Event SRV error 2012 [Windows Servers]

Prev: Help with a stop message
Next: event id 7024 Source: Service Control Manager

From: Coraleigh Miller on 20 Aug 2007 01:46

Hi Adam,

Have you tried using Network Monitor?
http://support.microsoft.com/kb/243270
This article http://support.microsoft.com/kb/898060/ suggests using a tool
like this to help troubleshoot....
"There may be some other similar scenarios where these symptoms occur. These
scenarios can typically be diagnosed by sniffing the network traffic on
either the source host side or on one of the intermediate network routers.
If there are multiple ICMP destination unreachable messages sent over time
for a destination, the source host that has the MS05-019 security update or
Windows Server 2003 SP1 installed is likely to have this problem. "

Hope this helps.

Coraleigh Miller

"Adam Raff" <araff(a)newsgroup.nospam> wrote in message
news:%23IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl...
> Hi Coraleigh,
>
> Thank you for responding but if I am not mistaken if you install or have
> installed 913446 that updated supersedes security update 893066. I have
> 913446 installed on all my servers already.
> I verified that which is way I added the sub note to let people know that
> I checked this information.
>
> If I am wrong then please correct me. I will check the version number on
> the TCP stack to see if it's that version or newer which I also assume
> will be as good.
>
> I was hoping that somebody out there can read this error and the code that
> goes with it and perhaps it points to a Mac address or something like
> that. Is there a cheap way of sniffing around the network just to get an
> idea to see if I am getting any of these errors listed in 898060?
>
> Thanks
> Adam Raff
>
>
> "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message
> news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl...
>> Hi Adam,
>>
>> Some people have found that the Event ID you have is resolved by this
>> Microsoft article... http://support.microsoft.com/kb/898060/
>>
>> Coraleigh Miller
>>
>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
>> news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl...
>>> Sorry a little more info on this problem
>>>
>>> We are running a Windows 2003 SP1 network. Desktops are all windows XP
>>> SP2. With all updated security patches on server and desktop side.
>>>
>>> I have also looked into KB913446 MS06-007 as this may lead to issues
>>> with connectivity. All my servers have this update as well as a new one
>>> that is also getting the errors as well.
>>>
>>> Thanks
>>> Adam Raff
>>>
>>>
>>>
>>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
>>> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl...
>>>> Good Day,
>>>>
>>>> Over the few months we have been having an ongoing issue with the
>>>> following error messages and they appear on all of our servers.
>>>>
>>>> Event Type: Warning
>>>> Event Source: Srv
>>>> Event Category: None
>>>> Event ID: 2012
>>>> Date: 8/17/2007
>>>> Time: 2:18:26 AM
>>>> User: N/A
>>>> Computer: HSMAIN
>>>> Description:
>>>> While transmitting or receiving data, the server encountered a network
>>>> error. Occassional errors are expected,
>>>> but large amounts of these indicate a possible error in your network
>>>> configuration.
>>>> The error status code is contained within the returned data (formatted
>>>> as Words) and may point you towards the problem.
>>>>
>>>> For more information, see Help and Support Center at
>>>> http://go.microsoft.com/fwlink/events.asp.
>>>> Data:
>>>> 0000: 00040000 00540001 00000000 800007dc
>>>> 0010: 00000000 c0000184 00000000 00000000
>>>> 0020: 00000000 00000000 0000097a
>>>>
>>>>
>>>> I have looked at this from so many ways but I can not find the point of
>>>> the error. You see the problem goes away on weekends. We pretty much
>>>> turn off all desktops but all servers and printer (network connected)
>>>> and switches stay on. I thought that it was a desktop and checked over
>>>> all the desktops and identified some that may have bad Nics. After
>>>> fixing them I am still getting errors but again they disappear over the
>>>> weekend.
>>>>
>>>> The error message says to look in the error code which may point me in
>>>> the right direction but I can not make heads or tails out to the error
>>>> message. If somebody knows how to read this and point me in the right
>>>> direction it would be a great help.
>>>>
>>>> Thank You
>>>> Adam Raff
>>>>
>>>
>>>
>>
>>
>
>

From: Adam Raff on 21 Aug 2007 14:42

Hi Ken

Thanks for the feed back. Not sure why you pointed my to 317249 as I am not
getting 2021 or 2022 event errors. My errors are 2012.

Now in that reg key what am I looking for. Can you give me an example by
chance.

Also all the errors disappear on the weekends so I do not think it's a
server issue or something related in my server room as they are up 24x7. If
we have a long weekend no errors then as well. that is why I am hoping that
the return code that I am getting back from the error can point me some
where.

Adam Raff

""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message
news:h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl...
> Hello Adam,
>
> Thank you for using newsgroup!
>
> Based on my research, this basically is an error that the network driver
> is
> giving SRV on the send IRPs. First thing that I would see is if the
> customer is running any 3rd party network software that is bound to the
> server. You can see this by checking the following registry key.
>
> HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
> Bind: REG_MULTI_SZ
>
> 317249: How to troubleshoot Event ID 2021 and Event ID 2022
> http://support.microsoft.com/kb/317249/en-us
>
> In addition, this may be caused due to a race between send and disconnect.
> The customer can ignore this error.
>
> Thanks & Regards,
>
> Ken Zhao
>
> Microsoft Online Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> <http://www.microsoft.com/security>
> ====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>
>
> --------------------
> | From: "Adam Raff" <araff(a)newsgroup.nospam>
> | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl>
> <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl>
> <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl>
> | Subject: Re: Event SRV error 2012
> | Date: Fri, 17 Aug 2007 17:29:35 -0400
> | Lines: 99
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> | X-RFC2646: Format=Flowed; Response
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
> | Message-ID: <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl>
> | Newsgroups: microsoft.public.windows.server.general
> | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128
> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
> | Xref: TK2MSFTNGHUB02.phx.gbl
> microsoft.public.windows.server.general:19785
> | X-Tomcat-NG: microsoft.public.windows.server.general
> |
> | Hi Coraleigh,
> |
> | Thank you for responding but if I am not mistaken if you install or have
> | installed 913446 that updated supersedes security update 893066. I have
> | 913446 installed on all my servers already.
> | I verified that which is way I added the sub note to let people know
> that
> I
> | checked this information.
> |
> | If I am wrong then please correct me. I will check the version number
> on
> | the TCP stack to see if it's that version or newer which I also assume
> will
> | be as good.
> |
> | I was hoping that somebody out there can read this error and the code
> that
> | goes with it and perhaps it points to a Mac address or something like
> that.
> | Is there a cheap way of sniffing around the network just to get an idea
> to
> | see if I am getting any of these errors listed in 898060?
> |
> | Thanks
> | Adam Raff
> |
> |
> | "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message
> | news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl...
> | > Hi Adam,
> | >
> | > Some people have found that the Event ID you have is resolved by this
> | > Microsoft article... http://support.microsoft.com/kb/898060/
> | >
> | > Coraleigh Miller
> | >
> | > "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
> | > news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl...
> | >> Sorry a little more info on this problem
> | >>
> | >> We are running a Windows 2003 SP1 network. Desktops are all windows
> XP
> | >> SP2. With all updated security patches on server and desktop side.
> | >>
> | >> I have also looked into KB913446 MS06-007 as this may lead to issues
> with
> | >> connectivity. All my servers have this update as well as a new one
> that
> | >> is also getting the errors as well.
> | >>
> | >> Thanks
> | >> Adam Raff
> | >>
> | >>
> | >>
> | >> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
> | >> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl...
> | >>> Good Day,
> | >>>
> | >>> Over the few months we have been having an ongoing issue with the
> | >>> following error messages and they appear on all of our servers.
> | >>>
> | >>> Event Type: Warning
> | >>> Event Source: Srv
> | >>> Event Category: None
> | >>> Event ID: 2012
> | >>> Date: 8/17/2007
> | >>> Time: 2:18:26 AM
> | >>> User: N/A
> | >>> Computer: HSMAIN
> | >>> Description:
> | >>> While transmitting or receiving data, the server encountered a
> network
> | >>> error. Occassional errors are expected,
> | >>> but large amounts of these indicate a possible error in your network
> | >>> configuration.
> | >>> The error status code is contained within the returned data
> (formatted
> | >>> as Words) and may point you towards the problem.
> | >>>
> | >>> For more information, see Help and Support Center at
> | >>> http://go.microsoft.com/fwlink/events.asp.
> | >>> Data:
> | >>> 0000: 00040000 00540001 00000000 800007dc
> | >>> 0010: 00000000 c0000184 00000000 00000000
> | >>> 0020: 00000000 00000000 0000097a
> | >>>
> | >>>
> | >>> I have looked at this from so many ways but I can not find the point
> of
> | >>> the error. You see the problem goes away on weekends. We pretty
> much
> | >>> turn off all desktops but all servers and printer (network
> connected)
> | >>> and switches stay on. I thought that it was a desktop and checked
> over
> | >>> all the desktops and identified some that may have bad Nics. After
> | >>> fixing them I am still getting errors but again they disappear over
> the
> | >>> weekend.
> | >>>
> | >>> The error message says to look in the error code which may point me
> in
> | >>> the right direction but I can not make heads or tails out to the
> error
> | >>> message. If somebody knows how to read this and point me in the
> right
> | >>> direction it would be a great help.
> | >>>
> | >>> Thank You
> | >>> Adam Raff
> | >>>
> | >>
> | >>
> | >
> | >
> |
> |
> |
>

