Wanted to quickly review network ports that are being used by our DB/2 Instance.
netstat -anp | grep LISTEN | grep -i DB2
lsof
lsof -i | grep -i 'TCP' | grep 'LISTEN'
lsof 2>&1 | head -n 1
Like everyone else took a boat load of CISCO Networking classes. Took night classes at the local community college.
Forgot about it.
But, then last week a Network Engineer asked me what is my network address and I just did not know.
Yes, I know how to issue ipconfig and get my IP Address and Subnet mask.
Or on Linux, issue ifconfig.
But, to think one step ahead and get the Network Address and CIDR, my mind just did not want to go down that step.
Opportunity to code…
REM *********************************************************************************************
' 1a) http://chris.wastedhalo.com/2014/05/more-binarybitwise-functions-for-vbscript/
' 2a) http://www.robvanderwoude.com/vbstech_network_ip.php
' 3a) http://powerasp.net/content/new/vbscript-constants.asp
REM *********************************************************************************************
option explicit
Dim strLog
Dim strIPAddress
Dim strIPSubnet
Dim strCIDR
Dim strNetworkAddress
Dim strAguments
Dim objAguments
Dim iNumberofArgs
Const CHAR_PERIOD = "."
function getIPAddress
REM *****************************************************************************
REM Rob van der Woude's Scripting Page
REM Win32_NetworkAdapterConfiguration
REM http://www.robvanderwoude.com/vbstech_network_ip.php
REM *****************************************************************************
Const strQueryNAC = "select * from Win32_NetworkAdapterConfiguration where MACAddress > ''"
Const WMISERVICE = "winmgmts://./root/CIMV2"
Dim objWMISvc
Dim objRS
set objWMISvc = GetObject(WMISERVICE)
if objWMISvc is Nothing then
strLog = "Unable to Get Object " & WMISERVICE
WScript.Echo strLog
WScript.Quit (-1)
end if
Set objRS = objWMISvc.ExecQuery( strQueryNAC, "WQL", 48 )
Dim objItem
For Each objItem In objRS
'IP Address
If IsArray( objItem.IPAddress ) Then
If UBound( objItem.IPAddress ) = 0 Then
strIPAddress = objItem.IPAddress(0)
Else
strIPAddress = Join( objItem.IPAddress, "," )
End If
End If
'IP Subnet
If IsArray( objItem.IPSubnet ) Then
If UBound( objItem.IPSubnet ) = 0 Then
strIPSubnet = objItem.IPSubnet(0)
Else
strIPSubnet = Join( objItem.IPSubnet, "," )
End If
End If
Next
end function
'*******************************************************************************
'* bitMask(BitNumber)
'* Returns a number with all bits set to 0 except for the specified bit
'* http://chris.wastedhalo.com/2014/05/more-binarybitwise-functions-for-vbscript/
'*******************************************************************************
Function bitMask(pBit)
If pBit < 32 Then
bitMask = 2 ^ (pBit - 1)
Else
bitMask = "&H80000000"
End If
End Function
Function Dec2Bin(pValue)
'*************************************************************************************
'* Dec2Bin(AnyNumber)
'* Returns a string representing the number in binary.
'* http://chris.wastedhalo.com/2014/05/more-binarybitwise-functions-for-vbscript/
'*************************************************************************************
Dim TotalBits, i
strLog = VarType(pValue)
Select Case VarType(pValue)
Case vbLong:
TotalBits = 32
Case vbString:
TotalBits = 32
Case vbInteger:
TotalBits = 16
Case vbByte:
TotalBits = 8
Case Else:
strLog = "In Function Dec2Bin:: Value passed is " & pValue & vbCrLf
strLog = strLog + "VarType(pValue) :- " & CSTR(VarType(pValue)) & vbCrLf
Wscript.Echo strLog
Err.Raise 13 ' Not a supported type
WScript.Quit
End Select
For i = TotalBits to 1 Step -1
If pValue And bitMask(i) Then
Dec2Bin = Dec2Bin + "1"
Else
Dec2Bin = Dec2Bin + "0"
End if
Next
End Function
Function countSpecficChar( strText, chChar)
Dim iPos
Dim iLen
Dim iCharFound
Dim iCount
Dim chCharAtPos
iPos = 1
iCount = 0
iLen = len(strText)
for iPos = 1 to ILen
'Get character at position
chCharAtPos = mid(strText, iPos, 1)
if (chCharAtPos = chChar) then
iCount = iCount + 1
end if
Next
countSpecficChar = iCount
End Function
function getCIDR(strIPSubnet)
Dim objArr
Dim strNumber
Dim iNumber
Dim strNumberBin
Dim iNumberofOnes
Dim iNumberofOnesTotal
objArr = Split(strIPSubnet, ".")
iNumberofOnesTotal = 0
for each strNumber in objArr
iNumber = CInt(strNumber)
strNumberBin = Dec2Bin(iNumber)
iNumberofOnes = countSpecficChar(strNumberBin, "1")
iNumberofOnesTotal = iNumberofOnesTotal + iNumberofOnes
next
getCIDR = iNumberofOnesTotal
end function
function getNetworkAddress(strIPAddress, strIPSubnet)
Dim objArrIPAddress
Dim objArrIPSubnet
Dim iIPAddress
Dim iIPSubnet
Dim strNetworkAddress
Dim id
Dim idLowerBound
Dim idUpperBound
Dim strLogicalAND
strNetworkAddress = ""
'Split Numbers into Array
objArrIPAddress = Split(strIPAddress, CHAR_PERIOD)
objArrIPSubnet = Split(strIPSubnet, CHAR_PERIOD)
id = 0
'Get Number of Octets
idLowerBound = LBOUND(objArrIPAddress)
idUpperBound = UBOUND(objArrIPAddress)
'Transverse Numbers
for id = idLowerBound to idUpperBound
iIPAddress = CInt(objArrIPAddress(id))
iIPSubnet = CInt(objArrIPSubnet(id))
strLogicalAND = ( iIPAddress AND iIPSubnet )
'If this is not the first number then add delimeter
if (strNetworkAddress <> "") Then
strNetworkAddress = strNetworkAddress + CHAR_PERIOD
end if
strNetworkAddress = strNetworkAddress + CSTR(strLogicalAND)
next
getNetworkAddress = strNetworkAddress
end function
'Get List of Arguments
set objAguments = WScript.Arguments
iNumberofArgs = objAguments.Count
if (iNumberofArgs >0) and (iNumberofArgs <> 2) Then
set objAguments = Nothing
Wscript.Echo "Expected two arguments IP Address & Subnet Mask"
Wscript.Quit
elseif (iNumberofArgs =2) Then
strIPAddress = objAguments(0)
strIPSubnet = objAguments(1)
else
call getIPAddress
end if
set objAguments = Nothing
strNetworkAddress = getNetworkAddress(strIPAddress, strIPSubnet)
strCIDR = getCIDR(strIPSubnet)
WScript.Echo "IP Address :- " & strIPAddress
WScript.Echo "IP Subnet :- " & strIPSubnet
WScript.Echo "Network Address :- " & CSTR(strNetworkAddress)
WScript.Echo "CIDR :- " & CSTR(strCIDR)
There are two type of invocation.
The first one is to pass along the IP Address and Subnet mask.
And, the other is not pass in any arguments and have the script query the system for its IP Address and subnet mask.
cscript networkAddress.vbs
set _IPAddress=10.0.4.101 set _IPSubnet=255.255.255.128 cscript networkAddress.vbs %_IPAddress% %_IPSubnet%
We experienced a big outage yesterday.
Cisco patches were applied, the big VMWare boxes came back up, NetApp Storage were restarted, database servers brought online, Application & Web Servers rounded up the corner mile.
But not so fast with the IIS Web Servers in our QA environment.
The Web Server is running on Windows 2014.
And, the core IIS related Windows Services on that OS are:
And, for each Web Site the corresponding “Application Pool”.
Repeatedly restarted the Services in the sequence listed below:
But, upon launching a browser and accessing the web site locally on the box itself, no smoke.
Countless episode with Event Viewer yielded no redemptive clue.
|
|
Knowing that we had problems with the Network earlier took to the Net and tried to access external hosts on the Net. No problem.
Knowing that this computer is not playing with me, finally took to the command line, knowing that I might as well get bruised up and have something to show the judge, so that she might as well call it even.
Netstat to the rescue. By a wide margin, netstat is my favorite command line network diagnostic tool.
From command line, issued “netstat –an | find “SYN_SENT” “.
thankfully, came back positive
Seeing that we have SYN_SENT to port 1433, I sensed that we have a SQL Server Connectivity issue.
By default SQL Server runs on Port 1433. But what host.
I am really stuck here.
