"47954","11:24:50.918770","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm Destination port: bbn-mmc"
"47955","11:24:57.482240","10.1.1.14","10.1.1.1","TCP","[TCP
Retransmission] pammrpc > pcanywheredata [PSH, ACK] Seq=57802
Ack=6543398 Win=65184 Len=1460"
"47956","11:25:10.951048","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm Destination port: bbn-mmc"
"47957","11:25:30.968600","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm Destination port: bbn-mmc"
"47958","11:26:20.974208","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47959","11:26:25.975671","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47961","11:26:30.678172","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47962","11:26:32.647106","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47963","11:26:34.725423","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47964","11:26:36.694360","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47965","11:26:55.743109","10.1.1.14","10.1.1.255","BROWSER","Host
Announcement CENTRIFUGEXL, Workstation, Server, NT Workstation,
Potential Browser"
"47966","11:27:00.977658","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47967","11:27:05.964058","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47968","11:28:20.985137","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47969","11:28:25.971280","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47970","11:30:20.996264","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47971","11:30:25.982337","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47972","11:32:21.007709","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47973","11:32:26.009069","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47974","11:34:21.018537","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47975","11:34:26.004612","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47976","11:36:21.029874","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47977","11:36:26.031292","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47978","11:38:21.040745","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47979","11:38:26.026793","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47980","11:38:54.403452","10.1.1.14","10.1.1.255","BROWSER","Host
Announcement CENTRIFUGEXL, Workstation, Server, NT Workstation,
Potential Browser"
"47981","11:39:28.282971","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47982","11:39:29.031647","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47983","11:39:29.781728","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47984","11:39:34.516470","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.1? Tell 10.1.1.14"
"47985","11:39:34.532092","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.2? Tell 10.1.1.14"
"47986","11:39:34.547734","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.3? Tell 10.1.1.14"
"47987","11:39:34.563335","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.4? Tell 10.1.1.14"
"47988","11:39:34.578961","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.5? Tell 10.1.1.14"
"47989","11:39:34.594610","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.6? Tell 10.1.1.14"
"47990","11:39:34.610216","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.7? Tell 10.1.1.14"
"47991","11:39:34.625840","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.8? Tell 10.1.1.14"
 
S

smlunatick

Windows XP SP2 (dhcp client 10.1.1.14) communicate Windows Server 2003
SP1 (dhcp server 10.1.1.1)using PCANYWHERE.
Communication was interrupted and after while dhcp ip address was
changed to 169.254.214.137.
After while dhcp address was restored.

Any idea what was a problem?
Are there any way to find is this a hardware (cable, NIC) problem?
Thanks a lot.

Here is a network capture when it happened:

"47919","11:24:43.902586","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=58986 Ack=6543398 Win=65184 Len=8"
"47951","11:24:44.510421","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=59242 Ack=6543398 Win=65184 Len=8"
"47952","11:24:44.526391","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=59250 Ack=6543398 Win=65184 Len=8"
"47953","11:24:47.856389","10.1.1.14","10.1.1.1","TCP","[TCP
Retransmission] pammrpc > pcanywheredata [PSH, ACK] Seq=57802
Ack=6543398 Win=65184 Len=1460"
"47954","11:24:50.918770","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47955","11:24:57.482240","10.1.1.14","10.1.1.1","TCP","[TCP
Retransmission] pammrpc > pcanywheredata [PSH, ACK] Seq=57802
Ack=6543398 Win=65184 Len=1460"
"47956","11:25:10.951048","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47957","11:25:30.968600","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47958","11:26:20.974208","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47959","11:26:25.975671","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47961","11:26:30.678172","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47962","11:26:32.647106","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47963","11:26:34.725423","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47964","11:26:36.694360","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47965","11:26:55.743109","10.1.1.14","10.1.1.255","BROWSER","Host
Announcement CENTRIFUGEXL, Workstation, Server, NT Workstation,
Potential Browser"
"47966","11:27:00.977658","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47967","11:27:05.964058","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47968","11:28:20.985137","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47969","11:28:25.971280","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47970","11:30:20.996264","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47971","11:30:25.982337","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47972","11:32:21.007709","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47973","11:32:26.009069","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47974","11:34:21.018537","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47975","11:34:26.004612","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47976","11:36:21.029874","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47977","11:36:26.031292","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47978","11:38:21.040745","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47979","11:38:26.026793","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47980","11:38:54.403452","10.1.1.14","10.1.1.255","BROWSER","Host
Announcement CENTRIFUGEXL, Workstation, Server, NT Workstation,
Potential Browser"
"47981","11:39:28.282971","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47982","11:39:29.031647","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47983","11:39:29.781728","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47984","11:39:34.516470","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.1?  Tell 10.1.1.14"
"47985","11:39:34.532092","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.2?  Tell 10.1.1.14"
"47986","11:39:34.547734","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.3?  Tell 10.1.1.14"
"47987","11:39:34.563335","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.4?  Tell 10.1.1.14"
"47988","11:39:34.578961","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.5?  Tell 10.1.1.14"
"47989","11:39:34.594610","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.6?  Tell 10.1.1.14"
"47990","11:39:34.610216","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.7?  Tell 10.1.1.14"
"47991","11:39:34.625840","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.8?  Tell 10.1.1.14"
Click to expand...

