I am getting '550 .: An established connection was aborted by the
software in your host machine.' when I try to list all the files in a
folder  (this only appears to happen if there is over X files or
folder in the folder I am trying to list)

Restarting the FTP service does not correct the issue, but a reboot of
the machine does.

This starts to happen at random times and once it starts only the
reboot helps.

The user home directories are setup on UNC paths.

# ftp -d -v xxx.xxx.xxx.xxx
Connected to xxx.xxx.xxx.xxx.
220 Microsoft FTP Service
ftp_login: user `<null>' pass `<null>' host `xxx.xxx.xxx.xxx'
Name (xxx.xxx.xxx.xxx:userx): userx
---> USER userx
331 Password required for userx.
Password:
---> PASS XXXX
230 User userx logged in.
---> SYST
215 Windows_NT
Remote system type is Windows_NT.
---> FEAT
211-FEAT
SIZE
MDTM
211 END
features[FEAT_FEAT] = 1
features[FEAT_MDTM] = 1
features[FEAT_MLST] = 0
features[FEAT_REST_STREAM] = 0
features[FEAT_SIZE] = 1
features[FEAT_TVFS] = 0
got localcwd as `/'
---> PWD
257 "/userx" is current directory.
got remotecwd as `/userx'
ftp> ls
---> EPSV
500 'EPSV': command not understood
disabling epsv4 for this connection
---> PASV
227 Entering Passive Mode (xxx,xxx,xxx,xxx,22,52).
---> LIST
125 Data connection already open; Transfer starting.
ftp: netin: Connection reset by peer
550 .: An established connection was aborted by the software in your
host machine.
ftp> ls a*
---> PASV
227 Entering Passive Mode (xxx,xxx,xxx,xxx,22,53).
---> LIST a*
125 Data connection already open; Transfer starting.
01-26-07  12:32PM       <DIR>          aspnet_client
226 Transfer complete.
ftp>

[ Post a follow-up to this message ]

And what's the win32 status code in the log entry ? 5 ?
anything in event log saying problem with unc connection or ?


--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


<google.mtoth@queldor.net> wrote in message
news:1184694356.038791.278650@g12g2000prg.googlegroups.com...
>I am getting '550 .: An established connection was aborted by the
> software in your host machine.' when I try to list all the files in a
> folder  (this only appears to happen if there is over X files or
> folder in the folder I am trying to list)
>
> Restarting the FTP service does not correct the issue, but a reboot of
> the machine does.
>
> This starts to happen at random times and once it starts only the
> reboot helps.
>
> The user home directories are setup on UNC paths.
>
> # ftp -d -v xxx.xxx.xxx.xxx
> Connected to xxx.xxx.xxx.xxx.
> 220 Microsoft FTP Service
> ftp_login: user `<null>' pass `<null>' host `xxx.xxx.xxx.xxx'
> Name (xxx.xxx.xxx.xxx:userx): userx
> ---> USER userx
> 331 Password required for userx.
> Password:
> ---> PASS XXXX
> 230 User userx logged in.
> ---> SYST
> 215 Windows_NT
> Remote system type is Windows_NT.
> ---> FEAT
> 211-FEAT
>    SIZE
>    MDTM
> 211 END
> features[FEAT_FEAT] = 1
> features[FEAT_MDTM] = 1
> features[FEAT_MLST] = 0
> features[FEAT_REST_STREAM] = 0
> features[FEAT_SIZE] = 1
> features[FEAT_TVFS] = 0
> got localcwd as `/'
> ---> PWD
> 257 "/userx" is current directory.
> got remotecwd as `/userx'
> ftp> ls
> ---> EPSV
> 500 'EPSV': command not understood
> disabling epsv4 for this connection
> ---> PASV
> 227 Entering Passive Mode (xxx,xxx,xxx,xxx,22,52).
> ---> LIST
> 125 Data connection already open; Transfer starting.
> ftp: netin: Connection reset by peer
> 550 .: An established connection was aborted by the software in your
> host machine.
> ftp> ls a*
> ---> PASV
> 227 Entering Passive Mode (xxx,xxx,xxx,xxx,22,53).
> ---> LIST a*
> 125 Data connection already open; Transfer starting.
> 01-26-07  12:32PM       <DIR>          aspnet_client
> 226 Transfer complete.
> ftp>
>

[ Post a follow-up to this message ]

There is nothing in the log file for 'LIST' commands

2007-07-17 17:16:57 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
xxx.xxx.xxx.xxx 21 [10478]USER userx - 331 0 0 0 0 FTP - - - -
2007-07-17 17:17:00 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
xxx.xxx.xxx.xxx 21 [10478]PASS - - 230 0 0 0 0 FTP - - - -
2007-07-17 17:17:09 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
xxx.xxx.xxx.xxx 21 [10478]QUIT - - 550 0 0 0 0 FTP - - - -


