Koozali.org: home of the SME Server

read error = NT_STATUS_END_OF_FILE

Offline michelandre

  • *
  • 261
  • +0/-0
Re: read error = NT_STATUS_END_OF_FILE
« Reply #15 on: June 24, 2015, 11:35:10 PM »
Thank you Stefano for you comment.

I have only the ADSL and Win-8 and the problem is still there. So maybe it is Win-8 causing the problem.

I have a Win-XP, Win-7 and Win-8. They all have the same problem.
If I connect a portable with Win-7, I have the same problem.
The only things they have in common is Avast and Spybot and the SME Server.

I have an old Win-7 Virtual Machine (VirtualBox) on my Win-7 Station that I did not touch since a long time. I started it and same problem. I uninstalled Avast & Spybot, reboot and still the problem. I tried with and without getting the address with DHCP and still the problem is on the old machine. It was not there before...

There is a law in the technical world: "You can not have the exact same problem on two different machines at the same time.."
In all my years of technical work, this law never prooved wrong...

I do not know what else I can do...

Any help will be very very very very very very appreciated,

Michel-André
*******************

guest22

Re: read error = NT_STATUS_END_OF_FILE
« Reply #16 on: June 24, 2015, 11:50:11 PM »
Could it be 'windows update' that is checking MS repositories, or any other 'phone home' mechanism?

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: read error = NT_STATUS_END_OF_FILE
« Reply #17 on: June 25, 2015, 06:41:54 PM »
I have a persistent problem. I have those messages repeating every 4-5 minutes:

Is your only problem that you see log messages (every 10:00 minutes)?

Offline michelandre

  • *
  • 261
  • +0/-0
Re: read error = NT_STATUS_END_OF_FILE
« Reply #18 on: June 25, 2015, 10:31:53 PM »
Hi all,

Thank you RequestedDeletion for your suggestions.
I checked all the config for all the cards on Win-7 & Win-8.1; all the virtual cards also. I took out all the the IP-v6. Same problem.

Hi CharlieBrady,

- I had another problem. One user was loging on Webmail from remote. He was OK for one or two logins then impossible to login again. I had to change his password then it was OK for one or two times and again impossible to login.
- Finally yesterday I tar his Maildir. Delete user. Wait a few minutes. Recreate exactly the same user with the same password. I untar back his Maildir, changed the owner and group to his own name.
- He connected 4-5 times today and so far so good.

When I first restored the backup from SME-8 to SME-9, in Thunderbird (on Win-8.1) I had an account that it was not possible to login to the server. All my other 5 accounts from the server were OK. I deleted the faulty account in Thunderbird, recreate the exact same account in Thunderbird and all was OK after that.

Beside that, when I am googling, it is taking quite some time to get the page. Sometime it was "Page not found", refresh and it was OK. Also it was taking 4-5 seconds before I see in the left bottom line of Firefox that is was looking for the URL.

Three days ago, I decided  to change from ADSL to VDSL.

- I noticed since 2-3 days that the ADSL is loosing the line every 2-3 hours and sometime every 10-15 minutes.
- Yesterday, I phoned Teksavvy support to ask them to check my line but since I am in the process of going to VDSL, it is the "nice good Bell" that is controlling my line in the interim and Teksavvy cannot check it for now. I have to wait until July 8th for the switch. Until then, I think there is no time to loose talking to "nice good Bell"...
- The technician suggested I change the ADSL for the new VDSL modem. I did that last night. Loosing the line is always there but it seems googling is better.

This morning I changed all the cables for CAT-6, just in case...

Any help will be very very very very very very very appreciated,

Michel-André
*******************

guest22

Re: read error = NT_STATUS_END_OF_FILE
« Reply #19 on: June 25, 2015, 10:36:33 PM »
For sure I appreciate your determination and provided details!

Offline michelandre

  • *
  • 261
  • +0/-0
Re: read error = NT_STATUS_END_OF_FILE
« Reply #20 on: June 27, 2015, 07:03:13 PM »
Hi all,

Just a question: what is that "smbd/process.c" in the log messages?
Quote
Jun 27 12:52:21 dorgee proftpd[10910]: 192.168.1.1 (192.168.1.81[192.168.1.81]) - FTP session opened.
Jun 27 12:52:22 dorgee proftpd[10910]: 192.168.1.1 (192.168.1.81[192.168.1.81]) - FTP session closed.
Jun 27 12:52:31 dorgee smbd[10915]: [2015/06/27 12:52:31.139899,  0] smbd/process.c:244(read_packet_remainder)
Jun 27 12:52:31 dorgee smbd[10915]:   read_fd_with_timeout failed for client 192.168.1.81 read error = NT_STATUS_END_OF_FILE.

I can not find a file "process.c" on the server or on the station...

Thank you for any suggestions,

Michel-André
*******************

Offline michelandre

  • *
  • 261
  • +0/-0
Re: read error = NT_STATUS_END_OF_FILE
« Reply #21 on: June 29, 2015, 10:14:26 PM »
Hi all,

I installed Wireshark on Win-81 to check the communication.

- Power off Win-81
- Reboot server
- Power on Win-81
- Sync the time of Win-81 with the same NTP server as SME-9
- Running only Wireshark on Win-81

From messages log:
Jun 29 14:56:20 dorgee proftpd[2378]: 192.168.1.1 (192.168.1.81[192.168.1.81]) - FTP session opened.
Jun 29 14:56:20 dorgee proftpd[2378]: 192.168.1.1 (192.168.1.81[192.168.1.81]) - FTP session closed.
Jun 29 14:56:28 dorgee smbd[2382]: [2015/06/29 14:56:28.824473,  0] smbd/process.c:244(read_packet_remainder)
Jun 29 14:56:28 dorgee smbd[2382]:   read_fd_with_timeout failed for client 192.168.1.81 read error = NT_STATUS_END_OF_FILE.

From Wireshark:
After the FTP i.e after "14:56:20":
- the station make a SMTP query
- there is a Client Hello
- an exchange of keys
- some packets with TLSv1.2 protocols
- Another Hello
- another exchange of keys
- then the station is asking for the main web page in Primary i-bay
- when the web page is finished, the station is asking a lot of pages from the cgi directory. The server always responds with 404.
I compared the time (14:56:28) to the last 404 and this is the time of the message "...NT_STATUS_END_OF_FILE..."

Why is the station asking for the main page of the Primary i-bay?
Why the station is asking files from the cgi folder?

Thank you for any suggestions,

Michel-André
*******************

Offline michelandre

  • *
  • 261
  • +0/-0
Re: read error = NT_STATUS_END_OF_FILE
« Reply #22 on: June 30, 2015, 11:57:43 PM »
Hi all

FOUND THE CULPRIT

If I uninstall AVAST antivirus, there is no more message END_OF_FILE

Now I would like to configure AVAST or SME to get rid of the problem.

Any suggestions...

Michel-André

guest22

Re: read error = NT_STATUS_END_OF_FILE
« Reply #23 on: June 30, 2015, 11:59:39 PM »
Congrats! and sorry you had such a long and lonely journey... Well done.

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: read error = NT_STATUS_END_OF_FILE
« Reply #24 on: July 01, 2015, 12:08:12 AM »
michelandre

Quote
Now I would like to configure AVAST or SME to get rid of the problem.
Any suggestions...

With Avast installed on Windows, you could look at the Windows running processes & disable the culprit (if found & if possible/practical).

You should really be asking on an Avast forum.
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

guest22

Re: read error = NT_STATUS_END_OF_FILE
« Reply #25 on: July 01, 2015, 12:08:56 AM »
Hi all

FOUND THE CULPRIT

If I uninstall AVAST antivirus, there is no more message END_OF_FILE

Now I would like to configure AVAST or SME to get rid of the problem.

Any suggestions...

Michel-André


I'm guessing AVAST is 'phoning home' to look for any updates. Maybe it configurable in AVAST?


So what we have: FTP, IP, Application, Type of traffic... Maybe there is something in the mix?

Offline michelandre

  • *
  • 261
  • +0/-0
Re: read error = NT_STATUS_END_OF_FILE
« Reply #26 on: July 04, 2015, 02:34:44 AM »
Hi all,

TOTAL VICTORY :)

- I created a new user in SME
- I created a new account at Avast with the credentials of the new user from SME
- I downloaded a new "avast_free_antivirus_setup_online.exe"
- I downloaded the uninstaller "avastclear.exe"
- I uninstalled with the uninstaller "avastclear.exe"
- Clean all the data in "C:\Users\...\AppData..."
- I Installed a new Avast with "avast_free_antivirus_setup_online.exe"
- I configured Avast
- I registered directly from Avast panel "Settings | Registration" with the new user from SME email address

A real miracle, everything worked fine with no message "error...END_OF_FILE..."

After 2 months, it's about time...

Can someone explain why so many entries so often from DHCP
Quote
...
Jul  3 19:34:14 dorgee dhcpd: DHCPINFORM from 192.168.1.151 via eth0
Jul  3 19:34:14 dorgee dhcpd: DHCPACK to 192.168.1.151 (00:1f:16:a7:32:f6) via eth0
Jul  3 19:36:08 dorgee dhcpd: DHCPINFORM from 192.168.1.151 via eth0
Jul  3 19:36:08 dorgee dhcpd: DHCPACK to 192.168.1.151 (00:1f:16:a7:32:f6) via eth0
Jul  3 19:44:31 dorgee dhcpd: DHCPINFORM from 192.168.1.152 via eth0
Jul  3 19:44:31 dorgee dhcpd: DHCPACK to 192.168.1.152 (d8:d3:85:30:12:6e) via eth0
Jul  3 19:54:32 dorgee dhcpd: DHCPINFORM from 192.168.1.152 via eth0
Jul  3 19:54:32 dorgee dhcpd: DHCPACK to 192.168.1.152 (d8:d3:85:30:12:6e) via eth0
Jul  3 19:59:31 dorgee dhcpd: DHCPINFORM from 192.168.1.152 via eth0
Jul  3 19:59:31 dorgee dhcpd: DHCPACK to 192.168.1.152 (d8:d3:85:30:12:6e) via eth0
Jul  3 20:04:15 dorgee dhcpd: DHCPINFORM from 192.168.1.151 via eth0
Jul  3 20:04:15 dorgee dhcpd: DHCPACK to 192.168.1.151 (00:1f:16:a7:32:f6) via eth0
Jul  3 20:10:34 dorgee dhcpd: DHCPINFORM from 192.168.1.152 via eth0
Jul  3 20:10:34 dorgee dhcpd: DHCPACK to 192.168.1.152 (d8:d3:85:30:12:6e) via eth0
Jul  3 20:14:31 dorgee dhcpd: DHCPINFORM from 192.168.1.152 via eth0
Jul  3 20:14:31 dorgee dhcpd: DHCPACK to 192.168.1.152 (d8:d3:85:30:12:6e) via eth0
Jul  3 20:26:06 dorgee dhcpd: DHCPINFORM from 192.168.1.152 via eth0
Jul  3 20:26:06 dorgee dhcpd: DHCPACK to 192.168.1.152 (d8:d3:85:30:12:6e) via eth0
...
I hope it's not related to Avast - it is almost again every 10 minutes  :-x.

Again, thank you all for your suggestions.

Michel-André

PS: Avast forum is nothing compared to the quality of SME forum.