[isalist] Re: Users bumped out of Live Meeting when uploading PowerPoints

  • From: Rob Moore <RMoore@xxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 3 Feb 2010 13:33:42 -0500

The new version of the client is 8.0.6362.149. I guess it's also a problem with 
a slightly older one, I think maybe .143 but can't find the email for that one 
right now. Originally, I had version something like 8.0.6362.62, and that one 
didn't have this problem.

Rob

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of D PIETRUSZKA USWRN INTERLINK INFRA SHIFT MGR
Sent: Wednesday, February 03, 2010 1:18 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Users bumped out of Live Meeting when uploading 
PowerPoints

Which version is that new client? I'm wondering if would affect in any way, 
clients working on a company owned OCS environment.

Regards
Diego R. Pietruszka

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Rob Moore
Sent: Wednesday, February 03, 2010 11:55 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Users bumped out of Live Meeting when uploading 
PowerPoints

This is fixed. Apparently the new LiveMeeting client requires access to port 
8057. Microsoft's original explanation was that the LM client first tried port 
8057 and if that was unavailable it would fall back to port 443. I could see 
this happen, in fact. But as far as I can tell, the newer client would then 
fail anyway if it couldn't use 8057. Once I allowed traffic over that port, all 
went well.

Thanks,
Rob

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Rob Moore
Sent: Wednesday, February 03, 2010 8:00 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Users bumped out of Live Meeting when uploading 
PowerPoints

Again, sorry for the delay. But I've been doing a lot of back-and-forth with 
our LiveMeeting team. And they have an open case with Microsoft's LiveMeeting 
support folks.

What we've figured out so far is that there are no problems with an older 
version of the client (which I have on my computer at work). Using that client 
I can upload anything I want, including the same PowerPoint that out 
LiveMeeting team members can't upload. The newest client (which is on the 
computers of our LiveMeeting team, as well as the computers of most of our 
clients) has the problem described-inability to upload PowerPoints, with the 
error I described below. Size (of the PP) doesn't seem to matter. 
Interestingly, other file types CAN be uploaded, no problem.

When I get into work later this morning, I'm planning to upgrade to the latest 
client on my work computer and see the problem replicated. I will post more 
results later this morning. But if anyone has any insight now, it will be 
gladly accepted!

Thanks,
Rob

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Rob Moore
Sent: Tuesday, February 02, 2010 9:40 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Users bumped out of Live Meeting when uploading 
PowerPoints

Internal clients use the ISA server as their default gateway. As far as I know, 
return traffic takes the same path as the original traffic. All of our traffic 
comes in and out through the ISA server.

There were some preceding errors. I'll try to duplicate those and let you know 
what they were. I'll also try to find out if any other kind of file can be 
uploaded.

Rob

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Jerry Young
Sent: Monday, February 01, 2010 4:57 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Users bumped out of Live Meeting when uploading 
PowerPoints

Looks like Hosted Live Meeting.

http://www.dnsstuff.com/tools/ipall/?tool_id=67&token=&toolhandler_redirect=0&ip=65.221.5.36

The IP is in Redmond and the denial is being done on traffic bound for the 
External network of the ISA Server from its Internal network.

As I understand it, however, the FWX_E_TCP_NOT_SYN_PACKET_DROPPED is something 
you see commonly with stateful inspection on the ISA Server; indeed, this error 
code is generally indicative of packets being dropped because of stateful 
inspection; this traffic didn't match any conversation currently in the ISA 
Server's state tables.  That being said, a possible cause of this is an 
asymmetric route between your client and the destination.

Do your internal clients use the ISA Server as their default gateway or another 
router?  Is the return traffic to the client taking the same path into of your 
environment as the original client traffic took leaving it?

For example, if you assume the ISA Server is used the default gateway by the 
internal clients, the traffic flow of an asymmetric route might look at follows:

Client -> ISA Server -> Router -> LiveMeeting -> Router -> Client.
That may not be the cause, though, as there are still other questions to 
consider.  Are the users able to upload any files at all?  Is it just the 
PowerPoint files that can't be uploaded? Are there any status error or warning 
codes that preceed this one?  If so, what are they?

Try taking a network trace and looking at that.  That might ultimately be what 
you need to do to determine the root cause.
On Mon, Feb 1, 2010 at 2:55 PM, D PIETRUSZKA USWRN INTERLINK INFRA SHIFT MGR 
<DPietruszka@xxxxxx<mailto:DPietruszka@xxxxxx>> wrote:
Is it you own livemeeting or livemeeting service?

Regards
Diego R. Pietruszka

From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> 
[mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On 
Behalf Of Rob Moore
Sent: Monday, February 01, 2010 2:49 PM
To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx>
Subject: [isalist] Users bumped out of Live Meeting when uploading PowerPoints

Hi all-

Using ISA 2006, patched to the latest version. (Getting ready to go to TMG, not 
there yet.)

Users on my network suddenly can no longer upload PowerPoints to their Live 
Meetings. If they use their computer elsewhere (home or whatever) and are NOT 
connected to my VPN, then they can upload them just fine.

I did some monitoring on one of these failures and here's the result:
Original Client IP               Client Agent       Authenticated Client      
Service Server Name     Referring Server               Destination Host Name    
     Transport            MIME Type         Object Source   Source Proxy     
Destination Proxy            Bidirectional                Client Host Name      
       Filter Information            Network Interface          Raw IP Header  
Raw Payload      GMT Log Time      Source Port        Processing Time           
    Bytes Sent          Bytes Received HTTP Status Code            Cache 
Information                Log Record Type               Authentication Server  
 Log Time              Destination IP    Destination Port               
Protocol                Action   Rule       Client IP               Client 
Username              Source Network               Destination Network      
HTTP Method               URL        Result Code        Error Information
172.17.201.34                                                     PHL-ISA3      
        -                              TCP        -                             
                                                                 -              
                                                2/1/2010 7:28:42 PM       31707 
   0              0              0                              0x0         
Firewall                -              2/1/2010 2:28:42 PM       65.221.5.36    
     443         HTTPS   Denied Connection                         
172.17.201.34                     Internal                External              
 -              -              0xc0040017 FWX_E_TCP_NOT_SYN_PACKET_DROPPED      
          0x0

I feel fairly certain that this error has been queried to the list before 
(maybe not with Power Points being uploaded into Live Meetings), but I couldn't 
find any answers in the archive.

Thanks,
Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Rob Moore
Network Manager
215-241-7870
Helpdesk: 800-500-AFSC




--
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer
Young Consulting & Staffing Services Company - Owner
www.youngcss.com<http://www.youngcss.com>

Other related posts: