This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Socket error mvrRet = 10053

0

hi guys,

i need some help. i have an issue to backup via a Checkpoint getting error in Backup Exec 0xe00084f8 - The network connection to the Backup Exec Remote Agent has been lost.

in the debug logs found this : Socket error mvrRet = 10053

http://www.symantec.com/business/support/index?page=content&id=TECH148097

what could be the reason ?

tried with any - any rule = same issue

how could i use wireshark to see what's going on ?

as per

http://support.microsoft.com/kb/819124/en-us

WSAECONNABORTED (10053)

Translation: Software caused connection abort. Description: An established connection was stopped by the software in your host computer, possibly because of a data transmission time-out or protocol error.

does that mean that this is not Backup Exec issue ?

any help please ! :)

thank you very much

This question is marked "community wiki".

asked 29 Dec '14, 06:20

adasko's gravatar image

adasko
86343842
accept rate: 0%


One Answer:

1

i have an issue to backup via a Checkpoint getting error in Backup Exec

sounds like you are trying to do a network backup through a Check Point firewall, right?

WSAECONNABORTED (10053)
what could be the reason ?

Either one end of the participating systems terminates the connection, OR the firewall between those systems!

how could i use wireshark to see what's going on ?

Backup Server [1] --- [2] Firewall --- [3] --- Backup Agent

Try to capture the traffic in front of the backup agent [3] and the backup server [1] in parallel. See the following Wiki entry how to do that:

http://wiki.wireshark.org/CaptureSetup/Ethernet

If you see a connection abort (RESET or FIN) at the server side [1] (coming from the server), it's the server who is terminating the connection. Then you should ask Symantec support.

If you see a connection abort (RESET/FIN) at the agent [3], but NOT on the server side [1], then it's the firewall who is terminating the session. In that case, please contact your local firewall guru.

Regards
Kurt

answered 30 Dec '14, 03:59

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Hi Kurt,

yes. a Check Point firewall is in-between. thank you so much for you answers - makes sense to me. can you please tell me if any specific filter should be enabled on both (Backup Exec and Backup Agent Server) or which one would you enable in this case ...

thank you in advance

Best Regards

adasko

(30 Dec '14, 05:31) adasko
1

I would use a capture filter with the ip address of the server and the agent

host x.x.x.x and host y.y.y.y

(30 Dec '14, 05:33) Kurt Knochner ♦

great ! will give it a try !

(30 Dec '14, 07:13) adasko

@adasko: You awarded 11 points to me. I'm not sure you really wanted to do that, as your karma went down to 0. I rewarded the 11 karma points back to you!

So, if a supplied answer resolves your question you can "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions. For extra points you can also up vote the answer (thumb up).

(30 Dec '14, 14:20) Kurt Knochner ♦

Hi Kurt,

one more question. let's say host A has the IP 10.0.0.1 and Host B the IP 10.0.0.2. so i would create on host A the capture like this host 10.0.0.1 anf host 10.0.0.2 but how on host B ? the other way i mean host 10.0.0.2 and host 10.0.0.1 or it should be the same as on host A ?

thank you very much and a Very Happy New YEar for YOU !

(31 Dec '14, 05:43) adasko
1

The filter is the same on both hosts, as you want to see only traffic from/to 10.0.0.1 AND from/to 10.0.0.2 on both systems. The order of the host statements does not matter, so host x.x.x.x and host y.y.y.y is identical to host y.y.y.y and host x.x.x.x.

(31 Dec '14, 08:08) Kurt Knochner ♦
showing 5 of 6 show 1 more comments