Network access error

By jnelsoninjax
in Smart Home, Network & Security

 Share

Recommended Posts

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

got your traces, looking at them now.. You might of wanted to TURN OFF torrents before taking the trace ;)

So you were running this at the same time?

I don't see the broadcast on the laptop at all.. But I do see some broadcast traffic, your dropbox for example on 192.168.1.2 broadcasting.

I don't see any packets from .4 (laptop) to .2 at all -- but I see stuff sent.

You sure your not in guest or AP isolation mode?? There are no packets in that capture on your desktop from .4 at all!!

Grand Master

xendrome

Posted
Posted

The DNS server he's using is 208.67.220.220 which is external; shouldn't it be 192.168.1.1?

Yeah, he should be using 192.168.1.1, as the first and OpenDNS as 2nd and 3rd options. The router should handle the local DNS lookups at that point using the ARP/MAC routing tables inside of it, even if he's using a static IP.

Trying to resolve \\computername with only OpenDNS ip's isn't going to work.

If all the clients have netbios enabled, then there maybe a priority/timeout issue on the way the protocols are setup to resolve/timeout. Might need to check that and the order as well.

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

NO NO NO!!

Sorry netbios resolution and broadcasting for host name have NOTHING to do with dns..

If what your saying is true -- then nobody using opendns or google dns or even their ips dns directly would be able to resolve local host name and share file between each other.

Sorry 2nd and 3rd options again is a big fat NO!

edit: here is his desktop broadcasting for the hawk-pc. Which his laptop NEVER SEES, so could never even if he wanted to answer. That is if he was running the traces at that the same time?

post-14624-0-61000400-1332683755_thumb.j

  • Squirrelington
  • Like 1
Grand Master

articuno1au

Posted
Posted

Budman has been right on every single thing he has said thus far.

Could it be that his other machines have a stupid subnet set that is causing them to broadcast/listen to the wrong announc Redacted, went back and re-read the thread :\

I'm kind of curious as to whether it might be an IPv6 thing. If Budman sees no issue with it, might be worth turning it off on the two machines..

Grand Master

jnelsoninjax

Posted
  • Author
Posted

Hawk-pc is the laptop (.4) Let me say this: before I restored the laptop to it's original state, it worked just fine. Now as I said before, I can access the laptop using //hawk-pc in explorer. It also shows up in the network listing, the issue now is that hawk-pc cannot access jon-pc (desktop)

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

He posted the ipconfig, they are on the same network

IPv4 Address. . . . . . . . . . . : 192.168.1.2(Preferred)

Subnet Mask . . . . . . . . . . . : 255.255.255.0

IPv4 Address. . . . . . . . . . . : 192.168.1.4(Preferred)

Subnet Mask . . . . . . . . . . . : 255.255.255.0

But from the traces he sent me, his laptop is not seeing the broadcasts for name, nor does the desktop see any packets at all from the laptop.

The first trace is FULL OF torrent traffic, so its a bit noisy - but the laptop sniff is really empty. Other than noise he could clean up like ipv6 and llmnr, etc.

I would REALLY suggest you turn of IPv6 if your not going to set it up correctly and use it.

So I use ipv6, and this is my ipconfig /all

post-14624-0-34924800-1332684531.jpg

See how much easier it is to read because it does not have a bunch of stuff your not using ;)

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

What what I can tell you for FACT!!! Plain and simple from your traces you sent, is that your laptop .4 is NOT seeing any broadcast traffic for its name from .2 -- which your desktop .2 clearly is sending

This Has NOTHING to do with any setting on your laptop at all!! NONE!!! The packets are not there for the laptop to respond too plain and simple!!

So if you were running those traces at the same time so it could of caught those packets - then you got something wrong with your router/ap not sending the packets onto the wireless network!

Now if you did those traces at different times, maybe it just did not see those packets.

But during your trace on desktop .2 -- there was NOT ONE PACKET from the laptop .4, not ONE!!!

Seems to me your router is isolating the wireless from the wired, which is called AP Isolation or Client Isolation, or do you have your wireless setup as guest, where it can only see the internet?

simple test - ping your desktop from your laptop by IP.. Does this work??

on laptop

ping 192.168.1.2

post the output

then post output of your arp table

on laptop

arp -a

Run a trace while your doing this -- so you can see the packets leave the laptop interface, and if they show up on the desktop!

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

Some things I would suggest for troubleshooting, this goes for ANYONE!!

If you not using LLMNR -- turn it off, its pointless to be honest, home user has no use of it at all! That stupid network map in 7 is a pointless and your just sending traffic on the wire you have no use of.

post-14624-0-76851300-1332685253.jpg

If your NOT actually using IPv6, then turn it off! If you not going to actually set it up via tunnel from Hurricane electric, or sixxs, etc.. has your isp provided it yet? And not using homegroups - then turn that **** off so, there is NO Point to running it if not using it

simple command

reg add hklm\system\currentcontrolset\services\tcpip6\parameters /v DisabledComponents /t REG_DWORD /d 255

And its off, simple command and its back if you want it

reg delete hklm\system\currentcontrolset\services\tcpip6\parameters\ /v DisabledComponents /f

even if your using homegroups, you have no use of the teredo and isatap interfaces, disable those with netsh command, etc. So that your not sending out crap on wire you don't need, and its much easier to read a simple ipconfig /all output ;)

And here is big tip - if you going to sniff for a problem with name resolution. You might want to turn off your torrents while you troubleshoot -- so your sniff of 29.6 seconds isn't 4.7MB in size with over 4100 packets ;)

Its just a good idea while sniffing to close all apps and websites, etc.. not in direct use for the problem.

edit: Ok -- what part of taking these traces at the same time was hard to understand?? Its pretty pointless to take sniff to see if packets are being sent and seen if you not taking the traces at the same time.

