Port 445 taking up massive bandwidth, looking for explantion

Good morning fellow IT workers!
I was looking at my netflow data today and noticed that users on remote sites were bypassing their Domain Controllers and going right to the main office's. All of this traffic was on port 445 (MicrosoftAD) from user workstations and was just curious
as to why this may be happening. Within the past two weeks its taken up 13.9GB on the circuit. While I have some general knowledge of AD, I'm hoping you fine people could point me in a better direction as to why port 445 on user workstations is bypassing the
remote site DC and going straight to the main site DC.
Thank you in advance!

Hi,
How many users are there in the remote sites?
Is there file sharing service on the domain controller? The file sharing service also use TCP/UDP port 445.
The TCP/UDP port 445 is not used by Active Directory directly. It is used by SMB. The AD uses SMB to transmit data.
Please run the command below on the client. It will tell us that which process sends the traffic. 
netstat -abon
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

  • Network Drive Mapping for users who have Port 445 (possibly others) Blocked by their ISP to a Server 2008 system

    Nice to see my original posts are still up.  I was hoping that in the ensuing time someone had found a solution.  At least I can now see many other posting the same problems.  :)  Thought I was losing it for a while.
    We have 100% proven that the problem (in our case) is from the ISP blocking port 445 (possibly others but 445 for SURE) with the reasoning that it prevents the spread of some Internet "worms".  It also just happens to prevent people who work
    from home from being able to map to their network drives at work.
    What I was hoping was that eventually someone would comer up with a solution for this short of having to load a server using a different OS from Windows.  The SMB protocol is the one needing port 445 as far as I can tell.  Not all ISP block
    port 445 and the laptops that use those ISP's  have no problem.  Unless they travel.  Then it is "hit or miss" as to whether the ISP for the Hotel they stay at blocks it.
    I have run multiple tests to prove that this was in FACT the problem.  Even the particular ISP in question which is a very large national ISP company freely admits they do this supposedly to prevent the spread of an unnamed Internet Worm.  It also
    happens to prevent Business use of their Internet by Home Subscribers at they cannot map to their Business Servers which also need port 445 to map.
    I have used WebDAV successfully to get around this but at a huge loss of speed and performance.  Cloud services all do essentially the same thing and all have pretty much the same loss of speed.
    If anyone has come across a method of allowing a drive mapping to be rerouted to any other port, that is the only hope I have short of changing to an alternate OS for the Office Server and even then I cant be sure until I try if it would help.  I read
    somewhere about the possibility of routing through a proxy but again, the problem would still be that the requests for mapping are expected on port 445 on the server and they will not get through even to the proxy since the originating ISP is the one blocking
    the port from the User's system. 
    Any help or suggestions would be greatly appreciated  I have posted this question now for several years with no one yet providing a working solution.  Hope burns Eternal though :)