From: Adam Raff on 21 Aug 2007 14:56

Coraleigh,

Just installed it on my server. You wouldn't know a good place to get
directions on how to use this program do you by chance?

Adam Raff

"Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message
news:%23LkEx1u4HHA.1992(a)TK2MSFTNGP03.phx.gbl...
> Hi Adam,
>
> Have you tried using Network Monitor?
> http://support.microsoft.com/kb/243270
> This article http://support.microsoft.com/kb/898060/ suggests using a tool
> like this to help troubleshoot....
> "There may be some other similar scenarios where these symptoms occur.
> These scenarios can typically be diagnosed by sniffing the network traffic
> on either the source host side or on one of the intermediate network
> routers. If there are multiple ICMP destination unreachable messages sent
> over time for a destination, the source host that has the MS05-019
> security update or Windows Server 2003 SP1 installed is likely to have
> this problem. "
>
> Hope this helps.
>
> Coraleigh Miller
>
>
> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
> news:%23IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl...
>> Hi Coraleigh,
>>
>> Thank you for responding but if I am not mistaken if you install or have
>> installed 913446 that updated supersedes security update 893066. I have
>> 913446 installed on all my servers already.
>> I verified that which is way I added the sub note to let people know that
>> I checked this information.
>>
>> If I am wrong then please correct me. I will check the version number on
>> the TCP stack to see if it's that version or newer which I also assume
>> will be as good.
>>
>> I was hoping that somebody out there can read this error and the code
>> that goes with it and perhaps it points to a Mac address or something
>> like that. Is there a cheap way of sniffing around the network just to
>> get an idea to see if I am getting any of these errors listed in 898060?
>>
>> Thanks
>> Adam Raff
>>
>>
>> "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message
>> news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl...
>>> Hi Adam,
>>>
>>> Some people have found that the Event ID you have is resolved by this
>>> Microsoft article... http://support.microsoft.com/kb/898060/
>>>
>>> Coraleigh Miller
>>>
>>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
>>> news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl...
>>>> Sorry a little more info on this problem
>>>>
>>>> We are running a Windows 2003 SP1 network. Desktops are all windows XP
>>>> SP2. With all updated security patches on server and desktop side.
>>>>
>>>> I have also looked into KB913446 MS06-007 as this may lead to issues
>>>> with connectivity. All my servers have this update as well as a new
>>>> one that is also getting the errors as well.
>>>>
>>>> Thanks
>>>> Adam Raff
>>>>
>>>>
>>>>
>>>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
>>>> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl...
>>>>> Good Day,
>>>>>
>>>>> Over the few months we have been having an ongoing issue with the
>>>>> following error messages and they appear on all of our servers.
>>>>>
>>>>> Event Type: Warning
>>>>> Event Source: Srv
>>>>> Event Category: None
>>>>> Event ID: 2012
>>>>> Date: 8/17/2007
>>>>> Time: 2:18:26 AM
>>>>> User: N/A
>>>>> Computer: HSMAIN
>>>>> Description:
>>>>> While transmitting or receiving data, the server encountered a network
>>>>> error. Occassional errors are expected,
>>>>> but large amounts of these indicate a possible error in your network
>>>>> configuration.
>>>>> The error status code is contained within the returned data (formatted
>>>>> as Words) and may point you towards the problem.
>>>>>
>>>>> For more information, see Help and Support Center at
>>>>> http://go.microsoft.com/fwlink/events.asp.
>>>>> Data:
>>>>> 0000: 00040000 00540001 00000000 800007dc
>>>>> 0010: 00000000 c0000184 00000000 00000000
>>>>> 0020: 00000000 00000000 0000097a
>>>>>
>>>>>
>>>>> I have looked at this from so many ways but I can not find the point
>>>>> of the error. You see the problem goes away on weekends. We pretty
>>>>> much turn off all desktops but all servers and printer (network
>>>>> connected) and switches stay on. I thought that it was a desktop and
>>>>> checked over all the desktops and identified some that may have bad
>>>>> Nics. After fixing them I am still getting errors but again they
>>>>> disappear over the weekend.
>>>>>
>>>>> The error message says to look in the error code which may point me in
>>>>> the right direction but I can not make heads or tails out to the error
>>>>> message. If somebody knows how to read this and point me in the right
>>>>> direction it would be a great help.
>>>>>
>>>>> Thank You
>>>>> Adam Raff
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

From: Coraleigh Miller on 21 Aug 2007 15:41

Hi Adam,

I found that there is a new version of Network Monitor which is supposed to
be alittle nicer..
http://www.microsoft.com/downloads/details.aspx?FamilyID=18b1d59d-f4d8-4213-8d17-2f6dde7d7aac&DisplayLang=en

Microsoft has this article, which while it talks about the earlier version
of the program, may still help.. http://support.microsoft.com/kb/812953

This article walks you through a basic data capture..
http://www.windowsnetworking.com/articles_tutorials/Working-With-Network-Monitor-Part2.html

This is a technet blogsite featuring posts by an MS Network Monitor
expert...
http://blogs.technet.com/netmon/archive/2006/09/28/overview-of-netmon-by-yuri-diogenes.aspx

Coraleigh

"Adam Raff" <araff(a)newsgroup.nospam> wrote in message
news:%238bE$TC5HHA.4476(a)TK2MSFTNGP06.phx.gbl...
> Coraleigh,
>
> Just installed it on my server. You wouldn't know a good place to get
> directions on how to use this program do you by chance?
>
> Adam Raff
>
>
> "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message
> news:%23LkEx1u4HHA.1992(a)TK2MSFTNGP03.phx.gbl...
>> Hi Adam,
>>
>> Have you tried using Network Monitor?
>> http://support.microsoft.com/kb/243270
>> This article http://support.microsoft.com/kb/898060/ suggests using a
>> tool like this to help troubleshoot....
>> "There may be some other similar scenarios where these symptoms occur.
>> These scenarios can typically be diagnosed by sniffing the network
>> traffic on either the source host side or on one of the intermediate
>> network routers. If there are multiple ICMP destination unreachable
>> messages sent over time for a destination, the source host that has the
>> MS05-019 security update or Windows Server 2003 SP1 installed is likely
>> to have this problem. "
>>
>> Hope this helps.
>>
>> Coraleigh Miller
>>
>>
>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
>> news:%23IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl...
>>> Hi Coraleigh,
>>>
>>> Thank you for responding but if I am not mistaken if you install or have
>>> installed 913446 that updated supersedes security update 893066. I have
>>> 913446 installed on all my servers already.
>>> I verified that which is way I added the sub note to let people know
>>> that I checked this information.
>>>
>>> If I am wrong then please correct me. I will check the version number
>>> on the TCP stack to see if it's that version or newer which I also
>>> assume will be as good.
>>>
>>> I was hoping that somebody out there can read this error and the code
>>> that goes with it and perhaps it points to a Mac address or something
>>> like that. Is there a cheap way of sniffing around the network just to
>>> get an idea to see if I am getting any of these errors listed in 898060?
>>>
>>> Thanks
>>> Adam Raff
>>>
>>>
>>> "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message
>>> news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl...
>>>> Hi Adam,
>>>>
>>>> Some people have found that the Event ID you have is resolved by this
>>>> Microsoft article... http://support.microsoft.com/kb/898060/
>>>>
>>>> Coraleigh Miller
>>>>
>>>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
>>>> news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl...
>>>>> Sorry a little more info on this problem
>>>>>
>>>>> We are running a Windows 2003 SP1 network. Desktops are all windows
>>>>> XP SP2. With all updated security patches on server and desktop side.
>>>>>
>>>>> I have also looked into KB913446 MS06-007 as this may lead to issues
>>>>> with connectivity. All my servers have this update as well as a new
>>>>> one that is also getting the errors as well.
>>>>>
>>>>> Thanks
>>>>> Adam Raff
>>>>>
>>>>>
>>>>>
>>>>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
>>>>> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl...
>>>>>> Good Day,
>>>>>>
>>>>>> Over the few months we have been having an ongoing issue with the
>>>>>> following error messages and they appear on all of our servers.
>>>>>>
>>>>>> Event Type: Warning
>>>>>> Event Source: Srv
>>>>>> Event Category: None
>>>>>> Event ID: 2012
>>>>>> Date: 8/17/2007
>>>>>> Time: 2:18:26 AM
>>>>>> User: N/A
>>>>>> Computer: HSMAIN
>>>>>> Description:
>>>>>> While transmitting or receiving data, the server encountered a
>>>>>> network error. Occassional errors are expected,
>>>>>> but large amounts of these indicate a possible error in your network
>>>>>> configuration.
>>>>>> The error status code is contained within the returned data
>>>>>> (formatted as Words) and may point you towards the problem.
>>>>>>
>>>>>> For more information, see Help and Support Center at
>>>>>> http://go.microsoft.com/fwlink/events.asp.
>>>>>> Data:
>>>>>> 0000: 00040000 00540001 00000000 800007dc
>>>>>> 0010: 00000000 c0000184 00000000 00000000
>>>>>> 0020: 00000000 00000000 0000097a
>>>>>>
>>>>>>
>>>>>> I have looked at this from so many ways but I can not find the point
>>>>>> of the error. You see the problem goes away on weekends. We pretty
>>>>>> much turn off all desktops but all servers and printer (network
>>>>>> connected) and switches stay on. I thought that it was a desktop and
>>>>>> checked over all the desktops and identified some that may have bad
>>>>>> Nics. After fixing them I am still getting errors but again they
>>>>>> disappear over the weekend.
>>>>>>
>>>>>> The error message says to look in the error code which may point me
>>>>>> in the right direction but I can not make heads or tails out to the
>>>>>> error message. If somebody knows how to read this and point me in the
>>>>>> right direction it would be a great help.
>>>>>>
>>>>>> Thank You
>>>>>> Adam Raff
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

