TCP offloading for 2008 servers

Hi All,
While disabling TCP offloading on Windows 2008 servers, do we need to apply any MS patches?
Regards,
Adithya

Hi Geoff,
In 2008 we have 3 offload parameters for IPV4. i.e checksum offload, large send offload and TCP connection offload. After disabling these 3 do we need to add any registry to disable the offload parameters globally?
P.S : for 2003 we added a registry called
dword DisableTaskOffload = 1 in the below path
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
Thanks and Regards,
Adithya

Similar Messages

TCP connection for DHCP failover frequently are broken in Solaris 10

Hi
We have two dhcp servers which are installed in Solaris 10 and set to a failover pair. Currently, we can find that tcp connection for dhcp failover protocol are frequently broken. It looks like that primary dhcp server initiatively send FIN message to secondary one but in general, this tcp connection should always keep alive. On the other hand, the tcp connection can not completely be closed right now which FIN_WAIT_2 status in Primary one and CLOSE_WAIT status in secondary would last for a long time.
Will Solaris 10 cause this fault? Is it a known bug in OS?
OS info:
-bash-3.00$ cat /etc/release
Solaris 10 5/08 s10s_u5wos_10 SPARC
Copyright 2008 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 24 March 2008
-bash-3.00$
-bash-3.00$
-bash-3.00$ uname -a
SunOS edns1 5.10 Generic_142900-03 sun4v sparc SUNW,Netra-T5220
TCP connection info:
Primary DHCP Server:
2012 08 29 03:41:43
PING 172.25.6.137: 56 data bytes 64 bytes from edns2 (172.25.6.137): icmp_seq=0. time=0.678 ms
remote refid st t when poll reach delay offset disp
==============================================================================
*idns1           195.26.151.151   3 u   45 1024 377     0.75   -0.071    0.05
+idns2           195.26.151.151   3 u 162 1024 377     0.93    0.169    0.08
clusternode1-pr 0.0.0.0 16 - - 1024 0 0.00 0.000 16000.0
+clusternode2-pr idns1            4 u 406 1024 376     0.49   -0.154   15.12
172.25.6.133.647 172.25.6.137.58107 49640 0 49640 0 ESTABLISHED
172.25.6.133.647 *.* 0 0 49152 0 LISTEN
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
2012 08 29 03:41:47
PING 172.25.6.137: 56 data bytes 64 bytes from edns2 (172.25.6.137): icmp_seq=0. time=0.535 ms
remote refid st t when poll reach delay offset disp
==============================================================================
*idns1           195.26.151.151   3 u   49 1024 377     0.75   -0.071    0.05
+idns2           195.26.151.151   3 u 166 1024 377     0.93    0.169    0.08
clusternode1-pr 0.0.0.0 16 - - 1024 0 0.00 0.000 16000.0
+clusternode2-pr idns1            4 u 410 1024 376     0.49   -0.154   15.12
172.25.6.133.647 172.25.6.137.58107 49640 0 49640 0 FIN_WAIT_2
172.25.6.133.647 *.* 0 0 49152 0 LISTEN
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Secondary DHCP Server:
2012 08 29 03:41:41
PING 172.25.6.133: 56 data bytes 64 bytes from edns1 (172.25.6.133): icmp_seq=0. time=1.26 ms
remote refid st t when poll reach delay offset disp
==============================================================================
*idns1           195.26.151.151   3 u 450 1024 377     0.92   -0.067    0.06
+idns2           195.26.151.151   3 u 552 1024 377     0.96    0.237    0.08
+clusternode1-pr idns1            4 u 360 1024 377     1.85   -0.528    1.51
clusternode2-pr 0.0.0.0 16 - - 1024 0 0.00 0.000 16000.0
172.25.6.137.647 *.* 0 0 49152 0 LISTEN
172.25.6.137.58107 172.25.6.133.647 49640 0 49640 0 ESTABLISHED
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
2012 08 29 03:41:45
PING 172.25.6.133: 56 data bytes 64 bytes from edns1 (172.25.6.133): icmp_seq=0. time=1.36 ms
remote refid st t when poll reach delay offset disp
==============================================================================
*idns1           195.26.151.151   3 u 454 1024 377     0.92   -0.067    0.06
+idns2           195.26.151.151   3 u 556 1024 377     0.96    0.237    0.08
+clusternode1-pr idns1            4 u 364 1024 377     1.85   -0.528    1.51
clusternode2-pr 0.0.0.0 16 - - 1024 0 0.00 0.000 16000.0
172.25.6.137.647 *.* 0 0 49152 0 LISTEN
172.25.6.137.58107 172.25.6.133.647 49640 0 49640 0 CLOSE_WAIT
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Thanks!