    Yes, OwnCloud is an option as well as many others.  Even self hosted Cloud services such as the WD MyCloud all work.  The problem is speed.  JungleDisk is the best I have found so far.  I am not sure exactly what they use to allow the
    drive mapping but it seems to work faster that anything else I have found.
    VPN's don't work.  At least none of them I have tried.   I can connect a VPN with no problem.  But still cannot map a drive over it.   Actually, there are some issues with the VPN as well but these are just a matter of methodology. 
    Mapping to the FQDN works for some people while others require the public IP.  Some users on some ISP's can map using the FQDN, others have to map to the IP.  That in itself was a bit odd.
    I have tried every trick I could find including adding  the IP and/or FQDN to the Windows Hosts file on the server as well as on the client systems.  This actually did help to get the VPN to connect in some cases.  However, it still would
    not allow me to map a drive letter.
    I can create a Network Place,  This also works.  But it will not allow me to MAP that "network place" to a drive letter.  I have tried multiple utilities that allow mapping of Drive letters to almost anything but they wont work to map to a
    Network Place.
    The software that needs the mapped drive is a SQL database which runs on port 2004.  The program itself has no problems at all connecting to the server to run the database.  Even on systems which cannot map to the needed drive letter for the documents
    referred to in the database.    Users can run it and look up all kinds of material but it it is only a half-solution since the database refers to files stored in a "common-mapped" drive letter.  Which I cannot Map.
    I have tried every possible configuration of the VPN setup I could find, I have even tried a "Test System" with the NIC connected directly to the T1 Modem.  With all firewalls off and no AV software.  Even if that had worked,  there is no
    way I could run like that.  But it didn't.  Same issues.  All this did was put the blame squarely on the User's ISP which was the only reason I did it.  I had to rule out even the slightest chance that it was something in our equipment.
    This was already almost a certain fact since the same user could take their laptop to a WiFi Hotspot at a fast food restaurant and connect as well as map the drive.  As soon as they went back home, no drive.  On the ones I could convince to pay
    the extra charges, if they switched to a business connection from their ISP, No Problems.
    On most MiFi or other Cellular Internet devices, No Problem,  Although that had a habit of changing.  We had a few that worked for a while, then they got a software update for their MiFi which immediately blocked the ability to map.  Others
    it would be that some models of Cellular HotSpot units worked while other would not work even if both came from the same carrier.
    Coincidentally, we had none of these problems before two other events occurred: 
    One was the release of Server 2008 R2, (which was a kid of "surprise" change for all of us used to Server 2008 R1.  Welcomed changes, but not expected with a simple SP release. 
    The other was IPV6 finally became a reality:  June of 2012.
    This left us with much head scratching as to what was the real cause of the problem.  It took months to narrow it down to port blocking by the Outside ISP's with a 100% certainty.  Even tried reloading a system with Server 2008 R1 just to rule
    that out.  As well as disabling IPV6 on every network device.  The problem stayed with the User when Outside and which ISP they were connected to.
    Currently we are using a mix of normal VPNs for those who can run them, and CLOUD access for those who can't.  Even this is problematic since we have to keep both the local copy and the cloud copy in constant sync so that everyone sees the same versions
    of the same files on each one.
    Sorry to make this so long but I wanted to cover everything to show that we tried it all.  The only thing left short of getting the ISP's to remove the port blocks would be to find a way to route the SMB file requests around port 445 in some way. 
    I have been told that this is easy enough if using a file system other than Windows but that is not an option even if true. 
    Thanks for the updates and ideas.  I keep hoping that eventually there will be some secure method for mapping a drive letter that does not depend on having port 445.

  • Looking For Help for porting PC utility to Mac

    Hi,
    I am looking for local Mac developer(s)who could help me to port my MXF utility (HDV M2T=>QT conversion) to Mac OS X. I need someone who is around SF Bay Area. It's a simple program however requires knowlegde of threads. (I use worker thread. simple one) Please contact me at [email protected] if you are interested.
    <Edited by Moderator>

    Why was this merely "edited by moderator"? It should be removed or moved to the appropriate forum. Wait, there is no "solicitation" forum.
    bogiesan

  • Looking for note taking software to use with a graphics tablet

    Hello folks,
    I am trying to find a software that would allow me to interchangably use typing and writing/drawing on a graphics tablet smoothly.
    I'm looking for something that would essentially provide a 'blank sheet of lined-paper' where i can quickly type what my professors are saying, as well as easily draw whatever they are drawing. Also, since I am studying engineering, I would need something that I can easily write math symbols and equations so I can use it as scratch paper.
    At the same time, I am looking to save trees and money, as well as keep organized and simplicity when it comes to archiving.
    I have tried Microsoft Word 2008's notebook view, and this is currently the closest thing to what I want, but it favors mostly the text side of what I want (of course), and isn't very good in the drawing part. It also isn't very smooth when I try to do practice math/physics/engineering problems on it, nor is it very good at drawing molecular structures (O-Chem)... but for the most part, it gets the job done. It is also a headache because when you zoom in a lot to make it easier to write (mind you, I am using a tiny macbook screen..), the title bar also zooms in, and ends up taking half of the screen, making zooming in practically useless. (the title bar is also locked, so even as you scroll down, it stays in the top half.)
    I have also tried Adobe Acrobat Professional 7, where I simply made a blank notebook from some image online, and I use it as scratch paper. When it comes to drawing, it is very smooth, but it's a headache sometimes, because after writing something and pausing for a second or two, the pen tool automatically becomes a 'selector' tool, and so if i want to draw over what I previously wrote, it changes to selector and instead of writing over, it drags and drops the object around a bit. The tolerance for that is really high too, and i'd have to bring the pointer about half an inch or so before I can start writing something again. I also haven't given the text a try yet, but it lets me make collapseable text boxes, so that is good for further annotating my equations and drawings, but isn't very useful for a full-lecture class (i.e. biology)
    I also don't even want to consider photoshop, because it's basically too powerful, and I don't want my laptop fans going off in-class (its SUPER loud when it happens...) and I need it to last the day.
    So just a sum up:
    I'm looking for a good note-taking software (for mac) that will allow me to smoothly use my graphics tablet AND be able to type.
    MS Word '08 and Adobe Acrobat are close... but aren't quite to what I want exactly...
    I have a Wacom Bamboo tablet and an '09 Intel-based MacBook.
    Thank you in advance!

    I have had this same issue and found this program called NoteBook that allows you to type, and draw (write) notes on a variety of paper types, (lined, graphing, engineering,etc.) and it uses the .nb file type that allows you to save multiple "pages" inside one file in a sort-of "notebook" if you will. It works great, but has several minor disadvantages. I can't change the ink color, I can't change the tip thickness (other than the pressure sensitive option with my wacom graphics tablet), and it doesn't allow you to open pdfs or other documents to inscribe upon. All around though it has been wonderful. There are really no good note taking apps out there...

  • Looking for a free app for secure note taking with search feature (unlimited)

    Hi dudes,
    As the topic suggests, I'm looking for a free app for secure note taking with search feature without any restriction on the number of notes or any other major restriction. I already use HiDisk (which lacks search feature), and security note+ (which has limitation on the number of notes). I also have used My Disk which its search feature doesn't work correctly (it's buggy).
    Thank you.

    One named NotePad is free, saves as .txt files.
    Another, WriterRoom, costs $1.99USD, and saves as .txt and .doc files.
    1. If any post helps you please click the below the post(s) that helped you.
    2. Please resolve your thread by marking the post "Solution?" which solved it for you!
    3. Install free BlackBerry Protect today for backups of contacts and data.
    4. Guide to Unlocking your BlackBerry & Unlock Codes
    Join our BBM Channels (Beta)
    BlackBerry Support Forums Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Looking for a good note taking app: Are there new features for the Notes app in iOS6?

    Hi,
    I've read that the Notes app with Mountain Lion will be available for OS X as well, and I was wondering if there will be any significant updates to the Notes app coming in iOS 6?
    The Notes app in Mountain Lion supports, as far as I know, text formatting, images and attachments. The Notes app in iOS 5 does not have any of these features, yet still it is claimed that the OS X client will sync with the iPhone, iPad and iPod touch. This means that there must be some rather significant updates coming for the Notes app in iOS 6 to match up with the features of its Mac counterpart. Still, no updates to the Notes app are listed in any of the iOS 6 feature lists I've seen so far.
    I'm looking for a good note taking app for OS X and iOS. I don't like how Springpad works, neither did Evernote work out for me, it's just too complex - I like Simplenote a lot though, it's just that its approach is too radical in my opinion. I was thinking that the Mountain Lion Notes app might be a good alternative because it combines simplicity with rich text formatting and attachments. I kind of hate the skeuomorphic user interface though.
    best, Ian

    You are only addressing other iPad users here & no Apple employees. We have no way of knowing, so you'll have to wait until iOS 6 is released.
    Here's some general info.
    Working with Notes and Documents on the iPad – Alternatives & Suggestions
    http://ipadacademy.com/2012/04/working-with-notes-and-documents-on-the-ipad-alte rnatives-suggestions
     Cheers, Tom

