Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

3 computer network, 1 computer losing packets


  • Please log in to reply

#1
mickyjtwin

mickyjtwin

    Member

  • Member
  • PipPip
  • 40 posts
This is my scenario...

We have DSL, connected up to a 4-port wireless netgear router. Two computers are wired, and the laptop is wireless. Both my computer and the laptop connect and access the internet fine, however the other wired computer is having problems. At first it just lost the internet, then was coming up with limited or no connectivity. (the other computers work fine still) Then I did a winsockxp fix, reset the router and the dsl, still same problem. Used XP to configure network again on problem computer, and now have it connecting to the network and to the internet, however it is abnormally slow on the problem computer(other computers work fine and fast too). I then did a ping of the router (192.168.0.1) and it's weird, I will get a request timed out, followed by a 2 replies and a timeout, or vice versa. I'm getting a range of packet loss from 25% to 75%. I am at a loss as to what may be wrong with that computer, or how to go about fixing it?
Any ideas?
  • 0

Advertisements


#2
Dan

Dan

    Trusted Tech

  • Retired Staff
  • 1,771 posts
Hello micky,

Please do the following commands, and copy/paste the results into your next reply.

Goto Start, Run, type CMD, press 'OK' and then type: IPCONFIG /ALL - please post the results here by right-clicking on the Command Prompt window, selecting 'Select All', pressing Ctrl+C, and then posting on this forum.

Please goto Start, Run, type CMD and press 'OK' - now type: netstat -rn and press enter; please post the results here.

Goto Start, Run, type CMD, press 'OK' and then perform a Trace route by typing: Tracert location - ie: Tracert Yahoo.com
Once the trace has completed, please post the results here by right-clicking on the window, selecting 'Select All', and then pressing Ctrl+C; post the results here.

Test your Network
1. Goto Start, Run, type: NETSH DIAG GUI - press 'OK'. A Command Prompt window will open temporarily; don't touch it, it will disappear in a moment.
2. A Microsoft Help and Support window will then open; select the option 'Scan your system'.
3. Wait for the scan to finish and then scroll down to the heading 'Modems and Network Adapters'. Look at 'Network Adapters' (don't expand it yet). Beside your connection information, you should see a green 'PASSED'; if you do not (if you see a red 'FAILED') then expand 'Network Adapters', scroll down the list until you see the heading with the 'FAILED', expand that option and copy and paste the results here.
(Please also look for any other 'FAILED' in the scan report, and post the information relating to it)

Thanks,
Dan.

Edited by Dan G, 30 December 2005 - 04:38 AM.

  • 0

#3
mickyjtwin

mickyjtwin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Dan, here is the information as you requested, first off with ipconfig /all. I am assuming you wanted me to do this on the "bad" computer...

Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Silk>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : RECEPTION
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VIA Compatable Fast Ethernet Adapter

Physical Address. . . . . . . . . : 00-0B-6A-20-B3-62
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.11
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 216.254.141.13
209.90.160.220
Lease Obtained. . . . . . . . . . : Thursday, December 29, 2005 9:22:46
AM
Lease Expires . . . . . . . . . . : Thursday, January 05, 2006 9:22:46 A
M

***********************************
Results for netstat -rn
Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Silk>netstat -rn

Route Table
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 0b 6a 20 b3 62 ...... VIA Compatable Fast Ethernet Adapter - Packet Sc
heduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.0.1 192.168.0.11 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.0.0 255.255.255.0 192.168.0.11 192.168.0.11 20
192.168.0.11 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.0.255 255.255.255.255 192.168.0.11 192.168.0.11 20
224.0.0.0 240.0.0.0 192.168.0.11 192.168.0.11 20
255.255.255.255 255.255.255.255 192.168.0.11 192.168.0.11 1
Default Gateway: 192.168.0.1
===========================================================================
Persistent Routes:
None

******************************
Results from the scan system. Had two failed, the first being in Network Adapters, expanding to Default IP Gateway:
DefaultIPGateway = 192.168.0.1(Same Subnet) (FAILED)
Pinging 192.168.0.1 with 32 bytes of data:
Reply from 192.168.0.1: bytes=32 time<1ms TTL=0
Reply from 192.168.0.1: bytes=32 time<1ms TTL=0
Request timed out.
Reply from 192.168.0.1: bytes=32 time<1ms TTL=0
Ping statistics for 192.168.0.1:
Packets: Sent = 4, Received = 3, Lost = 1 (25% loss)
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
----------------------------------------------------------------------------
The second failed was in DNS Server Search Order:

