BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 08-26-2008, 11:12 AM   #1 (permalink)
New Member
 
Join Date: Aug 2008
Model: none
PIN: N/A
Carrier: Verizon
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Thousands of Failure Audits in system logs, contacts don't sync

Please Login to Remove!

Hello all,

I'm glad I came across this great forum, I have a feeling I'll be spending a lot of time here as blackberries are popping up on networks more and more.

I recently took over a network that was a bit of a mess. Most issues have been resolved, except for an issue with the CEO's blackberry, which of course makes it a big issue!

The phone works fine, and gets / sends email, but it no longer sychronizes his contacts, which is very annoying for him.

I logged into the exchange servers where BES is installed (yes, BES for just one blackberry...) I was poking around, and found that under the Windows system logs, there are tens of thousands of failure audits, event ID 861.

I've copied some of them below, but noticed that the port numbers are not always the same for the EXE calling them. I assume there is obviously some large configuration issue related to BES here, but I am not yet a BES guru. This is an application server running exchange 2003 overtop of Windows 2003, with BES 4.1.4.15 installed by previous technician. The database is sitting on the domain controller.

I tried to search here, and came up with nothing. Has anyone seen this before?


The Windows Firewall has detected an application listening for incoming traffic.

Name: -
Path: C:\Program Files\Research In Motion\BlackBerry Enterprise Server\BESAlert.exe
Process identifier: 3456
User account: BESAdmin
User domain: LAN
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 35347
Allowed: No
User notified: No
11:19:22 am 26-Aug-08
Matt Weaver .he Windows Firewall has detected an application listening for incoming traffic.

Name: -
Path: C:\Program Files\Research In Motion\BlackBerry Enterprise Server\AttachServer\BBConvert.exe
Process identifier: 12152
User account: SYSTEM
User domain: NT AUTHORITY
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 35350
Allowed: No
User notified: No

The Windows Firewall has detected an application listening for incoming traffic.

Name: -
Path: C:\Program Files\Research In Motion\BlackBerry Enterprise Server\AttachServer\BBConvert.exe
Process identifier: 10828
User account: SYSTEM
User domain: NT AUTHORITY
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 35348
Allowed: No
User notified: No



The Windows Firewall has detected an application listening for incoming traffic.

Name: -
Path: C:\Program Files\Research In Motion\BlackBerry Enterprise Server\SyncServer\BlackBerrySyncServer.exe
Process identifier: 8736
User account: BESAdmin
User domain: LAN
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 35349
Allowed: No
User notified: No



the Windows Firewall has detected an application listening for incoming traffic.

Name: -
Path: C:\Program Files\Research In Motion\BlackBerry Enterprise Server\AttachServer\BBConvert.exe
Process identifier: 12152
User account: SYSTEM
User domain: NT AUTHORITY
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 35350
Allowed: No
User notified: No

For more information, see Help and Support Center at
11:17:20 am 26-Aug-08

he Windows Firewall has detected an application listening for incoming traffic.

Name: -
Path: C:\Program Files\Research In Motion\BlackBerry Enterprise Server\SyncServer\BlackBerrySyncServer.exe
Process identifier: 8736
User account: BESAdmin
User domain: LAN
Service: Yes
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 35351
Allowed: No
User notified: No

For more information, see Help and Support Center at
Offline  
Old 08-26-2008, 04:49 PM   #2 (permalink)
New Member
 
Join Date: Aug 2008
Model: none
PIN: N/A
Carrier: Verizon
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

I fixed the sycn issue, that was unrelated. But seriously, has anyone ever seen this "failure audit" issue?
Offline  
Old 09-15-2008, 03:29 PM   #3 (permalink)
New Member
 
nealbscott's Avatar
 
Join Date: Aug 2008
Model: 8330
PIN: N/A
Carrier: Verizon
Posts: 8
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by FCCSonline View Post
I fixed the sycn issue, that was unrelated. But seriously, has anyone ever seen this "failure audit" issue?
I see it happening to me now and was hoping to find an answer. If I find one, I'll post back here.
Offline  
Old 09-15-2008, 03:32 PM   #4 (permalink)
New Member
 
Join Date: Aug 2008
Model: none
PIN: N/A
Carrier: Verizon
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

I never found a solution, but really want to. I hate having anything in the event logs that I don't understand. I've been so busy fixing bigger issues on this mess of a network that I haven't looked back at this to much, but would love to hear if you figure anything out!
Offline  
Old 09-15-2008, 03:33 PM   #5 (permalink)
BlackBerry Elite
 
knottyrope's Avatar
 
Join Date: Jan 2008
Location: Massachusetts
Model: Z30
OS: 10.2.1
PIN: t of blood has been taken
Carrier: AT&T-US with I dee ten tee errors
Posts: 6,564
Post Thanks: 256
Thanked 260 Times in 246 Posts
Default

Those are part of the BES services that needs to run.
You can configure windows firewall to allow those to run.
__________________
irony : many old timer posters have de-evolved into the trolls they once fought
I am on http://supportforums.blackberry.com
BES 10 running sweet for my Z30, Z10 and Q10
Offline  
Old 09-15-2008, 03:35 PM   #6 (permalink)
New Member
 
nealbscott's Avatar
 
Join Date: Aug 2008
Model: 8330
PIN: N/A
Carrier: Verizon
Posts: 8
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by knottyrope View Post
Those are part of the BES services that needs to run.
You can configure windows firewall to allow those to run.
Is there an FAQ somewhere that says what settings Windows Firewall needs to have for BES? Or do I honestly have to troll my event log 'till I've found them all?
Offline  
Old 09-15-2008, 03:51 PM   #7 (permalink)
BlackBerry Elite
 
knottyrope's Avatar
 
Join Date: Jan 2008
Location: Massachusetts
Model: Z30
OS: 10.2.1
PIN: t of blood has been taken
Carrier: AT&T-US with I dee ten tee errors
Posts: 6,564
Post Thanks: 256
Thanked 260 Times in 246 Posts
Default

I have no fire wall on my BES.
I do have ISA on the perimiter.
__________________
irony : many old timer posters have de-evolved into the trolls they once fought
I am on http://supportforums.blackberry.com
BES 10 running sweet for my Z30, Z10 and Q10
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.