 exocet_cmI am the law - Judge DreddPremium
join:2003-03-23
New Orleans, LA
kudos:2 | ndis.sys crash on Server 2008 R2 Ndis.sys caused one of our three DCs to BSOD earlier this evening (for the non-profit, not my regular job). Completely random and out of the blue. No new hardware or software installed. No system configuration changes .
We have Broadcom NICs with the latest drivers using BACS 4. Doing everything I could with the NICs has still not resolved the problem (remove, reinstall, new drivers, etc).
I removed the team and one NIC that I have configured will responded to network traffic for about 1 minute after the server reboots then stop responding to traffic. If I manually disable and enable the NIC it'll respond to traffic. Advanced functions with the NICs cause them to not respond to traffic at all.
Any ideas?
--
"I have measured out my life with coffee spoons..." - T.S Eliot
"I have often regretted my speech, never my silence." - Publilius Syrus
Ma blog: »www.johndball.com |
|
|
|
 ModusI hate smartassery on forumsPremium
join:2005-05-02
us | How do you know that ndis.sys caused the BSOD? Did you use BlueScreenView?
--
Think Ahead. Learn More. Solve Now! |
|
exocet_cmI am the law - Judge DreddPremium
join:2003-03-23
New Orleans, LA
kudos:2 | said by Modus:How do you know that ndis.sys caused the BSOD? Did you use BlueScreenView?
Yeah, used it and it pulled the crash dump. Listed ndis.sys and since the crash networking hasn't worked.
--
"I have measured out my life with coffee spoons..." - T.S Eliot
"I have often regretted my speech, never my silence." - Publilius Syrus
Ma blog: »www.johndball.com |
|
 drewAutomaticPremium
join:2002-07-10
Port Orchard, WA
kudos:6 | reply to exocet_cm
Possible hardware failure?
Also, are you sure that no patches were installed? |
|
exocet_cmI am the law - Judge DreddPremium
join:2003-03-23
New Orleans, LA
kudos:2 | said by drew:Possible hardware failure?
Also, are you sure that no patches were installed?
Yeah, I had yet to approve the Windows updates and the other admin hadn't made any changes. I have a spare mobo for it, I guess I'll swap it and see?
--
"I have measured out my life with coffee spoons..." - T.S Eliot
"I have often regretted my speech, never my silence." - Publilius Syrus
Ma blog: »www.johndball.com |
|
 jimkPremium
join:2006-04-15
Raleigh, NC
 ·RoadRunner Cable
 ·voip.ms
| reply to exocet_cm
Do you have any software firewalls other than the native one that comes with Windows? If so, try removing them. I have seen this exact behavior in multiple occasions. The same thing applies to anything else that installs as a NDIS filter. I know you said nothing has been installed recently, but I have seen this kind of issue occur suddenly for no apparent reason.
If it is not an onboard NIC, do you have a spare you could try? Hardware issues are always a possibility. |
|
exocet_cmI am the law - Judge DreddPremium
join:2003-03-23
New Orleans, LA
kudos:2 | said by jimk:Do you have any software firewalls other than the native one that comes with Windows? If so, try removing them. I have seen this exact behavior in multiple occasions. The same thing applies to anything else that installs as a NDIS filter. I know you said nothing has been installed recently, but I have seen this kind of issue occur suddenly for no apparent reason.
If it is not an onboard NIC, do you have a spare you could try? Hardware issues are always a possibility.
Yeah, both on-board. ESET threw an error in the event logs and I removed the AV but it didn't fix anything. I'll try the spare mobo but I have neither the time nor the patience to really troubleshoot it. I'm seriously contemplating making one of the connections active and removing the DC role the blowing it away and start with a fresh install.
--
"I have measured out my life with coffee spoons..." - T.S Eliot
"I have often regretted my speech, never my silence." - Publilius Syrus
Ma blog: »www.johndball.com |
|
JoelC707Premium
join:2002-07-09
West Point, GA
kudos:5 | This is one of three DCs? What else does it do? Unless this is a remote DC, needed for some HIGH load or something like that, do you really need a 3rd DC? If this is just a DC and you don't have a special need for it, I say dcpromo it and kill it. Easy way out   |
|
exocet_cmI am the law - Judge DreddPremium
join:2003-03-23
New Orleans, LA
kudos:2 | reply to exocet_cm
Holy sh*t firmware upgrade. Seems to be working fine now. I still don't know why it stopped after having been in use for a time now. The firmware route I pulled out of my a$$. Not sure why I thought of it but at 2:00 AM I thought "hmmm, firmware, I'll try it when I get up in a few hours". That was my last uphill charge with bayonets locked before I nuked it.
@JoelC707, this is one of two physical DCs. We virtualized a DC (the VM DC makes three). I have in the plans to demote this one and set up a second virtual DC (still three, one physical, two virtual), but my plans weren't meant to be put in place so soon. 
I think this firmware upgrade fixed it though. The gigabit NIC team had firmware 3.x.x and the upgrade was at 7.x.x.
Edit: Broadcom 5722 with driver version 15.4.0.17, firmware version 7.4.8. The connectivity was dying once BACS 4 was fully loaded and removing BACS 4 didn't fix it. Guess firmware was the route.
--
"I have measured out my life with coffee spoons..." - T.S Eliot
"I have often regretted my speech, never my silence." - Publilius Syrus
Ma blog: »www.johndball.com |
|
exocet_cmI am the law - Judge DreddPremium
join:2003-03-23
New Orleans, LA
kudos:2 | reply to exocet_cm
The firmware upgrade fixed the NDIS problems but still BSODs. She got nuked this morning. |
|
