INTERNET ACCESS/RESPONSE PROBLEM

[Richard White]

In the last few days, one of my PC's has experienced extremely serious internet access problems.
These have never happened before on either that PC or my other one.

The symptoms affect ALL programs that use the internet: Internet Explorer, FTP, Yahoo
chat/messenger, Windows Update, etc..

The symptoms are prolonged but not consistent. Sometimes I just cannot get a response from the
internet, in IE I get DNS error, other times I get an EXTREMELY slow response (perhaps as much as a
minute or so) to display a web site. Sometimes I can display 'simple' URLs (eg. www.yahoo.com), but
DNS error on 'complex' URLs (such as trying to display yahoo mail etc.).

The problems started AFAIK after some Windows Update patches were applied on 1st and 2nd August.
Unfortunately, the system restore function was disabled (can't think how!) and so I can't just
restore back to 31st July :-(

The two PC's are connected using ICS, both running WinXP professional. The one with the problems is
the 'client' PC, using the other PC as the gateway to the internet with an ADSL internet connection.

I *think* the culprit is those KBnnnnnn's that went on ... Since although auto-update installed
them, MS have since posted that if hotfixes have been installed since MS04-004, then KB867801 should
be installed. However, after a brief respite this morning, the problem has returned.

I have also tried recreating the ICS link between the two PC's and rebooting etc.. But that doesn't
cure the problem. HOWEVER ... I have found that if I swap over the ICS gateway so that the one
with the problems becomes the gateway (and the other the client) then both PC's work fine!

But - I don't want this particular PC to be the gateway! The PC which has the problem is a
secondary one, and most of the internet up/downloading takes place on the other more powerful one,
which I would prefer to set back to being the gateway.

So questions:
1. Has anyone else experienced this problem?
2. Any ideas how to solve it?

Short of an FDISK and complete system reload on one if not both PCs?

 

[Wesley Vogel]

What DNS error??

Since you weren't specific...

Search for...DNS errors
http://tinyurl.com/4bytr

What does Event Viewer show??

Hope HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427

 

[Richard White]

What DNS error??

"Cannot find server or DNS Error
Internet Explorer"

**NB: Having switched over the gateway/client in ICS, and thinking all was ok (this afternoon)
NOW!! this evening it isn't any more!!!!!!!!!!!

Now my new client is experiencing the same problems the other client was!

I also can't connect to email servers ... if this post goes up then at least usenet is still ok for
now!

Since you weren't specific...

Search for...DNS errors
http://tinyurl.com/4bytr

What does Event Viewer show??

Hope HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427

The interruption to my internet access means I can't view this stuff. I'm going to try switching
the gateway/client back again <sigh> and see if I can actually pull up a web site again.

 

[Richard White]

What DNS error??

OK ... I have now switched THIS pc back to 'gateway', and the original pc with error is back to
'client' .... so I now once again have internet access from THIS pc.

FYI ... the 'client' is also able to access internet again .... for now! It'll be interesting to see
how long this lasts for this time.

Since you weren't specific...

Search for...DNS errors
http://tinyurl.com/4bytr

What does Event Viewer show??

Hope HOW TO: View and Manage Event Logs in Event Viewer in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308427

Nice events .... but errrr which ones are DNS errors??? I can't see anything with either "DNS" or a
6-digit number like in your DNS errors link. Can you give me a clue here please?

So - no idea which errors I'm looking for but I have several of these:-

Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 08/08/2004
Time: 21:55:41
User: NT AUTHORITY\SYSTEM
Computer: xxxxxxxxx
Description:
DCOM got error "The service cannot be started, either because it is disabled or because it has no
enabled devices associated with it. " attempting to start the service upnphost with arguments "" in
order to run the server:
{204810B9-73B2-11D4-BF42-00B0D0118B56}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
--------------------------

Earlier in the afternoon this was recorded:-
Event Type: Warning
Event Source: Server
Event Category: None
Event ID: 2504
Date: 08/08/2004
Time: 13:09:39
User: N/A
Computer: xxxxxxxxx
Description:
The server could not bind to the transport
\Device\NetBT_Tcpip_{2E522F80-EF19-4ED2-B5BB-51B1E93FBB08}.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: aa 05 00 00 ª...



and when I resumed use of PC after interval of several hours a batch of these:-

Event Type: Error
Event Source: Disk
Event Category: None
Event ID: 11
Date: 08/08/2004
Time: 21:51:17
User: N/A
Computer: xxxxxxxxx
Description:
The driver detected a controller error on \Device\Harddisk2\D.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0f 04 68 00 01 00 b6 00 ..h...¶.
0008: 00 00 00 00 0b 00 04 c0 .......À
0010: 03 01 00 00 85 01 00 c0 ....?..À
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 58 7f 30 00 00 00 00 00 X0.....
0030: ff ff ff ff 04 00 00 00 ÿÿÿÿ....
0038: 40 00 00 00 00 00 00 00 @.......
0040: 00 20 06 12 08 01 20 00 . .... .
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 00 00 b0 0b 27 82 ....°.'?
0058: 00 00 00 00 f8 93 24 82 ....ø?$?
0060: 00 00 00 00 00 00 00 00 ........
0068: 1e 00 00 00 00 00 00 00 ........
0070: 00 00 00 00 00 00 00 00 ........
0078: 00 00 00 00 00 00 00 00 ........
0080: 00 00 00 00 00 00 00 00 ........
0088: 00 00 00 00 00 00 00 00 ........

 

[Richard White]

What DNS error??

Spotted the error occurring in real time!

Error condition seems to get 'reset' each time I swap over gateway/client.

