TCP/IP connections being killed - network adapters disappearing?

[yawnmoth]

I have two computers connected to the same network hub. Twice, today,
one of these computers - computer A - has lost the ability to send out
any TCP/IP requests what-so-ever.

I'm just surfing the net, click on a link, and nothing happens - not
even a "Server not found" error appears. I open up Wireshark to try
to capture some packets and none of my network adapters appear. Not
my wired one or my wireless one.

In the command prompt, I type "ipconfig /all" and I can see all two of
my network adapters. The wired has an IP address - the wireless one
doesn't. But despite my being able to see them in cmd.exe, I'm still
unable to see them in Wireshark and none of my open applications are
able to connect to them - Not Internet Explorer, not Firefox, not
GTalk, not Pidgen, not anything.

I'm also able to ping websites from the command prompt. But I *still*
cannot access websites via any other application.

My question is how and why is this happening, and what can I do to
stop it? Rebooting seems to fix the problem, but I shouldn't need to
do that.

 

[pcbutts1]

Winsock repair, download it here
http://pcbutts1.com/downloads/tools/tools.htm


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz, Beauregard T.
Shagnasty,Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell

 

[Malke]

I have two computers connected to the same network hub. Twice, today,
one of these computers - computer A - has lost the ability to send out
any TCP/IP requests what-so-ever.

I'm just surfing the net, click on a link, and nothing happens - not
even a "Server not found" error appears. I open up Wireshark to try
to capture some packets and none of my network adapters appear. Not
my wired one or my wireless one.

In the command prompt, I type "ipconfig /all" and I can see all two of
my network adapters. The wired has an IP address - the wireless one
doesn't. But despite my being able to see them in cmd.exe, I'm still
unable to see them in Wireshark and none of my open applications are
able to connect to them - Not Internet Explorer, not Firefox, not
GTalk, not Pidgen, not anything.

I'm also able to ping websites from the command prompt. But I *still*
cannot access websites via any other application.

My question is how and why is this happening, and what can I do to
stop it? Rebooting seems to fix the problem, but I shouldn't need to
do that.

You don't need to download anything to troubleshoot this. You mention a
"network hub". Is it really a hub or is it a router? If it is really a
hub, what are you using for a DHCP server? Let's try and narrow this
down a bit:

The First Question Of Troubleshooting: what changed between the time
things worked and the time they didn't?

The Second Question of Windows Troubleshooting: what is the
malware/virus status of the machine? If you think it is clean, what
programs (and versions) did you use to determine this?

Be sure the computer is clean:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Since you say a reboot helps, I suspect the problem is on the computer
and not on your hub (or router as the case may be). Give us some
information about the computer itself. Desktop or laptop? Old or new?
Connected wired?


Malke

 

[Leythos]

Winsock repair, download it here

Hosted on the same site as filthy pornographic material created by
butts, blocks access (according to butts) to reputable malware sites, no
backup of deleted files/data..... Do you really want to trust something
like that?

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(e-mail address removed) (remove 999 for proper email address)

 

[yawnmoth]

yawnmothwrote:





You don't need to download anything to troubleshoot this. You mention a
"network hub". Is it really a hub or is it a router? If it is really a
hub, what are you using for a DHCP server? Let's try and narrow this
down a bit:

It is indeed behind a hub. The hub, itself, connects to a router.
And I'm not using a DHCP server - I'm using static IP addresses.

The First Question Of Troubleshooting: what changed between the time
things worked and the time they didn't?

No clue. I was browsing the net, editing stuff using Adobe
Illustrator, etc.

The Second Question of Windows Troubleshooting: what is the
malware/virus status of the machine? If you think it is clean, what
programs (and versions) did you use to determine this?

I'm using AVG Free. The Internet Virus Database is up-to-date. On
2008/01/21 at 10:52;03, a complete test ended. On 2008/01/22 at
8:00:16, a complete test started. It doesn't say whether or not the
test ended, although I would assume that means it didn't; maybe the
test was interrupted by the network connection being disabled and my
subsequent reboot?

Given that it's scheduled to do complete scans daily at 8am, I'm not
sure why it wouldn't have done one today. It may have to do with the
fact that, this morning, I kept getting a strange error that required
I reboot Windows:

Windows was unable to save all the data for the file \
$ConvertToNonresident. The data has been lost. This error may be
caused by a failure of your computer hardware or network connection.
Please try to save this file elsewhere.

Other files I got that message for were \$Directory and \$Mft.

Upon rebooting, I let chkdisk run, and got the following messages
(wrote them down on a piece of paper):

Deleting corrupt attribute record (128, "") from file verification
segment 62899.

Deleting index entry errors.txt.lnk in index $I30 of file 38274.

Recovering orphaned file A00237~...

(errors.txt is the file I created where I saved the afore mentioned
delayed write message errors).

