Nat Network - no tcp connections; udp and icmp (ping) work alright
Posted: 7. May 2022, 18:54
It's a linux 32bit guest on a windows 10 pro 64bit host. The problem is that after the guest has booted up, it can load web pages, telnet to external hosts etc only for some time (like 4 hours) after which the guest fails to make any tcp connections although ping and udp work alright. Restarting the guest from within the guest does not resolve the issue, but turning it off and starting again from virtualbox resolve the issue for another almost similar amount of time. As one might expect, restarting the nat network using vboxmanage.exe utility similarly resolves the issue - clearly an issue with NAT network is indicated.
My dns is configured alright. In fact, I am trying to load the 1.1.1.3 page with its ip address and not hostname.
Edit 1:
I could finally have the VM down and grab some logs. As I cannot attach all of them due to size and other restrictions, I put them on my google drive and I am sharing the link to that: drive[.]google[.]com/file/d/1V-5YTHcfOcWfxR0DubRJAW4aehCwrITm/view?usp=sharing
As I cannot even share proper links, I am putting some relevant sections of some logs with their line numbers:
vBoxSVC.log
NatNetwork-dhcpd.log
dhcpd.leases
Edit 2:
As I research more into this issue, I find that there are actually 3 numbers of processes with identical names running. These are:
Interestingly, I have 3 total vms, 2 of which are not running.
Moreover, in the SVC.log, I can see the VBoxNetNat.exe and VBoxNetDHCP.exe terminating and restarting with different pids each time. I understand they might not be related to this issue, and although I am yet to establish a direct correlation with the proceses terminating and the issue beginning, I hight suspect this is indeed the case.
My dns is configured alright. In fact, I am trying to load the 1.1.1.3 page with its ip address and not hostname.
Edit 1:
I could finally have the VM down and grab some logs. As I cannot attach all of them due to size and other restrictions, I put them on my google drive and I am sharing the link to that: drive[.]google[.]com/file/d/1V-5YTHcfOcWfxR0DubRJAW4aehCwrITm/view?usp=sharing
As I cannot even share proper links, I am putting some relevant sections of some logs with their line numbers:
vBoxSVC.log
Code: Select all
1 00:00:00.005948 main VirtualBox COM Server 6.1.32 r149290 win.amd64 (Jan 17 2022 11:29:30) release log
2 00:00:00.005952 main Log opened 2022-05-07T10:36:54.726292900Z
3 00:00:00.005953 main Build Type: release
4 00:00:00.005968 main OS Product: Windows 10
5 00:00:00.005970 main OS Release: 10.0.19042
6 00:00:00.005972 main OS Service Pack:
7 00:00:00.178954 main DMI Product Name: Veriton Series
8 00:00:00.205144 main DMI Product Version: P21-A0
9 00:00:00.205161 main Firmware type: BIOS
10 00:00:00.205174 main Host RAM: 3911MB (3.8GB) total, 916MB available
11 00:00:00.205180 main Executable: c:\Program Files\Oracle\VirtualBox\VBoxSVC.exe
12 00:00:00.205181 main Process ID: 12128
13 00:00:00.205182 main Package type: WINDOWS_64BITS_GENERIC
14 00:00:00.407964 VirtualBox: object creation starts
15 00:00:00.408430 Home directory: 'C:\Users\pbo\.VirtualBox'
16 00:00:00.408966 Installed Drivers:
