none
Repeated dhcp-client error (event id 1001) in event log

    Question

  • I have recurring errors (and I think related warnings) in my event log. I have searched on event id but I could not find any relevant info for w8.

    Situation - w8-pro 32 bit client, connected via Netgear WNA3100 Wi-Fi adapter (latest 5.100.68.57 driver 30/10/2012), on a DHCP reserved local ip address. The router is an ISP provided DSL VoIP gateway / router from Ping Communication. 

    The error is

    Log Name:      Microsoft-Windows-Dhcp-Client/Admin
    Source:        Microsoft-Windows-Dhcp-Client
    Date:          10/01/2013 12:00:53
    Event ID:      1001
    Task Category: Address Configuration State Event
    Level:         Error
    Keywords:      (1)
    User:          LOCAL SERVICE
    Computer:      HTPC-1
    Description:
    Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x204E7FD9F700.  The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-Dhcp-Client" Guid="{15A7A4F8-0072-4EAB-ABAD-F98A4D666AED}" />
        <EventID>1001</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>3</Task>
        <Opcode>75</Opcode>
        <Keywords>0x4000000000000001</Keywords>
        <TimeCreated SystemTime="2013-01-10T11:00:53.314750500Z" />
        <EventRecordID>152</EventRecordID>
        <Correlation />
        <Execution ProcessID="852" ThreadID="1796" />
        <Channel>Microsoft-Windows-Dhcp-Client/Admin</Channel>
        <Computer>HTPC-1</Computer>
        <Security UserID="S-1-5-19" />
      </System>
      <EventData>
        <Data Name="HWLength">6</Data>
        <Data Name="HWAddress">204E7FD9F700</Data>
        <Data Name="StatusCode">121</Data>
      </EventData>
    </Event>

    and the warning is

    Log Name:      System
    Source:        Microsoft-Windows-WLAN-AutoConfig
    Date:          10/01/2013 11:57:41
    Event ID:      10002
    Task Category: None
    Level:         Warning
    Keywords:      
    User:          SYSTEM
    Computer:      HTPC-1
    Description:
    WLAN Extensibility Module has stopped.
    
    Module Path: C:\WINDOWS\System32\bcmihvsrv.dll
    
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-WLAN-AutoConfig" Guid="{9580D7DD-0379-4658-9870-D5BE7D52D6DE}" />
        <EventID>10002</EventID>
        <Version>0</Version>
        <Level>3</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x4000000000000000</Keywords>
        <TimeCreated SystemTime="2013-01-10T10:57:41.236051000Z" />
        <EventRecordID>1744</EventRecordID>
        <Correlation ActivityID="{105A0DA9-EF1C-0001-DE1B-5A101CEFCD01}" />
        <Execution ProcessID="928" ThreadID="6132" />
        <Channel>System</Channel>
        <Computer>HTPC-1</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <EventData>
        <Data Name="ExtensibleModulePath">C:\WINDOWS\System32\bcmihvsrv.dll</Data>
      </EventData>
    </Event>

    At around those times I have the following entries in my router log

    [INFO] Thu Jan 10  12:01:23 2013 UPnP deleted entry 255.255.255.255 <-> DELETED IP ADDRESS FOR PRIVACY:63508 UDP
    [INFO] Thu  Jan 10 12:00:42 2013 UPnP added entry 255.255.255.255 <-> DELETED IP ADDRESS:63508 <-> 192.168.0.170:63508 UDP timeout:0  'Teredo'
    [INFO] Thu Jan 10  12:00:42 2013 UPnP deleted entry 255.255.255.255 <-> DELETED IP ADDRESS:63508 UDP
    [INFO] Thu  Jan 10 12:00:07 2013 UPnP added entry 255.255.255.255 <-> DELETED IP ADDRESS:63508 <-> 192.168.0.170:63508 UDP timeout:0  'Teredo'
    [INFO] Thu Jan 10  12:00:07 2013 UPnP deleted entry 255.255.255.255 <-> DELETED IP ADDRESS:63508 UDP
    [INFO] Thu  Jan 10 11:59:32 2013 UPnP added entry 255.255.255.255 <-> DELETED IP ADDRESS:63508 <-> 192.168.0.170:63508 UDP timeout:0  'Teredo'
    [INFO] Thu Jan 10  11:59:32 2013 UPnP deleted entry 255.255.255.255 <-> DELETED IP ADDRESS:63508 UDP
    [INFO] Thu  Jan 10 11:59:12 2013 2zbq: Wireless system with MAC address  204E7FD9F700 secured with:  AES
    [INFO] Thu Jan 10 11:59:12  2013 2zbq: Wireless system with MAC address 204E7FD9F700  linked
    [INFO] Thu Jan 10 11:59:12  2013 2zbq: Wireless system with MAC address 204E7FD9F700  associated
    [INFO] Thu Jan 10  11:58:01 2013 2zbq: Wireless system with MAC address 204E7FD9F700  disconnected for reason: Received  Deauthentication

    There are no errors in the output from ipconfig / renew...

    Microsoft Windows [Version 6.2.9200]
    (c) 2012 Microsoft Corporation. All rights reserved.
    
    C:\Users\Admin>ipconfig /renew
    
    Windows IP Configuration
    
    No operation can be performed on Local Area Connection* 12 while it has its media disconnected.
    