Thanks, but had found a previous discussion with this hint and applied it.
svccfg -s sendmail listprop shows config /local_only = false
Yes, I would really love to fix the fault, but what I would really like is some hints as to how to debug ports under svc control.

Grdi 10.2.0.4 on Windows 2008 Servers

Hi all,
Any mentions to when Oracle will release an update so we can install GRID agents on Windows 2008 servers. As of now, it will not advance past the installation windows.
Thanks,
JR

I downloaded the 10.2.0.4 agent for 32 bit Windows and all went fine. Its better than installing 10.2.0.2 and applying upgrades. Whatever the case, that did the trick.

SCCM 2007 R2 Query - Look for Win2k8 servers where Terminal Services is installed.

Hi there.
I have been looking all over the net. That's how it feels ;-D. I'm trying to a find out how to create a query that I can use in a SCCM Collection. This query should result in only Windows 2008 Servers where Terminal Services have been installed.
So far I have tried at least ten different ways of doing this. With no prevail. So I hope you guys can assist me.
1) Create a collection.
2) Create a query.
a. The query should only find Windows 2008 Server where Terminal Services is installed.
3) Then I can distribute only to these servers.
Thank you. Your help is highly appreciated.
Regards.
/Lars
Red Baron

Hmm... Well, keeping in mind that from my point of view, there is no reason to not install the client on every box in the enterprise. What's the reason to not install the client? If there's a political reason, like those boxes belong to some other team who doesn't want you touching their servers, why are you responsible for ensuring Terminal Services is installed? Make *them* come up with an alternate method to confirm that.
Just deploy the client and move on.
I cannot think of a single way to determine if Terminal Services is installed without either the ConfigMgr Client installed, or a different administrative tool tell you that. Whether that other Admin tool is a remote script you design & run, or if you have some other tool available (would SCOM be able to be configured to report that? Maybe.), I have no suggestions for you other than logging into each server interactively and looking manually.
Which brings me full circle back to: just install the ConfigMgr client.
Slightly OT: once they have the client installed, you could then create a DCM Baseline so that you could run a report and see which ones might have 'drifted' from the approved configuration.Standardize. Simplify. Automate.

Windows 7 Clients Talking 6to4 to 2008 Servers

Hi All,
I have a question (and maybe this is the designed behavior). We have quite a few new Windows 7 clients that we didn't have in the past. They are experiencing "slowness" issues communicating with 2008 Servers. I've been doing some digging and it appears that all the Windows 7 PC's are attempting to talk to 2008 Servers via 6to4 rather than through the IPv4 addressing. It seems many times they can't actually communicate via the DNS resolved 6to4 addressing and eventually fail back to using IPv4. (At least I think this is what's happening but, it's taking upwards of 30 seconds for that to happen). Obviously this is causing issues. If I disable the 6to4 tunnel on the 2008 boxes, and then delete the nasty DNS entries that contain the 6to4 IPv6 2002:: addressing, the clients are happy and they talk IPv4 no delay. Thoughts?