DNSServerSearchOrder (FAILED)
216.254.141.13 (FAILED)
Pinging 216.254.141.13 with 32 bytes of data:
Reply from 216.254.141.13: bytes=32 time=17ms TTL=17
Request timed out.
Reply from 216.254.141.13: bytes=32 time=18ms TTL=18
Reply from 216.254.141.13: bytes=32 time=18ms TTL=18
Ping statistics for 216.254.141.13:
Packets: Sent = 4, Received = 3, Lost = 1 (25% loss)
Approximate round trip times in milli-seconds:
Minimum = 17ms, Maximum = 18ms, Average = 17ms
209.90.160.220 (FAILED)
Pinging 209.90.160.220 with 32 bytes of data:
Reply from 209.90.160.220: bytes=32 time=79ms TTL=79
Reply from 209.90.160.220: bytes=32 time=79ms TTL=79
Request timed out.
Request timed out.
Ping statistics for 209.90.160.220:
Packets: Sent = 4, Received = 2, Lost = 2 (50% loss)
Approximate round trip times in milli-seconds:
Minimum = 79ms, Maximum = 79ms, Average = 79ms

Thanks,
Mick
  • 0

#4
Dan

Dan

    Trusted Tech

  • Retired Staff
  • 1,771 posts
Hello micky,

Could you please try one more command for me:
Goto Start, Run, type CMD and press 'OK' - now type: PATHPING YAHOO.COM - please copy and paste the results by right-clicking on the Command Prompt window, selecting 'Select All', and then pressing Ctrl+C. Please post the results here.

Along with this, please goto Start, Run, type EVENTVWR, press 'OK', and then look under the System and Application logs for any errors/warnings. Please list the errors and/or warnings.
  • 0

#5
mickyjtwin

mickyjtwin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Here are the results of the pathping yahoo.com:

Microsoft Windows XP [Version 5.1.2600]
© Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Silk>pathping yahoo.com

Tracing route to yahoo.com [66.94.234.13]
over a maximum of 30 hops:
0 RECEPTION [192.168.0.11]
1 192.168.0.1
2 dsl9.tor.primus.ca [216.254.132.14]
3 216.254.129.1 [216.254.129.1]
4 * * ge-1-0.bb1.tor.primus.ca [216.254.128.164]
5 bas1-m.nyc.yahoo.com [198.32.118.24]
6 ge-0-1-4.p154.pat2.pao.yahoo.com [216.115.96.52]
7 ge-3-0-0-p251.msr2.scd.yahoo.com [216.115.106.183]
8 UNKNOWN-66-218-82-221.yahoo.com [66.218.82.221]
9 w2.rc.vip.scd.yahoo.com [66.94.234.13]

Computing statistics for 225 seconds...
Source to Here This Node/Link
Hop RTT Lost/Sent = Pct Lost/Sent = Pct Address
0 RECEPTION [192.168.0.11]
15/ 100 = 15% |
1 0ms 31/ 100 = 31% 16/ 100 = 16% 192.168.0.1
0/ 100 = 0% |
2 17ms 15/ 100 = 15% 0/ 100 = 0% dsl9.tor.primus.ca [216.254.132.14
]
0/ 100 = 0% |
3 20ms 23/ 100 = 23% 8/ 100 = 8% 216.254.129.1 [216.254.129.1]
0/ 100 = 0% |
4 21ms 23/ 100 = 23% 8/ 100 = 8% ge-1-0.bb1.tor.primus.ca [216.254.
128.164]
0/ 100 = 0% |
5 35ms 25/ 100 = 25% 10/ 100 = 10% bas1-m.nyc.yahoo.com [198.32.118.2
4]
0/ 100 = 0% |
6 95ms 25/ 100 = 25% 10/ 100 = 10% ge-0-1-4.p154.pat2.pao.yahoo.com [
216.115.96.52]
0/ 100 = 0% |
7 108ms 30/ 100 = 30% 15/ 100 = 15% ge-3-0-0-p251.msr2.scd.yahoo.com [
216.115.106.183]
0/ 100 = 0% |
8 109ms 15/ 100 = 15% 0/ 100 = 0% UNKNOWN-66-218-82-221.yahoo.com [6
6.218.82.221]
3/ 100 = 3% |
9 100ms 18/ 100 = 18% 0/ 100 = 0% w2.rc.vip.scd.yahoo.com [66.94.234
.13]

Trace complete.

***********************************************************
Eventer Viewer Warnings/Errors

Warning: 12/30/2005 MrxSmb
Warning: 12/29/2005 W32Time
Warning: 12/29/2005 disk
Error: 12/29/2005 Dhcp
Error: 12/29/2005 Dhcp
Warning: 12/29/2005 Dhcp
Warning: 12/29/2005 Dhcp
Warning: 12/29/2005 Server
Warning: 12/29/2005 Dhcp
Error: 12/29/2005 MrxSmb

****
The 28th had the most errors:
Error: Dhcp
Error:W32Time
Error:W32Time
Warning: Dhcp
Error W32Time
Error W32Time
Warning Dhcp
Error Dhcp
******
The 27th had a Error NetBT
  • 0

#6
Dan

Dan

    Trusted Tech

  • Retired Staff
  • 1,771 posts
Hello micky,
You're losing packets before you even reach your router...

