Server 2008 NetBT Event Error
Hello Everyone,I'm having a strange issue that Ihopesomeone can help me outwith.Firstlet me start off with a little information about the system and setup. I'm using aWindows Server 2008 standard 64bit server with two nic cards as myHyper-V server. This system is part of a Windows 2003 Domain.Theissue thatI'm having is every now then I get thisNetBT error.
EventID: 4319A duplicate name has been detected on the TCP network. The IP address of the computer that sent the message is in the data. Use nbtstat -n in a command window to see which name is in the Conflict state.Sometimes this error will just happen every few hours and other times it will happen every few seconds. When it starts happening every few seconds almost all my users will be locked out of any shares that might be connected to this server, but theHyper-V servers will continue to function normally. I have followed the error message and ran the nbtstat -n command which doesn't show anything has having a duplicate name. Here is what I get when enter that command.Local Area Connection 4:Node IpAddress: [10.0.1.13] Scope Id: []
NetBIOS Local Name Table
Name Type Status ---------------------------------------------Server Name <00> UNIQUE RegisteredDomain <00> GROUP RegisteredServer Name <20> UNIQUE Registered
Local Area Connection:Node IpAddress: [10.0.1.8] Scope Id: []
NetBIOS Local Name Table
Name Type Status ---------------------------------------------Server Name <00> UNIQUE RegisteredDomain <00> GROUP RegisteredServer Name <20> UNIQUE Registered10.01.8 and 10.0.1.13 are all the same server each using a different nic card within that server. I don't understand why it's saying there is a duplicate name on the network when I can't find anything that shows me that. I have looked through DNS and everything else that I can think of to try and find something using that same IP or server name, with no luck. If anyone has any suggestion or comments that they could offer, please let me know. I have been trying to solve thisissue for months with no luck at all.Thanks,Joey
November 18th, 2008 4:48pm
Hello,
Yes, this event ID usually indicates that a duplicate name that has been detected on the network.
You may try the "nbtstat -n" or "ping <hostname>" commands immediately when you encounter the problem the next time.
If possible, please try renaming the Hyper-V server to see if the problem remains.
Besides, you can refer to the following pages to see if they can be of help:
http://technet.microsoft.com/en-us/library/cc735899.aspx
http://www.eventid.net/display.asp?eventid=4319&eventno=554&source=NetBT&phase=1
http://www.experts-exchange.com/Networking/Windows_Networking/Internet_Protocols/Net_BIOS_and_NetBEUI/Q_23720222.html
http://www.experts-exchange.com/Networking/Microsoft_Network/Q_20988902.html
Best regards,Chang Yin
Free Windows Admin Tool Kit Click here and download it now
November 20th, 2008 4:58pm
Joey, Why does your Hyper-V server have two NICs in the same IP subnet? This is not a good idea. You do indeed have a conflict because both IPs will resolve to the same name. If you want to use one NIC for admin and one for the virtual machines, the host does not need an IP on the virtual switch used by the vms. Clear all the checkboxes in the TCP/IP settings so that the NIC is used only by the vms.
Bill
November 21st, 2008 6:37am