So I see broadcast packets to your lap from desk, but NO nbns queries that your desk sends out??

Is that because these traces where not done at the same time???

Here is what looks to be common packet, but times are no where close

post-14624-0-29096200-1332686399_thumb.j

Look at id of packet, and yeah they are not same... If you want me to help, send a trace taken at same time!

Grand Master

jnelsoninjax

Posted
  • Author
Posted

OK, now I discovered that I was typing the laptop name incorrectly while doing net view (the computer is named hawk-hp not hawk-pc) but hawk-hp can not access my system, net view yields system error 5 (access denied), what can I do to force the laptop to connect to my system, I know when I went to access the other laptop on the network, windows popped up saying that the login/password was not correct and asked me to correct them. It however has never asked that when attempting to logon to my system.

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

if you say you can resolve the name

Then just freaking auth to the box!

net use \\machinename\ipc$ /u:username password

You can run into auth depending on how your shared, do you allow public access? You never posted your share setup.

I showed you were I got access denied, then just authed to ipc$ with an account off that machine that has access, etc.

Grand Master

jnelsoninjax

Posted
  • Author
Posted

Not exactly, the issue is that I reinstalled my daughters laptop and it suddenly can not access anything on my desktop. No mater what I try, it will not access! I can access her from my system, and she can access the other system on the network, and when I try to use net use \\machinename\ipc$ /u:username password I am meet with a message that the network path is not found (regarding my system)

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

DUDE!!! Do you have the name right?? I thought you said you could resolve the freaking NAME??

Post the output of net view \\computername

net view \\ipaddress

NO freaking **** if you can not resolve name \\computername then no that command is not going to do anything!

Give me access via teamviewer for like 2 minutes and you will have access.. I am just done with going back with forth with you - pulling freaking teeth to get anything at all.

When you post a sniff -- you don't even run them at the same freaking time -- WTF do you think the point of running a sniff is?? If you not going to listen on the laptop at the same time you send the net view command.

etc.. etc.. etc..

Are you going to post your share settings.. Do you have public shared? etc. etc.. 2 minutes access to your machines and you would be fixed, or we would atleast know what the problem is -- ie if you can not resolve names we would KNOW!

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

Why do you have homegroups manage?? Are you using homegroups? Sharing works different if you want to use homegroups.

Turn that off if your boxes are not members of the same homegroup. Homegroup would require ipv6 as well.

Grand Master

jnelsoninjax

Posted
  • Author
Posted

I just redid the laptop again (same freaking mail.ru toolbar crap) and the issue still remains the same. I am confident that it is my system that is somehow not setup correctly. I reran wireshark from both systems at the same time, they are attached to this post! If anyone can help me fix this issue I would be very grateful!

New ipconfig/all data:

Windows IP Configuration			
Host Name .....			Jon-PC
Primary  Dns Suffix			
Node Type .....			Hybrid
IP Routing Enabled.			No
WINS Proxy Enabled.			No
Ethernet adapter Local	Area Connection		:
Connection?specif ic	DNS Suffix	:	
Description ....		, :	Generic Narvell Yukon 88E8056 based Ethernet Controller			
Physical Address. .			00-01-29-A7-99-8E
DHCP Enabled.   .   . .			No
Autoconficmration   Enabled   -   -   - .			Ves
IPv4 Address.  .  . .			192.168.1.2 <Preferred>
Subnet   Mask ....			255.255.255.0
Default Gateway . .			192.168.1.1
DNS Servers ....			208.67.222.222
			208.67.220.220
NetBIOS over Tcpip.		:	Enabled

I also disabled homegroups from advanced file sharing.

Wireshark.zip

Rising Star

Grogi

Posted
Posted

Do you have any third machine to test connection to desktop share? I think the desktop machine is problem. You can make crossover cable and connect laptop directly to desktop and see what is going on. Since you are using static IP you don't need to chane anything. Do you have both computers set in the same workgroup?

Grand Master

jnelsoninjax

Posted
  • Author
Posted

I do not have a 3rd machine, atm, waiting to order HDD for the other laptop. As for workgroup, yes both machines are listed n WORKGROUP. I do think that the issue is my desktop, I just do not know where to look to fix the problem!

Grand Master

jnelsoninjax

Posted
  • Author
Posted

File and print sharing is on, I even have disabled requiring password since there is no point in having that enabled, but I still am unable to browse my desktop from the laptop, could this have something to do with wifi settings?

This topic is now closed to further replies.
 Share
Go to topic listing