Archive for May 2008

ATMARP (loopback) Frames being broadcast – Cisco Catalyst 3750 12.2-40 (advipservicesk9)   Leave a comment

I’ve noticed one of my switches is broadcasting ATMARP frames every 10 seconds to all switchports.. I had no idea why, as the switch has no ATM interfaces (naturally) nor does the IOS support ATM/LANE. CDP and STP was disabled.

I think these frames are being mis-decoded in Network Monitor – they also showed as loopback frames in the trace (even though classified as ATMARP), which led me to this page

Aha! These frames are sent by default every 10 secs on each ethernet interface as a soft connectivity testing mechanism.

This is an example of someone seeing this kind of traffic –

To disable an interface’s soft loopback diagnostic frame capability, configure "no keepalives" on the interface.

The downside to configuring this is the interface will always show UP/UP when any media is connected – speed/duplex issues will not trigger UP/DOWN.

Wonderful mysteries and magics of IT :)


Posted May 28, 2008 by benryanau in Cisco

Tagged with ,

So Vista doesn’t trust you with c:\windows?   Leave a comment

Vista has set the owner of "system" files to TrustedInstaller and set the ACL to deny anyone from making changes. Cute, but annoying.

Typically anything in c:\windows or c:\windows\system32 will give "Access Denied" even after the myriad UAC prompts.

My Dell Latitude D830 has a 32GB flash-based SSD harddisk, the space constraints of which get a bit tiring.

The performance of the $800 option leave a lot to be desired.. but that’s another story. Along with the AHCI issues, BSOD due to LPM changes in Vista.. <sigh>.

Anyhow I wanted to compress the contents of c:\windows\system32\driverstore as it was 1.4GB.. dunno how compressible it will be but we’ll see.

Here’s a script to fix the permissions issue. Grab it here from my SkyDrive (incl readme)

Someone at mydigitallife wrote it, it’s very basic but automates the changes. Thanks to the author!

Posted May 18, 2008 by benryanau in Microsoft

Tagged with ,

Resume from hibernate fails with black screen, flashing cursor under Vista- WORKAROUND   Leave a comment

Here’s a copy of a post I made on the Dell Forums relating to hibernation resume under Vista. Original post –

The issue still exists – I’ve disabled the pcmcia.sys driver to work around the issue.


Thought I’d post to document what I’ve found after at least 40 solid hours of troubleshooting.

If your notebook won’t fully wake from hibernation, and instead sits there with a black screen with a flashing white cursor at top left of screen, this is probably for you.

The issue specifically occurs here on a Latitude D830 running Vista Ent x32. The command to hibernate completes ok. On power-on, the resume process starts, the "resuming windows" bar winds back and forth with HDD activity, and after 10-20 seconds the video mode changes as expected, but instead of bringing up Windows desktop the machine is stuck/frozen with only a white cursor flashing in a dos-mode display res black screen. It’s unresponsive (no kb lights etc) only a long press on power will shut it off. At reboot the NT loader says "Resume failed, do you want to delete restoration data and boot normally".

Unsuccessful troubleshooting included

-All third-party drivers were disabled via regedit (set start type to 4) and all non-essential Microsoft drivers as well (USB etc).

-Firmware and driver versions correct, chkdsk, hiberfil.sys recreated, peripherals removed

-All MS KB articles relating to Vista and hibernation read, relevant hotfixes obtained and applied.. SP1 installed (which was another story)

-All combinations of power management settings

-Replacement of mainboard, processor, RAM, HDD (this was to try and fix another issue with SSD HDD BSOD’s, but didn’t fix this one)

-Reinstall from scratch several times with Vista Enterprise x32 using only Dell drivers and software

-Left it with the Dell service agents to muddle with (with no success I must add, so I took it back)

Eventually I found what I think is the problem. It seems that disabling the onboard PC card/1394 controller via the BIOS works around this problem. I suspect what is happening is the onboard O2Micro PC Card controller (or the associated smartcard reader and 1394 controller) is buggy in that it does not behave correctly when returning from S4. The supporting driver is the Microsoft pcmcia.sys so it’s not a driver issue imo.

This of course is not a solution – it’s up to Dell to work with their third-party suppliers to provide hardware that is Vista compliant. I happen to use my PC card slot quite a bit for WWAN and other cards.

Are there any Dell reps here who could recommend what I could do to get this on an engineer’s radar?

Hope this helped someone having this problem – if I can I’ll update this post with more info as I have it.