Looking at the System Event Viewer, I see that I am slammed with
messages like this from 12:53:04AM to 2:49:23AM. Not sure why it
stopped, then.

At 12:56:56AM, in the Application Event Log, I see this:

2008-01-23 06:56:56,306 COMPUTERNAME [000944:001296] ERROR 000
AVG7.AM.events.handling.CAvgAmAlertManager event creation failed for
event with attributes [Data=s "sched(1):sched.lasttime", Date=d
1/23/2008 6:56:56 AM, ProcessId=i 1892, Severity=i 3,
SourceComponent=s "Kernel", SourceMachine=s "COMPUTERNAME", Type=s
"CfgChanged", Userdomain=s "COMPUTERNAME", Username=s "wiggie"]: Error
0x80004005

I have no clue what that means.

I'm fairly confident I am (and was) up-to-date on Windows updates as
well. When I visit windowsupdate.microsoft.com and let it to it's
scan, the only update it suggests I install is "2007 Microsoft Office
Suite Service Pack 1 (SP1)".

Since you say a reboot helps, I suspect the problem is on the computer
and not on your hub (or router as the case may be). Give us some
information about the computer itself. Desktop or laptop? Old or new?
Connected wired?

It's a 1.6GHz IBM ThinkPad (laptop) with a Centrino chipset and 1GB
RAM. It's connected using a cat5 cable to an 8-port hub. It's
running Windows XP Pro SP2, as well.

 

[Malke]

It is indeed behind a hub. The hub, itself, connects to a router.
And I'm not using a DHCP server - I'm using static IP addresses.

The First Question Of Troubleshooting: what changed between the time
things worked and the time they didn't?

No clue. I was browsing the net, editing stuff using Adobe
Illustrator, etc.

The Second Question of Windows Troubleshooting: what is the
malware/virus status of the machine? If you think it is clean, what
programs (and versions) did you use to determine this?

I'm using AVG Free. The Internet Virus Database is up-to-date. On
2008/01/21 at 10:52;03, a complete test ended. On 2008/01/22 at
8:00:16, a complete test started. It doesn't say whether or not the
test ended, although I would assume that means it didn't; maybe the
test was interrupted by the network connection being disabled and my
subsequent reboot?

Given that it's scheduled to do complete scans daily at 8am, I'm not
sure why it wouldn't have done one today. It may have to do with the
fact that, this morning, I kept getting a strange error that required
I reboot Windows:

Windows was unable to save all the data for the file \
$ConvertToNonresident. The data has been lost. This error may be
caused by a failure of your computer hardware or network connection.
Please try to save this file elsewhere.

Other files I got that message for were \$Directory and \$Mft.

Upon rebooting, I let chkdisk run, and got the following messages
(wrote them down on a piece of paper):

Deleting corrupt attribute record (128, "") from file verification
segment 62899.

Deleting index entry errors.txt.lnk in index $I30 of file 38274.

Recovering orphaned file A00237~...

(errors.txt is the file I created where I saved the afore mentioned
delayed write message errors).

Looking at the System Event Viewer, I see that I am slammed with
messages like this from 12:53:04AM to 2:49:23AM. Not sure why it
stopped, then.

At 12:56:56AM, in the Application Event Log, I see this:

2008-01-23 06:56:56,306 COMPUTERNAME [000944:001296] ERROR 000
AVG7.AM.events.handling.CAvgAmAlertManager event creation failed for
event with attributes [Data=s "sched(1):sched.lasttime", Date=d
1/23/2008 6:56:56 AM, ProcessId=i 1892, Severity=i 3,
SourceComponent=s "Kernel", SourceMachine=s "COMPUTERNAME", Type=s
"CfgChanged", Userdomain=s "COMPUTERNAME", Username=s "wiggie"]: Error
0x80004005

I have no clue what that means.

I'm fairly confident I am (and was) up-to-date on Windows updates as
well. When I visit windowsupdate.microsoft.com and let it to it's
scan, the only update it suggests I install is "2007 Microsoft Office
Suite Service Pack 1 (SP1)".

Since you say a reboot helps, I suspect the problem is on the computer
and not on your hub (or router as the case may be). Give us some
information about the computer itself. Desktop or laptop? Old or new?
Connected wired?

It's a 1.6GHz IBM ThinkPad (laptop) with a Centrino chipset and 1GB
RAM. It's connected using a cat5 cable to an 8-port hub. It's
running Windows XP Pro SP2, as well.

I did a search for your error and it seems to have something to do with
caching data, although I wouldn't swear to that:

http://www.google.com/search?hl=en&q=$ConvertToNonresident&btnG=Google+Search

I wonder if you're having some hardware problems. Since you have a
laptop, you can't just swap out the network adapter but you can test the
hard drive and the RAM. I'd start with the hard drive.

http://www.elephantboycomputers.com/page2.html#Hardware_Tshoot


Malke