This error has a variety of causes and no one solution will correct it. Proceed through the following steps to troubleshoot the problem.
- The GhostCast Server requires that UDP ports 6666 and 7777 be open in any firewall or AntiVirus software.
- Using the netstat -a command, you can locate which ports are open and listening.
- Using telnet, you can determine whether a particular port is open.
- For more information on which ports Ghost uses, read "How the Ghost Console and Client communicate over the network." at:
- Ensure that the multicast traffic is not being blocked by a router or switch in your environment.
- If you are trying to join a GhostCast Server session using a Ghost Boot Disk, supply the IP Address of the Ghost Server to the client. You can specify the IP address on the same page in Ghost that you use to enter the session number you want to join. If specifying the IP Address of the Ghost Server gives the same error message, there is a likely multicast configuration issue on your network.
- For Ghost Console tasks, use the -jaddr=ipaddressofconsole switch in the Advanced button on the Clone tab of your task to specify the IP Address of the Ghost Server. If specifying the IP Address of the Ghost Server in the task gives the same 10030 error message, there is a likely multicast configuration issue on your network.
- Instead of selecting Multicast, select Unicast. If "Unicast" is working, then multicast is not supported by the router, is being blocked or has not been properly configured. Check the IGMP settings on the router, if the router does not offer a technique to enable IGMP it may not be capable of multicasting.
- Ensure that no 3rd party programs are blocking the Ghost communications.
- If the third-party program has an exclusions list, such as "McAfee VirusScan 8.0i", fix the problem by adding "Ghostsrv.exe" to the exclusions list. For more information on this issue, see the document: "Error: 10030 - "Unable to establish connection with session" when using McAfee Anti-Virus 8.x." at:
- If the third-party program uses a rule that blocks IRC communication or UDP traffic on ports 6666 or 6667, such as "ePolicy Orchestrator " (ePO), modify the rule in ePO to permit Ghost communications or add a new rule for Ghost that supersedes the blocking rule. If not applied through ePO, changes to the managed computers will be overwritten.
- This problem has also been seen with the "BlackICE PC Protection program." This program includes a firewall.
- If you are using "Windows PE" as a pre-OS, the Windows Firewall could be enabled and blocking Ghost traffic.
- Note: Simply disabling the Antivirus and the Firewall software may not be enough to correct this error. The software needs to be configured to allow Ghost to communicate.
- Update the network adapter driver
- Can you reproduce the problem when you connect the Ghost Console and the Ghost Client by using a simple network?
- For more information about how to set up a simple test network, see the document: "How to Set up a Simple Network." at:
- If the problem is corrected with the simple network, then your production network is the likely source of the problem.
- If a Ghost session starts and stalls out after transmitting the image for a few minutes and you have a RAID array you may be writing the image faster than the RAID controller can write. Check the RAID buffer speed and set the network throughput to about 10mg below the RAID buffer speed.
- Remove the Ghost Console and the Ghost Client from the domain and add them both to a workgroup.
- If this corrects the error, there may be a Group Policy Object (GPO) on the domain that is causing the connection problem. Locate the GPO and either disable it or modify it to ignore Ghost communication.
- Copy the image file directly to the computer running the GhostCast Server.
- The problem can be caused by a switch or router between the server and the computer that the image is being stored on, when that switch or router has not been configured for Multicasting. If that is the case, or if the problem is caused by some other path problem, putting the image on the same computer as the Ghost Console should prevent this error.
- If the error occurs during the image create process, try storing your image on the same computer that is running the GhostCast Server. If this is successful, there could be a problem with the network share you originally tried to use as the image repository.
- Assign full control of the Image Repository to everyone.
- If this corrects the issue, change full control from "everyone" to the specific user that will be signing into the computer running the Ghost software.
- If the problem persists after performing the steps above, gather the following information and contact Symantec Technical Support at:
- A Wireshark network trace will be required. Install Wireshark on the computer running the Ghost Tools and start the network trace. When the network trace has begun, repeat your imaging process. When the client fails with the 10030 error message, stop the network trace and send the resulting log file to Symantec Technical Support.
- A System Information Report from the Ghost Console and any clients that are receiving this error.
- To obtain the System Information report, click Start > Run
- Type msinfo32.exe.
- Save the resulting report with a .NFO file extension.
- From the Ghost Server, gather the logs files from these locations:
C:\Program Files (x86)\Altiris\eXpress\Deployment Server\*.log
If you are unable to resolve the GhostCast connection issue you can avoid using GhostCast by connecting the image source directly to the target machine.
For Ghost Solution Suite this would mean not checking the "Data Transfer Mode" checkbox in your Distribute Disk Image task.
Ghost Standard Tools:
USB Connected Imaging:
Mapped Drive imaging:
"Symantec Technical Support" at: