Your Server

Event 4202 in Event Viewer on Windows server?

In the server's event viewer (which we can only get to via Remote Desktop - the server is hosted somewhere on the other side of the country), I keep seeing events 4202 and then 4201 a few seconds later (source tcpip). This happens pretty much every day and sometimes up to 5 or 6 times per day. The site is only down for 5-30 seconds each time, so it is difficult to catch it while happening (plus, I can't since I need it to be connected via Remote Desktop). Everything I have read says this could be either a hardware or a driver issue. Unfortunately, GoDaddy has been no help since it is a dedicated server. I have been working with their advanced support team and they are saying the hardware is fine (because they tested it in a 10 minute window in which this didn't happen). They will not monitor it over the course of a few days. How do I know if it is the network card failing vs bad equipment? How can I prove it is the equipment so I can go back to GoDaddy with a solid argument? Event 4202 (8/27/07 8:14:30 am): The system detected that network adapter \DEVICE\TCPIP_{3CDCEEFE-C379-4C88-AF9D-E1BE872DB9D4} was disconnected from the network, and the adapter's network configuration has been released. If the network adapter was not disconnected, this may indicate that it has malfunctioned. Please contact your vendor for updated drivers. Event 4201 (8/27/07 8:14:50 am): The system detected that network adapter \DEVICE\TCPIP_{3CDCEEFE-C379-4C88-AF9D-E1BE872DB9D4} was connected to the network, and has initiated normal operation over the network adapter.

Public Comments

1. Do you have dual NICs? If you do then you may not have the mvirtual mac address set up correctly. I woujld suggest that you get go daddy to see if you are arping to their switch correctly and not being dropped for some reason. Also check and see if you have multple sockets for a NIC that was removed. If you do remove all but the active NIC (unless you have dual NICs thatis.) TX