  • I am looking for a order taking app which works on iPad

    Hi,
    I am in the catering business. I am looking for an iPad app which will help me in maintaining orders received from my customers and generate few reports like orders for a selected date etc., I need to maintain a master list of Food items that I supply.
    Giri

    I have asked this question when I first started my business. I wanted to make it much more efficient. The answer that I got from another friend was almost lifesaving
    This was his answer: Superep - Order taking App
    Anyway Good luck!
    [edit] LOL just realized Tomerh also suggested the app. I think you can understand why

  • Im looking for a good note app with pen for taking notes ( in english and german )during business trips. Can anyone help

    I'm looking for a good note app with pen function for taking notes ( in English and German ) during business trips. Can anyone help?

    Really sorry to hear about this, particularly when you're putting your life on the line. But Apple cannot track your iPhone in any way unless you had set up Find My iPhone prior to it being lifted.
    It's possible that AT&T might be able to do something, but it's probably that they cannot track it, or will not without a request from an authorized law enforcement agency, but rather would only disable the device. You'll have to try and find a way to contact AT&T directly and ask if they can do anything to help you; the chances of any AT&T employee in a position to help you spotting this thread it pretty small.
    Good luck, stay safe, and come home soon.
    Regards.

  • Looking for a small note-taking app

    I'm looking for an note-taking application that is based around the post-it note metaphor. I want to write down a lot of little notes, then rearrange them a few times. Bubbles work too.

    Not a widget, in your Applications folder.
    -mj

  • Is there a (relatively simple) way to skip tracks with an iPod touch 5th gen using a physical button? I'm aware songs can be skipped on-screen without unlocking the iPod, but I'm looking for a method that doesn't require taking my eyes off the road.

    Is there a (relatively simple) way to skip tracks with an iPod touch 5th gen using a physical button? I'm aware songs can be skipped on-screen without unlocking the iPod, but I'm looking for a method that doesn't require taking my eyes off the road while driving. For that reason, I'm also not interested in adding in headphones or additional devices that have the desired button functions. Going both forward and back would be great but I would be pleased just to have a "sight-free" way to go forward.
    I've seen some mention here and there about ways to maybe change it so the volume buttons change tracks and holding the volume buttons changes the volume... but I don't know what's involved in that or if its even possible/recommended for a new 5th gen iPod. I think its a great device but its sadly lacking in music oriented functions and features... which is disappointing since music is why most people would bother getting one instead of some other "iDevice" :/

    Given that you cannot do what you have asked for, perhaps you simply need to find another solution to your root problem.
    Presumably, you want to skip to the next track because you don't want to hear the current one, and that is because...
    You don't like it.
    You've heard it recently and don't want to hear it now.
    Simply don't want to hear it at this time.
    For problem number 1. Don't put it on the iPod in the first place. (I know, obvious answer!)
    For problem number 2. How about playing from a Smart Playlist (initially created in your iTunes Library) which has only songs you've not played recently?
    For problem number 3. Hhhmmm! Create alternative Playlists for use in the car.
    As for going back to the start of the "now playing" track.... Well, if your Playlist has only songs that you really, really want to hear, then you'll be looking forward to that rather go back to the beginning of the current song.
    I'm not trying to be prescriptive, just giving you food for thought.
    (They are all cheaper options than buying a car which can control the iPod from the steering wheel.)

  • Looking for an Access Point with 2 Ethernet ports

    Hi,
         I am looking for an AP with two ethernet ports. Is there any model of Cisco is available with 2 ethernet ports?
    Regards,
    Noman

    pros:
    If an access swich/switch port failed then AP still forward traffic through other switch once power restored through other port.
    when PoE failed on its connected switch, it may still work via other port.
    Having two ethernet port on AP may require to talk to different switches/stack to achieve AP port redundancy through lag or stateful switch over when cable/switch/AP port failure.
    if one physical port become bad on AP, it can be still used with other.
    (However, AP/physical port failure can be takencare at RF level using self healing.)
    cons:
    require additional switch and its config maintanece
    currently, AP doesn't require 2 physical port for data transfer perspective.
    Require x2 PoE ports.
    Additional port increases the cost on AP.
    it is possible cisco may make it in future.

  • Calling external Web Service: PI is looking for a logical port and proxy.

    Hi,
    My scenario is  ECC Proxy -> PI -> External Webservice (WS adapter).
    the Web service adapter fails with the error message:
    <?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
    - <!--  Call Adapter
      -->
    - <SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="">
      <SAP:Category>XIServer</SAP:Category>
      <SAP:Code area="INTERNAL">WS_ADAPTER_SYS_ERROR</SAP:Code>
      <SAP:P1 />
      <SAP:P2 />
      <SAP:P3 />
      <SAP:P4 />
      <SAP:AdditionalText />
      <SAP:Stack>System error while calling Web service adapter: Error when initializing SOAP client application: &#39;error_text&#39;</SAP:Stack>
      <SAP:Retry>M</SAP:Retry>
      </SAP:Error>
    When I debug the message processing, it is looking for a port in table SSRVRTCONFIG, finds it(entry created automatically when WS adapter and the corresponding receiver agreement is activated in ID.
    Then the program looks for an entry in "SRT_CFG_CLI_ASGN" for a proxy and logical port combination and errors out.
    to be able to call an external web service, do we need a proxy to be created? I tried to create but the proxy creation fails because the external WSDL has some unsupported tags.
    Also do we need to do any other configuration in SOAMANAGER? I am assuming not because the Web service is external.
    Any help would be appreciated.
    Thanks
    Vijay

    I already checked that note and made sure that the points mentioned are met. I have a trace set up on the target system and would know if the call reaches them and then fails in authorization. Right now the call doesnt even reach the target system and also from debugging I know that the program is looking for a proxy and then fails.

  • TS3152 Im using 10.7.4 and looking for a way to change the streaming port on quicktime x

    Im using 10.7.4 and looking for a way to change the streaming port on quicktime x
    used to be able to do via system preferences > quick time > advanced
    But cant find these settings anymore
    Thanks
    Pavi

    Click on the pull down window next to From: and you should be able to select the individual account you want to send from.  The account that you want to send from must be an Enabled account in the Account Preferences of Mail.

  • Looking for an Access Point with 2 Ethernet ports and powered via PoE

    Hi Gurus,
    I am looking for an Access Point with 2 Ethernet ports and the access point can be powered via PoE. I have been assigned with a requirement where the rooms need to have access point as well as an Ethernet Cable provided from the Access Point as a backup for connectivity.
    The room only has one data cable coming from the main IT room as well does not have a spare power socket to power the Access Point. Will be good if it can be centrally controlled or controller based.
    Any recommendations?
    Regards
    J

    For the backup plan, the cheapest solution may be to just run a couple new cat5e drops to the room(est cost $250). If not then purchase a small Cisco POE switch for the room(est cost $2k). For wireless I would purchase a POE enabled Cisco AP. But you will need to verify the POE switch/blade you will be connecting the AP to can power the AP you buy. I got burned by that issue when we purchased some Cisco 1251 AP's with dual radios and they needed more power than our 4500 POE blades could handle. We were told we would need to purchase new 48 port 10/100/1000 blades or power injectors. Our Cisco sales vendor took the heat for that mistake.
    Posted by WebUser Steven Kinney from Cisco Support Community App

  • Firefox is looking for localhost on 8080 but it is on Port 80

    I moved countries and had trouble using localhost. I had some help but that did not work but I finally got localhost to work but my phpadmin still gives problems as firefox looks for localhost:8080/url instead of localhost/url.
    localhost is on pert 80.
    can anyone direct my efforts. I think my "help" tried to reconfigure all my localhost to 8080 nad left some of these port directives in.

    Maybe check the connection settings.
    You can find the connection setting here: Tools > Options > Advanced : Network : Connection

Maybe you are looking for