169.254.xxx.xxx is part of the Automatic Private IP Addressing (http://
www.duxcw.com/faq/network/autoip.htm). Auto IP is a "feature" of the
network so as to always make sure the TCP/IP does not have problem
with in. It is usually a result where the network adapter does not
receive the IP configuration from the DHCP server. One possible cuase
is that the DHCP lease refresh time is not set up correctly and your
"errors" occur when the DHCP server is renewing the IP address. You
may need to re-configure the DHCP lease update interval, on the DHCP
server.
 
K

klmgrp2001

Windows XP SP2 (dhcp client 10.1.1.14) communicate Windows Server 2003
SP1 (dhcp server 10.1.1.1)using PCANYWHERE.
Communication was interrupted and after while dhcp ip address was
changed to 169.254.214.137.
After while dhcp address was restored.
Click to expand...
Any idea what was a problem?
Are there any way to find is this a hardware (cable, NIC) problem?
Thanks a lot.
Click to expand...
Here is a network capture when it happened:
Click to expand...
"47919","11:24:43.902586","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=58986 Ack=6543398 Win=65184 Len=8"
"47951","11:24:44.510421","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=59242 Ack=6543398 Win=65184 Len=8"
"47952","11:24:44.526391","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=59250 Ack=6543398 Win=65184 Len=8"
"47953","11:24:47.856389","10.1.1.14","10.1.1.1","TCP","[TCP
Retransmission] pammrpc > pcanywheredata [PSH, ACK] Seq=57802
Ack=6543398 Win=65184 Len=1460"
"47954","11:24:50.918770","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47955","11:24:57.482240","10.1.1.14","10.1.1.1","TCP","[TCP
Retransmission] pammrpc > pcanywheredata [PSH, ACK] Seq=57802
Ack=6543398 Win=65184 Len=1460"
"47956","11:25:10.951048","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47957","11:25:30.968600","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47958","11:26:20.974208","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47959","11:26:25.975671","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47961","11:26:30.678172","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47962","11:26:32.647106","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47963","11:26:34.725423","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47964","11:26:36.694360","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47965","11:26:55.743109","10.1.1.14","10.1.1.255","BROWSER","Host
Announcement CENTRIFUGEXL, Workstation, Server, NT Workstation,
Potential Browser"
"47966","11:27:00.977658","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47967","11:27:05.964058","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47968","11:28:20.985137","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47969","11:28:25.971280","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47970","11:30:20.996264","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47971","11:30:25.982337","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47972","11:32:21.007709","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47973","11:32:26.009069","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47974","11:34:21.018537","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47975","11:34:26.004612","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47976","11:36:21.029874","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47977","11:36:26.031292","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47978","11:38:21.040745","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47979","11:38:26.026793","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47980","11:38:54.403452","10.1.1.14","10.1.1.255","BROWSER","Host
Announcement CENTRIFUGEXL, Workstation, Server, NT Workstation,
Potential Browser"
"47981","11:39:28.282971","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47982","11:39:29.031647","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47983","11:39:29.781728","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47984","11:39:34.516470","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.1?  Tell 10.1.1.14"
"47985","11:39:34.532092","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.2?  Tell 10.1.1.14"
"47986","11:39:34.547734","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.3?  Tell 10.1.1.14"
"47987","11:39:34.563335","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.4?  Tell 10.1.1.14"
"47988","11:39:34.578961","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.5?  Tell 10.1.1.14"
"47989","11:39:34.594610","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.6?  Tell 10.1.1.14"
"47990","11:39:34.610216","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.7?  Tell 10.1.1.14"
"47991","11:39:34.625840","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.8?  Tell 10.1.1.14"
Click to expand...

