I realize this sounds like a hundred other posts here, and I have gone
through many of the suggestions given, including those by Chuck on his
website, but I cannot solve the problem.

Here it is, simply (I hope)

XP, SP2, two PCs (A and B),  one Mac (C), simple file sharing allowed on
both PCs, sharing enabled for all partitions-drives, guest account enabled,
one router, cable connection

Computer A sees Computer B, has access to all files on Computer B and C.

Computer B sees Computer A at times, but cannot ever see its drives or files
or any
folders, and gives a "you may not have permission" message after searching

Computer C cannot see Computer A at all.

All three have no problems at all with the Internet and every computer can
ping every other computer and itself.

In summary, Computer A is essentially invisible to Computers B and C, but
Computer A sees B and C.

I have unshared then reshared the drives on Computer A, disabled the OneCare
firewall briefly on both PCs, unchecked and reenabled simple file sharing,
looked in the registry under the anaonymous key and it is 0--nothing works.
I've tried repairing the local connection on Computer A and cleared the ARP
cache.


It just doesn't make sense to me.
Any suggestions as to where to go from here would be appreciated.

Ken

Hi
There is the "solution of last resort", install NEtBEUI and add it as a
Sharing protocol.
http://www.ezlan.net/netbeui.html
Jack (MVP-Networking).

Show quoteHide quote

Jack,

Thank you. I do have Netbeui ready to load, but I'm not sure I want to use
the last resort yet, since there has to be some logical answer to this
problem--it's the principle of the thing.

I went through Chuck's steps again--all of them--and couldn't find an
answer.

Here is the Browstat result, which seems to be OK--the error #5, he says, is
normal. But maybe not.

Status for domain HSA on transport
\Device\NetBT_Tcpip_{4EE9840E-614A-4582-8334-
D3012AC18807}
    Browsing is active on domain.
    Master browser name is: KAV-OFFICE
Could not open key in registry, error = 5        Unable to determine build
of br
owser master: 5
    \\\\KAV-OFFICE    .  Version:05.01  Flags: 51403 NT POTENTIAL MASTER
    1 backup servers retrieved from master KAV-OFFICE
        \\KAV-OFFICE
    There are 2 servers in domain HSA on transport
\Device\NetBT_Tcpip_{4EE9840E
-614A-4582-8334-D3012AC18807}
    There are 1 domains in domain HSA on transport
\Device\NetBT_Tcpip_{4EE9840E
-614A-4582-8334-D3012AC18807}


Anything here give anyone a clue?

Ken

Show quote Hide quote Ken,

This shows one computer (which one?) which can see 2 computers (not 3), and
recognises KAV-OFFICE as master browser.  Not a lot of detail here.

Browstat from one computer is a small picture.  It's better to look at "browstat
status", "ipconfig /all", "net config server", and "net config workstation",
with each computer clearly labeled, so we can diagnose the problem.

Show quote Hide quote Chuck--thanks very much. Later on tonight or tomorrow I'll run these on both
PCs, A and B, and leave the Mac (C) out of it, and post the results, clearly
labeled.

Ken

Show quote Hide quote Be persistent, Ken.  But try to stay in one thread, so we can follow your
diagnosis easier.

OK--here it is. I'm re-pasting the info from my first post, slightly
modified, describing the problem. Then I'll paste the results from Computer
A (KAV-UPSTAIRS) and Computer B (KAV-OFFICE)


Ken

-------------------------

Problem:

XP, SP2, two PCs (A and B), sharing enabled for all partitions-drives, guest
account enabled,
one router, cable connections only

Computer A always sees Computer B, has access to all files on Computer B

Computer B sees Computer A at times, but cannot ever see Computer A's drives
or files
or any folders, and gives a "you may not have permission" message after
searching

There are no problems at all with the Internet and every computer can
ping every other computer and itself.

I have unshared then reshared the drives on Computer A, disabled the OneCare
firewall briefly on both PCs, looked in the registry under the anonymous key
and it is 0.

Results from Computer A (KAV-UPSTAIRS) :

From Computer A (KAV-Upstairs):

Status for domain HSA on transport
\Device\NetBT_Tcpip_{5103E0B7-DDE4-4578-8562-
E5B52F124E7A}
    Browsing is active on domain.
    Master browser name is: KAV-UPSTAIRS
        Master browser is running build 2600
    1 backup servers retrieved from master KAV-UPSTAIRS
        \\KAV-UPSTAIRS
    Unable to retrieve server list from KAV-UPSTAIRS: 121

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : kav-upstairs
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Broadcast
        IP Routing Enabled. . . . . . . . : Yes
        WINS Proxy Enabled. . . . . . . . : Yes
        DNS Suffix Search List. . . . . . : hsd1.il.comcast.net.

Ethernet adapter Local Area Connection 12:

        Connection-specific DNS Suffix  . : hsd1.il.comcast.net.
        Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
PCI
Gigabit Ethernet Controller #2
        Physical Address. . . . . . . . . : 00-15-F2-05-FB-93
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.2.105
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.2.1
        DHCP Server . . . . . . . . . . . : 192.168.2.1
        DNS Servers . . . . . . . . . . . : 68.87.72.130
                                            68.87.77.130
        Lease Obtained. . . . . . . . . . : Sunday, December 31, 2006
5:47:32 PM

        Lease Expires . . . . . . . . . . : Monday, January 01, 2007 5:47:32
PM

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\>net config server
Server Name                           \\KAV-UPSTAIRS
Server Comment                        KAV Upstairs

Software version                      Windows 2002
Server is active on
        NetbiosSmb (000000000000)
        NetBT_Tcpip_{5103E0B7-DDE4-4578-8562-E5B52F124E7A} (0015f205fb93)


Server hidden                         No
Maximum Logged On Users               10
Maximum open files per session        16384

Idle session time (min)               15
The command completed successfully.


Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\>net config workstation
Computer name                        \\KAV-UPSTAIRS
Full Computer name                   kav-upstairs
User name                            Kenneth A. Vatz

Workstation active on
        NetbiosSmb (000000000000)
        NetBT_Tcpip_{5103E0B7-DDE4-4578-8562-E5B52F124E7A} (0015F205FB93)

Software version                     Windows 2002

Workstation domain                   HSA
Workstation Domain DNS Name          (null)
Logon domain                         KAV-UPSTAIRS

COM Open Timeout (sec)               0
COM Send Count (byte)                16
COM Send Timeout (msec)              250
The command completed successfully.


Results from Computer B (KAV-OFFICE):

Microsoft Windows XP [Version 5.1.2600]

Status for domain HSA on transport
\Device\NetBT_Tcpip_{2B9E08C1-BF91-4A4E-92E9-
FD3BAB1D65A8}
    Browsing is active on domain.
    Master browser name is: KAV-UPSTAIRS
Could not connect to registry, error = 53        Unable to determine build
of br
owser master: 53
   Unable to determine server information for browser master: 121
    1 backup servers retrieved from master KAV-UPSTAIRS
        \\KAV-UPSTAIRS
    Unable to retrieve server list from KAV-UPSTAIRS: 121

C:\>ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : KAV-Office
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : Yes
        WINS Proxy Enabled. . . . . . . . : Yes
        DNS Suffix Search List. . . . . . : hsd1.il.comcast.net.

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . : hsd1.il.comcast.net.
        Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast
Ethernet
Controller (3C905C-TX Compatible)
        Physical Address. . . . . . . . . : 00-08-74-94-F3-D8
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.2.104
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.2.1
        DHCP Server . . . . . . . . . . . : 192.168.2.1
        DNS Servers . . . . . . . . . . . : 68.87.72.130
                                            68.87.77.130
        Lease Obtained. . . . . . . . . . : Sunday, December 31, 2006
11:02:29 P
M
        Lease Expires . . . . . . . . . . : Monday, January 01, 2007
11:02:29 PM


Ethernet adapter Bluetooth Network:

        Media State . . . . . . . . . . . : Media disconnected
        Description . . . . . . . . . . . : Bluetooth LAN Access Server
Driver
        Physical Address. . . . . . . . . : 00-0D-88-C0-4B-10

C:\>net config server
Server Name                           \\KAV-OFFICE
Server Comment                        KAV-Office

Software version                      Windows 2002
Server is active on
        NetbiosSmb (000000000000)
        NetBT_Tcpip_{2B9E08C1-BF91-4A4E-92E9-FD3BAB1D65A8} (00087494f3d8)


Server hidden                         No
Maximum Logged On Users               10
Maximum open files per session        16384

Idle session time (min)               15
The command completed successfully.

C:\>net config workstation
Computer name                        \\KAV-OFFICE
Full Computer name                   KAV-Office
User name                            Kenneth A. Vatz

Workstation active on
        NetbiosSmb (000000000000)
        NetBT_Tcpip_{2B9E08C1-BF91-4A4E-92E9-FD3BAB1D65A8} (00087494F3D8)

Software version                     Windows 2002

Workstation domain                   HSA
Workstation Domain DNS Name          (null)
Logon domain                         KAV-OFFICE

COM Open Timeout (sec)               0
COM Send Count (byte)                16
COM Send Timeout (msec)              250
The command completed successfully.



Hope this helps you to figure out the problem. I don't understand any of it.

Show quote Hide quote <SNIP>

Show quoteHide quote<SNIP>

OK, Ken,

An error 121 is a semaphore timeout.  This results from an LSP / Winsock
problem.  Be persistent here.  Since the problem is seen on KAV-UPSTAIRS, when
it's retrieving information from itself, that's where you should start.
<http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html>
http://nitecruzr.blogspot.com/2005/05/problems-with-lsp-winsock-layer-in.html

Show quote Hide quote Chuck,

I went through all the steps, and after running Winsock2 repair I was able
to do the Winsock Catalog, and now the Browstat no longer gives the error
121, but it gives an error 5 and some other info. .

No problems pinging the affected computer from itself or from the other
computer.

I can see Computer A from Computer B, but still cannot access the files or
drives on computer A from Computer B. Computer A works fine otherwise,
Internet, Explorer, etc.

Where to now? Do you want another full set of reports? Here are the Browstat
reports from each computer.

Computer A (KAV-Upstairs)

Status for domain HSA on transport
\Device\NetBT_Tcpip_{5103E0B7-DDE4-4578-8562-
E5B52F124E7A}
    Browsing is active on domain.
    Master browser name is: KAV-OFFICE
Could not open key in registry, error = 5        Unable to determine build
of br
owser master: 5
    \\\\KAV-OFFICE    .  Version:05.01  Flags: 41403 NT MASTER
    1 backup servers retrieved from master KAV-OFFICE
        \\KAV-OFFICE
    There are 2 servers in domain HSA on transport
\Device\NetBT_Tcpip_{5103E0B7
-DDE4-4578-8562-E5B52F124E7A}
    There are 1 domains in domain HSA on transport
\Device\NetBT_Tcpip_{5103E0B7
-DDE4-4578-8562-E5B52F124E7A}


Computer B (KAV-Office)

Status for domain HSA on transport
\Device\NetBT_Tcpip_{2B9E08C1-BF91-4A4E-92E9-
FD3BAB1D65A8}
    Browsing is active on domain.
    Master browser name is: KAV-OFFICE
        Master browser is running build 2600
    1 backup servers retrieved from master KAV-OFFICE
        \\KAV-OFFICE
    There are 2 servers in domain HSA on transport
\Device\NetBT_Tcpip_{2B9E08C1
-BF91-4A4E-92E9-FD3BAB1D65A8}
    There are 1 domains in domain HSA on transport
\Device\NetBT_Tcpip_{2B9E08C1
-BF91-4A4E-92E9-FD3BAB1D65A8}


Ken

Show quote Hide quote Ken,

OK, that's a much more normal set of browstat logs.  Both computers see 2
computers.  If you're running Simple File Sharing, then the error 5 is normal.
You don't have administrative access, which browstat requires, to access
Kav-Office from Kav-Upstairs.

Is the Guest account properly enabled, on both computers, for network access?
<http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help>
http://nitecruzr.blogspot.com/2005/06/file-sharing-under-windows-xp.html#Help

Chick,

I've gone through everything in the link above, even readjusting the Guest
accounts, unchecking the Group Policy boxes mentioned, etc. Yes, Guest
account is active on both computers.

BTW, I /can/ access KAV-Office from KAV-Upstairs, but /cannot/ access
KAV-Upstairs from KAV-Office. The error message I keep getting in a gray box
witha the HSA workgroup lable in the upper left hand corner, is:

"//KAV-upstairs is not accessible. You might not have permission to use this
network resource. Contact the administrator of this server to find out if
you have access permissions. The specified network name is no longer
available."

As mentioned earlier, all the permissions on KAV-Upstairs appear to be
intact, and I have included Guest, Guests, Administator and Administrators,
Everyone, my user name. I'm sure it's redundant, but I have added all these
along the way.

Ken

Show quote Hide quote Ken,

The message "The specified network name is no longer available." is a name
resolution problem.  This is NOT a permissions problem.

Node types Broadcast and Unknown are OK, and use broadcast SMBs.  Either NetBT
is not properly Enabled on both computers.
<http://nitecruzr.blogspot.com/2006/04/netbios-over-tcpip.html>
http://nitecruzr.blogspot.com/2006/04/netbios-over-tcpip.html

Or you have a personal firewall problem.
<http://nitecruzr.blogspot.com/2005/05/your-personal-firewall-can-either-help.html>
http://nitecruzr.blogspot.com/2005/05/your-personal-firewall-can-either-help.html

These are all symptoms that you have to rediagnose after you resolved the error
121 (LSP / Winsock problem).

Show quote Hide quote Chuck--

This will have to wait until tomorrow for me to do anything about this, but
I know I have had NetBios enabled on both computers. And I still don't think
it's the firewall--both computers have the same version of OneCare 1.5 and
are configured the same. Yes, I know, it still could be the firewall, and
I'll look at that, too.

One thing that strikes me is that the DNS listed in the ipconfig/all is the
cable Internet ISP's DNS, and clearly those DNS's aren't going to help me
find my network computers, if that is the issue. In your sample results for
the ipconfig /all results, the DNS values were all part of the 192.16.1.xxx
series. If I were to add a router DNS or some other DNS that would know the
name of my computers, what would it be?

Thanks for your patience and for your own persistence on this issue.

Ken

Show quote Hide quote Ken,

If your (NAT) router is addressed as a DNS server, it's providing a DNS relay -
it is not an actual server.  And it won't provide local name resolution.

DNS is used for local name resolution only if you have an actual local DNS
server.  Since you don't have a local DNS server, and since your Node Types are
set to "Broadcast" and "Unknown", you'll use NetBT based broadcast name
resolution.

If you "disable" NetBT (or if it's not "Enabled" by the DHCP server), you can
have SMBs bound directly to IP, and your firewall must pass SMBs directly hosted
(port 445).  This will enable the browser (Network Neighbourhood) and actual
share connections to work, but name resolution will require a DNS server.
Without a local DNS server, you MUST have NetBT.  And your firewalls must pass
SMBs bound to NetBT (ports 137 - 139).
<http://nitecruzr.blogspot.com/2005/05/windows-xp-on-nt-domain.html>
http://nitecruzr.blogspot.com/2005/05/windows-xp-on-nt-domain.html
<http://nitecruzr.blogspot.com/2006/07/advanced-windows-networking-using.html>
http://nitecruzr.blogspot.com/2006/07/advanced-windows-networking-using.html

Show quote Hide quote Chuck,

I'm beginning to think this is not doable.

I've gone through everything, all the NetBios enables, etc., opened up all
the ports on the OneCare Firewall--there are no other firewalls that I can
find, I've stopped, disabled and shut down the Computer Browser service on
both computers, shut down the machines, restarted them separately, left them
both on for an hour.

The problem remains the same. Computer A (KAV-Upstairs) sees everything
including the Internet and Computer B. Computer B (KAV-Office) sometimes
sees itself on the network, never sees Computer A, and always gets the
Internet.

I re-ran the Browstat on each computer:

From Computer A (KAV-Upstairs):


Status for domain HSA on transport
\Device\Nbf_NdisWanNbfIn{9BC24C48-C033-42D9-A
398-AB043C63E770}
    Browsing is NOT active on domain.
    Master name cannot be determined from GetAdapterStatus.