17 00:00:00.416968 C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys (Version: 6.1.32.49290)
18 00:00:00.418292 C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys (Version: 6.1.32.49290)
19 00:00:00.419326 C:\WINDOWS\system32\DRIVERS\VBoxSup.sys (Version: 6.1.32.49290)
20 00:00:00.423207 Loading settings file "C:\Users\pbo\.VirtualBox\VirtualBox.xml" with version "1.14-windows"
21 00:00:00.425222 usbLibGetDevices: Starting USB device enumeration
22 00:00:00.429583 Getting USB descriptor (id 3) failed (dwErr=31) on hub USB#ROOT_HUB30#4&b9eb813&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} port 1
23 00:00:00.438232 usbLibGetDevices: Found 3 USB devices, 0 captured
24 00:00:00.649069 netIfIsWireless: CreateFile on '\\.\{DF7C054E-5D75-44DC-916D-A13633DE0A68}' failed with rcWin=2 (0x2) - ignoring
25 00:00:00.653509 netIfIsWireless: CreateFile on '\\.\{082E955D-7BCA-41D5-B83D-6A5D021B6FB3}' failed with rcWin=2 (0x2) - ignoring
26 00:00:00.654045 netIfIsWireless: CreateFile on '\\.\{ECF35DF1-2CD0-46EB-968E-83033F0D4D1B}' failed with rcWin=2 (0x2) - ignoring
27 00:00:00.654572 netIfIsWireless: CreateFile on '\\.\{6D7830D8-CC8B-46C2-A7F2-5DD14AE6ACE7}' failed with rcWin=2 (0x2) - ignoring
28 00:00:00.663832 HostDnsMonitor: initializing
29 00:00:00.673862 HostDnsMonitor: updating information
30 00:00:00.673896 HostDnsMonitor: old information
31 00:00:00.673897 no server entries
32 00:00:00.673898 no domain set
33 00:00:00.673899 no search string entries
34 00:00:00.673899 HostDnsMonitor: new information
35 00:00:00.673900 server 1: 49.45.0.1
36 00:00:00.673900 server 2: 1.1.1.3
37 00:00:00.673901 server 3: 1.0.0.3
38 00:00:00.673901 no domain set
39 00:00:00.673902 no search string entries
40 00:00:00.837343 VD: VDInit finished with VINF_SUCCESS
41 00:00:00.874989 Loading settings file "C:\Users\pbo\VirtualBox VMs\tclinx\tclinx.vbox" with version "1.16-windows"
42 00:00:00.877394 Loading settings file "C:\Users\pbo\VirtualBox VMs\deb\deb.vbox" with version "1.16-windows"
43 00:00:00.879219 Loading settings file "C:\Users\pbo\VirtualBox VMs\win98se\win98se.vbox" with version "1.15-windows"
44 00:00:00.906758 OCI: Local config file 'C:\Users\pbo\.VirtualBox\oci_config' does not exist
45 00:00:00.906868 OCI: Original config file 'C:\Users\pbo\.oci\config' does not exist
46 00:00:00.906870 OCI: Reading profiles finished with status ERROR_SUCCESS
47 00:00:00.906878 ExtPack: Created cloud provider 'OCI' (hrc=ERROR_SUCCESS)
48 00:00:00.906911 VirtualBox: object created
49 00:00:00.955601 Launched VM: 62383328 pid: 14160 (0x3750) frontend: headless name: tclinx
50 00:00:04.732140 VM 'tclinx' starts using NAT network 'NatNetwork'
51 00:00:04.733208 HostDnsMonitorProxy::GetDomainName: no domain set
52 00:00:04.733268 ERROR [COM]: aRC=VBOX_E_OBJECT_NOT_FOUND (0x80bb0001) aIID={46735de7-f4c4-4020-a185-0d2881bcfa8b} aComponent={DHCPGlobalConfigWrap} aText={DHCP option 15 was not found}, preserve=false aResultDetail=0
53 00:00:04.733418 HostDnsMonitorProxy::GetNameServers:
54 00:00:04.733430 name server 1: 49.45.0.1
55 00:00:04.733436 name server 2: 1.1.1.3
56 00:00:04.733442 name server 3: 1.0.0.3
57 00:00:04.746625 Saving settings file "C:\Users\pbo\.VirtualBox\VirtualBox.xml" with version "1.14-windows"
58 00:00:04.828024 Saving settings file "C:\Users\pbo\.VirtualBox\VirtualBox.xml" with version "1.14-windows"
59 00:00:04.890437 NetworkServiceRunning: started 'VBoxNetDHCP.exe', pid 00003108
60 00:00:04.933704 NetworkServiceRunning: started 'VBoxNetNAT.exe', pid 000036a0
61 00:00:04.933818 Started NAT network 'NatNetwork'
62 00:00:05.451214 netIfIsWireless: CreateFile on '\\.\{DF7C054E-5D75-44DC-916D-A13633DE0A68}' failed with rcWin=2 (0x2) - ignoring
63 00:00:05.455151 netIfIsWireless: CreateFile on '\\.\{082E955D-7BCA-41D5-B83D-6A5D021B6FB3}' failed with rcWin=2 (0x2) - ignoring
64 00:00:05.455675 netIfIsWireless: CreateFile on '\\.\{ECF35DF1-2CD0-46EB-968E-83033F0D4D1B}' failed with rcWin=2 (0x2) - ignoring
65 00:00:05.456196 netIfIsWireless: CreateFile on '\\.\{6D7830D8-CC8B-46C2-A7F2-5DD14AE6ACE7}' failed with rcWin=2 (0x2) - ignoring
66 00:00:07.853658 HostDnsMonitorProxy::GetNameServers:
67 00:00:07.853674 name server 1: 49.45.0.1
68 00:00:07.853681 name server 2: 1.1.1.3
69 00:00:07.853687 name server 3: 1.0.0.3
270 09:54:40.276395 HostDnsMonitorProxy::GetNameServers:
271 09:54:40.276406 name server 1: 49.45.0.1
272 09:54:40.276412 name server 2: 1.1.1.3
273 09:54:40.276417 name server 3: 1.0.0.3
274 09:54:47.661718 dns-monitor HostDnsMonitor: updating information
275 09:54:47.661777 dns-monitor HostDnsMonitor: unchanged
276 10:30:21.832568 dns-monitor HostDnsMonitor: updating information
277 10:30:21.832759 dns-monitor HostDnsMonitor: unchanged
278 10:30:29.587659 dns-monitor HostDnsMonitor: updating information
279 10:30:29.587709 dns-monitor HostDnsMonitor: unchanged
280 12:46:51.616304 USBPROXY usbLibGetDevices: Starting USB device enumeration
281 12:46:51.642555 USBPROXY Getting USB descriptor (id 3) failed (dwErr=31) on hub USB#ROOT_HUB30#4&b9eb813&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} port 3
282 12:46:51.652822 USBPROXY usbLibGetDevices: Found 3 USB devices, 0 captured
283 12:46:56.782973 USBPROXY usbLibGetDevices: Starting USB device enumeration
284 12:46:56.791747 USBPROXY Getting USB descriptor (id 3) failed (dwErr=31) on hub USB#ROOT_HUB30#4&b9eb813&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} port 3
285 12:46:56.795984 USBPROXY usbLibGetDevices: Found 3 USB devices, 0 captured
286 14:19:35.518705 USBPROXY usbLibGetDevices: Starting USB device enumeration
287 14:19:35.526722 USBPROXY Getting USB descriptor (id 3) failed (dwErr=31) on hub USB#ROOT_HUB30#4&b9eb813&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} port 3
288 14:19:35.531022 USBPROXY usbLibGetDevices: Found 3 USB devices, 0 captured
289 14:19:42.504374 USBPROXY usbLibGetDevices: Starting USB device enumeration
290 14:19:42.512393 USBPROXY Getting USB descriptor (id 3) failed (dwErr=31) on hub USB#ROOT_HUB30#4&b9eb813&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} port 3
291 14:19:42.516345 USBPROXY usbLibGetDevices: Found 3 USB devices, 0 captured
292 14:19:43.822018 USBPROXY usbLibGetDevices: Starting USB device enumeration
293 14:19:43.830053 USBPROXY Getting USB descriptor (id 3) failed (dwErr=31) on hub USB#ROOT_HUB30#4&b9eb813&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} port 3
294 14:19:43.834275 USBPROXY usbLibGetDevices: Found 3 USB devices, 0 captured
295 14:19:51.721426 USBPROXY usbLibGetDevices: Starting USB device enumeration
296 14:19:51.729806 USBPROXY Getting USB descriptor (id 3) failed (dwErr=31) on hub USB#ROOT_HUB30#4&b9eb813&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} port 3
297 14:19:51.734129 USBPROXY usbLibGetDevices: Found 3 USB devices, 0 captured
298 14:19:57.613515 USBPROXY usbLibGetDevices: Starting USB device enumeration
299 14:19:57.619668 USBPROXY Getting USB descriptor (id 3) failed (dwErr=31) on hub USB#ROOT_HUB30#4&b9eb813&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} port 3
300 14:19:57.624853 USBPROXY usbLibGetDevices: Found 3 USB devices, 0 captured
301 14:20:00.361264 USBPROXY usbLibGetDevices: Starting USB device enumeration
302 14:20:00.368163 USBPROXY Getting USB descriptor (id 3) failed (dwErr=31) on hub USB#ROOT_HUB30#4&b9eb813&0&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8} port 3
303 14:20:00.374971 USBPROXY usbLibGetDevices: Found 3 USB devices, 0 captured
304 14:20:54.254079 USBPROXY usbLibGetDevices: Starting USB device enumeration
305 14:20:54.258802 USBPROXY usbLibGetDevices: Found 2 USB devices, 0 captured
306 14:20:57.380754 dns-monitor HostDnsMonitor: updating information
307 14:20:57.380807 dns-monitor HostDnsMonitor: old information
308 14:20:57.380828 dns-monitor server 1: 49.45.0.1
309 14:20:57.380836 dns-monitor server 2: 1.1.1.3
310 14:20:57.380841 dns-monitor server 3: 1.0.0.3
311 14:20:57.380846 dns-monitor no domain set
312 14:20:57.380850 dns-monitor no search string entries
313 14:20:57.380855 dns-monitor HostDnsMonitor: new information
314 14:20:57.380860 dns-monitor server 1: 1.1.1.3
315 14:20:57.380865 dns-monitor server 2: 1.0.0.3
316 14:20:57.380870 dns-monitor no domain set
317 14:20:57.380874 dns-monitor no search string entries
318 14:20:57.383308 HostDnsMonitorProxy::GetNameServers:
319 14:20:57.383342 name server 1: 1.1.1.3
320 14:20:57.383349 name server 2: 1.0.0.3
321 14:23:38.796663 USBPROXY usbLibGetDevices: Starting USB device enumeration
322 14:23:38.801993 USBPROXY usbLibGetDevices: Found 2 USB devices, 0 captured
323 14:23:40.147415 USBPROXY usbLibGetDevices: Starting USB device enumeration
324 14:23:40.152455 USBPROXY usbLibGetDevices: Found 2 USB devices, 0 captured
325 14:23:42.705478 USBPROXY usbLibGetDevices: Starting USB device enumeration
326 14:23:42.711401 USBPROXY usbLibGetDevices: Found 2 USB devices, 0 captured
327 14:24:38.540414 USBPROXY usbLibGetDevices: Starting USB device enumeration
328 14:24:38.545481 USBPROXY usbLibGetDevices: Found 2 USB devices, 0 captured
329 14:24:51.434878 USBPROXY usbLibGetDevices: Starting USB device enumeration
330 14:24:51.440776 USBPROXY usbLibGetDevices: Found 2 USB devices, 0 captured
331 14:24:54.010129 USBPROXY usbLibGetDevices: Starting USB device enumeration
332 14:24:54.015425 USBPROXY usbLibGetDevices: Found 2 USB devices, 0 captured
333 14:25:00.365141 Saving settings file "C:\Users\pbo\VirtualBox VMs\tclinx\tclinx.vbox" with version "1.16-windows"
334 14:25:00.498708 Watcher VM 'tclinx' stops using NAT network 'NatNetwork'
335 14:25:00.533026 Watcher NetworkServiceRunning: killing VBoxNetDHCP.exe, pid 000028c0...
