Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Network load balancing heartbeat packets may be dropped and a cluster may be disbanded in a Windows Server 2003 cluster environment

Network load balancing heartbeat packets may be dropped and a cluster may be disbanded in a Windows Server 2003 cluster environment

View products that this article applies to.

Symptoms

On a cluster member in a Microsoft Windows Server 2003 cluster environment, you may experience one or more of the following symptoms:
  • The Windows Load Balancing Service (WLBS) fails and the incoming Network Load Balancing (NLB) heartbeat packets are lost.
  • The number of incoming and outgoing TCP segments significantly increases. Therefore, more bandwidth is consumed.
  • All members in the cluster are disconnected and the cluster is disbanded.
  • The following informational event ID message about changes in the cluster state may be logged on all member servers:
    Event Type: Information
    Event Source: WLBS
    Event Category: None
    Event ID: 69
    Date: date
    Time: time
    User: N/A
    Computer: computer name
    Description: NLB Cluster IP address : Initiating convergence on host 2. Reason: Host 3 is leaving the cluster.

    For more information, see Help and Support Center at
    http://support.microsoft.com.
    Data:
    0000: 00 00 0c 00 04 00 5a 00 ......Z.
    0008: 00 00 00 00 45 00 07 40 ....E..@
    0010: 00 00 00 00 00 00 00 00 ........
    0018: 00 00 00 00 00 00 00 00 ........
    0020: 00 00 00 00 00 00 00 00 ........
    0028: bf 0b 06 00 00 00 00 00 �.......
    0030: 00 00 00 00

↑ Back to the top

Cause

This problem occurs because the cluster member servers have become the target of a malicious attack known as "TCP/IP SYN Flooding" or "TCP/IP SYN Attacks."

↑ Back to the top

Resolution

To resolve this problem, obtain the latest service pack for Microsoft Windows Server 2003. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
889100 How to obtain the latest service pack for Windows Server 2003

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

Keywords: KB829701, kbprb, kbwinserv2003presp1fix, kbbug, kbfix, kbqfe

↑ Back to the top

Article Info
Article ID : 829701
Revision : 9
Created on : 10/26/2006
Published on : 10/26/2006
Exists online : False
Views : 319