169.254.xxx.xxx is part of the Automatic Private IP Addressing (http://www.duxcw.com/faq/network/autoip.htm).  Auto IP is a "feature" of the
network so as to always make sure the TCP/IP does not have problem
with in.  It is usually a result where the network adapter does not
receive the IP configuration from the DHCP server.  One possible cuase
is that the DHCP lease refresh time is not set up correctly and your
"errors" occur when the DHCP server is renewing the IP address.  You
may need to re-configure the DHCP lease update interval, on the DHCP
server.
Click to expand...

I see.
I understand now this 169.154.xxx.xxx address. In my case dhcp lease
is set to 3 days.
I consider nic or cable problem because when it happened cable was
unplugged, plugged back to nic and event log have only message
- 12:27:28 PM "The system detected that network adapter \DEVICE\TCPIP_
{9B0D1A99-A4F8-43FD-BC9F-274F1452B7DB} was connected to the network,
and has initiated normal operation over the network adapter." with no
corresponding nic unplug message.
Then I got
- 12:27:55 PM "Your computer was not able to renew its address from
the network (from the DHCP Server) for the Network Card with network
address 000050407C11. The following error occurred:
The semaphore timeout period has expired. . Your computer will
continue to try and obtain an address on its own from the network
address (DHCP) server."
-12:27:56 PM "The browser has forced an election on network \Device
\NetBT_Tcpip_{9B0D1A99-A4F8-43FD-BC9F-274F1452B7DB} because a master
browser was stopped."
- 12:27:58 PM "Your computer has automatically configured the IP
address for the Network Card with network address 000050407C11. The
IP address being used is 169.254.214.137."

And problem was reported around 11:35 Am.
 
S

smlunatick

On Jan 12, 4:23 pm, (e-mail address removed) wrote:
Windows XP SP2 (dhcp client 10.1.1.14) communicate Windows Server 2003
SP1 (dhcp server 10.1.1.1)using PCANYWHERE.
Communication was interrupted and after while dhcp ip address was
changed to 169.254.214.137.
After while dhcp address was restored.
Any idea what was a problem?
Are there any way to find is this a hardware (cable, NIC) problem?
Thanks a lot.
Here is a network capture when it happened:
"47919","11:24:43.902586","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=58986 Ack=6543398 Win=65184 Len=8"
"47951","11:24:44.510421","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=59242 Ack=6543398 Win=65184 Len=8"
"47952","11:24:44.526391","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=59250 Ack=6543398 Win=65184 Len=8"
"47953","11:24:47.856389","10.1.1.14","10.1.1.1","TCP","[TCP
Retransmission] pammrpc > pcanywheredata [PSH, ACK] Seq=57802
Ack=6543398 Win=65184 Len=1460"
"47954","11:24:50.918770","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47955","11:24:57.482240","10.1.1.14","10.1.1.1","TCP","[TCP
Retransmission] pammrpc > pcanywheredata [PSH, ACK] Seq=57802
Ack=6543398 Win=65184 Len=1460"
"47956","11:25:10.951048","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47957","11:25:30.968600","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47958","11:26:20.974208","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47959","11:26:25.975671","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47961","11:26:30.678172","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47962","11:26:32.647106","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47963","11:26:34.725423","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47964","11:26:36.694360","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47965","11:26:55.743109","10.1.1.14","10.1.1.255","BROWSER","Host
Announcement CENTRIFUGEXL, Workstation, Server, NT Workstation,
Potential Browser"
"47966","11:27:00.977658","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47967","11:27:05.964058","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47968","11:28:20.985137","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47969","11:28:25.971280","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47970","11:30:20.996264","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47971","11:30:25.982337","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47972","11:32:21.007709","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47973","11:32:26.009069","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47974","11:34:21.018537","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47975","11:34:26.004612","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47976","11:36:21.029874","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47977","11:36:26.031292","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47978","11:38:21.040745","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47979","11:38:26.026793","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47980","11:38:54.403452","10.1.1.14","10.1.1.255","BROWSER","Host
Announcement CENTRIFUGEXL, Workstation, Server, NT Workstation,
Potential Browser"
"47981","11:39:28.282971","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47982","11:39:29.031647","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47983","11:39:29.781728","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47984","11:39:34.516470","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.1?  Tell 10.1.1.14"
"47985","11:39:34.532092","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.2?  Tell 10.1.1.14"
"47986","11:39:34.547734","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.3?  Tell 10.1.1.14"
"47987","11:39:34.563335","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.4?  Tell 10.1.1.14"
"47988","11:39:34.578961","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.5?  Tell 10.1.1.14"
"47989","11:39:34.594610","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.6?  Tell 10.1.1.14"
"47990","11:39:34.610216","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.7?  Tell 10.1.1.14"
"47991","11:39:34.625840","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.8?  Tell 10.1.1.14"
Click to expand...
Click to expand...
169.254.xxx.xxx is part of the Automatic Private IP Addressing (http://www.duxcw.com/faq/network/autoip.htm).  Auto IP is a "feature" of the
network so as to always make sure the TCP/IP does not have problem
with in.  It is usually a result where the network adapter does not
receive the IP configuration from the DHCP server.  One possible cuase
is that the DHCP lease refresh time is not set up correctly and your
"errors" occur when the DHCP server is renewing the IP address.  You
may need to re-configure the DHCP lease update interval, on the DHCP
server.
Click to expand...

