Print | Rate this content

Microsoft Windows Server 2003 - Event ID 4243 and 4102 on Source WINS

Issue

Microsoft Windows Server 2003 WINS Servers on different sites are working in hub and spoke model. The main WINS server is showing lots of event ID 4243 and 4102 on the source WINS.


Type: Error
Date: 11/13/2008
Time: 5:18:22 PM
Event ID: 4243
Source: Wins
User: N/A
Computer: <Computer Name>
Details: WINS Pull thread encountered an error during the process of sending a push notification to another WINS. The error code is given in the data section.

Type: Error
Date: 11/13/2008
Time: 8:38:20 PM
Event ID: 4102
Source: Wins
User: N/A
Computer: <Computer Name>
Details: The connection was aborted by the remote WINS. Remote WINS may not be configured to replicate with the server.

Solution

The event specifies that a replication partner is causing the WINS replication to fail. This server has some 10 replication partners. The WINS replication works on tcp port 42.

Network trace using Wireshark was run after specifying the filter as tcp.port==42, and it was left running for a day.

On analyzing the trace, it was found that one of the servers was resetting the traffic for WINS replication.

The WINS Server was sending the SYN packet and this specific server was sending a RST, ACK.


2088 2008-11-14 21:31:27.782379 <source ip address> <destination ip address> TCP 3473 > nameserver [SYN] Seq=0 Len=0 MSS=1360
2089 2008-11-14 21:31:27.810471 <destination ip address> <source ip address> TCP nameserver > 3473 [RST, SYN] Seq=0 Ack=1 Win=0 Len=0

And while this happens, around the same time, the event 4243 gets triggered.

It was found that the server that had the <destination ip address> was decommissioned some time back. The specified server was removed from the replication partner list.

Troubleshooting WINS error event ID 4102, 4243, 4242, and 4286 messages has been documented in Microsoft Knowledge Base Article 321208, Troubleshooting WINS error event ID 4102, 4243, 4242, and 4286 messages. Click here to view Microsoft Knowledge Base Article 321208 (http://support.microsoft.com/kb/321208) Non-HPE site .

Legal Disclaimer: Products sold prior to the November 1, 2015 separation of Hewlett-Packard Company into Hewlett Packard Enterprise Company and HP Inc. may have older product names and model numbers that differ from current models.

Provide feedback

Please rate the information on this page to help us improve our content. Thank you!
Document title: Microsoft Windows Server 2003 - Event ID 4243 and 4102 on Source WINS
Document ID: emr_na-c01627574-1
How helpful was this document?
How can we improve this document?
Note: Only English language comments can be accepted at this time.
Please wait while we process your request.