From: "Ken Zhao [MSFT]" on 22 Aug 2007 07:39

Hi Adam,

I found some similar cases that related to the following registry key:
HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
Bind: REG_MULTI_SZ

In addition, I am not sure what symptoms you are encountering on the
server. If everything works fine, you can ignore this error.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Adam Raff" <araff(a)newsgroup.nospam>
| References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl>
<#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl>
<eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl>
<#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl>
<h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl>
| Subject: Re: Event SRV error 2012
| Date: Tue, 21 Aug 2007 14:42:03 -0400
| Lines: 200
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| X-RFC2646: Format=Flowed; Original
| Message-ID: <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl>
| Newsgroups: microsoft.public.windows.server.general
| NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20147
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| Hi Ken
|
| Thanks for the feed back. Not sure why you pointed my to 317249 as I am
not
| getting 2021 or 2022 event errors. My errors are 2012.
|
| Now in that reg key what am I looking for. Can you give me an example by
| chance.
|
| Also all the errors disappear on the weekends so I do not think it's a
| server issue or something related in my server room as they are up 24x7.
If
| we have a long weekend no errors then as well. that is why I am hoping
that
| the return code that I am getting back from the error can point me some
| where.
|
| Adam Raff
|
| ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message
| news:h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl...
| > Hello Adam,
| >
| > Thank you for using newsgroup!
| >
| > Based on my research, this basically is an error that the network
driver
| > is
| > giving SRV on the send IRPs. First thing that I would see is if the
| > customer is running any 3rd party network software that is bound to the
| > server. You can see this by checking the following registry key.
| >
| > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
| > Bind: REG_MULTI_SZ
| >
| > 317249: How to troubleshoot Event ID 2021 and Event ID 2022
| > http://support.microsoft.com/kb/317249/en-us
| >
| > In addition, this may be caused due to a race between send and
disconnect.
| > The customer can ignore this error.
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
| > <http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| >
| >
| >
| > --------------------
| > | From: "Adam Raff" <araff(a)newsgroup.nospam>
| > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl>
| > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl>
| > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl>
| > | Subject: Re: Event SRV error 2012
| > | Date: Fri, 17 Aug 2007 17:29:35 -0400
| > | Lines: 99
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| > | X-RFC2646: Format=Flowed; Response
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| > | Message-ID: <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl>
| > | Newsgroups: microsoft.public.windows.server.general
| > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128
| > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windows.server.general:19785
| > | X-Tomcat-NG: microsoft.public.windows.server.general
| > |
| > | Hi Coraleigh,
| > |
| > | Thank you for responding but if I am not mistaken if you install or
have
| > | installed 913446 that updated supersedes security update 893066. I
have
| > | 913446 installed on all my servers already.
| > | I verified that which is way I added the sub note to let people know
| > that
| > I
| > | checked this information.
| > |