If your Windows 7 clients get public IP addresses they can and will use 6to4 if possible. This is mostly due to the fact how the clients are configured. The server has no control what protocol your clients may use if they have the option of using either IPv6 or IPv4.
Thus, disable IPv6 on your Windows 7 clients. That will get rid of this problem altogether.
Otherwise, if you don't want to use 6to4 (which isn't a good idea anyway unless you trust whoever is operating the anycast address 192.88.99.1) disable it on the clients. They shouldn't use the 6to4 unless you trust the 6to4 relay.
Same thing may apply to the teredo tunnel.
Otherwise, register for a public IPv6 address space and set it up in your LAN. Then all your clients will get normal IPv6 addresses and again, this should fix your problems. This should be the way to go eventually. Sooner or later you'll need IPv6 support in your network, thus why not start now?
You could of course use netsh on your clients to configure protocol preferences. If you don't like clients to register their IPv6 6to4 address in your DNS server, disable the DDNS update in the network properties.

How to configure email Alerts in OEM Cloud 12c for Database Servers up/down

Hi everybody,
How to configure email Alerts in OEM Cloud 12c for Database Servers up/down status?
Regards,
Miguel Vega

Hi Miguel Vega,
Information regarding the notifications:
==============================
Configuring notification rules in 12c is different from earlier releases.
The concept and function of notification rules has been replaced with a two-tier system consisting of Incident Rules and Incident Rule Sets :
1. Incident Rules: Operate at the lowest level granularity (on discrete events) and performs the same role as notification rules from earlier releases.
By using incident rules, you can automate the response to incoming incidents and their updates.
A rule contains a set of automated actions to be taken on specific events, incidents or problems.
The actions taken are for example : sending e-mails, creating incidents, updating incidents, and creating tickets.
2. Incident Rule Set: A rule set is a collection of rules that applies to a common set of objects, for example, targets, jobs, and templates.
To help you to achieve the Notification Rules configuration, refer those notes :
How To Configure Notification Rules in 12C Enterprise Manager Cloud Control ? Doc ID 1368036.1
EM12c How to Add and Configure Email Addresses to EM Administrators and Update the Notification Schedule ?Doc ID 1368262.1
EM12c How to Subscribe or Unsubscribe for Email Notification for an Incident Rule Set ?Doc ID 1389460.1
EM 12c How to Configure Notifications for Job Executions ? Doc ID 1386816.1
Best Regards,
Venkat

How can I list all the domains configured for Weblogic Servers?

How can I list all the domains configured for Weblogic Servers?
I saw a note, which says the following:
"WebLogic Server does not support multi-domain interaction using either the Administration Console, the weblogic.Admin utility, or WebLogic Ant tasks. This restriction does not, however, explicitly preclude a user written Java application from accessing multiple domains simultaneously."
In my case, I just want to list all the domains, is that possible by using any scripts?
Thanks
AJ

If you use WLS Node Manager and the Config Wizard was used to create the domains, then the list of domains should be in a location like this:
<MIDDLEWARE_HOME>\wlserver_10.3\common\nodemanager\nodemanager.domains
Enterprise Manager Grid Control also has support for multi-domain management of WLS in a console.

How to define tcp wrappers for a new service in Solaris 10?

Hi all, I need to setup tcp wrappers for a third-party software product with /etc/hosts.allow.
I installed Trillium software on a new Solaris 10 server. It added this entry to /etc/inetd.conf:
dscserv0_rel1300 stream tcp nowait tsadmin /usr/bin/env env -i HOME=/home/tsadmin LOGNAME=tsadmin /opt/trilv13/TrilliumSoftware/server/metabase/bin/mtb_server
After the install, I ran inetconv and this new SMF service was created:
*# svcs -a|grep dsc*
online 13:22:57 svc:/network/dscserv0_rel1300/tcp:default
Here's the problem: After this, all new connections were denied by default. I had to disable tcp wrappers with this command:
inetadm -m svc:/network/dscserv0_rel1300/tcp:default tcp_wrappers=FALSE
I would prefer to enable tcp wrappers, and put an entry into /etc/hosts.allow, but I can't figure out what service name to put into /etc/hosts.allow. I've read through the man pages but I can't identify the service name to use for this new service, and it won't accept the FMRI or an abbreviation of it either.
How do I identify the service name to put into /etc/hosts.allow?

