Aller au contenu principal

Event ID 5152 in Windows Server during Cataloging

Thread needs solution

Hi,

I have Acronis Backup 11.5 running on Windows Server 2008 to backup data to a local vault.
The backup is then replicated to a 2nd location remotely. This process repeats daily.
The 2nd location is a Qnap NAS accessed via FTP using the path "ftp://. myqnapcloud.com/Backup/Vault/".
The backup and replication works fine.

The problem is after replication, while Acronis is performing cataloging on the remote vault.
Hundreds of thousands of Event ID:5152 are logged in the Event Viewer by Windows Server.
There could be 500000 of this event in 30 minutes. Sometimes as many as 2000 every second.
The cataloging eventually completes successfully in 2 hours. But I am concerned about the overwhelming number of log entries generated.

Sample of the event log:

The Windows Filtering Platform has blocked a packet.

Application Information:
Process ID: 0
Application Name: -

Network Information:
Direction: Inbound
Source Address:
Source Port: 56375 <- port number changes
Destination Address: 192.168.1.50
Destination Port: 64404 <- port number changes
Protocol: 6

Filter Information:
Filter Run-Time ID: 603962
Layer Name: Transport
Layer Run-Time ID: 13

Appreciate any advise.

Thanks,
Terence

0 Users found this helpful
frestogaslorastaswastavewroviwroclolacorashibushurutraciwrubrishabenichikucrijorejenufrilomuwrigaslowrikejawrachosleratiswurelaseriprouobrunoviswosuthitribrepakotritopislivadrauibretisetewrapenuwrapi
Contributions: 250
Commentaires: 7092

Hello Terence,

Thank you for your posting! Unfortunatly it's not possible to identify the root cause of the issue without deeper investigation. I would suggest creating the support ticket or adjusting Windows filterung settings.

Thank you,