Please try to plug your computer directly into the modem (if possible) and attempt another pathping to yahoo.com.

Please also download HijackThis and install it on the 'problem' computer. Please perform a scan, and then from the log file, please copy/paste all 'Running Processes' (please do not post the entire log).

Also, please ensure that your computer is free of malware by following the steps located here.

Please download LSPFix from here. Run it on the problem computer, and please tell me what is under the 'Keep' list, and also the 'Remove' list. Please do not click 'Finish'; simply close the program by pressing ALT+F4 or pressing the Close (Orange square, white X) button.

Thanks,
Dan.
  • 0

#7
mickyjtwin

mickyjtwin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Here is the Hijack Log

Logfile of HijackThis v1.99.1
Scan saved at 10:40:40 AM, on 1/3/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Samsung\SmarThru\PORTCTRL.EXE
C:\Program Files\LogMeIn\LogMeInSystray.exe
C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetTray.exe
C:\PROGRA~1\CA\ETRUST~1\ETRUST~2\ca.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\isafe.exe
C:\Program Files\Microsoft SQL Server\MSSQL$MYPLACE\Binn\sqlservr.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\SalonwareNET\SalonwareNET.exe
C:\Documents and Settings\Silk\Desktop\mick\hijackthis\HijackThis.exe

The LSPFIx only had Keep items which are:
mswsock.dll - Tcpip
winrnr.dll - NTDS
nwprovau.dll - NWLink IPX-SPZ/NetBIOS Compatible Transport Protocol
rsvpsp.dll - (Protocol handler)

Have run the malware programs as well, came up with some stuff, so hopefully this gets solved shortly!

Thanks,
Mick
  • 0

#8
Dan

Dan

    Trusted Tech

  • Retired Staff
  • 1,771 posts
Did you post a full HJT log on the Malware Removal forum? It would be nice to get an experts assurance that your computer is clean.

If you have not, then please do so by posting here.

Thanks,
Dan.
  • 0

#9
Agentx2

Agentx2

    banned

  • Banned
  • PipPip
  • 86 posts
i have always wonder like this but it would be wasteful to start a newtopic on this simple ?. What is your bandwidth recieved or sent?
  • 0

#10
mickyjtwin

mickyjtwin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Guys,

How do I find out bandwidth sent and received? We are running High speed DSL. Like I said in the beginning post, my computer and the laptop work perfectly fine, but the other computer has the issue, which leads me to believe either malware or hardware problem, but I guess we're working through it to the solution.

Thanks guys,
mick
  • 0

Advertisements


#11
Agentx2

Agentx2

    banned

  • Banned
  • PipPip
  • 86 posts
it could be a malware problem or there could be a program like a game or a running process that could be straing your pc and/or internet at the same time. go to www.cnet.com or do a search for bandwidth and search for a bandwidthspeed test and it will tell you your bandwidth curretly.
  • 0

#12
mickyjtwin

mickyjtwin

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
I did a bandwidth test, and it came out as 150kbs for download, and just over 500 for upload. Very strage indeed. Have run all the malware reoval programs, but to no avail.

Still losing packets.

HELP!!!
  • 0

#13
Agentx2

Agentx2

    banned

  • Banned
  • PipPip
  • 86 posts
well what i do for this problem is kinda dumb but it helps. if you have any friends that have high-speed and have a cd and dvd burner send them a game or something by using www.yousendit.com. works for me heh.
  • 0

#14
Dan

Dan

    Trusted Tech

  • Retired Staff
  • 1,771 posts
Hello micky,

Please goto Start, Run, type CMD, press 'OK'. Now type: netstat -s -p tcp
Copy and paste the results.

Please download PingPlotter. Don't run it yet.

Now, please restart your computer into 'Safe Mode with Networking'.

Run PingPlotter, and perform a trace to Yahoo.com, or Google.com. Please save the results and post them on your next reply.

Thanks,
Dan.

Edited by Dan G, 06 January 2006 - 10:26 PM.

  • 0

#15
Sweet Home Alabama

Sweet Home Alabama

    New Member

  • Member
  • Pip
  • 2 posts
Dan G.,

The information you provided for conducting tests provided me with enough information to solve a similar problem.

I had to go into the registry and set the DependOnService

1. Click Start, click Run, type regedit, and then click OK.

2. Locate the following registry key.
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\DHCP

3. In the right pane, double click DependOnService, and then make sure that the Data Value value is Tcpip Afd NetBT

Thank you.

Edited by Sweet Home Alabama, 09 January 2006 - 02:13 PM.

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP