Understanding DFSR debug logging (Part 17: Replication failing because of blocked RPC ports (uses debug severity 5))

In this scenario we will see a file created on the upstream server and attempted replication with its downstream partner. RPC traffic is being blocked between the machines by an incorrectly configured firewall. This is a common scenario and basic understanding of firewalls, TCP/IP, ports, and RPC is assumed. Debug logging severity is set to 5 in order to see more details about the problem state.

 

(rpcportsblocked - Dfsr00008 - 2008.log)

 

These are two Windows Server 2008 servers called 2008x86SRV10 and 2008x86SRV11 in the contoso.com domain. The log is from 2008x86SRV10 where the file is created (upstream). Both servers are participating in the RpcPortRG replication group for the RpcportRf replicated folder. The file is called “fveupdate.exe”.

<Upstream> 20080908 10:12:45.417 3372 USNC 2612 UsnConsumer::CreateNewRecord LDB Inserting ID Record: ß File added to the replicated folder on the upstream server

+ fid 0x300000000BAAC

+ usn 0x2633c60

+ uidVisible 0

+ filtered 0

+ journalWrapped 0

+ slowRecoverCheck 0

+ pendingTombstone 0

+ internalUpdate 0

+ dirtyShutdownMismatch 0

+ meetInstallUpdate 0

+ meetReanimated 0

+ recUpdateTime 16010101 00:00:00.000 GMT

+ present 1

+ nameConflict 0

+ attributes 0x20

+ ghostedHeader 0

+ data 0

+ gvsn {5CB120DE-D2C2-452A-8280-B45FC155224F}-v28

+ uid {5CB120DE-D2C2-452A-8280-B45FC155224F}-v28

+ parent {3C47E305-FDE9-43F6-A550-791D9568C1D3}-v1

+ fence 16010101 00:00:00.000

+ clockDecrementedInDirtyShutdown 0

+ clock 20080908 17:12:43.261 GMT (0x1c911d61b214f69)

+ createTime 20080908 17:12:43.261 GMT

+ csId {3C47E305-FDE9-43F6-A550-791D9568C1D3}

+ hash 00000000-00000000-00000000-00000000

+ similarity 00000000-00000000-00000000-00000000

+ name fveupdate.exe ß file is name ‘fveupdate.exe’

+

<Upstream> 20080908 10:12:45.417 1632 DOWN 3363 DownstreamTransport::SetupBinding Setup connId:{108028D9-F00E-4F1E-A8EF-BF60DB623231} remoteAddress:2008x86FSRV11.contoso.com stringBinding:[5bc1ed07-f5f5-485f-9dfd-6fd0acf9a23c@ncacn_ip_tcp:2008x86FSRV11.contoso.com] ß An RPC connection setup attempt occurs over TCP (using the UUID of DFSR, which is the GUID 5bc1ed07-f5f5-485f-9dfd-6fd0acf9a23c) between upstream and downstream server

<Upstream> 20080908 10:12:45.433 3372 USNC 2615 UsnConsumer::CreateNewRecord ID record created from USN_RECORD:

+ USN_RECORD:

+ RecordLength: 88

+ MajorVersion: 2

+ MinorVersion: 0

+ FileRefNumber: 0x300000000BAAC

+ ParentFileRefNumber: 0xD00000000BA35

+ USN: 0x2633c60

+ TimeStamp: 20080908 10:12:43.261 Pacific Standard Time

+ Reason: Basic Info Change Close Data Extend Data Overwrite File Create

+ SourceInfo: 0x0

+ SecurityId: 0x0

+ FileAttributes: 0x20

+ FileNameLength: 26

+ FileNameOffset: 60

+ FileName: fveupdate.exe

+

<Upstream> 20080908 10:12:45.433 3372 LDBX 4300 Ldb::UpdateLastVersion Updating lastVersion:28

<Upstream> 20080908 10:12:45.433 3372 USNC 3459 UsnConsumer::CheckPoint Updating journalRecord: updateFlags=0

+ usnId: 0x1c8b6df35167c8c

+ nextUsn: 0x26360f8

+ checkpointUsn: 0x2633c60

+ checkpointTimestamp: 20080908 17:12:43.261

+ journalWrapped: 0

+ journalIdChanged: 0

+ slowRecoverNotFinished: 0

+ dirtyRecoveryMode: 0

+ dirtyShutdownRecoveryTimestamp: 16010101 00:00:00.000

+ dirtyRecoveryRecordsMarkedFinished: 0

+

<Upstream> 20080908 10:13:04.246