One of my machines has started to get serious networking issues. This all started to happen suddenly although I am not aware of any specific changes made to the machine. It is running Windows 7.
Some of the symptoms that was not a problem before:
- ssh into the machine rarely works and when it does it might stop after some minute
- rdesktop to this machine shows similar symptoms as ssh, if you manage to get in it freezes after a short time, but usually you do not get in at all.
- nmap shows:
Note: Host seems down. If it is really up, but blocking our ping probes, try -PN
. This worked fine before.
However connecting with vnc has no problems at all.
Googling around I have tried some tips, none working so far such as turning off RDC (remote differential compression), turning off firewall, turning off antivirus, turning off network auto tuning.
How can I find out what the problem is ?
Before you say "network" let's understand what LAYER you're talking about here.
If it's truly a "networking" problem its going to be layer 3 and below.
So... check the following:
Layer 1: Frayed or kinked cable? If you have a managed switch can you see any physical errors on the port utilized by the client? Is the NIC linking at half or full duplex, 10 or 100 or 1000?
Layer 2: Thrown on Wireshark and lookout for any duplicate MAC addresses jibber jabbering back and forth.
Layer 3: Is it receiving a valid address not shared by any other peer on the network?
As for the OS itself... check the usual culprits:
Troubleshoot some more.
Using IPv6? Many of the problems I have seen with Win7 networking revolve arround IPv6 and the hosts file.
But rather than guessing, I would collect data first. Start with the System event log. Research any warnings and errors in the relevant time frame.
Next try something like:
Use the output to audit connections on a given machine. Pay close attention to records with a state other than Listening or Established. If you find something odd, try to isolate it and take a closer look.
Another thing is to verify the ping response. Try pinging both the IP Address and the Machine name. Make sure that the response is from the host you expect it to be from.
Is Network Discovery enabled?
http://windows.microsoft.com/en-US/windows7/Enable-or-disable-network-discovery
What is your ethernet adapter's chipset? I have seen this with particularily horrible ethernet chipsets that do crappy TCP Offloading and fail miserably at it.
Solution in my case was to disable TCP Offloading in the driver options pane, and bumping MTU back to 1500.
This could be a multitude of things, but in this particular case, that was my issue, and it took forever to figure out, so i thought I would mention it.
You may want to try this as a test:
or
Log onto the machine and see how it performs over the network. e.g. Browse the web, download a file. Is it snappy or really slow? Or, does the machine feel really slow overall?
If you bring up the CPU monitor, is it idling or sitting at 100%? seen that before, well it's really common with windows PC's to sit at 100% for no apparent reason.
This is just to confirm that it is a networking issue and not a general machine issue.
If you're certain it's a network issue try this.
As Greg has suggested, the following can sometimes help. It certainly can make a difference in some instances.
EDIT Just read a comment that you don't have physical access to the machine. Suggest you log in with VNC and check the event log and also check that something isn't taking up 100% CPU or more than it's fair share.
Take a look at
http://support.microsoft.com/kb/951037
I disabled Receive-Side Scaling, Chimney Offload and NetDMA and it solved some of my network issues.
(granted, this will slightly affect performance)