Event ID 4319 on Multihomed server

[Guest]

My event viewer is filling up with these errors from PCs locally and on other
subnets on our network. I'm running DNS and WINS on this server. I'm also
getting these messages on our other three servers, but not as many. All of
our servers have two network cards and all of them are on the same subnet.
Our remote offices / subnets are run through Sonicwall VPNs which have their
own DHCP server.
I've verified that the users are not logging in twice and I've run Scavenge
several times on the DHCP server.
Any other ideas?

 

[Guest]

In addition the the details below I have discovered that one of the errors
was coming from 192.168.3.107 about every hour last night. This morning I
changed the IP to obtain from the local DHCP server on the Sonicwall router.
Now I'm getting the same errors from that IP as well. Here is the original
error message:

EVENT # 2989
EVENT LOG System
EVENT TYPE Error
SOURCE NetBT
EVENT ID 4319
COMPUTERNAME OAK2000
TIME 10/4/2005 8:26:28 PM
MESSAGE A duplicate name has been detected on the TCP network. The IP
address of the machine that sent the message is in the data. Use nbtstat -n
in a command window to see which name is in the Conflict state.

BINARY DATA 0000: 00 00 04 00 01 00 54 00 00 00 00 00 DF 10 00 C0
0010: 05 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0020: 00 00 00 00 00 00 00 00 6B 03 A8 C0

 

[Robert L [MS-MVP]]

This "All of our servers have two network cards and all of them are on the same subnet" could be the problem. you should not setup them in the same subnet.

Event ID Troubleshooting
Event ID 4319 -Duplicate Names on the Network Event ID 4320 - Duplicate name has been detected on the TCP ... This article may also apply to Event ID: 4319. ...
www.chicagotech.net/wineventid.htm

netbios and wins Symptoms: Event viewer may show Event ID 4320, Event ID: 4319. You may get system error 52 and a duplicate name has been detected on the TCP network. ...
www.chicagotech.net/netbios&wins.htm



Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
My event viewer is filling up with these errors from PCs locally and on other
subnets on our network. I'm running DNS and WINS on this server. I'm also
getting these messages on our other three servers, but not as many. All of
our servers have two network cards and all of them are on the same subnet.
Our remote offices / subnets are run through Sonicwall VPNs which have their
own DHCP server.
I've verified that the users are not logging in twice and I've run Scavenge
several times on the DHCP server.
Any other ideas?

 

[Andrei Ungureanu]

Disable Client for Microsoft Networks and Microsoft File and Printer Sharing
for one of the adapters if you don't need it.


--
Regards,
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/