Status for domain HSA on transport
\Device\Nbf_NdisWanNbfIn{02367536-CF99-48B0-A
EF1-0D409CF01957}
    Browsing is NOT active on domain.
    Master name cannot be determined from GetAdapterStatus.


Status for domain HSA on transport
\Device\Nbf_NdisWanNbfOut{0E80D248-9718-4DF6-
9EC6-10C31536DED9}
    Browsing is NOT active on domain.
    Master name cannot be determined from GetAdapterStatus.


Status for domain HSA on transport
\Device\Nbf_NdisWanNbfIn{F1BF69DA-10B6-40E6-B
D94-5180A6F6AA66}
    Browsing is NOT active on domain.
    Master name cannot be determined from GetAdapterStatus.


Status for domain HSA on transport
\Device\Nbf_NdisWanNbfOut{C392DB90-A5A2-43DE-
97E0-533CE7ED2D50}
    Browsing is NOT active on domain.
    Master name cannot be determined from GetAdapterStatus.


Status for domain HSA on transport
\Device\Nbf_NdisWanNbfOut{36C6725F-C6A4-4921-
A86E-4C726A5FE25D}
    Browsing is NOT active on domain.
    Master name cannot be determined from GetAdapterStatus.


Status for domain HSA on transport
\Device\NetBT_Tcpip_{5103E0B7-DDE4-4578-8562-
E5B52F124E7A}
    Browsing is active on domain.
    Master browser name is: KAV-UPSTAIRS
        Master browser is running build 2600
    1 backup servers retrieved from master KAV-UPSTAIRS
        \\KAV-UPSTAIRS
    Unable to retrieve server list from KAV-UPSTAIRS: 121


Status for domain HSA on transport
\Device\Nbf_{28818E55-4C25-4199-8BDC-0466540B
2A08}
    Browsing is active on domain.
    Master browser name is: KAV-UPSTAIRS
        Master browser is running build 2600
    1 backup servers retrieved from master KAV-UPSTAIRS
        \\KAV-UPSTAIRS
    Unable to retrieve server list from KAV-UPSTAIRS: 121


Status for domain HSA on transport
\Device\NetBT_Tcpip_{28818E55-4C25-4199-8BDC-
0466540B2A08}
    Browsing is active on domain.
    Master browser name is: KAV-UPSTAIRS
        Master browser is running build 2600
    1 backup servers retrieved from master KAV-UPSTAIRS
        \\KAV-UPSTAIRS
    Unable to retrieve server list from KAV-UPSTAIRS: 121

From Computer B (KAV-Office)

Status for domain HSA on transport
\Device\NetBT_Tcpip_{2B9E08C1-BF91-4A4E-92E9-
FD3BAB1D65A8}
    Browsing is active on domain.
    Master browser name is: KAV-UPSTAIRS
Could not connect to registry, error = 53        Unable to determine build
of br
owser master: 53
   Unable to determine server information for browser master: 64
    1 backup servers retrieved from master KAV-UPSTAIRS
        \\KAV-UPSTAIRS
    Unable to retrieve server list from KAV-UPSTAIRS: 53

Where to now? Is there some way to start from scratch on one or both
computers without reinstalling Windows?

Ken

Show quote Hide quote Ken,

Well, you installed NetBEUI, and that didn't help.  So now, you'll have to
remove NetBEUI, and get back to a baseline configuration, where browstat on each
computer is symmetrical, and involves NetBT only.
-DDE4-4578-8562-E5B52F124E7A}

Then, we have to look again for the problem.  Start by reviewing problem solving
techniques.
<http://nitecruzr.blogspot.com/2005/08/solving-network-problems-tutorial.html>
http://nitecruzr.blogspot.com/2005/08/solving-network-problems-tutorial.html

Show quote Hide quote Chuck,

I have gone through everything again in the tutorial. Pasted below are the
current browstat results.

More info--maybe useful, maybe not:

The Messenger service on Computer A starts but will not stay started. I just
noticed that.

I put my Mac computer in the network. It sees Computer B and can go to
Computer B's files. The Mac can ping but cannot see Computer A at all,
either by name or by IP address. From this I gather that it must be, after
all, only Computer A that is the problem.

I then ran one of these firewall detection sites from Computer A in which
they try to show that your computer is exposed and needs /their/ firewall.
Guess what? They said my computer was nearly invincible. Here is their
report:

--------------------------------------------
Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE!
Standard Internet behavior requires port connection attempts to be answered
with a success or refusal response. Therefore, only an attempt to connect to
a nonexistent computer results in no response of either kind. But YOUR
computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which
represents advanced computer and port stealthing capabilities. A machine
configured in this fashion is well hardened to Internet NetBIOS attack and
intrusion.

Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is
very uncommon for a Windows networking-based PC.) Relative to
vulnerabilities from Windows networking, this computer appears to be VERY
SECURE since it is NOT exposing ANY of its internal NetBIOS networking
protocol over the Internet.
-------------------------------------------

I've looked everywhere for evidence that there is some other firewall on
Computer A left over from Zone Alarm or anything--can't find it. My only
known firewall is OneCare and I've added a ports setting permitting TCP\UDP
inbound and outbound Internet and Intranet 1-2000 ports and also another one
with port 139 (other). No help--probably unrelated to the problem.

Have I, in fact, serendipitously discovered the secret to protecting a
computer against all invaders? If only I knew what that secret was!

Ken

Current browstat reports:

Computer A (KAV-Upstairs)

Status for domain HSA on transport
\Device\NetBT_Tcpip_{5103E0B7-DDE4-4578-8562-
E5B52F124E7A}
    Browsing is active on domain.
    Master browser name is: KAV-OFFICE
Could not open key in registry, error = 5        Unable to determine build
of br
owser master: 5
    \\\\KAV-OFFICE    .  Version:05.01  Flags: 51203 NT POTENTIAL MASTER
    1 backup servers retrieved from master KAV-OFFICE
        \\KAV-OFFICE
    There are 2 servers in domain HSA on transport
\Device\NetBT_Tcpip_{5103E0B7
-DDE4-4578-8562-E5B52F124E7A}
    There are 2 domains in domain HSA on transport
\Device\NetBT_Tcpip_{5103E0B7
-DDE4-4578-8562-E5B52F124E7A}

Computer B (KAV-Office)

Status for domain HSA on transport
\Device\NetBT_Tcpip_{2B9E08C1-BF91-4A4E-92E9-
FD3BAB1D65A8}
    Browsing is active on domain.
    Master browser name is: KAV-OFFICE
        Master browser is running build 2600
    1 backup servers retrieved from master KAV-OFFICE
        \\KAV-OFFICE
    There are 2 servers in domain HSA on transport
\Device\NetBT_Tcpip_{2B9E08C1
-BF91-4A4E-92E9-FD3BAB1D65A8}
    There are 2 domains in domain HSA on transport
\Device\NetBT_Tcpip_{2B9E08C1
-BF91-4A4E-92E9-FD3BAB1D65A8}

Show quote Hide quote Ken,

Those firewall detection sites run from outside your LAN, and you are behind a
NAT router.  That site, if I recognise the language, is Steve Gibson aka
GRC.com.
Steve Gibson is considered by many security experts to be a snake oil salesman.
If you examine his website, you'll see a lot of clever titles, descriptions and
content in general.

What he's detecting is normal for a LAN behind a NAT router.

This is what we had a few days ago.
Show quoteHide quoteNow, we have
Was the Mac on the network when this was run?

Let's look at a current set of "ipconfig /all", and we'll run CDiag next.  I
need a comprehensive enumeration of the symptoms.  Please don't go changing
things without letting us know.
<http://nitecruzr.blogspot.com/2005/05/using-cdiag-without-assistance.html>
http://nitecruzr.blogspot.com/2005/05/using-cdiag-without-assistance.html

Chuck,

Yes, I think the Mac was on when I ran the last set of browstat status. It
is on now.
The only other change I've made was to give Computer A a static IP address,
because the router was showing a different IP address for it under the DHCP
Clients than it actually had, and I thought maybe this was causing the
recognition problem, but it wasn't. Hope that didn't mess things up too
much.

Ken


Here is the ipconfig /all for Computer A,  KAV-Upstairs

Windows IP Configuration

        Host Name . . . . . . . . . . . . : kav-upstairs
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : Yes
        WINS Proxy Enabled. . . . . . . . : Yes

Ethernet adapter Local Area Connection 12:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
PCI
Gigabit Ethernet Controller #2
        Physical Address. . . . . . . . . : 00-15-F2-05-FB-93
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.2.11
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.2.1
        DNS Servers . . . . . . . . . . . : 192.168.2.1

and the Cdiag:

CDiagnosis V1.40
Start diagnosis for KAV-UPSTAIRS
Full Targets     127.0.0.1
Ping Targets www.yahoo.com 66.94.230.32

Over All Analysis

Enumerate Shares


Share name   Resource                        Remark

-------------------------------------------------------------------------------
ADMIN$       C:\WINDOWS                      Remote Admin
C$           C:\                             Default share
IPC$                                         Remote IPC
print$       C:\WINDOWS\system32\spool\drivers
                                             Printer Drivers
H$           H:\                             Default share
G$           G:\                             Default share
C            C:\
G            G:\
H            H:\
SharedDocs   C:\DOCUMENTS AND SETTINGS\ALL USERS\DOCUMENTS

Printer      FaxModem (Photo Qualit Spooled  Print to this device to send a
pho
Printer10    USB001                 Spooled  hp deskjet 5550 series
Printer11    LPT1:                  Spooled  Family Tree Maker Printer
Printer12    LPT1:                  Spooled  QuickBooks PDF Converter
Printer2     FaxModem               Spooled  Print to this device to send a
fax
Printer5     LPT1:                  Spooled  Quicken PDF Printer
Printer7     PDF995PORT             Spooled  PDF995
Printer8     XPSPort:               Spooled  Microsoft XPS Document Writer
Printer9     USB003                 Spooled  hp LaserJet 1000 (Copy 1)
The command completed successfully.


Adhoc Browser View

Server Name            Remark

-------------------------------------------------------------------------------
\\KAV-OFFICE           KAVOffice
\\KAV-UPSTAIRS         KAV Upstairs
The command completed successfully.


Full Targets Analysis     127.0.0.1

Target 127.0.0.1

"KAV-UPSTAIRS ping 127.0.0.1"

Pinging 127.0.0.1 with 32 bytes of data:Reply from 127.0.0.1: bytes=32
time<1ms TTL=128Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Reply from
127.0.0.1: bytes=32 time<1ms TTL=128Reply from 127.0.0.1: bytes=32 time<1ms
TTL=128Ping statistics for 127.0.0.1:    Packets: Sent = 4, Received = 4,
Lost = 0 (0% loss),Approximate round trip times in milli-seconds:    Minimum
= 0ms, Maximum = 0ms, Average = 0ms
"KAV-UPSTAIRS net view 127.0.0.1"

Shared resources at 127.0.0.1

KAV Upstairs

Share name  Type   Used as  Comment

-------------------------------------------------------------------------------
C           Disk
G           Disk
H           Disk
Printer     Print           Print to this device to send a photo quality
fax.
Printer10   Print           hp deskjet 5550 series
Printer11   Print           Family Tree Maker Printer
Printer12   Print           QuickBooks PDF Converter
Printer2    Print           Print to this device to send a fax.
Printer5    Print           Quicken PDF Printer
Printer7    Print           PDF995
Printer8    Print           Microsoft XPS Document Writer
Printer9    Print           hp LaserJet 1000 (Copy 1)
SharedDocs  Disk
The command completed successfully.


Ping Targets Analysis www.yahoo.com 66.94.230.32

Target www.yahoo.com

"KAV-UPSTAIRS ping www.yahoo.com"

Pinging www.yahoo-ht2.akadns.net [209.73.186.238] with 32 bytes of
data:Reply from 209.73.186.238: bytes=32 time=44ms TTL=43Reply from
209.73.186.238: bytes=32 time=57ms TTL=43Reply from 209.73.186.238: bytes=32
time=35ms TTL=43Reply from 209.73.186.238: bytes=32 time=32ms TTL=43Ping
statistics for 209.73.186.238:    Packets: Sent = 4, Received = 4, Lost = 0
(0% loss),Approximate round trip times in milli-seconds:    Minimum = 32ms,
Maximum = 57ms, Average = 42ms
Target 66.94.230.32

"KAV-UPSTAIRS ping 66.94.230.32"

Pinging 66.94.230.32 with 32 bytes of data:Reply from 66.94.230.32: bytes=32
time=73ms TTL=45Reply from 66.94.230.32: bytes=32 time=61ms TTL=46Reply from
66.94.230.32: bytes=32 time=61ms TTL=45Reply from 66.94.230.32: bytes=32
time=65ms TTL=44Ping statistics for 66.94.230.32:    Packets: Sent = 4,
Received = 4, Lost = 0 (0% loss),Approximate round trip times in
milli-seconds:    Minimum = 61ms, Maximum = 73ms, Average = 65ms
End diagnosis for KAV-UPSTAIRS





Here is the ipconfig /all for Computer B, KAV-Office:

Windows IP Configuration

        Host Name . . . . . . . . . . . . : KAV-Office
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : Yes
        DNS Suffix Search List. . . . . . : hsd1.il.comcast.net.

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . : hsd1.il.comcast.net.
        Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast
Ethernet
Controller (3C905C-TX Compatible)
        Physical Address. . . . . . . . . : 00-08-74-94-F3-D8
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.2.100
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.2.1
        DHCP Server . . . . . . . . . . . : 192.168.2.1
        DNS Servers . . . . . . . . . . . : 68.87.72.130
                                            68.87.77.130
        Lease Obtained. . . . . . . . . . : Wednesday, January 03, 2007
10:34:21
PM
        Lease Expires . . . . . . . . . . : Thursday, January 04, 2007
10:34:21PM





And the Cdiag for Computer B (KAV-Office): (When I tried to run this from
Start==>Run on Computer B, it said I didn't have permission, and so I had to
run it from within the Command mode)

CDiagnosis V1.40
Start diagnosis for KAV-OFFICE
Full Targets     127.0.0.1
Ping Targets www.yahoo.com 66.94.230.32

Over All Analysis

Enumerate Shares


Share name   Resource                        Remark

-------------------------------------------------------------------------------
C$           C:\                             Default share
ADMIN$       C:\WINDOWS                      Remote Admin
IPC$                                         Remote IPC
print$       C:\WINDOWS\System32\spool\drivers
                                             Printer Drivers
All Users    C:\Documents and Settings\All Users

Application Data
             C:\Documents and Settings\All Users\Application Data

C            C:\
D            D:\
Documents and Settings
             C:\Documents and Settings
My Documents C:\Documents and Settings\Kenneth A. Vatz\My Documents

NaturallySpeaking
             C:\Program Files\ScanSoft\NaturallySpeaking

NaturallySpeaking9
             C:\Documents and Settings\All Users\Application
Data\Nuance\NaturallySpeaking9

ScanSoft     C:\Program Files\ScanSoft
SharedDocs   C:\DOCUMENTS AND SETTINGS\ALL USERS\DOCUMENTS

Winfax       C:\Program Files\Symantec\Winfax

Printer      USB002                 Spooled  Xerox DocuPrint-M750 (Copy 1)
Printer2     FaxModem (Photo Qualit Spooled  Print to this device to send a
pho
Printer3     FaxModem               Spooled  Print to this device to send a
fax
Printer4     PDF995PORT             Spooled  PDF995
Printer5     IP_192.168.2.77        Spooled  HP LaserJet 2100 Series PS
Printer6     LPT1:                  Spooled  HP LaserJet 1100
Printer7     LPT1:                  Spooled  Acrobat PDFWriter
The command completed successfully.


