Admin Tip #27 : netdiag.exe network diagnostic tool

Hits: Failed to execute CGI : Win32 Error Code = 3



Microsoft includes netdiag.exe in the support\tools directory of the Windows 2000 CD. It is installed by the setup program in that directory. If you don't want the Windows 2000 Support Tools installed as a group, it is part of the support.cab. When I run

netdiag -v


    Gathering IPX configuration information.
    Querying status of the Netcard drivers... Passed
    Testing Domain membership... Passed
    Testing for autoconfiguration... Passed
    Testing IP loopback ping... Passed
    Testing default gateways... Passed
    Enumerating local and remote NetBT name cache...     
    Testing the WINS server
    Gathering Winsock information.
    Testing DNS
    Testing redirector and browser... Passed
    Testing trust relationships... Skipped
    Testing Kerberos authentication... Skipped
    Gathering routing information
    Gathering network statistics information. 
    Gathering configuration of bindings.
    Gathering RAS connection information 
    Gathering Modem information
    Gathering Netware information
    Gathering IP Security information

    Tests complete.


    Computer Name: WAYNES2000
    DNS Host Name: waynes2000
    DNS Domain Name: (null)
    System info : Windows 2000 Professional (Build 2195)
    Processor : x86 Family 6 Model 1 Stepping 9, GenuineIntel
    Hotfixes :
        Installed?      Name
           Yes          Q147222


Netcard queries test . . . . . . . : Passed

    Information of Netcard drivers: 

    ---------------------------------------------------------------------------
    Description: RAS Async Adapter
    Device: \DEVICE\{5AF3EB7F-BD9C-4CCB-85D0-F018B4C0A55A}

    Media State:                     Connected

    Device State:                    Connected
    Connect Time:                    13:17:40
    Media Speed:                     28 Kbps

    Packets Sent:                    0
    Bytes Sent (Optional):           0

    Packets Received:                0
    Directed Pkts Recd (Optional):   0
    Bytes Received (Optional):       0
    Directed Bytes Recd (Optional):  0

    [WARNING] The net card 'RAS Async Adapter' may not be working because it has not received any packets.
    ---------------------------------------------------------------------------
    [PASS] - At least one netcard is in the 'Connected' state.



Per interface results:

    Adapter : {D3DFE15A-B818-442F-A4C4-512B5C396E1E}
        Adapter ID . . . . . . . . : {D3DFE15A-B818-442F-A4C4-512B5C396E1E}

        Netcard queries test . . . : Passed

        Adapter type . . . . . . . : PPP
        Host Name. . . . . . . . . : waynes2000
        Description. . . . . . . . : WAN (PPP/SLIP) Interface
        Physical Address . . . . . : 00-53-45-00-00-00
        Dhcp Enabled . . . . . . . : No
        DHCP ClassID . . . . . . . : 
        Autoconfiguration Enabled. : Yes
        IP Address . . . . . . . . : 208.188.21.21
        Subnet Mask. . . . . . . . : 
        Default Gateway. . . . . . : 208.188.21.21
        NetBIOS over Tcpip . . . . : Disabled
        Dns Servers. . . . . . . . : 151.164.1.7
                                     151.164.1.8

        IpConfig results . . . . . : Passed

        AutoConfiguration results. . . . . . : Passed
            AutoConfiguration is not in use. 

        Default gateway test . . . : Passed
            Pinging gateway 208.188.21.21 - reachable
            At least one gateway reachable for this adapter. 


        WINS service test. . . . . : Skipped
            NetBT is disable on this interface. [Test skipped].
        IPX test : IPX is not installed on this machine.


Global results:


IP General configuration 
    LMHOSTS Enabled. . . . . . . . : Yes
    DNS for WINS resolution. . . . : Enabled
    Node Type. . . . . . . . . . . : Broadcast
    NBT Scope ID . . . . . . . . . : 
    Routing Enabled. . . . . . . . : No
    WINS Proxy Enabled . . . . . . : No
    DNS resolution for NETBIOS . . : No



Domain membership test . . . . . . : Passed
    Machine is a . . . . . . . . . : Standalone Workstation
    Netbios Workgroup name . . . . : WORKGROUP
    Dns domain name is not specified.
    Dns forest name is not specified.
    Domain Guid. . . . . . . . . . : {00000000-0000-0000-0000-000000000000}
    Logon User . . . . . . . . . . : admin2
    Logon Domain . . . . . . . . . : WAYNES2000


NetBT transports test. . . . . . . : Skipped
    There are no interfaces that have NetBT enabled. [Test skipped]


Autonet address test . . . . . . . : Passed
    PASS - you have at least one non-autoconfigured IP address


IP loopback ping test. . . . . . . : Passed
    PASS - pinging IP loopback address was successful.
    Your IP stack is most probably OK.


Default gateway test . . . . . . . : Passed
    PASS - you have at least one reachable gateway.


NetBT name test. . . . . . . . . . : Skipped
    There are no interfaces that have NetBT enabled. [Test skipped]


Winsock test . . . . . . . . . . . : Passed
    The number of protocols which have been reported : 12
        Description: MSAFD Tcpip [TCP/IP]
            Provider Version   :2
            Max message size  : Stream Oriented
        Description: MSAFD Tcpip [UDP/IP]
            Provider Version   :2
        Description: RSVP UDP Service Provider
            Provider Version   :4
        Description: RSVP TCP Service Provider
            Provider Version   :4
            Max message size  : Stream Oriented
        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{74F83E2B-5451-432B-BD59-8DE1CC626BEB}] SEQPACKET 1
            Provider Version   :2
        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{74F83E2B-5451-432B-BD59-8DE1CC626BEB}] DATAGRAM 1
            Provider Version   :2
        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A659CC1A-AF18-4DA3-B407-C2FBD92C5FCB}] SEQPACKET 2
            Provider Version   :2
        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A659CC1A-AF18-4DA3-B407-C2FBD92C5FCB}] DATAGRAM 2
            Provider Version   :2
        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6CB7F14C-D501-4C44-91C9-351BCD67218D}] SEQPACKET 0
            Provider Version   :2
        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{6CB7F14C-D501-4C44-91C9-351BCD67218D}] DATAGRAM 0
            Provider Version   :2
        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{D3DFE15A-B818-442F-A4C4-512B5C396E1E}] SEQPACKET 3
            Provider Version   :2
        Description: MSAFD NetBIOS [\Device\NetBT_Tcpip_{D3DFE15A-B818-442F-A4C4-512B5C396E1E}] DATAGRAM 3
            Provider Version   :2

    Max UDP size : 65527 bytes


DNS test . . . . . . . . . . . . . : Passed
      Interface {D3DFE15A-B818-442F-A4C4-512B5C396E1E}
        DNS Domain: 
        DNS Servers: 151.164.1.7 151.164.1.8 
        IP Address: 208.188.21.21 


Redir and Browser test . . . . . . : Skipped
    There are no interfaces that have NetBT enabled. [Test skipped]


DC discovery test. . . . . . . . . : Skipped


DC list test . . . . . . . . . . . : Skipped


Trust relationship test. . . . . . : Skipped


Kerberos test. . . . . . . . . . . : Skipped


LDAP test. . . . . . . . . . . . . : Skipped


Routing table test . . . . . . . . : Passed
Active Routes :
Network Destination        Netmask           Gateway         Interface  Metric
         0.0.0.0           0.0.0.0     208.188.21.21     208.188.21.21       1
       127.0.0.0         255.0.0.0         127.0.0.1         127.0.0.1       1
   151.164.1.248        208.188.21.21     208.188.21.21       1
   208.188.21.21            127.0.0.1         127.0.0.1       1
  208.188.21.255        208.188.21.21     208.188.21.21       1
       224.0.0.0         224.0.0.0     208.188.21.21     208.188.21.21       1
No persistent route entries.


Netstat information test . . . . . : Passed


    Interface Statistics

                                    Received             Sent
    Unicast Packets                  2389134           527782
    Non-unicast packets                    0                2
    Discards                               0                0
    Errors                                 0                0
    Unknown protocols                      0           457224

    Interface index         =  1
    Description             =  MS TCP Loopback interface
    Type                    =  24
    MTU                     =  32768
    Speed                   =  10000000
    Physical Address        =  00-00-00-00-00-00
    Administrative Status   =  1
    Operational Status      =  1
    Last Changed            =  0
    Output Queue Length     =  0


    Interface index         =  100663299
    Description             =  WAN (PPP/SLIP) Interface
    Type                    =  23
    MTU                     =  1500
    Speed                   =  38000
    Physical Address        =  00-53-45-00-00-00
    Administrative Status   =  1
    Operational Status      =  4
    Last Changed            =  0
    Output Queue Length     =  0



    Active Connections

  Proto Local Address         Foreign Address                           State
    TCP   waynes2000:epmap      waynes2000:26768                          LISTENING
    TCP   waynes2000:microsoft-ds  waynes2000:26794                          LISTENING
    TCP   waynes2000:1025       waynes2000:43081                          LISTENING
    TCP   waynes2000:1027       waynes2000:59542                          LISTENING
    TCP   waynes2000:3161       waynes2000:51283                          LISTENING
    TCP   waynes2000:3161       antigonus.hosting.swbell.net:ftp          CLOSE_WAIT
    UDP  waynes2000:epmap      *:*                                     
    UDP  waynes2000:microsoft-ds  *:*                                     
    UDP  waynes2000:1026       *:*                                     
    UDP  waynes2000:isakmp     *:*                                     


    IP  Statistics

    Packets Received              =   61,686
    Received Header Errors        =   0
    Received Address Errors       =   0
    Datagrams Forwarded           =   0
    Unknown Protocols Received    =   0
    Received Packets Discarded    =   0
    Received Packets Delivered    =   61,679
    Output Requests               =   31,698
    Routing Discards              =   0
    Discarded Output Packets      =   0
    Output Packet No Route        =   0
    Reassembly  Required          =   10
    Reassembly Successful         =   3
    Reassembly Failures           =   1
    Datagrams successfully fragmented  =   0
    Datagrams failing fragmentation    =   0
    Fragments Created                  =   0
    Forwarding                        =    2
    Default TTL                       =    128
    Reassembly  timeout               =    60


    TCP Statistics 

    Active Opens               =    718
    Passive Opens              =    1,282
    Failed Connection Attempts =    12
    Reset Connections          =    47
    Current Connections        =    1
    Received Segments          =    20,587
    Segment Sent               =    17,910
    Segment Retransmitted      =    133
    Retransmission Timeout Algorithm  =   vanj
    Minimum Retransmission Timeout  = 300
    Maximum Retransmission Timeout  = 240,000
    Maximum Number of Connections   = -1


    UDP Statistics

    Datagrams Received    =   40,946
    No Ports              =   120
    Receive Errors        =   2
    Datagrams Sent        =   13,487


    ICMP Statistics 

                              Received           Sent
    Messages                        72             72
    Errors                           0              0
    Destination  Unreachable        24             24
    Time    Exceeded                 0              0
    Parameter Problems               0              0
    Source Quenchs                   0              0
    Redirects                        0              0
    Echos                           24             24
    Echo Replies                    24             24
    Timestamps                       0              0
    Timestamp Replies                0              0
    Address Masks                    0              0
    Address Mask Replies             0              0


Bindings test. . . . . . . . . . . : Passed
    Component Name : Point to Point Tunneling Protocol
    Bind Name: mspptp
    Binding Paths:

    Component Name : Layer 2 Tunneling Protocol
    Bind Name: msl2tp
    Binding Paths:

    Component Name : Remote Access NDIS WAN Driver
    Bind Name: NdisWan
    Binding Paths:
        Owner of the binding path : Remote Access NDIS WAN Driver
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: ndiscowan
            Upper Component: Remote Access NDIS WAN Driver
            Lower Component: Direct Parallel

        Owner of the binding path : Remote Access NDIS WAN Driver
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: ndiswan
            Upper Component: Remote Access NDIS WAN Driver
            Lower Component: WAN Miniport (PPTP)

        Owner of the binding path : Remote Access NDIS WAN Driver
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: ndiscowan
            Upper Component: Remote Access NDIS WAN Driver
            Lower Component: WAN Miniport (L2TP)

        Owner of the binding path : Remote Access NDIS WAN Driver
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: ndiswanasync
            Upper Component: Remote Access NDIS WAN Driver
            Lower Component: RAS Async Adapter


    Component Name : Message-oriented TCP/IP Protocol (SMB session)
    Bind Name: NetbiosSmb
    Binding Paths:

    Component Name : WINS Client(TCP/IP) Protocol
    Bind Name: NetBT
    Binding Paths:
        Owner of the binding path : WINS Client(TCP/IP) Protocol
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: tdi
            Upper Component: WINS Client(TCP/IP) Protocol
            Lower Component: Internet Protocol (TCP/IP)
        -Interface Name: ndiswanip
            Upper Component: Internet Protocol (TCP/IP)
            Lower Component: WAN Miniport (IP)


    Component Name : Internet Protocol (TCP/IP)
    Bind Name: Tcpip
    Binding Paths:
        Owner of the binding path : Internet Protocol (TCP/IP)
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: ndiswanip
            Upper Component: Internet Protocol (TCP/IP)
            Lower Component: WAN Miniport (IP)


    Component Name : Client for Microsoft Networks
    Bind Name: LanmanWorkstation
    Binding Paths:
        Owner of the binding path : Client for Microsoft Networks
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: netbios_smb
            Upper Component: Client for Microsoft Networks
            Lower Component: Message-oriented TCP/IP Protocol (SMB session)

        Owner of the binding path : Client for Microsoft Networks
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: netbios
            Upper Component: Client for Microsoft Networks
            Lower Component: WINS Client(TCP/IP) Protocol
        -Interface Name: tdi
            Upper Component: WINS Client(TCP/IP) Protocol
            Lower Component: Internet Protocol (TCP/IP)
        -Interface Name: ndiswanip
            Upper Component: Internet Protocol (TCP/IP)
            Lower Component: WAN Miniport (IP)


    Component Name : Steelhead
    Bind Name: RemoteAccess
    Binding Paths:

    Component Name : Dial-Up Server
    Bind Name: msrassrv
    Binding Paths:

    Component Name : Remote Access Connection Manager
    Bind Name: RasMan
    Binding Paths:

    Component Name : Dial-Up Client
    Bind Name: msrascli
    Binding Paths:

    Component Name : File and Printer Sharing for Microsoft Networks
    Bind Name: LanmanServer
    Binding Paths:
        Owner of the binding path : File and Printer Sharing for Microsoft Networks
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: netbios_smb
            Upper Component: File and Printer Sharing for Microsoft Networks
            Lower Component: Message-oriented TCP/IP Protocol (SMB session)

        Owner of the binding path : File and Printer Sharing for Microsoft Networks
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: netbios
            Upper Component: File and Printer Sharing for Microsoft Networks
            Lower Component: WINS Client(TCP/IP) Protocol
        -Interface Name: tdi
            Upper Component: WINS Client(TCP/IP) Protocol
            Lower Component: Internet Protocol (TCP/IP)
        -Interface Name: ndiswanip
            Upper Component: Internet Protocol (TCP/IP)
            Lower Component: WAN Miniport (IP)


    Component Name : NetBIOS Interface
    Bind Name: NetBIOS
    Binding Paths:
        Owner of the binding path : NetBIOS Interface
        Binding Enabled: Yes
    Interfaces of the binding path: 
        -Interface Name: netbios
            Upper Component: NetBIOS Interface
            Lower Component: WINS Client(TCP/IP) Protocol
        -Interface Name: tdi
            Upper Component: WINS Client(TCP/IP) Protocol
            Lower Component: Internet Protocol (TCP/IP)
        -Interface Name: ndiswanip
            Upper Component: Internet Protocol (TCP/IP)
            Lower Component: WAN Miniport (IP)


    Component Name : QoS RSVP
    Bind Name: RSVP
    Binding Paths:

    Component Name : Generic Packet Classifier
    Bind Name: Gpc
    Binding Paths:

    Component Name : WAN Miniport (IP)
    Bind Name: NdisWanIp
    Binding Paths:

    Component Name : Direct Parallel
    Bind Name: {5DEC391C-2EB2-4175-94AF-961E54E89775}
    Binding Paths:

    Component Name : WAN Miniport (PPTP)
    Bind Name: {AB425AE8-792F-457F-B966-E0199AEDCBA0}
    Binding Paths:

    Component Name : WAN Miniport (L2TP)
    Bind Name: {6DAB29E5-064A-421A-9423-051E5851AD05}
    Binding Paths:

    Component Name : RAS Async Adapter
    Bind Name: {5AF3EB7F-BD9C-4CCB-85D0-F018B4C0A55A}
    Binding Paths:



WAN configuration test . . . . . . : Passed
Entry Name: SWBell
Device Type: Framing protocol :  PPP
LCP Extensions :  Disabled
Software Compression :  Enabled
Network protocols :
     NetBEUI
     IPX
     TCP/IP
IP Address :  Specified
Name Server: Specified
IP Header compression :  Enabled
Use default gateway on remote network : Enabled

        Connection Statistics:
        Bytes Transmitted     : 520154
        Bytes Received        : 2339831
        Frames Transmitted    : 3706
        Frames Received       : 3795
        CRC    Errors         : 3795
        Timeout Errors        : 0
        Alignment Errors      : 1
        H/W Overrun Errors    : 0
        Framing Errors        : 0
        Buffer Overrun Errors : 0
        Compression Ratio In  : 0
        Compression Ratio Out : 0
        Baud Rate ( Bps )     : 38000
        Connection Duration   : 5748469


Modem diagnostics test . . . . . . : Passed

    Name . . . . . . . . . . . . . : External Fax Data Plug and Play 56K
        DeviceID . . . . . . . . . : 0
        Port . . . . . . . . . . . : COM2
        Negotiated Speed . . . . . : 38000
        Compression. . . . . . . . : On
        Error control. . . . . . . : On
        Forced error control . . . : Off
        Cellular . . . . . . . . . : Off
        Flowcontrol hard . . . . . : Off
        Flowcontrol soft . . . . . : Off
        CCITT override . . . . . . : Off
        Speed adjust . . . . . . . : Off
        Tone dial. . . . . . . . . : Off
        Blind dial . . . . . . . . : Off
        V23 override . . . . . . . : Off

IP Security test . . . . . . . . . : Passed
    IPSec policy service is active, but no policy is assigned.

    IPSec Statistics 

     Oakley Main Modes             : 0
     Oakley Quick Modes            : 0
     Active Associations           : 0
     Soft Associations             : 0
     Authenticated Bytes Sent      : 0
     Authenticated Bytes Received  : 0
     Confidential Bytes Sent       : 0
     Confidential Bytes Received   : 0
     ReKeys                        : 0

     Authentication Failures       : 0
     Negotiation Failures          : 0
     Packets not decrypted         : 0
     Packets not authenticated     : 0
     Invalid Cookies Rcvd          : 0
     Acquire fail                  : 0
     Receive fail                  : 0
     Send fail                     : 0
     GetSpiFail                    : 0
     KeyAddFail                    : 0
     KeyUpdateFail                 : 0

     Active Acquire                : 1
     Active Rcv                    : 0
     Active Send                   : 0
     Total Acquire                 : 0
     TotalGetSpi                   : 0
     TotalKeyAdd                   : 0
     TotalKeyUpdate                : 0
     Inactive Associations         : 0
     Dead Associations             : 0
     Pending Keys                  : 0
     Key Flushes                   : 0
     Key Additions                 : 0
     Key Deletes                   : 0

    Phase 1 offers count is 4
     OFFER #1:
     PFS : No, Encryption : DES, Hash : SHA1, Group : Medium (2)
     Quickmodes per MainMode : 0, Lifetime Seconds : 28800
     OFFER #2:
     PFS : No, Encryption : DES, Hash : MD5, Group : Medium (2)
     Quickmodes per MainMode : 0, Lifetime Seconds : 28800
     OFFER #3:
     PFS : No, Encryption : DES, Hash : SHA1, Group : Low (1)
     Quickmodes per MainMode : 0, Lifetime Seconds : 28800
     OFFER #4:
     PFS : No, Encryption : DES, Hash : MD5, Group : Low (1)
     Quickmodes per MainMode : 0, Lifetime Seconds : 28800

    Current Phase 1 SAs:
    No SAs.


    Current Phase 2 SAs: 
    No SAs.

The command completed successfully

This will become a core tool network diagnostics. The results above were run from my workstations at home connected to the Internet via modem. Obviously, the number of tests run are much wider when connected to a network, particularly if you have admin access. When you run netdiag the results are stored in NetDiag.log, by default. To get a list of available tests, run at commandline

netdiag /?

to get the following commandline help:


Usage: netdiag [/Options]>
   /q - Quiet output (errors only)
   /v - Verbose output 
   /l - Log output to NetDiag.log 
   /debug - Even more verbose.
   /d: - Find a DC in the specified domain.
   /fix - fix trivial problems.
   /DcAccountEnum - Enumerate DC machine accounts.
   /test:  - tests only this test. Non - skippable tests will still be run
   Valid tests are :-
        Ndis - Netcard queries Test
        IpConfig - IP config Test
        Member - Domain membership Test
        NetBTTransports - NetBT transports Test
        Autonet - Autonet address Test
        IpLoopBk - IP loopback ping Test
        DefGw - Default gateway Test
        NbtNm - NetBT name Test
        WINS - WINS service Test
        Winsock - Winsock Test
        DNS - DNS Test
        Browser - Redir and Browser Test
        DsGetDc - DC discovery Test
        DcList - DC list Test
        Trust - Trust relationship Test
        Kerberos - Kerberos Test
        Ldap - LDAP Test
        Route - Routing table Test
        Netstat - Netstat information Test
        Bindings - Bindings Test
        WAN - WAN configuration Test
        Modem - Modem diagnostics Test
        Netware - Netware Test
        IPX - IPX Test
        IPSec - IP Security Test
   /skip: - skip the named test.  Valid tests are:
        IpConfig - IP config Test
        Autonet - Autonet address Test
        IpLoopBk - IP loopback ping Test
        DefGw - Default gateway Test
        NbtNm - NetBT name Test
        WINS - WINS service Test
        Winsock - Winsock Test
        DNS - DNS Test
        Browser - Redir and Browser Test
        DsGetDc - DC discovery Test
        DcList - DC list Test
        Trust - Trust relationship Test
        Kerberos - Kerberos Test
        Ldap - LDAP Test
        Route - Routing table Test
        Netstat - Netstat information Test
        Bindings - Bindings Test
        WAN - WAN configuration Test
        Modem - Modem diagnostics Test
        Netware - Netware Test
        IPX - IPX Test
        IPSec - IP Security Test