| > | If I am wrong then please correct me. I will check the version
number
| > on
| > | the TCP stack to see if it's that version or newer which I also assume
| > will
| > | be as good.
| > |
| > | I was hoping that somebody out there can read this error and the code
| > that
| > | goes with it and perhaps it points to a Mac address or something like
| > that.
| > | Is there a cheap way of sniffing around the network just to get an
idea
| > to
| > | see if I am getting any of these errors listed in 898060?
| > |
| > | Thanks
| > | Adam Raff
| > |
| > |
| > | "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message
| > | news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl...
| > | > Hi Adam,
| > | >
| > | > Some people have found that the Event ID you have is resolved by
this
| > | > Microsoft article... http://support.microsoft.com/kb/898060/
| > | >
| > | > Coraleigh Miller
| > | >
| > | > "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
| > | > news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl...
| > | >> Sorry a little more info on this problem
| > | >>
| > | >> We are running a Windows 2003 SP1 network. Desktops are all
windows
| > XP
| > | >> SP2. With all updated security patches on server and desktop side.
| > | >>
| > | >> I have also looked into KB913446 MS06-007 as this may lead to
issues
| > with
| > | >> connectivity. All my servers have this update as well as a new one
| > that
| > | >> is also getting the errors as well.
| > | >>
| > | >> Thanks
| > | >> Adam Raff
| > | >>
| > | >>
| > | >>
| > | >> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
| > | >> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl...
| > | >>> Good Day,
| > | >>>
| > | >>> Over the few months we have been having an ongoing issue with the
| > | >>> following error messages and they appear on all of our servers.
| > | >>>
| > | >>> Event Type: Warning
| > | >>> Event Source: Srv
| > | >>> Event Category: None
| > | >>> Event ID: 2012
| > | >>> Date: 8/17/2007
| > | >>> Time: 2:18:26 AM
| > | >>> User: N/A
| > | >>> Computer: HSMAIN
| > | >>> Description:
| > | >>> While transmitting or receiving data, the server encountered a
| > network
| > | >>> error. Occassional errors are expected,
| > | >>> but large amounts of these indicate a possible error in your
network
| > | >>> configuration.
| > | >>> The error status code is contained within the returned data
| > (formatted
| > | >>> as Words) and may point you towards the problem.
| > | >>>
| > | >>> For more information, see Help and Support Center at
| > | >>> http://go.microsoft.com/fwlink/events.asp.
| > | >>> Data:
| > | >>> 0000: 00040000 00540001 00000000 800007dc
| > | >>> 0010: 00000000 c0000184 00000000 00000000
| > | >>> 0020: 00000000 00000000 0000097a
| > | >>>
| > | >>>
| > | >>> I have looked at this from so many ways but I can not find the
point
| > of
| > | >>> the error. You see the problem goes away on weekends. We pretty
| > much
| > | >>> turn off all desktops but all servers and printer (network
| > connected)
| > | >>> and switches stay on. I thought that it was a desktop and checked
| > over
| > | >>> all the desktops and identified some that may have bad Nics.
After
| > | >>> fixing them I am still getting errors but again they disappear
over
| > the
| > | >>> weekend.
| > | >>>
| > | >>> The error message says to look in the error code which may point
me
| > in
| > | >>> the right direction but I can not make heads or tails out to the
| > error
| > | >>> message. If somebody knows how to read this and point me in the
| > right
| > | >>> direction it would be a great help.
| > | >>>
| > | >>> Thank You
| > | >>> Adam Raff
| > | >>>
| > | >>
| > | >>
| > | >
| > | >
| > |
| > |
| > |
| >
|
|
|

First | Prev | Next | Last
Pages: 1 2 3 4
Prev: Help with a stop message
Next: event id 7024 Source: Service Control Manager