Understanding DFSR debug logging (Part 17: Replication failing because of blocked RPC ports (uses debug severity 5))

In this scenario we will see a file created on the upstream server and attempted replication with its downstream partner. RPC traffic is being blocked between the machines by an incorrectly configured firewall. This is a common scenario and basic understanding of firewalls, TCP/IP, ports, and RPC is assumed. Debug logging severity is set to 5 in order to see more details about the problem state.

 

(rpcportsblocked – Dfsr00008 – 2008.log)

 

These are two Windows Server 2008 servers called 2008x86SRV10 and 2008x86SRV11 in the contoso.com domain. The log is from 2008x86SRV10 where the file is created (upstream). Both servers are participating in the RpcPortRG replication group for the RpcportRf replicated folder. The file is called “fveupdate.exe”.

 

<Upstream> 20080908 10:12:45.417 3372 USNC  2612 UsnConsumer::CreateNewRecord LDB Inserting ID Record: ß File added to the replicated folder on the upstream server

+       fid                             0x300000000BAAC

+       usn                             0x2633c60

+       uidVisible                      0

+       filtered                        0

+       journalWrapped                  0

+       slowRecoverCheck                0

+       pendingTombstone                0

+       internalUpdate                  0

+       dirtyShutdownMismatch           0

+       meetInstallUpdate               0

+       meetReanimated                  0

+       recUpdateTime                   16010101 00:00:00.000 GMT

+       present                         1

+       nameConflict                    0

+       attributes                      0x20

+       ghostedHeader                   0

+       data                            0

+       gvsn                            {5CB120DE-D2C2-452A-8280-B45FC155224F}-v28

+       uid                             {5CB120DE-D2C2-452A-8280-B45FC155224F}-v28

+       parent                          {3C47E305-FDE9-43F6-A550-791D9568C1D3}-v1

+       fence                           16010101 00:00:00.000

+       clockDecrementedInDirtyShutdown 0

+       clock                           20080908 17:12:43.261 GMT (0x1c911d61b214f69)

+       createTime                      20080908 17:12:43.261 GMT

+       csId                            {3C47E305-FDE9-43F6-A550-791D9568C1D3}

+       hash                            00000000-00000000-00000000-00000000

+       similarity                      00000000-00000000-00000000-00000000

+       name                            fveupdate.exe ß file is name ‘fveupdate.exe’

+      

<Upstream> 20080908 10:12:45.417 1632 DOWN  3363 DownstreamTransport::SetupBinding Setup connId:{108028D9-F00E-4F1E-A8EF-BF60DB623231} remoteAddress:2008x86FSRV11.contoso.com  stringBinding:[5bc1ed07-f5f5-485f-9dfd-6fd0acf9a23c@ncacn_ip_tcp:2008x86FSRV11.contoso.com] ß An RPC connection setup attempt occurs over TCP (using the UUID of DFSR, which is the GUID 5bc1ed07-f5f5-485f-9dfd-6fd0acf9a23c) between upstream and downstream server

<Upstream> 20080908 10:12:45.433 3372 USNC  2615 UsnConsumer::CreateNewRecord ID record created from USN_RECORD:

+       USN_RECORD:

+       RecordLength:        88

+       MajorVersion:        2

+       MinorVersion:        0

+       FileRefNumber:       0x300000000BAAC

+       ParentFileRefNumber: 0xD00000000BA35

+       USN:                 0x2633c60

+       TimeStamp:           20080908 10:12:43.261 Pacific Standard Time

+       Reason:              Basic Info Change Close Data Extend Data Overwrite File Create

+       SourceInfo:          0x0

+       SecurityId:          0x0

+       FileAttributes:      0x20

+       FileNameLength:      26

+       FileNameOffset:      60

+       FileName:            fveupdate.exe

+      

<Upstream> 20080908 10:12:45.433 3372 LDBX  4300 Ldb::UpdateLastVersion Updating lastVersion:28

<Upstream> 20080908 10:12:45.433 3372 USNC  3459 UsnConsumer::CheckPoint Updating journalRecord: updateFlags=0

+       usnId:                              0x1c8b6df35167c8c

+       nextUsn:                            0x26360f8

+       checkpointUsn:                      0x2633c60

+       checkpointTimestamp:                20080908 17:12:43.261

+       journalWrapped:                     0

+       journalIdChanged:                   0

+       slowRecoverNotFinished:             0

+       dirtyRecoveryMode:                  0

+       dirtyShutdownRecoveryTimestamp:     16010101 00:00:00.000

+       dirtyRecoveryRecordsMarkedFinished: 0

+      

<Upstream> 20080908 10:13:04.246