Yes, I know IPV4, but IPV6.
That is way after my time.
Back to the command line, issued “ping -6 -a <IPV6 Address>”
100% lost
No help!
Issued “pathping -6 <IPV6 Address>”
Thankfully, got back the hostname.
And, it is in fact the Hostname to our SQL Server.
Sumrak, Asked
iis 7 stopping a listener channel
Adam Brand, Answer
IIS pings a worker process periodically (by default, every 30 seconds) to make sure it is still responsive. It is possible that your worker process is too busy to respond to the ping, so IIS tries to terminate it. When IIS tries to terminate the process, it fails, because the process is still hanging on to areas of memory.
Go into IIS, click Application Pools, then right-click on your app pool and choose Advanced Settings. Under the Process Model heading, choose False next to Ping Enabled and see if that fixes the issue. Another option is to increase the Ping Maximum Response Time.
As for whether or not this signals a larger problem, I would say yes, it does. It doesn’t seem appropriate for that type of code to execute synchronously. You might want to consider passing the task off to a Windows service that will do an async callback, or investigate IIS’s async model (System.Threading). How to do that would probably be a better question for stackoverflow.
Thank you to pathping.
Dedicated to Microsoft/Networking.
Please read more :
Lost my mind @ 11:30 PM.
Just because the IP Address was an IPV6.
Commuted over to the SQL Server box, noticed the SQL Server Instance was stopped, restarted it.
Now I can get on that last train!
Had an insomnia night last week. And, so took to the laptop and wanted to troubleshoot an issue.
As part of that troubleshooting exercise I knew Network Traffic Pattern might be pertinent.
Here is sample of some of what I noticed through capturing Network Traffic.
Noticed a lot of Name Resolution Traffic.
Inclusive of protocols that line up with Network Resolution issues are DNS & NBNS.
DNS stands for Domain Name Server and NBNS Stand for Netbios Name Server.
Though running Windows. it is no longer a Netbeui World.
Strictly TCP/IP.
Let us review our Network Configuration on specific adapters.
As I am currently on wireless, let us focus on just the Wireless Adapter.
Here is how to do so through the GUI.
Currently, we are set to receive NetBIOS Settings from the DHCP Server; that appears to be the default MS Windows Setting.
And, here are a couple of options to do so via the Command Line Shell.
ipconfig /all
NetBIOS over Tcpip is Enabled
set _hostname="." set _propList="DHCP*,IPAddress,DefaultIPGateway,DNSDomainSuffixSearchOrder,DNSEnabledForWINSResolution,DNSServerSearchOrder,TcpipNetbiosOptions" set _command="Get-WmiObject -Class Win32_NetworkAdapterConfiguration -Filter IPEnabled=TRUE -ComputerName %_hostname% | Select-Object -Property %_propList% " powershell -Command %_command%
Let us use wmic and pass along the nicconfig verb; calling the SetTcpipNetbios method and sending along argument 2.
Remember 2 mean Netbeui disabled.
Please pass along the right index, as well.
Each NIC Card has an index and it is displayed when one queries the Network Configuration.
REM - Use NetBIOS setting from the DHCP server set _netBiosSettingDHCPServer=0 REM - Enable NetBIOS over TCP/IP set _netbiosSettingEnabled=1 REM - Disable NetBIOS over TCP/IP set _netbiosSettingDisabled=2 set _hostname="." set _index=15 wmic nicconfig where index=%_index% call SetTcpipNetbios %_netbiosSettingEnabled%
Went back to Wireshark and took another trace.
Noticed a slew of NBNS Traffic targeted at our DNS Server.
BTW, our local DNS Server are set for “Recursion Desired“.
That way they can forward unresolved Name Resolution traffic to our ISP…Which will be most of the requests we get.
Connected to each of our internal DNS Servers and disabled Netbeui Name Resolution on the NIC Cards, as well.
If we had a Windows DHCP Server, would have disabled that option on the DHCP Scope, as well.
I doubt that our Wireless Access Point supports DHCP and so will skip that step for now.
Here I am having gone crazy troubleshooting my home network. And, so let us write down the little bit I found out.
Syntax:
arp -a
Output:
As we are only interested in the local network, let us get a bit more specific and restrict our search to only our intranet IP Address.