    No operation can be performed on Ethernet 2 while it has its media disconnected.
    
    No operation can be performed on Ethernet while it has its media disconnected.
    
    Wireless LAN adapter Local Area Connection* 12:
    
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    
    Wireless LAN adapter WiFi:
    
       Connection-specific DNS Suffix  . :
       Link-local IPv6 Address . . . . . : fe80::6825:3be4:5dac:de54%20
       IPv4 Address. . . . . . . . . . . : 192.168.0.170
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 192.168.0.1
    
    Ethernet adapter Ethernet 2:
    
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    
    Ethernet adapter Ethernet:
    
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    
    Tunnel adapter isatap.{31391E29-A737-4BC5-B95D-A62697AAE595}:
    
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    
    Tunnel adapter Teredo Tunneling Pseudo-Interface:
    
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : 2001:0:4137:9e76:2cad:7eb:ae27:229d
       Link-local IPv6 Address . . . . . : fe80::2cad:7eb:ae27:229d%14
       Default Gateway . . . . . . . . . : ::
    
    C:\Users\Admin>

    I can see a similar sequence events when the errors arises at other time, i.e. the router receives at deauthentication, there is the 10002 warning, and then the 1001 error.

    So I am wondering why does the router receive the deauthentication, and why w8 issues the warning and then an error, and of course what can I do about it.

    Thanks in advance.


    • Edited by dghtpc Thursday, January 10, 2013 12:44 PM typo
    Thursday, January 10, 2013 12:41 PM

Answers

All replies

  • Hi,

    The address should be marked as Preferred. But the address you posted above was not marked. I suggest you update the NIC's driver first.


    Juke Chou
    TechNet Community Support

    Friday, January 11, 2013 10:31 AM
    Moderator
  • Hi Juke,

    I was quite optimistic there for a while ;-). I reinstalled the driver (this time in safe mode just in case) and restarted a couple of times, however I still have the same errors in the event log. I think the only reason the address was not marked as preferred was because the output was from ipconfig /renew. Here is the output of ipconfig /all....

    C:\Users\Admin>ipconfig /all
    
    Windows IP Configuration
    
       Host Name . . . . . . . . . . . . : HTPC-1
       Primary Dns Suffix  . . . . . . . :
       Node Type . . . . . . . . . . . . : Mixed
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
    
    Wireless LAN adapter Local Area Connection* 13:
    
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft Hosted Network Virtual Adapter
    #3
       Physical Address. . . . . . . . . : 20-4E-7F-D9-F7-00
       DHCP Enabled. . . . . . . . . . . : Yes
       Autoconfiguration Enabled . . . . : Yes
    
    Wireless LAN adapter WiFi:
    
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : NETGEAR WNA3100 N300 Wireless USB Adapter
    
       Physical Address. . . . . . . . . : 20-4E-7F-D9-F7-00
       DHCP Enabled. . . . . . . . . . . : Yes
       Autoconfiguration Enabled . . . . : Yes
       Link-local IPv6 Address . . . . . : fe80::41d9:5d54:ba02:65fb%21(Preferred)
       IPv4 Address. . . . . . . . . . . : 192.168.0.170(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Lease Obtained. . . . . . . . . . : 11 January 2013 13:51:32
       Lease Expires . . . . . . . . . . : 17 February 2149 20:23:56
       Default Gateway . . . . . . . . . : 192.168.0.1
       DHCP Server . . . . . . . . . . . : 192.168.0.1
       DHCPv6 IAID . . . . . . . . . . . : 354438783
       DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-18-76-33-C5-00-1D-60-4F-89-39
    
       DNS Servers . . . . . . . . . . . : 192.168.0.1
       NetBIOS over Tcpip. . . . . . . . : Enabled
    
    Ethernet adapter Ethernet 2:
    
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Marvell Yukon 88E8053 PCI-E Gigabit Ether
    net Controller #2
       Physical Address. . . . . . . . . : 00-1D-60-4F-81-0A
       DHCP Enabled. . . . . . . . . . . : Yes
       Autoconfiguration Enabled . . . . : Yes
    
    Ethernet adapter Ethernet:
    
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Marvell Yukon 88E8053 PCI-E Gigabit Ether
    net Controller
       Physical Address. . . . . . . . . : 00-1D-60-4F-89-39
       DHCP Enabled. . . . . . . . . . . : Yes
       Autoconfiguration Enabled . . . . : Yes
    
    Tunnel adapter isatap.{7F09C275-9B6A-4A76-AD87-43D6ACCEB169}:
    
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft ISATAP Adapter
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
    
    Tunnel adapter Teredo Tunneling Pseudo-Interface:
    
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv6 Address. . . . . . . . . . . : 2001:0:9d38:953c:203b:2a60:ae27:229d(Pref
    erred)
       Link-local IPv6 Address . . . . . : fe80::203b:2a60:ae27:229d%14(Preferred)
       Default Gateway . . . . . . . . . : ::
       NetBIOS over Tcpip. . . . . . . . : Disabled
    

    Any other thoughts?

    Friday, January 11, 2013 1:10 PM
  • After reading this Netgear forum thread WNA3100 Stops working I wonder if it may be a driver issue. If so I am surprised the drivers are WHQL.

    Friday, January 11, 2013 4:31 PM