The event log has nothing for around that time (I checked both the web
server and the file server)

[ Post a follow-up to this message ]

On Jul 23, 10:17 am, "google.mt...@queldor.net"
<google.mt...@queldor.net> wrote:
> There is nothing in the log file for 'LIST' commands
>
> 2007-07-17 17:16:57 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
> xxx.xxx.xxx.xxx 21 [10478]USER userx - 331 0 0 0 0 FTP - - - -
> 2007-07-17 17:17:00 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
> xxx.xxx.xxx.xxx 21 [10478]PASS - - 230 0 0 0 0 FTP - - - -
> 2007-07-17 17:17:09 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
> xxx.xxx.xxx.xxx 21 [10478]QUIT - - 550 0 0 0 0 FTP - - - -
>
> The event log has nothing for around that time (I checked both the web
> server and the file server)

Is the Windows Firewall on? Have you tried disabling the passive mode
on the FTP client?

I had a post (in the wrong group) with similar symptoms, maybe this
helps isolating the problem.
http://groups.google.com/group/micr...064a3721c16f61c

Thanks,

Deniz

[ Post a follow-up to this message ]

I have no Windows Firewall on. There are ACL's on a cisco router to
the outside, but the tests I ran were from the local LAN (IE: not
affected by the ACL's)

So there are no ports being blocked

[ Post a follow-up to this message ]

Sry, been busy. only happen to UNC content? local path works fine?
Can you try connect from ftp.exe on a remote client machine?

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


<google.mtoth@queldor.net> wrote in message
news:1185275580.470226.94620@g4g2000hsf.googlegroups.com...
>I have no Windows Firewall on. There are ACL's on a cisco router to
> the outside, but the tests I ran were from the local LAN (IE: not
> affected by the ACL's)
>
> So there are no ports being blocked
>

[ Post a follow-up to this message ]

I added a local path to see if it was also happening there and yes it
is (so it happens on both UNC and local paths)

Here is the ftp.exe session

C:\Documents and Settings\userx>ftp -d xxx.xxx.xxx.xxx
Connected to xxx.xxx.xxx.xxx.
220 Microsoft FTP Service
User (xxx.xxx.xxx.xxxnone)): userx
---> USER userx
331 Password required for userx.
Password:
---> PASS *******
230 User userx logged in.
ftp> ls
---> PORT xxx,xxx,xxx,xxx,5,140
200 PORT command successful.
---> NLST
150 Opening ASCII mode data connection for file list.
550 .: An established connection was aborted by the software in your
host machine.
ftp> dir
---> PORT xxx,xxx,xxx,xxx,5,148
200 PORT command successful.
---> LIST
150 Opening ASCII mode data connection for /bin/ls.
550 .: An established connection was aborted by the software in your
host machine.
ftp>


Here is the MSFTPSVC log
2007-08-06 18:25:14 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
xxx.xxx.xxx.xxx21 [48126]USER userx - 331 0 0 0 0 FTP - - - -
2007-08-06 18:25:16 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
xxx.xxx.xxx.xxx21 [48126]PASS - - 230 0 0 0 0 FTP - - - -
2007-08-06 18:25:49 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
xxx.xxx.xxx.xxx21 [48126]QUIT - - 550 0 0 0 0 FTP - - - -

[ Post a follow-up to this message ]

how about accessing locally at the server itself?
ftp localhost

it still looks like to me that something is blocking...

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


<google.mtoth@queldor.net> wrote in message
news:1186424983.903384.186280@22g2000hsm.googlegroups.com...
>I added a local path to see if it was also happening there and yes it
> is (so it happens on both UNC and local paths)
>
> Here is the ftp.exe session
>
> C:\Documents and Settings\userx>ftp -d xxx.xxx.xxx.xxx
> Connected to xxx.xxx.xxx.xxx.
> 220 Microsoft FTP Service
> User (xxx.xxx.xxx.xxxnone)): userx
> ---> USER userx
> 331 Password required for userx.
> Password:
> ---> PASS *******
> 230 User userx logged in.
> ftp> ls
> ---> PORT xxx,xxx,xxx,xxx,5,140
> 200 PORT command successful.
> ---> NLST
> 150 Opening ASCII mode data connection for file list.
> 550 .: An established connection was aborted by the software in your
> host machine.
> ftp> dir
> ---> PORT xxx,xxx,xxx,xxx,5,148
> 200 PORT command successful.
> ---> LIST
> 150 Opening ASCII mode data connection for /bin/ls.
> 550 .: An established connection was aborted by the software in your
> host machine.
> ftp>
>
>
> Here is the MSFTPSVC log
> 2007-08-06 18:25:14 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
> xxx.xxx.xxx.xxx21 [48126]USER userx - 331 0 0 0 0 FTP - - - -
> 2007-08-06 18:25:16 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
> xxx.xxx.xxx.xxx21 [48126]PASS - - 230 0 0 0 0 FTP - - - -
> 2007-08-06 18:25:49 xxx.xxx.xxx.xxx userx MSFTPSVC1 W2K3WEB3
> xxx.xxx.xxx.xxx21 [48126]QUIT - - 550 0 0 0 0 FTP - - - -
>
>
>

[ Post a follow-up to this message ]

I get the same result from localhost (I have been able to get a
partial listing (everytime) as below)

C:\Documents and Settings\userx>ftp -d localhost
Connected to w2k3web3.xxxx.xxxx.xxxx.
220 Microsoft FTP Service
User (w2k3web3.xxxx.xxxx.xxxxnone)): userx
---> USER userx
331 Password required for userx.
Password:
---> PASS *******
230 User userx logged in.
ftp> ls ab*
---> PORT 127,0,0,1,13,225
200 PORT command successful.
---> NLST ab*
150 Opening ASCII mode data connection for file list.
abacusweb/2007-08-06.log
abcdbuyersclub/2007-02-08.log
abcdbuyersclub/2007-03-22.log
abcdbuyersclub/2007-03-31.log
abcdbuyersclub/2007-05-18.log
abcdbuyersclub/2007-06-14.log
abcdbuyersclub/2007-08-03.log
abcdepweb/2007-02-22.log
abcdepweb/2007-02-23.log
abcdepweb/2007-03-01.log
abcdepweb/2007-03-02.log
abcdepweb/2007-03-16.log
abcdepweb/2007-04-09.log
abcdepweb/2007-05-07.log
abcdepweb/2007-05-10.log
abcdepweb/2007-06-25.log
abcdepweb/2007-08-06.log
abelweb/2007-05-10.log
abelweb/2007-07-03.log
abercoweb/2007-05-08.log
abercoweb/2007-05-09.log
abercoweb/2007-05-14.log
abercoweb/2007-08-02.log
226 Transfer complete.
ftp: 624 bytes received in 0.00Seconds 624000.00Kbytes/sec.
ftp> ls *
---> PORT 127,0,0,1,13,226
200 PORT command successful.
---> NLST *
150 Opening ASCII mode data connection for file list.
550 *: An established connection was aborted by the software in your
host machin
e.
ftp>

[ Post a follow-up to this message ]

This is so weird. I tested 500 files listing in my local ftp.
It displayed so fast and nvr get any error.

is there any other firewall in place or proxy or real time antivirus scan ?

is this local path content or unc path?
you can't even get this to work locally, so you can forget about remote
access first.

--
Regards,
Bernard Cheah
http://www.iis.net/
http://msmvps.com/blogs/bernard/


<google.mtoth@queldor.net> wrote in message
news:1186484695.913776.84960@o61g2000hsh.googlegroups.com...
>I get the same result from localhost (I have been able to get a
> partial listing (everytime) as below)
>
> C:\Documents and Settings\userx>ftp -d localhost
> Connected to w2k3web3.xxxx.xxxx.xxxx.
> 220 Microsoft FTP Service
> User (w2k3web3.xxxx.xxxx.xxxxnone)): userx
> ---> USER userx
> 331 Password required for userx.
> Password:
> ---> PASS *******
> 230 User userx logged in.
> ftp> ls ab*
> ---> PORT 127,0,0,1,13,225
> 200 PORT command successful.
> ---> NLST ab*
> 150 Opening ASCII mode data connection for file list.
> abacusweb/2007-08-06.log
> abcdbuyersclub/2007-02-08.log
> abcdbuyersclub/2007-03-22.log
> abcdbuyersclub/2007-03-31.log
> abcdbuyersclub/2007-05-18.log
> abcdbuyersclub/2007-06-14.log
> abcdbuyersclub/2007-08-03.log
> abcdepweb/2007-02-22.log
> abcdepweb/2007-02-23.log
> abcdepweb/2007-03-01.log
> abcdepweb/2007-03-02.log
> abcdepweb/2007-03-16.log
> abcdepweb/2007-04-09.log
> abcdepweb/2007-05-07.log
> abcdepweb/2007-05-10.log
> abcdepweb/2007-06-25.log
> abcdepweb/2007-08-06.log
> abelweb/2007-05-10.log
> abelweb/2007-07-03.log
> abercoweb/2007-05-08.log
> abercoweb/2007-05-09.log
> abercoweb/2007-05-14.log
> abercoweb/2007-08-02.log
> 226 Transfer complete.
> ftp: 624 bytes received in 0.00Seconds 624000.00Kbytes/sec.
> ftp> ls *
> ---> PORT 127,0,0,1,13,226
> 200 PORT command successful.
> ---> NLST *
> 150 Opening ASCII mode data connection for file list.
> 550 *: An established connection was aborted by the software in your
> host machin
> e.
> ftp>
>

[ Post a follow-up to this message ]