336 14:25:00.765961 Watcher NetworkServiceRunning: VBoxNetNAT.exe (pid 00001300) stopped: iStatus=0 enmReason=1
337 14:25:00.765988 Watcher Stopped NAT network 'NatNetwork'
338 14:25:05.823110 main VirtualBox: object deletion starts
339 14:25:05.824793 main ERROR [COM]: aRC=VBOX_E_OBJECT_IN_USE (0x80bb000c) aIID={ad47ad09-787b-44ab-b343-a082a3f2dfb1} aComponent={MediumWrap} aText={Medium 'C:\Users\pbo\VirtualBox VMs\tclinx\tclinx.vdi' cannot be closed because it is still attached to 1 virtual machines}, preserve=false aResultDetail=0
340 14:25:05.872009 main ERROR [COM]: aRC=VBOX_E_OBJECT_IN_USE (0x80bb000c) aIID={ad47ad09-787b-44ab-b343-a082a3f2dfb1} aComponent={MediumWrap} aText={Medium 'C:\Users\pbo\VirtualBox VMs\deb\deb.vdi' cannot be closed because it is still attached to 1 virtual machines}, preserve=false aResultDetail=0
341 14:25:05.874392 main ERROR [COM]: aRC=VBOX_E_OBJECT_IN_USE (0x80bb000c) aIID={ad47ad09-787b-44ab-b343-a082a3f2dfb1} aComponent={MediumWrap} aText={Medium 'C:\Users\pbo\VirtualBox VMs\win98se\win98se.vdi' cannot be closed because it is still attached to 1 virtual machines}, preserve=false aResultDetail=0
342 14:25:05.882389 Watcher ERROR [COM]: aRC=E_ACCESSDENIED (0x80070005) aIID={d0a0163f-e254-4e5b-a1f2-011cf991c38d} aComponent={VirtualBoxWrap} aText={The object is not ready}, preserve=false aResultDetail=0
343 14:25:05.935859 main HostDnsMonitor: shutting down ...
344 14:25:05.936100 main HostDnsMonitor: shut down
345 14:25:05.946009 main VirtualBox: object deleted346
During the last moments of the VM life in this log, the NAT Network was not allowing any tcp connections although udp and ping were fine.
Code: Select all
1 00:00:00.072644 VirtualBox DHCP Server 6.1.32 r149290 win.amd64 (Jan 17 2022 11:27:32) release log
2 00:00:00.072646 Log opened 2022-05-07T16:05:29.635538000Z
3 00:00:00.072647 Build Type: release
4 00:00:00.072652 OS Product: Windows 10
5 00:00:00.072653 OS Release: 10.0.19042
6 00:00:00.072653 OS Service Pack:
7 00:00:00.437919 DMI Product Name: Veriton Series
8 00:00:00.453872 DMI Product Version: P21-A0
9 00:00:00.453882 Firmware type: BIOS
10 00:00:00.453893 Host RAM: 3911MB (3.8GB) total, 1157MB available
11 00:00:00.453898 Executable: c:\Program Files\Oracle\VirtualBox\VBoxNetDHCP.exe
12 00:00:00.453898 Process ID: 14492
13 00:00:00.453899 Package type: WINDOWS_64BITS_GENERIC
14 00:00:00.454033 --config: NatNetwork
15 00:00:00.454060 --comment: NatNetwork
16 00:00:00.717407 IP address: 10.0.2.3/24
17 00:00:00.717422 Address pool: 10.0.2.4 - 10.0.2.254
18 00:00:00.717469 MAC address is not specified: will use generated MAC 08:00:27:06:9c:9a
19 00:00:00.717482 Db::i_enterFixedAddressAssignment: 08:00:27:06:9c:9a: 10.0.2.3
20 00:00:00.717494 loading leases from C:\Users\pbo\.VirtualBox\NatNetwork-Dhcpd.leases
21 00:00:00.717729 > LOAD: EXPIRED lease 10.0.2.4 to [01:08:00:27:b8:80:86] (08:00:27:b8:80:86), acked, valid from 2022-05-07T16:02:09Z for 600s until 2022-05-07T16:12:09Z
22 00:01:40.570602 REQUEST xid 0x07eec95f chaddr 08:00:27:b8:80:86
23 00:01:40.570724 ciaddr 10.0.2.4
24 00:01:40.570768 client id: 01 08 00 27 b8 80 86
25 00:01:40.570794 params { 1 3 6 12 15 28 42 }
26 00:01:40.570955 12: 'box'
27 00:01:40.570976 57: 02 40
28 00:01:40.570996 60: 'udhcp 1.31.1'