I see.
I understand now this 169.154.xxx.xxx address. In my case dhcp lease
is set to 3 days.
I consider nic or cable problem because when it happened cable was
unplugged, plugged back to nic and event log have only message
- 12:27:28 PM "The system detected that network adapter \DEVICE\TCPIP_
{9B0D1A99-A4F8-43FD-BC9F-274F1452B7DB} was connected to the network,
and has initiated normal operation over the network adapter." with no
corresponding nic unplug message.
Then I got
- 12:27:55 PM "Your computer was not able to renew its address from
the network (from the DHCP Server) for the Network Card with network
address 000050407C11.  The following error occurred:
The semaphore timeout period has expired. . Your computer will
continue to try and obtain an address on its own from the network
address (DHCP) server."
-12:27:56 PM "The browser has forced an election on network \Device
\NetBT_Tcpip_{9B0D1A99-A4F8-43FD-BC9F-274F1452B7DB} because a master
browser was stopped."
- 12:27:58 PM "Your computer has automatically configured the IP
address for the Network Card with network address 000050407C11.  The
IP address being used is 169.254.214.137."

And problem was reported around 11:35 Am.
Click to expand...

PcAnywhere tends to modify the protocol stack of the network adapter.
Why do you require PcAnywhere to connect to the Windows server??
 
