Worm that affect Teminal services session

[Mr_arch]

Does anyone know of a worm or a virus that would affect Terminal
sevices sessions? ... we're having disconnect problems and i suspect
it's a virus. All the servers are updated and patched. and we just
recently had this problem any suggestions are greatly appreciated.
Thanks!
Mr_arch

 

[no one]

if you search the thousands of posts in this newsgroup,
you'll see that about 5% of them relate to disconnected
sessions and not many of them provide any answers.

 

[Matthew Harris [MVP]]

Well...this post won't go unanswered...

Most, if not all cases of disconnects deal with network
equipment that is killing the network socket. One way to
conbat this is to enable keep alives and adjust the value
of tcpmaxdataretransmissions. Check out this link:

terminal.servebeer.com/php/flaky_connections.php

-M

 

[Mr_arch]

I tried it on one terminal server
.... i went in to terminal.servebeer.com/php/flaky_connections.php and
followed the instructions. It's still giving me a disconnect issue on
that server that i tested it on. Actually i suspected it was a
hardware issue, not on the server side but on the client's network
side. Both sites have a T1 connection but the client side network is
not a large scale network and I think it's their firewall that's
getting overwhelmed. I am gonna test bypassing the firewall and see if
we still get diconnected. If that doesnt work im stumped. Anyone have
any other suggestions? Thanks in advance
Mr_arch

 

[Matthew Harris [MVP]]

If you think packets are being dropped, then you could
always just run a continuous ping and see what happens.

-M

-----Original Message-----
I tried it on one terminal server
.... i went in to

terminal.servebeer.com/php/flaky_connections.php and

 

[Mr_arch]

We figured out the problem. The router was set to 100 base T Auto
sensing. We just changed it to force 100 base T all the time. Packets
are still dropped but 4 out of every 3000 so problem solved! Thanks,
your advise was good it was indeed network equipment.
Mr_arch