timbo343 Posted January 21, 2019 Posted January 21, 2019 We have 1 machine that responds to PING even though it's shutdown and powered off. The only wa to stop it responding to PING is to pull the power lead out the PSU. When the power lead is plugged, the machine starts to respond to PING. We have tried: - A BIOS update - Resetting the BIOS back to default settings - Comparing NIC driver settings with the computers around this troublesome machine Is there anything else that we can do to prevent this machine from replying to PING even though it's powered off?
FN-GM Posted January 21, 2019 Posted January 21, 2019 Are you pinging to the computer name or IP Address. If it is the machine name I would say its a problem with DNS. You can rule that in or out by seeing if you get the expected results by pinging the IP.
Bionic Posted January 21, 2019 Posted January 21, 2019 Are you pinging to the computer name or IP Address. If it is the machine name I would say its a problem with DNS. You can rule that in or out by seeing if you get the expected results by pinging the IP. But that wouldn't explain why unplugging the PSU on the PC stops the ping returns. It's a head-scratcher!
timbo343 Posted January 21, 2019 Author Posted January 21, 2019 Both IP and name reply to the PING when it's switched off. Removing the machine from DHCP and DNS only lasts a short time until the records are populated again. What is interesting is when we ping the machine when it's turned off, the ping requests alternate like... 8ms 10ms 8ms 10ms... etc. When the machine is powered on ping is <1ms.
Bionic Posted January 21, 2019 Posted January 21, 2019 Does a tracert command to the IP reveal a route change when the PC is off?
FN-GM Posted January 21, 2019 Posted January 21, 2019 But that wouldn't explain why unplugging the PSU on the PC stops the ping returns. It's a head-scratcher! It would explain it. If there is a DNS problem you will be actually pinging another machine but not know it.
Bionic Posted January 21, 2019 Posted January 21, 2019 It would explain it. If there is a DNS problem you will be actually pinging another machine but not know it. But if the OP is monitoring a ping to the PC's IP and those ping returns stop when the PSU is unplugged from that PC I think it's a fair bet that the pings are going to that PC, or am I over-simplifying things?
sparkeh Posted January 21, 2019 Posted January 21, 2019 It would explain it. If there is a DNS problem you will be actually pinging another machine but not know it. As I read it, the ping reply stops when the machine is unplugged, indicating that it is not pinging a different machine.
bald_pig Posted January 21, 2019 Posted January 21, 2019 BIOS doesn't have a management system of some description does it?
timbo343 Posted January 21, 2019 Author Posted January 21, 2019 But if the OP is monitoring a ping to the PC's IP and those ping returns stop when the PSU is unplugged from that PC I think it's a fair bet that the pings are going to that PC, or am I over-simplifying things? Yup - PING stops when when power lead is unplugged - there is nothing else on the network with this IP Address Does a tracert command to the IP reveal a route change when the PC is off? Will try this once school has finished - the machine is now in user for the next 2 hours. BIOS doesn't have a management system of some description does it? Not that i know of, we don't run any BIOS management system here. This is very much a weird issue for us.
bald_pig Posted January 21, 2019 Posted January 21, 2019 Not that i know of, we don't run any BIOS management system here. This is very much a weird issue for us. It would be built in to the BIOS, not something you'd deploy. Try disabling WOL in the BIOS and see if that has any effect?
timbo343 Posted January 21, 2019 Author Posted January 21, 2019 It would be built in to the BIOS, not something you'd deploy. Try disabling WOL in the BIOS and see if that has any effect? Done that too - ive been through most of the bios and turned off everything i could - still responds to PING when shut down.
Mako Posted January 21, 2019 Posted January 21, 2019 I want to believe it's something on the motherboard. Pinging a machine that's offline is usually something along the lines of Intel's AMT, allowing you to remotely manage the machine without the presence of an OS. I appreciate you've gone through any turned off what you could find, but to double check are there any options in the BIOS for AMT?
timbo343 Posted January 21, 2019 Author Posted January 21, 2019 I want to believe it's something on the motherboard. Pinging a machine that's offline is usually something along the lines of Intel's AMT, allowing you to remotely manage the machine without the presence of an OS. I appreciate you've gone through any turned off what you could find, but to double check are there any options in the BIOS for AMT? Interesting you say this - there is something in the bios that mentions AMT however it's greyed out on this machine but the others have the option to change it's value. Could it be a jumper on the board?
Mako Posted January 21, 2019 Posted January 21, 2019 (edited) If the other machines are identical I'd reset all BIOS settings to default and see if it comes active. Naturally it will be motherboard dependent but a jumper labelled ME_DIS is the one you're looking for to disable AMT via jumper. EDIT: Which incidentally leads me to point out that anything referencing Intel Management Engine in the BIOS may also lead you in the right direction. Edited January 21, 2019 by Mako
mrwoberts Posted January 21, 2019 Posted January 21, 2019 I'd be thinking along the lines of 'Wake on LAN' settings for this type of 'problem' If your BIOS power management settings don't help you, then it is most probably the power management settings of the LAN card from the OS. For example. When you check out the adapter properties of the nic, look under Power Management - is the 'Allow this device to wake the computer' ticked? Also disable any 'Wake ...' options on the advanced tab, particularly 'Shutdown Wake-on-Lan'
timbo343 Posted January 21, 2019 Author Posted January 21, 2019 Ive tried looking for a jumper and comparing this machine's inside to another - they are the same. I've checked the WOL settings in the driver, again compared them to the machine next to it - exactly the same and ive tried disabling "enable PME" and the magic packets etc which relate to the WOL settings. The machines are the HP8300 Elites SFF. I wonder if Ctrl+P when the computer is switched on would book to the MEBx settings. Really starting to run out of ideas. I guess the next thing would be to sentthe machine back as faulty?
mrwoberts Posted January 21, 2019 Posted January 21, 2019 In the Bios, what do you have for these settings... Power >> Hardware Power Management >> Enable "S5 Maximum Power Saving" (ENABLED should stop the WOL feature) Remote Wakeup Boot Source >> set that to 'Local Hard Drive'
timbo343 Posted January 22, 2019 Author Posted January 22, 2019 I'm not too sure how i fixed this issue, but the machine now stops responding to PING when it's swtiched off. Kept trying to reset the bios back to factory settings - removed the battery and removed the power lead a couple of times. Found the S5 Maximum power settings under Power > Hardware Power Management - this was set to Disabled. Set to Enabled saved settings - it's set back to Disabled. Not sure if this forced the AMT setting under Advanced > Management options to become selectable.
mikeprice Posted January 22, 2019 Posted January 22, 2019 So - do people think that a device that has WOL enabled will request an IP address from DHCP?? I was under the impression that it didn't - but then I have never looked up how WOL works at a low level - I know PING operates at a very low level - but it still needs an IP address I thought (based on no detailed research ) that WOL didn;t need an IP address - but if that is true then I do not know how it communicates (MAC address I presume????) just looking for info/clues
timbo343 Posted January 22, 2019 Author Posted January 22, 2019 (edited) Yeah WOL communicates to computers via MAC address. Our DHCP lease is 4 hours so even after 4 hours or when we come in on a morning the machines DHCP and DNS records are deleted yet the machines all come on for 8am. There are some bits of aoftware out there that you need to manually input the machine name and MAC address for the WOL to take place. Obviously the name is jist a reference or a label so you know which machine it is. Edited January 22, 2019 by timbo343 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now