K

klmgrp2001

On Jan 12, 4:23 pm, (e-mail address removed) wrote:
Windows XP SP2 (dhcp client 10.1.1.14) communicate Windows Server 2003
SP1 (dhcp server 10.1.1.1)using PCANYWHERE.
Communication was interrupted and after while dhcp ip address was
changed to 169.254.214.137.
After while dhcp address was restored.
Any idea what was a problem?
Are there any way to find is this a hardware (cable, NIC) problem?
Thanks a lot.
Here is a network capture when it happened:
"47919","11:24:43.902586","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=58986 Ack=6543398 Win=65184 Len=8"
"47951","11:24:44.510421","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=59242 Ack=6543398 Win=65184 Len=8"
"47952","11:24:44.526391","10.1.1.14","10.1.1.1","TCP","pammrpc >
pcanywheredata [PSH, ACK] Seq=59250 Ack=6543398 Win=65184 Len=8"
"47953","11:24:47.856389","10.1.1.14","10.1.1.1","TCP","[TCP
Retransmission] pammrpc > pcanywheredata [PSH, ACK] Seq=57802
Ack=6543398 Win=65184 Len=1460"
"47954","11:24:50.918770","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47955","11:24:57.482240","10.1.1.14","10.1.1.1","TCP","[TCP
Retransmission] pammrpc > pcanywheredata [PSH, ACK] Seq=57802
Ack=6543398 Win=65184 Len=1460"
"47956","11:25:10.951048","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47957","11:25:30.968600","10.1.1.14","10.1.1.1","UDP","Source port:
alta-ana-lm  Destination port: bbn-mmc"
"47958","11:26:20.974208","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47959","11:26:25.975671","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47961","11:26:30.678172","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47962","11:26:32.647106","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47963","11:26:34.725423","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47964","11:26:36.694360","10.1.1.14","10.1.1.1","TCP","[TCP Keep-
Alive] microsoft-ds > elvin_server [ACK] Seq=11411 Ack=21918 Win=65482
Len=1"
"47965","11:26:55.743109","10.1.1.14","10.1.1.255","BROWSER","Host
Announcement CENTRIFUGEXL, Workstation, Server, NT Workstation,
Potential Browser"
"47966","11:27:00.977658","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47967","11:27:05.964058","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47968","11:28:20.985137","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47969","11:28:25.971280","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47970","11:30:20.996264","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47971","11:30:25.982337","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47972","11:32:21.007709","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47973","11:32:26.009069","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47974","11:34:21.018537","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47975","11:34:26.004612","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47976","11:36:21.029874","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47977","11:36:26.031292","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47978","11:38:21.040745","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47979","11:38:26.026793","10.1.1.14","10.1.1.255","NBNS","Name query
NB linemaster1<2d>"
"47980","11:38:54.403452","10.1.1.14","10.1.1.255","BROWSER","Host
Announcement CENTRIFUGEXL, Workstation, Server, NT Workstation,
Potential Browser"
"47981","11:39:28.282971","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47982","11:39:29.031647","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47983","11:39:29.781728","10.1.1.14","10.1.1.255","NBNS","Name query
NB LINEMASTER1<00>"
"47984","11:39:34.516470","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.1?  Tell 10.1.1.14"
"47985","11:39:34.532092","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.2?  Tell 10.1.1.14"
"47986","11:39:34.547734","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.3?  Tell 10.1.1.14"
"47987","11:39:34.563335","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.4?  Tell 10.1.1.14"
"47988","11:39:34.578961","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.5?  Tell 10.1.1.14"
"47989","11:39:34.594610","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.6?  Tell 10.1.1.14"
"47990","11:39:34.610216","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.7?  Tell 10.1.1.14"
"47991","11:39:34.625840","Radisys_40:7c:11","Broadcast","ARP","Who
has 10.1.1.8?  Tell 10.1.1.14"
169.254.xxx.xxx is part of the Automatic Private IP Addressing (http://www.duxcw.com/faq/network/autoip.htm).  Auto IP is a "feature" of the
network so as to always make sure the TCP/IP does not have problem
with in.  It is usually a result where the network adapter does not
receive the IP configuration from the DHCP server.  One possible cuase
is that the DHCP lease refresh time is not set up correctly and your
"errors" occur when the DHCP server is renewing the IP address.  You
may need to re-configure the DHCP lease update interval, on the DHCP
server.
Click to expand...
Click to expand...
I see.
I understand now this 169.154.xxx.xxx address. In my case dhcp lease
is set to 3 days.
I consider nic or cable problem because when it happened cable was
unplugged, plugged back to nic and event log have only message
- 12:27:28 PM "The system detected that network adapter \DEVICE\TCPIP_
{9B0D1A99-A4F8-43FD-BC9F-274F1452B7DB} was connected to the network,
and has initiated normal operation over the network adapter." with no
corresponding nic unplug message.
Then I got
- 12:27:55 PM "Your computer was not able to renew its address from
the network (from the DHCP Server) for the Network Card with network
address 000050407C11.  The following error occurred:
The semaphore timeout period has expired. . Your computer will
continue to try and obtain an address on its own from the network
address (DHCP) server."
-12:27:56 PM "The browser has forced an election on network \Device
\NetBT_Tcpip_{9B0D1A99-A4F8-43FD-BC9F-274F1452B7DB} because a master
browser was stopped."
- 12:27:58 PM "Your computer has automatically configured the IP
address for the Network Card with network address 000050407C11.  The
IP address being used is 169.254.214.137."
Click to expand...
And problem was reported around 11:35 Am.
Click to expand...

PcAnywhere tends to modify the protocol stack of the network adapter.
Why do you require PcAnywhere to connect to the Windows server??
Click to expand...

This setup with PcAnywhere is used to access desktop of Windows 2003
Server in the product and I have no control over it.
But if I can narrow problem to PcAnywhere then it will be very helpful
for my investigation.
 
Top