After a swap over, the "client" after successfully working on the net (IE use) for about 30 mins,
suddenly came up with a dial-up prompt, indicating it had 'lost' it's internet connection (via
gateway) and wanted to re-establish via a redundant dial-up link.

Cancelled request, set browser back to 'online', and tried a new web site: sat and thought about it
for a minute before giving an empty white browser window with 'Done' in the status bar at bottom.

On another site: just never responded. Then tried a google search: responded ok after about a
minute. Then tried another site: could not find -> DNS Error ("Cannot find server or DNS Error").

The Event Viewer does not show *any* events around this time!

 

[Wesley Vogel]

Richard,

Windows XP Professional Events and Errors Search Results
for "Server 2504"
To view details, click on an ID number
http://tinyurl.com/4aa79

Also click the: [+] Related Knowledge Base articles

http://tinyurl.com/4hjvy

http://tinyurl.com/52roe

 

[Wesley Vogel]

[[Product: Windows Operating System
ID: 2504
Source: server
Version: 5.2
Symbolic Name: EVENT_SRV_CANT_BIND_TO_TRANSPORT
Message: The server could not bind to the transport %1.

Explanation
The server could not establish a listening endpoint on the transport listed
in the event. The status code returned from the underlying transport is in
the Data box. This status code might explain why this operation failed. The
problem might be caused by one of the following:

A lack of memory,
A malfunctioning network interface, or
A network device that became unavailable during startup.

User Action
Do one or all of the following:

To verify that your network devices are functioning correctly, look in
Device Manager or access the network by using telnet, ping, etc.
If network devices are working properly, and the event status code is 9A,
then the server is out of memory. Using Task Manager, determine which
unnecessary programs are using the memory, and then close them. ]]
=====

If the above items are OK, look at these in the order listed.

Browse List Issues on Servers and Clients Include Error Messages About Event
ID 8032 and Inability to Browse
http://support.microsoft.com/default.aspx?scid=kb;en-us;314872

Browse List Problems When File and Print Sharing Is Not Installed
http://support.microsoft.com/default.aspx?scid=kb;en-us;254527

Remote Directory Lists Are Slower Than Local Directory Listings
http://support.microsoft.com/default.aspx?scid=kb;en-us;177266

Event ID 3870, 7023, 2504 and 7002 Messages Are Logged After You Restart a
Windows NT-Based Computer
http://support.microsoft.com/default.aspx?scid=kb;en-us;317140

 

[Richard White]

Explanation
The server could not establish a listening endpoint on the transport listed
in the event. The status code returned from the underlying transport is in
the Data box. This status code might explain why this operation failed. The
problem might be caused by one of the following:

A lack of memory,
A malfunctioning network interface, or
A network device that became unavailable during startup.

Hi ... the 'client' to the gateway pc is totally shagged as far as any internet access is
concerned - no matter which pc is the client. (I have only two, so can only swap over
client/gateway)

BUT .. if the client is given its own internet access (via a payg dial-up) then all is well (apart
from the slow modem speeds!). As soon as the independent modem link is disconnected, then the
client is once again unable to find sites, use yahoo or windowsupdate etc..

I must stress that this problem effects WHICHEVER pc is the client. Each time I swap the
client/gateway over, after a brief period of good internet access, the problem suddenly resurfaces
on the client pc.

The client also cannot access the list of drives/folders and printers within the workgroup, and
cannot create/map network drives/printers. The gateway pc however can access its own networked
items, but cannot list those on the client pc. So I also cannot create on the client a mapped
network drive from the gateway (ie. can't create J: (on client) = C: (on gateway).)

I have tried my best to follow the points in the various links you gave. But none of them really
matched what I am experiencing.

[...snipped...]

 

[Wesley Vogel]

Richard,

SWAG. You don't have a firewall enabled on each machine, do you?

Internet Firewalls Can Prevent Browsing and File Sharing
http://support.microsoft.com/default.aspx?scid=kb;EN-US;298804

--
Hope this helps. Let us know.
Wes

In

Explanation
The server could not establish a listening endpoint on the transport
listed in the event. The status code returned from the underlying
transport is in the Data box. This status code might explain why
this operation failed. The problem might be caused by one of the
following:

A lack of memory,
A malfunctioning network interface, or
A network device that became unavailable during startup.

Hi ... the 'client' to the gateway pc is totally shagged as far as
any internet access is
concerned - no matter which pc is the client. (I have only two, so
can only swap over client/gateway)

BUT .. if the client is given its own internet access (via a payg
dial-up) then all is well (apart from the slow modem speeds!). As
soon as the independent modem link is disconnected, then the client
is once again unable to find sites, use yahoo or windowsupdate etc..

I must stress that this problem effects WHICHEVER pc is the client.
Each time I swap the client/gateway over, after a brief period of
good internet access, the problem suddenly resurfaces on the client
pc.

The client also cannot access the list of drives/folders and printers
within the workgroup, and cannot create/map network drives/printers.
The gateway pc however can access its own networked items, but cannot
list those on the client pc. So I also cannot create on the client a
mapped network drive from the gateway (ie. can't create J: (on
client) = C: (on gateway).)

I have tried my best to follow the points in the various links you
gave. But none of them really matched what I am experiencing.

[...snipped...]

 

[Richard White]

Richard,

SWAG. You don't have a firewall enabled on each machine, do you?

Internet Firewalls Can Prevent Browsing and File Sharing
http://support.microsoft.com/default.aspx?scid=kb;EN-US;298804

Yes I do - ZoneAlarm Pro. But, this is designed to support ICS and has been doing so successfully
for months without this problem.

However, the latest upgrade to the ZA software was on 1st August - which would coincide with the
start of the problem.

I'll check with Zonelabs

Thanks