Syntax:
arp -a -N [IP-Address]
Sample:
arp -a -N 10.0.4.100
Output:
Let us do a network sweep; by adding -v
Syntax:
arp -a -v -N [interface]
Sample:
arp -a -v -N 10.0.4.100
Output:
Explanation:
Syntax:
ping -a [IP-Address]
Sample -1 :
arp -a -N 10.0.4.6
Output:
Sample -2 :
arp -a -N 10.0.4.7
Output:
Sample -3:
arp -a -N 10.0.4.94
Output:
Explanation:
So here I am going crazy. How come I can’t figure out the hostname bearing 10.0.4.94
Downloaded Angry IP Scanner and Java’s JRE
Ran it and got this back.
So again, though we received back a ping’s response for 10.0.4.94, no corresponding hostname.
Took to the internet to find out who is the manufacturer for the MAC Address corresponding to the IP Address 10.0.4.94
Web Sites:
CheckMacAddress
So entered our MAC Address, but got back a vendor that I am still not that familiar with; specifically Azurewave Technologies, Inc., TAIWAN
Connected to our WAP and using the DHCP Client Table, here is what we received back:
Finally, we have a match for IPAddress 10.0.4.94 /MAC Address 6C…..
Our match is the ChromeCast device that my brother brought us to be able to view youtube videos on the TV.
No country for old men!
For most of us that work in Corporate MS Windows Environment, our Internet Gateway \ Proxy configuration is pretty hidden.
At home, we either have direct connections to the Internet, have a gateway assigned to us by our ISP, or get on the Internet through our own Router or Wireless Access Point (WAP).
On the other hand, while at work in a Corporate Environment, when we do the following:
Our available choices are
So to put it subtly an Inquiry mind wants to know. Which server is proxy-ing our web traffic.
Well that is where WPAD comes in?
His article “Configuring Web Proxy Automatic Discovery (WPAD) in Forefront Threat Management Gateway (TMG) 2010” knocks the topic out of the park. It stimulates my thinking, and notice that I did not say it stimulated my thinking.
Richard is a Microsoft’s Enterprise Security MVP; and he does that acknowledgement well.
There are a couple of ways that a machine acquires its Internet’s Client Configuration
I honestly can not say for sure whether we are getting Internet proxy configuration via DHCP.
I will have to use a Network Traffic Tool and review its requests and the response from the DHCP to answer affirmatively.
But, I can say that we are using DNS; solely or in addition
Query Syntax
nslookup WPAD
Explanation:
When we use nslookup and issue WPAD query against our default DNS Server, we get back
Let us review our current network connections and see if we indeed have traffic going to our stated Proxy Server:
Syntax:
netstat -anb | find [Proxy-Server]
Sample:netstat -anb | find "10.4."
Image:
Most Web Browsers have been coded to able to work with WPAD.
On the other hand, 3rd Vendors might not have augmented their applications likewise.
Here we configure Notepad++ with our Proxy Server, its IP Address and Port Number. And, later our Network username and password.
Plugin Manager Settings
Proxy Credentials:
But, sadly our installation of our plugin failed.
To determine why our install failed, we have to dig a bit deeper and see if there are log files created by Notepad++.
Notepad++ developers are good ones and you know they are smart.
Here is where Update Log files are and where they are not:
Here is our Proxy Log:
The identifying error is:
Conclusion:
Kenny Chesney & Kid Rock – LuckenBach Texas
Videos
At the end of the song there is an exchange between Kenny & Kid Rock; it reads
How they did it in 80 ….
If you listen to this song, you are listening to something real
Don’t listen to something else
At 4:00 O’Clock in the morning
Thank God, they get to stay up till 4 O’Clock in the morning, doing what they are happy doing.
And, as for me, thank Goodness for Richard Hicks and other MVPS.
I will take the advice of the singers here; as I am unlikely to listen to anyone else.
When I come in each morning and occasionally through the day, I get the message pasted below:
Image:
Text:
Additionally Information is needed to connect ….
Our display looks like this:
On the Wireless Network Connection, we can see the message “Attempting to authenticate”.
Manage Wireless Networks
Wireless Network Properties – Connection
Wireless Network Properties – Security
The problem is the we are currently setup to auto connect to the Wireless Network.
As background, systems continually poll to see whether automatically configured Networks are nearby.
And, of course, it is once I come to work and dock my laptop each morning.
The auto-connect will happen in most cases. But, in our case, we are setup with two-factor authentication; smart card and pin.
And, that is the source of the message “Additional Information is needed ….”
Un-check “Connect automatically when this network is in range”.