Keywords: vista hibernate hibernation resume black flashing cursor hangs freezes "delete restoration data"

Posted May 17, 2008 by benryanau in Microsoft

Tagged with , ,

"Windows Vista Feature Pack for Wireless"   Leave a comment

Microsoft have announced "Windows Vista Feature Pack for Wireless" –

Quote from KB:

"This article describes the Windows Vista Feature Pack for Wireless. This software update includes the following components or features that improve wireless support in Windows Vista:

Bluetooth version 2.1 support

Unified Pairing user interface

Windows Connect Now updates

Some of these features may work with existing hardware. However, you must have new hardware to take advantage of the new functionality.
This update is compatible with all versions of Windows Vista. It can be installed only on a computer that is running Windows Vista Service Pack 1 (SP1)."

It is only available (at this time) from hardware vendors/OEM’s. Dell seem to be confused by my request for it, they asked me if I wanted to install SP1 (!).

I’m hoping it will resolve my rfcomm.sys BSOD/STOP issues, as rfcomm.sys has been updated in this pack.

Posted May 17, 2008 by benryanau in Microsoft

Tagged with , ,

BSOD in rfcomm.sys   Leave a comment

Dell Latitude D830, Vista x32 Enterprise w/SP1 and all WU fixes

Getting regular BSOD’s in rfcomm.sys – including 0x000000D1 IRQL_LESS_OR_NOT_EQUAL

Driver Verifier is enabled fully.

Bluetooth services installed/enabled include Headset, Activesync and PAN/Internet sharing (via HTC TyTNII/Kaiser)

Microsoft has a March 08 KB article on an rfcomm.sys issue which offers a requested hotfix – this hasn’t come through yet so I dunno if it fixes it or not.

"When you try to put a Windows Vista-based computer into hibernation (S4), and the computer has multiple USB devices connected to it, the computer stops responding" –

There’s also the recently announced "Windows Vista Feature Pack" which has a replacement rfcomm.sys in it but this can only obtained from the vendor.. Dell seem to be confused by it but I’ll keep persisting with that too.

When I resolve the issue I’ll post back.

Keywords rfcomm.sys, STOP, BSOD, Vista, Dell Latitude D830, bluetooth, KB949537

Posted May 17, 2008 by benryanau in Microsoft

Tagged with , ,

Fix for BSOD Vista Intel driver   Leave a comment

My notes on one of the many issues I’ve had on my Latitude D830 running Vista…

Intel Wireless WiFi Link 4965AGN on Dell Latitude D830, Vista x32 Enterprise w/SP1 and all fixes

-No magic firewall or antivirus software (the cure is worse than the disease IMO – using good hygiene I’ve never had an issue!)

I was getting regular (2-5 per hour) BSOD’s when operating onbattery, out of dock – mainly when browsing the web (esp IE7.. Yuck i know.).

I had enabled Driver Verifier (verifier.exe) fully, and was getting 0x00000019 BAD_POOL_HEADER, 0x000000C4 DRIVER_VERIFIER_DETECTED_VIOLATION, 0x000000C5 DRIVER_CORRUPTED_EXPOOL

I eliminated every non-critical driver (regedit, ccs\services Start=4) including modem, audio, etc but still had the issue.

I began to suspect the wireless driver. So I tried another version.

Uninstalling and reinstalling wouldn’t actually change the driver NETw4v32.sys (2,555,392 bytes – 12/03/2008)

After fiddling I did end up getting the machine to BSOD on boot (5-20 secs after logon screen) every time, dunno how.

Disabling WLAN in BIOS stopped the BSOD’s. This clinched it.

Here’s what I did:

-Renamed c:\windows\system32\drivers\NETw4v32.sys to NETw4v32.sysx

-Uninstalled the Intel driver package

-Double checked NETw4v32.sys was still renamed

-Deleted the services via regedit (in HKLM\SYSTEM\CCS\Services) EvtEng, NETw4v32, Regsrvc

-Checked no files remained in C:\Program Files\Intel\Wireless

-Rebooted with wireless off in BIOS to prevent possible PNP redetection

-Checked NETw4v32.sys hadn’t returned

-Installed Intel PROSet/Wirelessdriver package v11.5.0.32 (DRIVER ONLY, NOT the IT Administrator package)

-Checked file NETw4v32.sys (now 2,251,776 bytes – 26/9/2007)

-Reset my personal driver preferences (Adapter properties->Configuration) eg 802.11n=off etc

While this was not the only thing I did to try and resolve these BSOD’s, these ones are gone and I am slowly re-adding the other drivers (Bluetooth stack, Virtual PC, WMDC, modem) to ensure it wasn’t any of those.

I’ve also reenabled Medium Savings under Power Management.

Interestingly the NETw4v32.sys driver had no digital signature, nor did rightclick properties details show version etc.

Good luck :)

Posted May 5, 2008 by benryanau in Microsoft

Tagged with , , ,