Bogus event 2505

---

NedPyle wrote:

Heya folks, https://twitter.com/@nerdpyle here again. A few customers have reported this known issue on Windows 11 machines & you may see this event at boot up and perhaps occasionally afterwards. In the Event Log, in the System channel, you see: 

 

Log Name: System
Source: Server
Date: 10/25/2021 3:01:46 PM
Event ID: 2505
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: darbydoo
Description:
The server could not bind to the transport \Device\NetBT_Tcpip_{C0E1EDC5-9B33-4911-A3B3-AE69C8115AF6} because another computer on the network has the same name. The server could not start.

 

This can be seen when booting up, repeatedly disabling and enabling a RDMA NIC, or by a network adapter that goes offline and online for some reason. This leads to multiple SMB server service notifications about the same network interface that has already been bound to the SMB server. You can ignore this event's description, there is not a duplicate computer and the Server service is not stopped. This SMB event is purely cosmetic. We plan to fix this in a later update to Windows. 

 

Update 8/8/2022

Hi everyone. I've been gone for a few months, not ignoring your comments. Important clarifying point: your reported issues of network disconnects have nothing to do with this SMB event and blog post. You have a legitimate but separate issue. The SMB event is just a symptom of a disconnected network in general - there's nothing going on here with SMB and no way for me to help you, as much as I'd like to. You need to work with your PC's manufacturer or https://support.microsoft.com/contactus to troubleshoot the networking itself. 

 

- Ned Pyle

 

---

NedPyle  - Thanks for chiming in and for your support! As you said, the event is just a symptom, but the unfortunate thing is that this issue started occurring after the W10 to W11 upgrade and it occurs on both my integrated LAN and the USB-C to 2.5G LAN adapter I currently use. Needless to say - everything was rock-solid under W10 for me, and understandably the majority of affected users are blaming W11, although I think someone reported it on W10 too.

Every time my sister turns on her company laptop and it connects the Wi-Fi (AX/6), my home desktop PC loses Internet access, then the desktop PC tries to connect with Wi-Fi (AC/5) and for some reason it cannot get an IP on the wireless interface from my Asus AX-11000 router - another device on the network has the same name, as the message states.
While the above occurs, the cable connection on the desktop PC is in the "connected" state, without network or Internet access. Disable/enable of the network adapter or system reboot fixes it.

The company laptop is arguably the root cause, but it's kind of worrying that any device with similar characteristics can trigger such events, quite similar to DoS attack.

I believe it has to do with ZScaler on the company laptop, but I have no evidence to support it.
I will try and investigate further, although I am limited on the corporate device, so I will check what I can get out from the router and my desktop computer and raise it with the appropriate support group.