Adhoc Browser View


Full Targets Analysis     127.0.0.1

Target 127.0.0.1

"KAV-OFFICE ping 127.0.0.1"

Pinging 127.0.0.1 with 32 bytes of data:Reply from 127.0.0.1: bytes=32
time<1ms TTL=128Reply from 127.0.0.1: bytes=32 time<1ms TTL=128Reply from
127.0.0.1: bytes=32 time<1ms TTL=128Reply from 127.0.0.1: bytes=32 time<1ms
TTL=128Ping statistics for 127.0.0.1:    Packets: Sent = 4, Received = 4,
Lost = 0 (0% loss),Approximate round trip times in milli-seconds:    Minimum
= 0ms, Maximum = 0ms, Average = 0ms
"KAV-OFFICE net view 127.0.0.1"

Shared resources at 127.0.0.1

KAVOffice

Share name              Type   Used as  Comment

-------------------------------------------------------------------------------
All Users               Disk
Application Data        Disk
C                       Disk
D                       Disk
Documents and Settings  Disk
My Documents            Disk
NaturallySpeaking       Disk
NaturallySpeaking9      Disk
Printer                 Print           Xerox DocuPrint-M750 (Copy 1)
Printer2                Print           Print to this device to send a photo
quality fax.
Printer3                Print           Print to this device to send a fax.
Printer4                Print           PDF995
Printer5                Print           HP LaserJet 2100 Series PS
Printer6                Print           HP LaserJet 1100
Printer7                Print           Acrobat PDFWriter
ScanSoft                Disk
SharedDocs              Disk
Winfax                  Disk
The command completed successfully.


Ping Targets Analysis www.yahoo.com 66.94.230.32

Target www.yahoo.com

"KAV-OFFICE ping www.yahoo.com"

Pinging www.yahoo-ht2.akadns.net [209.73.186.238] with 32 bytes of
data:Reply from 209.73.186.238: bytes=32 time=34ms TTL=43Reply from
209.73.186.238: bytes=32 time=31ms TTL=43Reply from 209.73.186.238: bytes=32
time=34ms TTL=43Reply from 209.73.186.238: bytes=32 time=44ms TTL=43Ping
statistics for 209.73.186.238:    Packets: Sent = 4, Received = 4, Lost = 0
(0% loss),Approximate round trip times in milli-seconds:    Minimum = 31ms,
Maximum = 44ms, Average = 35ms
Target 66.94.230.32

"KAV-OFFICE ping 66.94.230.32"

Pinging 66.94.230.32 with 32 bytes of data:Reply from 66.94.230.32: bytes=32
time=61ms TTL=45Reply from 66.94.230.32: bytes=32 time=60ms TTL=46Reply from
66.94.230.32: bytes=32 time=61ms TTL=45Reply from 66.94.230.32: bytes=32
time=62ms TTL=44Ping statistics for 66.94.230.32:    Packets: Sent = 4,
Received = 4, Lost = 0 (0% loss),Approximate round trip times in
milli-seconds:    Minimum = 60ms, Maximum = 62ms, Average = 61ms
End diagnosis for KAV-OFFICE

Show quote Hide quote <SNIP>

Show quoteHide quoteGood try, Ken.  But CDiag is most useful when it contains the identities of the
computers on the network.

So we'll hope that the Mac caused the "There are 2 domains in domain HSA".

And we try CDiag again, with complete code.  And make sure that both computers
are online, as best as possible.

@echo off
set FullTarget1=kav-upstairs 192.168.2.11
set FullTarget2=KAV-Office 192.168.2.100
set FullTarget3=
set FullTarget4=
set FullTargets=%FullTarget1% %FullTarget2% %FullTarget3% %FullTarget4%
set FullTargets=%FullTargets% 127.0.0.1
set PingTargets=www.yahoo.com 66.94.230.32 192.168.2.1
Set Version=V1.40
@echo CDiagnosis %Version% >c:\cdiag.txt
@echo Start diagnosis for %computername% >>c:\cdiag.txt
@echo Full Targets %FullTargets% >>c:\cdiag.txt
@echo Ping Targets %PingTargets% >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
@echo Over All Analysis >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
@echo Enumerate Shares >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
net share >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
@echo Adhoc Browser View >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
net view >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
@echo Full Targets Analysis %FullTargets% >>c:\cdiag.txt
for %%a in (%FullTargets%) do (
@echo. >>c:\cdiag.txt
@echo Target %%a >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
@echo "%computername% ping %%a" >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
ping %%a >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
@echo "%computername% net view %%a" >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
net view %%a >>c:\cdiag.txt
)
@echo. >>c:\cdiag.txt
@echo Ping Targets Analysis %PingTargets% >>c:\cdiag.txt
for %%a in (%PingTargets%) do (
@echo. >>c:\cdiag.txt
@echo Target %%a >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
@echo "%computername% ping %%a" >>c:\cdiag.txt
@echo. >>c:\cdiag.txt
ping %%a >>c:\cdiag.txt
)
@echo. >>c:\cdiag.txt
@echo End diagnosis for %computername% >>c:\cdiag.txt
notepad c:\cdiag.txt

Chuck,

I've run everything again. Here is the scenario:

The Mac is /not/ online now.
The Mac's workgroup or domain was always Workgroup, not HSA, so I don't
think the Mac explained the two domains in domain HSA.
The IP addresses for the two PCs are the same as the last time.

Ken


For Computer A, KAV-Upstairs:

Windows IP Configuration

        Host Name . . . . . . . . . . . . : kav-upstairs
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Broadcast
        IP Routing Enabled. . . . . . . . : Yes
        WINS Proxy Enabled. . . . . . . . : Yes

Ethernet adapter Local Area Connection 12:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Marvell Yukon 88E8001/8003/8010
PCI
Gigabit Ethernet Controller #2
        Physical Address. . . . . . . . . : 00-15-F2-05-FB-93
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.2.11
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.2.1
        DNS Servers . . . . . . . . . . . : 192.168.2.1


Status for domain HSA on transport
\Device\NetBT_Tcpip_{5103E0B7-DDE4-4578-8562-
E5B52F124E7A}
    Browsing is active on domain.
    Master browser name is: KAV-UPSTAIRS
        Master browser is running build 2600
    1 backup servers retrieved from master KAV-UPSTAIRS
        \\KAV-UPSTAIRS
    Unable to retrieve server list from KAV-UPSTAIRS: 121


CDiagnosis V1.40
Start diagnosis for KAV-UPSTAIRS
Full Targets kav-upstairs 192.168.2.11 KAV-Office 192.168.2.100   127.0.0.1
Ping Targets www.yahoo.com 66.94.230.32 192.168.2.1

Over All Analysis

Enumerate Shares


Share name   Resource                        Remark

-------------------------------------------------------------------------------
ADMIN$       C:\WINDOWS                      Remote Admin
C$           C:\                             Default share
IPC$                                         Remote IPC
print$       C:\WINDOWS\system32\spool\drivers
                                             Printer Drivers
H$           H:\                             Default share
G$           G:\                             Default share
C            C:\
G            G:\
H            H:\
SharedDocs   C:\DOCUMENTS AND SETTINGS\ALL USERS\DOCUMENTS

Printer      FaxModem (Photo Qualit Spooled  Print to this device to send a
pho
Printer10    USB001                 Spooled  hp deskjet 5550 series
Printer11    LPT1:                  Spooled  Family Tree Maker Printer
Printer12    LPT1:                  Spooled  QuickBooks PDF Converter
Printer2     FaxModem               Spooled  Print to this device to send a
fax
Printer5     LPT1:                  Spooled  Quicken PDF Printer
Printer7     PDF995PORT             Spooled  PDF995
Printer8     XPSPort:               Spooled  Microsoft XPS Document Writer
Printer9     USB003                 Spooled  hp LaserJet 1000 (Copy 1)
The command completed successfully.


Adhoc Browser View

Server Name            Remark

-------------------------------------------------------------------------------
\\KAV-OFFICE           KAVOffice
\\KAV-UPSTAIRS         KAV Upstairs
The command completed successfully.


Full Targets Analysis kav-upstairs 192.168.2.11 KAV-Office 192.168.2.100
127.0.0.1

Target kav-upstairs

"KAV-UPSTAIRS ping kav-upstairs"



Pinging kav-upstairs [192.168.2.11] with 32 bytes of data:



Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.2.11:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms


"KAV-UPSTAIRS net view kav-upstairs"

Shared resources at kav-upstairs

KAV Upstairs

Share name  Type   Used as  Comment

-------------------------------------------------------------------------------
C           Disk
G           Disk
H           Disk
Printer     Print           Print to this device to send a photo quality
fax.
Printer10   Print           hp deskjet 5550 series
Printer11   Print           Family Tree Maker Printer
Printer12   Print           QuickBooks PDF Converter
Printer2    Print           Print to this device to send a fax.
Printer5    Print           Quicken PDF Printer
Printer7    Print           PDF995
Printer8    Print           Microsoft XPS Document Writer
Printer9    Print           hp LaserJet 1000 (Copy 1)
SharedDocs  Disk
The command completed successfully.


Target 192.168.2.11

"KAV-UPSTAIRS ping 192.168.2.11"



Pinging 192.168.2.11 with 32 bytes of data:



Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.2.11:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms


"KAV-UPSTAIRS net view 192.168.2.11"


Target KAV-Office

"KAV-UPSTAIRS ping KAV-Office"



Pinging KAV-Office [192.168.2.100] with 32 bytes of data:



Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.2.100:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms


"KAV-UPSTAIRS net view KAV-Office"

Shared resources at KAV-Office

KAVOffice

Share name              Type   Used as  Comment

-------------------------------------------------------------------------------
All Users               Disk
Application Data        Disk
C                       Disk
D                       Disk
Documents and Settings  Disk
My Documents            Disk
NaturallySpeaking       Disk
NaturallySpeaking9      Disk
Printer                 Print           Xerox DocuPrint-M750 (Copy 1)
Printer2                Print           Print to this device to send a photo
quality fax.
Printer3                Print           Print to this device to send a fax.
Printer4                Print           PDF995
Printer5                Print           HP LaserJet 2100 Series PS
Printer6                Print           HP LaserJet 1100
Printer7                Print           Acrobat PDFWriter
ScanSoft                Disk
SharedDocs              Disk
Winfax                  Disk
The command completed successfully.


Target 192.168.2.100

"KAV-UPSTAIRS ping 192.168.2.100"



Pinging 192.168.2.100 with 32 bytes of data:



Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.2.100:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms


"KAV-UPSTAIRS net view 192.168.2.100"

Shared resources at 192.168.2.100

KAVOffice

Share name              Type   Used as  Comment

-------------------------------------------------------------------------------
All Users               Disk
Application Data        Disk
C                       Disk
D                       Disk
Documents and Settings  Disk
My Documents            Disk
NaturallySpeaking       Disk
NaturallySpeaking9      Disk
Printer                 Print           Xerox DocuPrint-M750 (Copy 1)
Printer2                Print           Print to this device to send a photo
quality fax.
Printer3                Print           Print to this device to send a fax.
Printer4                Print           PDF995
Printer5                Print           HP LaserJet 2100 Series PS
Printer6                Print           HP LaserJet 1100
Printer7                Print           Acrobat PDFWriter
ScanSoft                Disk
SharedDocs              Disk
Winfax                  Disk
The command completed successfully.


Target 127.0.0.1

"KAV-UPSTAIRS ping 127.0.0.1"



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms


"KAV-UPSTAIRS net view 127.0.0.1"

Shared resources at 127.0.0.1

KAV Upstairs

Share name  Type   Used as  Comment

-------------------------------------------------------------------------------
C           Disk
G           Disk
H           Disk
Printer     Print           Print to this device to send a photo quality
fax.
Printer10   Print           hp deskjet 5550 series
Printer11   Print           Family Tree Maker Printer
Printer12   Print           QuickBooks PDF Converter
Printer2    Print           Print to this device to send a fax.
Printer5    Print           Quicken PDF Printer
Printer7    Print           PDF995
Printer8    Print           Microsoft XPS Document Writer
Printer9    Print           hp LaserJet 1000 (Copy 1)
SharedDocs  Disk
The command completed successfully.


Ping Targets Analysis www.yahoo.com 66.94.230.32 192.168.2.1

Target www.yahoo.com

"KAV-UPSTAIRS ping www.yahoo.com"



Pinging www.yahoo-ht2.akadns.net [209.73.186.238] with 32 bytes of data:



Reply from 209.73.186.238: bytes=32 time=31ms TTL=43

Reply from 209.73.186.238: bytes=32 time=31ms TTL=43

Reply from 209.73.186.238: bytes=32 time=31ms TTL=43

Reply from 209.73.186.238: bytes=32 time=31ms TTL=43



Ping statistics for 209.73.186.238:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 31ms, Maximum = 31ms, Average = 31ms


Target 66.94.230.32

"KAV-UPSTAIRS ping 66.94.230.32"



Pinging 66.94.230.32 with 32 bytes of data:



Reply from 66.94.230.32: bytes=32 time=60ms TTL=46

Reply from 66.94.230.32: bytes=32 time=61ms TTL=46

Reply from 66.94.230.32: bytes=32 time=62ms TTL=44

Reply from 66.94.230.32: bytes=32 time=73ms TTL=45



Ping statistics for 66.94.230.32:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 60ms, Maximum = 73ms, Average = 64ms


Target 192.168.2.1

"KAV-UPSTAIRS ping 192.168.2.1"



Pinging 192.168.2.1 with 32 bytes of data:



Reply from 192.168.2.1: bytes=32 time=1ms TTL=64

Reply from 192.168.2.1: bytes=32 time<1ms TTL=64

Reply from 192.168.2.1: bytes=32 time<1ms TTL=64

Reply from 192.168.2.1: bytes=32 time<1ms TTL=64



Ping statistics for 192.168.2.1:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 1ms, Average = 0ms


End diagnosis for KAV-UPSTAIRS


For Computer B (KAV-Office):

Windows IP Configuration

        Host Name . . . . . . . . . . . . : KAV-Office
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : Yes
        DNS Suffix Search List. . . . . . : hsd1.il.comcast.net.

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . : hsd1.il.comcast.net.
        Description . . . . . . . . . . . : 3Com 3C920 Integrated Fast
Ethernet
Controller (3C905C-TX Compatible)
        Physical Address. . . . . . . . . : 00-08-74-94-F3-D8
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.2.100
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.2.1
        DHCP Server . . . . . . . . . . . : 192.168.2.1
        DNS Servers . . . . . . . . . . . : 68.87.72.130
                                            68.87.77.130
        Lease Obtained. . . . . . . . . . : Thursday, January 04, 2007
8:18:54 A
M
        Lease Expires . . . . . . . . . . : Friday, January 05, 2007 8:18:54
AM


Status for domain HSA on transport
\Device\NetBT_Tcpip_{2B9E08C1-BF91-4A4E-92E9-
FD3BAB1D65A8}
    Browsing is active on domain.
    Master browser name is: KAV-UPSTAIRS
Could not connect to registry, error = 53        Unable to determine build
of br
owser master: 53
   Unable to determine server information for browser master: 64
    1 backup servers retrieved from master KAV-UPSTAIRS
        \\KAV-UPSTAIRS
    Unable to retrieve server list from KAV-UPSTAIRS: 121

CDiagnosis V1.40
Start diagnosis for KAV-OFFICE
Full Targets kav-upstairs 192.168.2.11 KAV-Office 192.168.2.100   127.0.0.1
Ping Targets www.yahoo.com 66.94.230.32 192.168.2.1

Over All Analysis

Enumerate Shares


Share name   Resource                        Remark

-------------------------------------------------------------------------------
C$           C:\                             Default share
ADMIN$       C:\WINDOWS                      Remote Admin
IPC$                                         Remote IPC
print$       C:\WINDOWS\System32\spool\drivers
                                             Printer Drivers
All Users    C:\Documents and Settings\All Users

Application Data
             C:\Documents and Settings\All Users\Application Data

C            C:\
D            D:\
Documents and Settings
             C:\Documents and Settings
My Documents C:\Documents and Settings\Kenneth A. Vatz\My Documents

NaturallySpeaking
             C:\Program Files\ScanSoft\NaturallySpeaking

NaturallySpeaking9
             C:\Documents and Settings\All Users\Application
Data\Nuance\NaturallySpeaking9

ScanSoft     C:\Program Files\ScanSoft
SharedDocs   C:\DOCUMENTS AND SETTINGS\ALL USERS\DOCUMENTS

Winfax       C:\Program Files\Symantec\Winfax

Printer      USB002                 Spooled  Xerox DocuPrint-M750 (Copy 1)
Printer2     FaxModem (Photo Qualit Spooled  Print to this device to send a
pho
Printer3     FaxModem               Spooled  Print to this device to send a
fax
Printer4     PDF995PORT             Spooled  PDF995
Printer5     IP_192.168.2.77        Spooled  HP LaserJet 2100 Series PS
Printer6     LPT1:                  Spooled  HP LaserJet 1100
Printer7     LPT1:                  Spooled  Acrobat PDFWriter
The command completed successfully.


Adhoc Browser View


Full Targets Analysis kav-upstairs 192.168.2.11 KAV-Office 192.168.2.100
127.0.0.1

Target kav-upstairs

"KAV-OFFICE ping kav-upstairs"



Pinging kav-upstairs [192.168.2.11] with 32 bytes of data:



Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.2.11:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms


"KAV-OFFICE net view kav-upstairs"


Target 192.168.2.11

"KAV-OFFICE ping 192.168.2.11"



Pinging 192.168.2.11 with 32 bytes of data:



Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128

Reply from 192.168.2.11: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.2.11:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms


"KAV-OFFICE net view 192.168.2.11"


Target KAV-Office

"KAV-OFFICE ping KAV-Office"



Pinging KAV-Office [192.168.2.100] with 32 bytes of data:



Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.2.100:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms


"KAV-OFFICE net view KAV-Office"

Shared resources at KAV-Office

KAVOffice

Share name              Type   Used as  Comment

-------------------------------------------------------------------------------
All Users               Disk
Application Data        Disk
C                       Disk
D                       Disk
Documents and Settings  Disk
My Documents            Disk
NaturallySpeaking       Disk
NaturallySpeaking9      Disk
Printer                 Print           Xerox DocuPrint-M750 (Copy 1)
Printer2                Print           Print to this device to send a photo
quality fax.
Printer3                Print           Print to this device to send a fax.
Printer4                Print           PDF995
Printer5                Print           HP LaserJet 2100 Series PS
Printer6                Print           HP LaserJet 1100
Printer7                Print           Acrobat PDFWriter
ScanSoft                Disk
SharedDocs              Disk
Winfax                  Disk
The command completed successfully.


Target 192.168.2.100

"KAV-OFFICE ping 192.168.2.100"



Pinging 192.168.2.100 with 32 bytes of data:



Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128

Reply from 192.168.2.100: bytes=32 time<1ms TTL=128



Ping statistics for 192.168.2.100:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms


"KAV-OFFICE net view 192.168.2.100"

Shared resources at 192.168.2.100

KAVOffice

Share name              Type   Used as  Comment

-------------------------------------------------------------------------------
All Users               Disk
Application Data        Disk
C                       Disk
D                       Disk
Documents and Settings  Disk
My Documents            Disk
NaturallySpeaking       Disk
NaturallySpeaking9      Disk
Printer                 Print           Xerox DocuPrint-M750 (Copy 1)
Printer2                Print           Print to this device to send a photo
quality fax.
Printer3                Print           Print to this device to send a fax.
Printer4                Print           PDF995
Printer5                Print           HP LaserJet 2100 Series PS
Printer6                Print           HP LaserJet 1100
Printer7                Print           Acrobat PDFWriter
ScanSoft                Disk
SharedDocs              Disk
Winfax                  Disk
The command completed successfully.


Target 127.0.0.1

"KAV-OFFICE ping 127.0.0.1"



Pinging 127.0.0.1 with 32 bytes of data:



Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<1ms TTL=128



Ping statistics for 127.0.0.1:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 0ms, Maximum = 0ms, Average = 0ms


"KAV-OFFICE net view 127.0.0.1"

Shared resources at 127.0.0.1

KAVOffice

Share name              Type   Used as  Comment

-------------------------------------------------------------------------------
All Users               Disk
Application Data        Disk
C                       Disk
D                       Disk
Documents and Settings  Disk
My Documents            Disk
NaturallySpeaking       Disk
NaturallySpeaking9      Disk
Printer                 Print           Xerox DocuPrint-M750 (Copy 1)
Printer2                Print           Print to this device to send a photo
quality fax.
Printer3                Print           Print to this device to send a fax.
Printer4                Print           PDF995
Printer5                Print           HP LaserJet 2100 Series PS
Printer6                Print           HP LaserJet 1100
Printer7                Print           Acrobat PDFWriter
ScanSoft                Disk
SharedDocs              Disk
Winfax                  Disk
The command completed successfully.


Ping Targets Analysis www.yahoo.com 66.94.230.32 192.168.2.1

Target www.yahoo.com

"KAV-OFFICE ping www.yahoo.com"



Pinging www.yahoo-ht2.akadns.net [209.73.186.238] with 32 bytes of data:



Reply from 209.73.186.238: bytes=32 time=45ms TTL=43

Reply from 209.73.186.238: bytes=32 time=69ms TTL=43

Reply from 209.73.186.238: bytes=32 time=58ms TTL=43

Reply from 209.73.186.238: bytes=32 time=32ms TTL=43



Ping statistics for 209.73.186.238:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 32ms, Maximum = 69ms, Average = 51ms


Target 66.94.230.32

"KAV-OFFICE ping 66.94.230.32"



Pinging 66.94.230.32 with 32 bytes of data:



Reply from 66.94.230.32: bytes=32 time=63ms TTL=45

Reply from 66.94.230.32: bytes=32 time=74ms TTL=46

Reply from 66.94.230.32: bytes=32 time=60ms TTL=46

Reply from 66.94.230.32: bytes=32 time=63ms TTL=44



Ping statistics for 66.94.230.32:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 60ms, Maximum = 74ms, Average = 65ms


Target 192.168.2.1

"KAV-OFFICE ping 192.168.2.1"



Pinging 192.168.2.1 with 32 bytes of data:



Reply from 192.168.2.1: bytes=32 time=3ms TTL=64

Reply from 192.168.2.1: bytes=32 time=1ms TTL=64

Reply from 192.168.2.1: bytes=32 time=1ms TTL=64

Reply from 192.168.2.1: bytes=32 time=1ms TTL=64



Ping statistics for 192.168.2.1:

    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 1ms, Maximum = 3ms, Average = 1ms


End diagnosis for KAV-OFFICE

Show quote Hide quote <SNIP>

OK, Ken.

The following tests failed:
* KAV-UPSTAIRS net view 192.168.2.11
* KAV-OFFICE net view kav-upstairs
* KAV-OFFICE net view 192.168.2.11

All IP (ping) tests were negative.  All NetBT (net view) tests against
KAV-UPSTAIRS were positive, save KAV-UPSTAIRS ability to enumerate itself by
name only.

All tests against KAV-OFFICE were negative.

Browstat shows both computers electing KAV-UPSTAIRS as master browser, but
errors 64 and 121 against KAV-UPSTAIRS.  An error 121 is a semaphore timeout,
which has proved in the past to be an LSP / Winsock problem.

I think that you are looking at an LSP / Winsock problem on KAV-UPSTAIRS.
Remember that LSP / Winsock problems are destructive in nature (You can only
diagnose a problem, for sure, after you run a repair procedure, it makes a
change, and the problem is gone).  And they are layered (Tool A may make a
change, which will enable Tool C to find a second problem.  You make a second
pass, and Tool B may find a third problem).  Be persistent.

You may also find some ideas in this Microsoft article.
<http://support.microsoft.com/kb/325487>
http://support.microsoft.com/kb/325487

Show quote Hide quote Chick,

I have gone through everything again, including uninstalling the network
card and /all/ of the Winsock fixes including the registry fix, TCP fix via
Microsoft, etc. Netbios is enabled.

Here is the latest browstat and Winsock catalog, if that helps.

I think I have reached a dead end, short of reinstalling Windows, which I
don't want to do. Maybe I should accept that I have the most secure computer
on the Internet and that no one will ever be able to break into it.


Ken



Status for domain HSA on transport
\Device\NetBT_Tcpip_{E8F4E6A7-B433-4DD2-AAC1-
FD99FD18C5A2}
    Browsing is active on domain.
    Master browser name is: KAV-OFFICE
Could not open key in registry, error = 5        Unable to determine build
of br
owser master: 5
    \\\\KAV-OFFICE    .  Version:05.01  Flags: 51203 NT POTENTIAL MASTER
    1 backup servers retrieved from master KAV-OFFICE
        \\KAV-OFFICE
    There are 2 servers in domain HSA on transport
\Device\NetBT_Tcpip_{E8F4E6A7
-B433-4DD2-AAC1-FD99FD18C5A2}
    There are 2 domains in domain HSA on transport
\Device\NetBT_Tcpip_{E8F4E6A7
-B433-4DD2-AAC1-FD99FD18C5A2}




And here is the Winsock catalog

I shows


Min Address Length:                 20
Socket Type:                        2
Protocol:                           -2147483648
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{ADD82247
-7036-4AF7-BBD8-AC7DA4F8DA5D}] SEQPACKET 1
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1027
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        5
Protocol:                           -1
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{ADD82247
-7036-4AF7-BBD8-AC7DA4F8DA5D}] DATAGRAM 1
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1028
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        2
Protocol:                           -1
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{28818E55
-4C25-4199-8BDC-0466540B2A08}] SEQPACKET 2
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1029
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        5
Protocol:                           -2
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{28818E55
-4C25-4199-8BDC-0466540B2A08}] DATAGRAM 2
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1030
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        2
Protocol:                           -2
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{856AAF4D
-1F46-4DBE-865E-82767F19BF3B}] SEQPACKET 3
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1031
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        5
Protocol:                           -3
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{856AAF4D
-1F46-4DBE-865E-82767F19BF3B}] DATAGRAM 3
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1032
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        2
Protocol:                           -3
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{A6184CD9
-528F-41B8-BA18-2DF101E7809E}] SEQPACKET 4
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1033
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        5
Protocol:                           -4
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{A6184CD9
-528F-41B8-BA18-2DF101E7809E}] DATAGRAM 4
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1034
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        2
Protocol:                           -4
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{3BFF5A3D
-AED3-416B-A729-C0A562879195}] SEQPACKET 5
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1035
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        5
Protocol:                           -5
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{3BFF5A3D
-AED3-416B-A729-C0A562879195}] DATAGRAM 5
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1036
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        2
Protocol:                           -5
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{A0FB6E3B
-7304-4829-8EC6-21D0DC395044}] SEQPACKET 6
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1037
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        5
Protocol:                           -6
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{A0FB6E3B
-7304-4829-8EC6-21D0DC395044}] DATAGRAM 6
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1038
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        2
Protocol:                           -6
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{EEB7208C
-6095-4A0A-9607-446C29AF6CBA}] SEQPACKET 7
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1039
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        5
Protocol:                           -7
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{EEB7208C
-6095-4A0A-9607-446C29AF6CBA}] DATAGRAM 7
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1040
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        2
Protocol:                           -7
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{7C3ADC6C
-4A8B-4640-846F-CE93E0C14403}] SEQPACKET 8
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1041
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        5
Protocol:                           -8
Protocol Chain Length:              1

Winsock Catalog Provider Entry
------------------------------------------------------
Entry Type:                         Base Service Provider
Description:                        MSAFD NetBIOS
[\Device\NetBT_Tcpip_{7C3ADC6C
-4A8B-4640-846F-CE93E0C14403}] DATAGRAM 8
Provider ID:                        {8D5F1830-C273-11CF-95C8-00805F48A192}
Provider Path:                      %SystemRoot%\system32\mswsock.dll
Catalog Entry ID:                   1042
Version:                            2
Address Family:                     17
Max Address Length:                 20
Min Address Length:                 20
Socket Type:                        2
Protocol:                           -8
Protocol Chain Length:              1

Name Space Provider Entry
------------------------------------------------------
Description:                        Tcpip
Provider ID:                        {22059D40-7E9E-11CF-AE5A-00AA00A7112B}
Name Space:                         12
Active:                             1
Version:                            0


Name Space Provider Entry
------------------------------------------------------
Description:                        NTDS
Provider ID:                        {3B2637EE-E580-11CF-A555-00C04FD8D4AC}
Name Space:                         32
Active:                             1
Version:                            0


Name Space Provider Entry
------------------------------------------------------
Description:                        Network Location Awareness (NLA)
Namespace
Provider ID:                        {6642243A-3BA8-4AA6-BAA5-2E0BD71FDD83}
Name Space:                         15
Active:                             1
Version:                            0


Name Space Provider Entry
------------------------------------------------------
Description:                        NWLink IPX/SPX/NetBIOS Compatible
Transport
Protocol
Provider ID:                        {E02DAAF0-7E9F-11CF-AE5A-00AA00A7112B}
Name Space:                         1
Active:                             1
Version:                            1

Show quote Hide quote <SNIP>

Ken,

Why IPX/SPX?  Name resolution is very timing sensitive, and when you have extra
protocols involved, this causes problems.
<http://nitecruzr.blogspot.com/2005/05/fix-network-problems-but-clean-up.html>
http://nitecruzr.blogspot.com/2005/05/fix-network-problems-but-clean-up.html

Show quote Hide quote       mvps        org.

Chuck and Steve,

I am going to cross post this in two threads, because I think it is so
important, and it may help a lot of other people here.

After going through everything in all the various posts, links, etc.,
multiple times, I decided that it /had/ to be a firewall problem. This is
after changing NICs and cables, updating drivers, setting up permissions,
fixing Winsock, TCPIP, etc., disabling the Windows and OneCare firewalls,
everything. It was obviously a problem with the one computer A, and it had
to be a firewall.

I noticed that when I used the Live Update feature in Symantec's Norton
Ghost it was still trying to update--unsuccessfully--some sort of security
software. I hadn't used any Symantec security software for over a year (!),
and had gone through all their uninstalls, and, in fact, the network was
working fine until early December, 2006.

So I went into the Registry looking for keys with Symantec files that were
unrelated to Ghost. They were all under HKLM, System, CurrentControlSet,
Services. I found all the files referred to in the Registry located under
\Windows\system32\* and I tried to delete them. I couldn't delete them,
which meant they were in use, even though I couldn't find them in Task
Manager. I then deleted the Registry keys, rebooted, and deleted the files
(which I didn't have to do, once the registry keys were gone). These files
were: symtdi.sys, symfw.sys (likely the real culprit here), symndis.sys,
symids.sys, symredrv.sys, symdns.sys, and symRedir.inf.

Like magic, both Computer B and the Mac immediately saw Computer A and all
its folders and files! No browser problems, nothing.

Two frustrating weeks for me and everyone else on a problem that wouldn't
even exist--a completely hidden firewall--if software companies made it easy
to completely uninstall their security programs. This company in particular
is notorious for such behavior, and it is very costly to the end users in
terms of time wasted. It does not go unnoticed, for whatever that is worth.

It wouldn't surprise me if this were a common problem. I see similar posts
to mine here every day--can't see one computer on the network--and the
firewall is always given as one likely cause. But what if you can't find the
firewall?

Anyway, thank you both for all the time, energy and expertise you put into
this for me. I learned a huge amount about networking along the way, and got
an incidentally (?) broken Winsock fixed in the bargain.

Ken

Chuck--

And getting rid of the hidden firewall also immediately cleared up the
browser problem on Computer A. No more "unable to find server 121" error:

Status for domain WORKGROUP on transport
\Device\NetBT_Tcpip_{E8F4E6A7-B433-4DD2
-AAC1-FD99FD18C5A2}
    Browsing is active on domain.
    Master browser name is: UPSTAIRS
        Master browser is running build 2600
    1 backup servers retrieved from master UPSTAIRS
        \\UPSTAIRS
    There are 1 servers in domain WORKGROUP on transport
\Device\NetBT_Tcpip_{E8
F4E6A7-B433-4DD2-AAC1-FD99FD18C5A2}
    There are 2 domains in domain WORKGROUP on transport
\Device\NetBT_Tcpip_{E8
F4E6A7-B433-4DD2-AAC1-FD99FD18C5A2}

Ken

Jack,

Apparently this is a permissions problem of some sort, because the computers
are "seen" by each other, but I can't get one to be able to access the
drives and files of the other.

I have just added Netbeui to each PC, rebooted both, and it doesn't solve
the problem.

Ken

Strange Problem
WEP problem, I think?
XP pro to Windows 98 Network connectivity issues!
cannot access workgroup
wireless on the network bridge problem
home networking
problems logging on to workgroup
Remote Desktop dropped after wireless router installed
dropped internet connections
I can access files on comps on my network but they can't access mi