29 00:01:40.571034 > allocateAddress to client [01:08:00:27:b8:80:86] (08:00:27:b8:80:86)
30 00:01:40.571070 > ... found existing binding 10.0.2.4 to [01:08:00:27:b8:80:86] (08:00:27:b8:80:86), acked, valid from 2022-05-07T16:02:09Z for 600s until 2022-05-07T16:12:09Z
31 00:01:40.571113 Lease time 600 secs (default)
32 00:01:40.571137 writing leases to C:\Users\pbo\.VirtualBox\NatNetwork-Dhcpd.leases
33 00:01:40.611706 >>> requested option 1 (SubnetMask)
34 00:01:40.611745 ... always supplied
35 00:01:40.611764 >>> requested option 3 (Routers)
36 00:01:40.611788 ... found in GlobalConfig (type global)
37 00:01:40.611807 >>> requested option 6 (DNSes)
38 00:01:40.611825 ... found in GlobalConfig (type global)
39 00:01:40.611843 >>> requested option 12 (HostName)
40 00:01:40.611861 ... not found
41 00:01:40.611878 >>> requested option 15 (DomainName)
42 00:01:40.611896 ... not found
43 00:01:40.611912 >>> requested option 28 (BroadcastAddress)
44 00:01:40.611930 ... not found
45 00:01:40.611947 >>> requested option 42 (NTPServers)
46 00:01:40.611964 ... not found
47 00:01:40.612009 encoding option 1 (SubnetMask)
48 00:01:40.612029 encoding option 3 (Routers)
49 00:01:40.612047 encoding option 6 (DNSes)
50 00:01:40.612064 encoding option 51 (LeaseTime)
51 00:01:40.612086 ACK xid 0x07eec95f chaddr 08:00:27:b8:80:86
52 00:01:40.612141 ciaddr 10.0.2.4 yiaddr 10.0.2.4
53 00:01:40.612193 encoded message: 548 bytes7192 08:51:52.421019 REQUEST xid 0x6e8a38f2 chaddr 08:00:27:b8:80:86
7193 08:51:52.421443 ciaddr 10.0.2.4
7194 08:51:52.421472 client id: 01 08 00 27 b8 80 86
7195 08:51:52.421488 params { 1 3 6 12 15 28 42 }
7196 08:51:52.421581 12: 'box'
7197 08:51:52.421593 57: 02 40
7198 08:51:52.421605 60: 'udhcp 1.31.1'
7199 08:51:52.421623 > allocateAddress to client [01:08:00:27:b8:80:86] (08:00:27:b8:80:86)
7200 08:51:52.421643 > ... found existing binding 10.0.2.4 to [01:08:00:27:b8:80:86] (08:00:27:b8:80:86), acked, valid from 2022-05-08T00:52:21Z for 600s until 2022-05-08T01:02:21Z
7201 08:51:52.421668 Lease time 600 secs (default)
7202 08:51:52.421682 writing leases to C:\Users\pbo\.VirtualBox\NatNetwork-Dhcpd.leases
7203 08:51:52.462994 >>> requested option 1 (SubnetMask)
7204 08:51:52.463021 ... always supplied
7205 08:51:52.463033 >>> requested option 3 (Routers)
7206 08:51:52.463045 ... found in GlobalConfig (type global)
7207 08:51:52.463058 >>> requested option 6 (DNSes)
7208 08:51:52.463069 ... found in GlobalConfig (type global)
7209 08:51:52.463081 >>> requested option 12 (HostName)
7210 08:51:52.463093 ... not found
7211 08:51:52.463104 >>> requested option 15 (DomainName)
7212 08:51:52.463115 ... not found
7213 08:51:52.463125 >>> requested option 28 (BroadcastAddress)
7214 08:51:52.463142 ... not found
7215 08:51:52.463157 >>> requested option 42 (NTPServers)
7216 08:51:52.463168 ... not found
7217 08:51:52.463190 encoding option 1 (SubnetMask)
7218 08:51:52.463202 encoding option 3 (Routers)
7219 08:51:52.463214 encoding option 6 (DNSes)
7220 08:51:52.463226 encoding option 51 (LeaseTime)
7221 08:51:52.463241 ACK xid 0x6e8a38f2 chaddr 08:00:27:b8:80:86
7222 08:51:52.463276 ciaddr 10.0.2.4 yiaddr 10.0.2.4
7223 08:51:52.463310 encoded message: 548 bytes
7224 08:51:52.463314 0000000001a38280/0000: 02 01 06 00 f2 38 8a 6e-00 00 00 00 0a 00 02 04 .....8.n........
7225 08:51:52.463319 0000000001a38290/0010: 0a 00 02 04 00 00 00 00-00 00 00 00 08 00 27 b8 ..............'.
7226 08:51:52.463323 0000000001a382a0/0020: 80 86 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7227 08:51:52.463326 0000000001a382b0/0030: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7228 08:51:52.463329 0000000001a382c0/0040: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7229 08:51:52.463332 0000000001a382d0/0050: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7230 08:51:52.463336 0000000001a382e0/0060: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7231 08:51:52.463339 0000000001a382f0/0070: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7232 08:51:52.463342 0000000001a38300/0080: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7233 08:51:52.463345 0000000001a38310/0090: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7234 08:51:52.463348 0000000001a38320/00a0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7235 08:51:52.463351 0000000001a38330/00b0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7236 08:51:52.463354 0000000001a38340/00c0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7237 08:51:52.463358 0000000001a38350/00d0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7238 08:51:52.463361 0000000001a38360/00e0: 00 00 00 00 00 00 00 00-00 00 00 00 63 82 53 63 ............c.Sc
7239 08:51:52.463364 0000000001a38370/00f0: 36 04 0a 00 02 03 35 01-05 01 04 ff ff ff 00 03 6.....5.........
7240 08:51:52.463367 0000000001a38380/0100: 04 0a 00 02 01 06 0c 31-2d 00 01 01 01 01 03 01 .......1-.......
7241 08:51:52.463371 0000000001a38390/0110: 00 00 03 33 04 00 00 02-58 ff 00 00 00 00 00 00 ...3....X.......
7242 08:51:52.463374 0000000001a383a0/0120: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7243 08:51:52.463378 0000000001a383b0/0130: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7244 08:51:52.463381 0000000001a383c0/0140: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7245 08:51:52.463384 0000000001a383d0/0150: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7246 08:51:52.463387 0000000001a383e0/0160: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7247 08:51:52.463390 0000000001a383f0/0170: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7248 08:51:52.463393 0000000001a38400/0180: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7249 08:51:52.463397 0000000001a38410/0190: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7250 08:51:52.463400 0000000001a38420/01a0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7251 08:51:52.463403 0000000001a38430/01b0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7252 08:51:52.463406 0000000001a38440/01c0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7253 08:51:52.463410 0000000001a38450/01d0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7254 08:51:52.463413 0000000001a38460/01e0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7255 08:51:52.463416 0000000001a38470/01f0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7256 08:51:52.463419 0000000001a38480/0200: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7257 08:51:52.463422 0000000001a38490/0210: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
7258 08:51:52.463425 0000000001a384a0/0220: 00 00 00 00 ....
As before, the VM didn't have any outbound tcp capability during its end life.
Code: Select all
<?xml version="1.0"?>
<Leases version="1.0">
<Lease mac="08:00:27:b8:80:86" id="01080027b88086" network="0.0.0.0" state="acked">
<Address value="10.0.2.4"/>
<Time issued="1651971441" expiration="600"/>
</Lease>
</Leases>
As I research more into this issue, I find that there are actually 3 numbers of processes with identical names running. These are:
Code: Select all
864 42 56436 35988 275.39 1876 0 VBoxHeadless
81 4 2004 4808 0.28 12608 0 VBoxHeadless
73 4 1112 7012 0.19 13368 0 VBoxHeadless
67 4 1096 7016 0.16 7244 0 VBoxNetDHCP
75 4 1960 4788 0.27 11820 0 VBoxNetDHCP
306 14 11856 23260 1.61 12664 0 VBoxNetDHCP
75 4 1960 4792 0.25 2200 0 VBoxNetNAT
519 58 19952 29872 4.61 13996 0 VBoxNetNAT
67 4 1136 7016 0.16 14032 0 VBoxNetNAT
197 10 2112 10164 0.03 10988 0 VBoxSDS
1229 16 6976 18688 0.47 7740 0 VBoxSVCMoreover, in the SVC.log, I can see the VBoxNetNat.exe and VBoxNetDHCP.exe terminating and restarting with different pids each time. I understand they might not be related to this issue, and although I am yet to establish a direct correlation with the proceses terminating and the issue beginning, I hight suspect this is indeed the case.