At OS level, before entering Sql*Plus, do :
$ EDITOR=vi; export EDITOR
$ sqlplus ......
Message was edited by:
Paul M.
Ciao Nicolas :-)

Upgrade strategy for 2008 Unibody: Comments wanted

Short-time lurker, first time poster. :-)
I have a 2008 unibody Macbook (2.4 GHz w/ 4 GB of RAM). It's not my primary computer, but it is my primary travel laptop. Currently it is running Snow Leopard and a Vista Bootcamp partition. I attempted Parallels, but was disappointed with the performance and memory utilization. I'm trying to put together
an upgrade strategy to get another 2-3 years of good practical work out of the machine, as it's in fairly good shape.
Usage for the machine is primarily in OS X while around the house, and a mix of 75% Windows / 25% OS X while traveling, due to the need to run some proprietary apps that are Windows-only. Most are processor and memory bound, rather than GPU bound, which is why I'm able to keep using this machine despite the relatively poor Nvidia GPU.
I've read a fair bit, and decided on getting a larger SSD (300 - 500 GB), probably the OWC 480 GB SandForce-based model, and upgrading to 8 GB of RAM. I'd also like to migrate the BootCamp install to Windows 7, because Vista really quite *****, and I'm on Win 7 everywhere else. However, I have a couple of questions I was hoping y'all could help me with / provide opinions and feedback.
1) Should I wait for the release of Mountain Lion, and do a clean install from a custom USB/DVD? Or should I do a clean reinstall of Snow Leopard, then upgrade to Mountain Lion through the App Store? I am primarily concerned about Boot Camp.
2) Recommendation on an SSD: My understanding is that this particular MB revision is SATA II, so the best I can hope for is 1.5 GB throughput because it will be split with the SuperDrive. I was looking at an OWC Mercury Electra 6G in 480 GB (though that may be overkill). I wanted enough space for a comfortable Windows and OS X install for bootcamp (and to re-try Parallels), and going with 240 GB seemed a bit...sparse.
3) Many of the modeling files I use are already pre-compressed to save space (it's not uncommon for a single simulation to use 4-5 GB grid files and produce 20-30 GB of "compressed" output. Should I stay away from SandForce, or just bite the bullet and pay the higher cost for the OWC Extreme drives?
4) I've read mixed reports about the ability for 2008 unibody Macbooks to address the full 8 GB of RAM, and instead only sees 6 GB. Is this true/false? They don't make 3 GB sticks, so I'm upgrading anyway, but it would be nice to know. I'm okay with only seeing 6 GB, but I'm curious whether folks have observed serious stability issues with an upgrade to 8 GB?
5) Are there any issues WRT Windows 7 through BootCamp on a non-Apple SSD that I should be worried about? I figured I could use TRIM while in BootCamp, and not worry about it in OS X. It still seems to be a toss-up (who do you believe!) whether TRIM makes a difference on SandForce SSDs or not, yes?
6) Any stability issues with FileVault2 full-disk encryption on SSDs in Lion I should worry about? Planning on upgrading to Mountain Lion as soon as it is available.
Thanks for putting up with teh n00b questions.

Get a regular HDD for your computer. It should be a notebook sized drive, SATA II-3.0 Gb/s, 7200 RPM. A Seagate XT500 Hybrid is a good trade-off of performance and price.

Need script for getting Uptime for remote servers

Hi Guys,
I'm in need of a script to get the UP time for windows servers in number of days. i have more than 1000 servers.
I dont want PowerShell script as i have many WIndows 2003 servers where PowerShell is not installed.
Please help me with this.
Thanks,
Kiran Raj

Hi,
I'd look at the LastBootUpTime property that can be found by querying Win32_OperatingSystem.
Don't retire TechNet! -
(Don't give up yet - 12,700+ strong and growing)

SCCM 2012 Software Update Management for Windows Servers and how to automatic set SCOM maintenance mode?

Hi,
We planning to go one level higher to automat and have more dynamic Software Update Management for Windows Servers. We have SCCM 2012 R2, SCOM 2012 R2 and SCO 2012 R2.
Our plan is to pur server in an AD-Group to get Update Schedule, from the servers will be importet to an Collection for Automatic Update and reboot. If I understand Everything right SCOM can't read AD-Group and put then in an Schedule maintenance mode. SCOM
can read reg value as exempel.
IS there any smar way to make the SCOM Maintenance Mode Schedule dynamic?
I found this
http://www.scom2k7.com/scom-2012-maintenance-mode-scheduler/?
/SaiTech

You could use Orchestrator to put the servers from a specific collection, or AD group, in maintenance mode in SCOM. For an example see:
http://www.systemcentercentral.com/orchestrator-how-to-scom-maintenance-mode-for-windows-computers-in-an-sccm-collection/
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Error with adprep /domainprep /gpprep for 2008 R2

While prepping our 2003 forest for 2008 R2, I am getting an error running 'adprep32 /domainprep /gpprep' in one of my child domains. The forestprep ran fine and domainprep ran fine on all of the other (8) domains -- it's just this one that is giving
me fits.
The error is the apparently common "Adprep was unable to complete because the call back function failed." The key lines from the log files appear to be:
[2010/06/11:11:15:53.088]
Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=a3dac986-80e7-4e59-a059-54cb1ab43cb9,cn=Operations,cn=DomainUpdates,cn=System,DC=sa,DC=convergys,DC=com.
[2010/06/11:11:15:53.088]
LDAP API ldap_search_s() finished, return code is 0x20
[2010/06/11:11:15:53.088]
Adprep verified the state of operation cn=a3dac986-80e7-4e59-a059-54cb1ab43cb9,cn=Operations,cn=DomainUpdates,cn=System,DC=sa,DC=convergys,DC=com.
[Status/Consequence]
The operation has not run or is not currently running. It will be run next.
[2010/06/11:11:15:53.088]
Adprep was about to call the following LDAP API. ldap_search_s(). The base entry to start the search is cn=446f24ea-cfd5-4c52-8346-96e170bcb912,cn=Operations,cn=DomainUpdates,cn=System,DC=sa,DC=convergys,DC=com.
[2010/06/11:11:15:53.088]
LDAP API ldap_search_s() finished, return code is 0x20
[2010/06/11:11:15:53.088]
Adprep verified the state of operation cn=446f24ea-cfd5-4c52-8346-96e170bcb912,cn=Operations,cn=DomainUpdates,cn=System,DC=sa,DC=convergys,DC=com.
[Status/Consequence]
The operation has not run or is not currently running. It will be run next.
[2010/06/11:11:15:53.213]
Adprep was unable to complete because the call back function failed.
[Status/Consequence]
Error message: (null)
I have checked all of the known causes of this problem (http://technet.microsoft.com/en-us/library/dd464018(WS.10).aspx) and verified that none of these are the
cause.
When I look at one of the other child domains where this ran, both of those regkeys exist. Based upon the whenChanged and whenCreated attributes, cn=a3dac986-80e7-4e59-a059-54cb1ab43cb9 appers to be a product of this schema change, but cn=446f24ea-cfd5-4c52-8346-96e170bcb912
has a whenCreated date of 12/11/2003 and a whenChanged date of 12/29/2005, which makes me wonder if this key is maybe the product of an earlier schema update that perhaps failed in this domain?
This is driving me nuts. Can someone help? If not, I'm going to have to open a Premier incident and I'd really like to avoid that.
Thanks.
Ed Bell - Specialist, Network Services, Convergys

Hi,
FYI.
On July 1st we will be making Windows Server 2008 R2 General forum read only. After receiving a lot of feedback from the community, it was decided that this forum
is a duplication and therefore redundant of the
General Forum. So, until July 1st, we will start asking customers to redirect their questions to the
General Forum. On June 11th, CSS engineers will move any new threads to the
General Forum.
Please post a reply to
the announcement thread
if you have any feedback on this decision or the process. You can also email
[email protected]
Regards,
Wilson Jia
This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can
be beneficial to other community members reading the thread. ”

Solaris 10 SPARC Recommended Patch Cluster for 2008 quarter 3 version

Dear All,
Could any one please guide me, where I can download "Solaris 10 SPARC Recommended Patch Cluster" for 2008 quarter 3 version.
I have checked in sunsolve.sun.com, I'm able to find only the latest release.
please guide me.
Thanks and regards,
veera

Ok,
Here's a cute little formula to try using your systems parameters to gain some "head's-up" on an expected or estimated time to complete the patch run.
You will need a few things to prepare.
Number of "real" CPU's (not hyperthreads)
Speed of each CPU as a whole number i.e 2.87Ghz = 2,867
the total number of patches from the cluster i.e. Sept 15th = 381 (Solaris 10)
Network factor if using NFS = 2.5
local cluster file factor = 1.5
Patch cluster on CDROM factor = 3.25
Now, combine all of those elements in this equation:
{ ( #1 * #2 ) / #3 * factor(#4 or #5 or #6) }
This will yield a number in minutes of patch run time. Then all you will need to add is the standard boot up time to get the total of all patching and reboot.
Of course you could write a script to extract all of this information and feed it to "bc -l" to get a quick figure.
Example, on one of my Solaris 10 boxes with the information filled in to the equation:
#> echo "((4*2660)/381)*1.5"|bc -l
#> 41.88976377952755905511
It actually took 44.2 minutes to complete the patching of this box plus another 12 minutes to reboot. But all in all a pretty fair estimate I think.

How to include Mar 2007 salary in Form16 for 2008

Hi Experts,
I want to include Mar 2007 salary in Form16 for 2008. How is it possible.
In legacy system March salary was paid in April so the yearly period of payment was from Mar-Feb, currently employees have paid ITax upto Feb, so I want to include the remaining March 2007 salary in F16 of 2008, inorder to streamline the process with standard.
Regards,
Tomesh

Hi Judith,
I don't want to do any customization, but since the salary of March is paid on 1st April in legacy system, it should come in Form 16 of 2008.
Regards,
Tomesh
Hi all,
I am planning to include the amount in wagetype /4MI "Monthly taxable income" of Mar 2007 payroll in IT0267 "Add Offcycle payments" in Apr month, but employee won't be paid and also there won't be any posting. In this way the amount will come in F16 as prev. yr arrears ( I've used a wagetype with Evaluation class 6 value equal to 24 ).
Please advise, whether i m doing right or not.
Regards,
Tomesh
Edited by: Tomesh Sahu on Jun 26, 2008 12:13 PM

IronPort ESA best practice for DNS servers?

Hello!
Is there a best practice for what servers should be used for the Cisco IronPort DNS servers?
Currently when I check our configuration, we have set it to "Use these DNS servers" and the first two are our domain controllers and last two are Google DNS.
Is there a best practice way of doing this? I'm thinking of selecting the "Use the Internet's Root DNS Servers" option as I can't really see an advantage of using internal DC's.
Thoughts?

Best practice is to use Internet Root DNS Servers and define specific dns servers for any domain that you need to give different answers for. Since internal mail delivery is controlled by smtproutes using internal dns servers is normally not required.
If you must use internal dns servers I recommend servers dedicated to your Ironports and not just using servers that handle enterprise lookups as well. Ironports can place a very high load on dns servers because every outside connection results in multiple dns lookups. (forward, reverse, sbrs)
If you don't have enough dns horsepower you are susceptible to a DOS attack either through accident or design. If the Ironports overload your internal dns servers it can impact your entire enterprise.

TCP offloading for 2008 servers

Similar Messages

Maybe you are looking for