From: Adam Raff on 23 Aug 2007 11:49 Coraleigh, Thanks for your help, I did a brief capture with the old version that came with 2003 and was it a lot of data of which made little or know sense. I hope the new version is a little better. I did not see the errors that the article was pointing to but I will use the new version to see if I missed anything. I will keep you posted in what I find out. Thanks Adam Raff "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message news:eDH1ItC5HHA.1184(a)TK2MSFTNGP04.phx.gbl... > Hi Adam, > > I found that there is a new version of Network Monitor which is supposed > to be alittle nicer.. > http://www.microsoft.com/downloads/details.aspx?FamilyID=18b1d59d-f4d8-4213-8d17-2f6dde7d7aac&DisplayLang=en > > Microsoft has this article, which while it talks about the earlier version > of the program, may still help.. http://support.microsoft.com/kb/812953 > > This article walks you through a basic data capture.. > http://www.windowsnetworking.com/articles_tutorials/Working-With-Network-Monitor-Part2.html > > This is a technet blogsite featuring posts by an MS Network Monitor > expert... > http://blogs.technet.com/netmon/archive/2006/09/28/overview-of-netmon-by-yuri-diogenes.aspx > > > Coraleigh > > > > "Adam Raff" <araff(a)newsgroup.nospam> wrote in message > news:%238bE$TC5HHA.4476(a)TK2MSFTNGP06.phx.gbl... >> Coraleigh, >> >> Just installed it on my server. You wouldn't know a good place to get >> directions on how to use this program do you by chance? >> >> Adam Raff >> >> >> "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message >> news:%23LkEx1u4HHA.1992(a)TK2MSFTNGP03.phx.gbl... >>> Hi Adam, >>> >>> Have you tried using Network Monitor? >>> http://support.microsoft.com/kb/243270 >>> This article http://support.microsoft.com/kb/898060/ suggests using a >>> tool like this to help troubleshoot.... >>> "There may be some other similar scenarios where these symptoms occur. >>> These scenarios can typically be diagnosed by sniffing the network >>> traffic on either the source host side or on one of the intermediate >>> network routers. If there are multiple ICMP destination unreachable >>> messages sent over time for a destination, the source host that has the >>> MS05-019 security update or Windows Server 2003 SP1 installed is likely >>> to have this problem. " >>> >>> Hope this helps. >>> >>> Coraleigh Miller >>> >>> >>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message >>> news:%23IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl... >>>> Hi Coraleigh, >>>> >>>> Thank you for responding but if I am not mistaken if you install or >>>> have installed 913446 that updated supersedes security update 893066. >>>> I have 913446 installed on all my servers already. >>>> I verified that which is way I added the sub note to let people know >>>> that I checked this information. >>>> >>>> If I am wrong then please correct me. I will check the version number >>>> on the TCP stack to see if it's that version or newer which I also >>>> assume will be as good. >>>> >>>> I was hoping that somebody out there can read this error and the code >>>> that goes with it and perhaps it points to a Mac address or something >>>> like that. Is there a cheap way of sniffing around the network just to >>>> get an idea to see if I am getting any of these errors listed in >>>> 898060? >>>> >>>> Thanks >>>> Adam Raff >>>> >>>> >>>> "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message >>>> news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl... >>>>> Hi Adam, >>>>> >>>>> Some people have found that the Event ID you have is resolved by this >>>>> Microsoft article... http://support.microsoft.com/kb/898060/ >>>>> >>>>> Coraleigh Miller >>>>> >>>>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message >>>>> news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl... >>>>>> Sorry a little more info on this problem >>>>>> >>>>>> We are running a Windows 2003 SP1 network. Desktops are all windows >>>>>> XP SP2. With all updated security patches on server and desktop side. >>>>>> >>>>>> I have also looked into KB913446 MS06-007 as this may lead to issues >>>>>> with connectivity. All my servers have this update as well as a new >>>>>> one that is also getting the errors as well. >>>>>> >>>>>> Thanks >>>>>> Adam Raff >>>>>> >>>>>> >>>>>> >>>>>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message >>>>>> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl... >>>>>>> Good Day, >>>>>>> >>>>>>> Over the few months we have been having an ongoing issue with the >>>>>>> following error messages and they appear on all of our servers. >>>>>>> >>>>>>> Event Type: Warning >>>>>>> Event Source: Srv >>>>>>> Event Category: None >>>>>>> Event ID: 2012 >>>>>>> Date: 8/17/2007 >>>>>>> Time: 2:18:26 AM >>>>>>> User: N/A >>>>>>> Computer: HSMAIN >>>>>>> Description: >>>>>>> While transmitting or receiving data, the server encountered a >>>>>>> network error. Occassional errors are expected, >>>>>>> but large amounts of these indicate a possible error in your network >>>>>>> configuration. >>>>>>> The error status code is contained within the returned data >>>>>>> (formatted as Words) and may point you towards the problem. >>>>>>> >>>>>>> For more information, see Help and Support Center at >>>>>>> http://go.microsoft.com/fwlink/events.asp. >>>>>>> Data: >>>>>>> 0000: 00040000 00540001 00000000 800007dc >>>>>>> 0010: 00000000 c0000184 00000000 00000000 >>>>>>> 0020: 00000000 00000000 0000097a >>>>>>> >>>>>>> >>>>>>> I have looked at this from so many ways but I can not find the point >>>>>>> of the error. You see the problem goes away on weekends. We pretty >>>>>>> much turn off all desktops but all servers and printer (network >>>>>>> connected) and switches stay on. I thought that it was a desktop >>>>>>> and checked over all the desktops and identified some that may have >>>>>>> bad Nics. After fixing them I am still getting errors but again >>>>>>> they disappear over the weekend. >>>>>>> >>>>>>> The error message says to look in the error code which may point me >>>>>>> in the right direction but I can not make heads or tails out to the >>>>>>> error message. If somebody knows how to read this and point me in >>>>>>> the right direction it would be a great help. >>>>>>> >>>>>>> Thank You >>>>>>> Adam Raff >>>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> >> > >
From: Adam Raff on 23 Aug 2007 11:56 Hi Ken, To be honest I am not sure what I am looking for when I look at these setting in the registry. If you could give me an example that would be great. I am getting a lot of errors and I just want to make sure that it's not the network. I believe it's a computer or device but I am having a ton of problems tracking the problem down. Since the issues seem to stop on weekends, I would think it's a computer as we shut all the systems down on Friday for the weekend (Servers, networked printers and the like stay on including switches and routes). I am thinking that it may be a computer hitting a bad port on a switch but this is above my head and not sure how to trouble shoot this or how to go about find the problem. That is why I was hoping that the codes in the event may point be in some direction as they state that the error is there The error status code is contained within the returned data > | > (formatted > | > | >>> as Words) and may point you towards the problem. I was hoping that something in the error code could point be someplace. I am planning on testing some systems over the weekend and leave them on to see if I get any errors or not. Thanks Adam Raff ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message news:%232rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl... > Hi Adam, > > I found some similar cases that related to the following registry key: > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage > Bind: REG_MULTI_SZ > > In addition, I am not sure what symptoms you are encountering on the > server. If everything works fine, you can ignore this error. > > Thanks & Regards, > > Ken Zhao > > Microsoft Online Support > Microsoft Global Technical Support Center > > Get Secure! - www.microsoft.com/security > <http://www.microsoft.com/security> > ==================================================== > When responding to posts, please "Reply to Group" via your newsreader so > that others may learn and benefit from your issue. > ==================================================== > This posting is provided "AS IS" with no warranties, and confers no > rights. > > > > > > -------------------- > | From: "Adam Raff" <araff(a)newsgroup.nospam> > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> > <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> > <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> > | Subject: Re: Event SRV error 2012 > | Date: Tue, 21 Aug 2007 14:42:03 -0400 > | Lines: 200 > | X-Priority: 3 > | X-MSMail-Priority: Normal > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | X-RFC2646: Format=Flowed; Original > | Message-ID: <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> > | Newsgroups: microsoft.public.windows.server.general > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl > | Xref: TK2MSFTNGHUB02.phx.gbl > microsoft.public.windows.server.general:20147 > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | Hi Ken > | > | Thanks for the feed back. Not sure why you pointed my to 317249 as I am > not > | getting 2021 or 2022 event errors. My errors are 2012. > | > | Now in that reg key what am I looking for. Can you give me an example > by > | chance. > | > | Also all the errors disappear on the weekends so I do not think it's a > | server issue or something related in my server room as they are up 24x7. > If > | we have a long weekend no errors then as well. that is why I am hoping > that > | the return code that I am getting back from the error can point me some > | where. > | > | Adam Raff > | > | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message > | news:h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl... > | > Hello Adam, > | > > | > Thank you for using newsgroup! > | > > | > Based on my research, this basically is an error that the network > driver > | > is > | > giving SRV on the send IRPs. First thing that I would see is if the > | > customer is running any 3rd party network software that is bound to > the > | > server. You can see this by checking the following registry key. > | > > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage > | > Bind: REG_MULTI_SZ > | > > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 > | > http://support.microsoft.com/kb/317249/en-us > | > > | > In addition, this may be caused due to a race between send and > disconnect. > | > The customer can ignore this error. > | > > | > Thanks & Regards, > | > > | > Ken Zhao > | > > | > Microsoft Online Support > | > Microsoft Global Technical Support Center > | > > | > Get Secure! - www.microsoft.com/security > | > <http://www.microsoft.com/security> > | > ==================================================== > | > When responding to posts, please "Reply to Group" via your newsreader > so > | > that others may learn and benefit from your issue. > | > ==================================================== > | > This posting is provided "AS IS" with no warranties, and confers no > | > rights. > | > > | > > | > > | > > | > -------------------- > | > | From: "Adam Raff" <araff(a)newsgroup.nospam> > | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> > | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> > | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> > | > | Subject: Re: Event SRV error 2012 > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 > | > | Lines: 99 > | > | X-Priority: 3 > | > | X-MSMail-Priority: Normal > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | > | X-RFC2646: Format=Flowed; Response > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | > | Message-ID: <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> > | > | Newsgroups: microsoft.public.windows.server.general > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 > | > | Path: > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl > | > | Xref: TK2MSFTNGHUB02.phx.gbl > | > microsoft.public.windows.server.general:19785 > | > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | > | > | Hi Coraleigh, > | > | > | > | Thank you for responding but if I am not mistaken if you install or > have > | > | installed 913446 that updated supersedes security update 893066. I > have > | > | 913446 installed on all my servers already. > | > | I verified that which is way I added the sub note to let people know > | > that > | > I > | > | checked this information. > | > | > | > | If I am wrong then please correct me. I will check the version > number > | > on > | > | the TCP stack to see if it's that version or newer which I also > assume > | > will > | > | be as good. > | > | > | > | I was hoping that somebody out there can read this error and the > code > | > that > | > | goes with it and perhaps it points to a Mac address or something > like > | > that. > | > | Is there a cheap way of sniffing around the network just to get an > idea > | > to > | > | see if I am getting any of these errors listed in 898060? > | > | > | > | Thanks > | > | Adam Raff > | > | > | > | > | > | "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message > | > | news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl... > | > | > Hi Adam, > | > | > > | > | > Some people have found that the Event ID you have is resolved by > this > | > | > Microsoft article... http://support.microsoft.com/kb/898060/ > | > | > > | > | > Coraleigh Miller > | > | > > | > | > "Adam Raff" <araff(a)newsgroup.nospam> wrote in message > | > | > news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl... > | > | >> Sorry a little more info on this problem > | > | >> > | > | >> We are running a Windows 2003 SP1 network. Desktops are all > windows > | > XP > | > | >> SP2. With all updated security patches on server and desktop > side. > | > | >> > | > | >> I have also looked into KB913446 MS06-007 as this may lead to > issues > | > with > | > | >> connectivity. All my servers have this update as well as a new > one > | > that > | > | >> is also getting the errors as well. > | > | >> > | > | >> Thanks > | > | >> Adam Raff > | > | >> > | > | >> > | > | >> > | > | >> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message > | > | >> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl... > | > | >>> Good Day, > | > | >>> > | > | >>> Over the few months we have been having an ongoing issue with > the > | > | >>> following error messages and they appear on all of our servers. > | > | >>> > | > | >>> Event Type: Warning > | > | >>> Event Source: Srv > | > | >>> Event Category: None > | > | >>> Event ID: 2012 > | > | >>> Date: 8/17/2007 > | > | >>> Time: 2:18:26 AM > | > | >>> User: N/A > | > | >>> Computer: HSMAIN > | > | >>> Description: > | > | >>> While transmitting or receiving data, the server encountered a > | > network > | > | >>> error. Occassional errors are expected, > | > | >>> but large amounts of these indicate a possible error in your > network > | > | >>> configuration. > | > | >>> The error status code is contained within the returned data > | > (formatted > | > | >>> as Words) and may point you towards the problem. > | > | >>> > | > | >>> For more information, see Help and Support Center at > | > | >>> http://go.microsoft.com/fwlink/events.asp. > | > | >>> Data: > | > | >>> 0000: 00040000 00540001 00000000 800007dc > | > | >>> 0010: 00000000 c0000184 00000000 00000000 > | > | >>> 0020: 00000000 00000000 0000097a > | > | >>> > | > | >>> > | > | >>> I have looked at this from so many ways but I can not find the > point > | > of > | > | >>> the error. You see the problem goes away on weekends. We > pretty > | > much > | > | >>> turn off all desktops but all servers and printer (network > | > connected) > | > | >>> and switches stay on. I thought that it was a desktop and > checked > | > over > | > | >>> all the desktops and identified some that may have bad Nics. > After > | > | >>> fixing them I am still getting errors but again they disappear > over > | > the > | > | >>> weekend. > | > | >>> > | > | >>> The error message says to look in the error code which may point > me > | > in > | > | >>> the right direction but I can not make heads or tails out to the > | > error > | > | >>> message. If somebody knows how to read this and point me in the > | > right > | > | >>> direction it would be a great help. > | > | >>> > | > | >>> Thank You > | > | >>> Adam Raff > | > | >>> > | > | >> > | > | >> > | > | > > | > | > > | > | > | > | > | > | > | > > | > | > | >
From: "Ken Zhao [MSFT]" on 27 Aug 2007 05:58 Hi Adam, Actually, this event error may be caused by more reasons. Could you let us know what symptoms you are encountering on the server? What issues are occurring when the event error is logged? Thanks & Regards, Ken Zhao Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | From: "Adam Raff" <araff(a)newsgroup.nospam> | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> <#2rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl> | Subject: Re: Event SRV error 2012 | Date: Thu, 23 Aug 2007 11:56:44 -0400 | Lines: 315 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | X-RFC2646: Format=Flowed; Original | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | Message-ID: <uifn14Z5HHA.4928(a)TK2MSFTNGP05.phx.gbl> | Newsgroups: microsoft.public.windows.server.general | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20380 | X-Tomcat-NG: microsoft.public.windows.server.general | | Hi Ken, | | To be honest I am not sure what I am looking for when I look at these | setting in the registry. If you could give me an example that would be | great. | | I am getting a lot of errors and I just want to make sure that it's not the | network. I believe it's a computer or device but I am having a ton of | problems tracking the problem down. Since the issues seem to stop on | weekends, I would think it's a computer as we shut all the systems down on | Friday for the weekend (Servers, networked printers and the like stay on | including switches and routes). I am thinking that it may be a computer | hitting a bad port on a switch but this is above my head and not sure how to | trouble shoot this or how to go about find the problem. That is why I was | hoping that the codes in the event may point be in some direction as they | state that the error is there | | The error status code is contained within the returned data | > | > (formatted | > | > | >>> as Words) and may point you towards the problem. | | I was hoping that something in the error code could point be someplace. I | am planning on testing some systems over the weekend and leave them on to | see if I get any errors or not. | | Thanks | Adam Raff | | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message | news:%232rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl... | > Hi Adam, | > | > I found some similar cases that related to the following registry key: | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | > Bind: REG_MULTI_SZ | > | > In addition, I am not sure what symptoms you are encountering on the | > server. If everything works fine, you can ignore this error. | > | > Thanks & Regards, | > | > Ken Zhao | > | > Microsoft Online Support | > Microsoft Global Technical Support Center | > | > Get Secure! - www.microsoft.com/security | > <http://www.microsoft.com/security> | > ==================================================== | > When responding to posts, please "Reply to Group" via your newsreader so | > that others may learn and benefit from your issue. | > ==================================================== | > This posting is provided "AS IS" with no warranties, and confers no | > rights. | > | > | > | > | > | > -------------------- | > | From: "Adam Raff" <araff(a)newsgroup.nospam> | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> | > <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> | > <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> | > | Subject: Re: Event SRV error 2012 | > | Date: Tue, 21 Aug 2007 14:42:03 -0400 | > | Lines: 200 | > | X-Priority: 3 | > | X-MSMail-Priority: Normal | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | X-RFC2646: Format=Flowed; Original | > | Message-ID: <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> | > | Newsgroups: microsoft.public.windows.server.general | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 | > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | > | Xref: TK2MSFTNGHUB02.phx.gbl | > microsoft.public.windows.server.general:20147 | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | | > | Hi Ken | > | | > | Thanks for the feed back. Not sure why you pointed my to 317249 as I am | > not | > | getting 2021 or 2022 event errors. My errors are 2012. | > | | > | Now in that reg key what am I looking for. Can you give me an example | > by | > | chance. | > | | > | Also all the errors disappear on the weekends so I do not think it's a | > | server issue or something related in my server room as they are up 24x7. | > If | > | we have a long weekend no errors then as well. that is why I am hoping | > that | > | the return code that I am getting back from the error can point me some | > | where. | > | | > | Adam Raff | > | | > | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message | > | news:h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl... | > | > Hello Adam, | > | > | > | > Thank you for using newsgroup! | > | > | > | > Based on my research, this basically is an error that the network | > driver | > | > is | > | > giving SRV on the send IRPs. First thing that I would see is if the | > | > customer is running any 3rd party network software that is bound to | > the | > | > server. You can see this by checking the following registry key. | > | > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | > | > Bind: REG_MULTI_SZ | > | > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 | > | > http://support.microsoft.com/kb/317249/en-us | > | > | > | > In addition, this may be caused due to a race between send and | > disconnect. | > | > The customer can ignore this error. | > | > | > | > Thanks & Regards, | > | > | > | > Ken Zhao | > | > | > | > Microsoft Online Support | > | > Microsoft Global Technical Support Center | > | > | > | > Get Secure! - www.microsoft.com/security | > | > <http://www.microsoft.com/security> | > | > ==================================================== | > | > When responding to posts, please "Reply to Group" via your newsreader | > so | > | > that others may learn and benefit from your issue. | > | > ==================================================== | > | > This posting is provided "AS IS" with no warranties, and confers no | > | > rights. | > | > | > | > | > | > | > | > | > | > -------------------- | > | > | From: "Adam Raff" <araff(a)newsgroup.nospam> | > | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> | > | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> | > | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> | > | > | Subject: Re: Event SRV error 2012 | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 | > | > | Lines: 99 | > | > | X-Priority: 3 | > | > | X-MSMail-Priority: Normal | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | > | X-RFC2646: Format=Flowed; Response | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | > | Message-ID: <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> | > | > | Newsgroups: microsoft.public.windows.server.general | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 | > | > | Path: | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl | > | > | Xref: TK2MSFTNGHUB02.phx.gbl | > | > microsoft.public.windows.server.general:19785 | > | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | > | | > | > | Hi Coraleigh, | > | > | | > | > | Thank you for responding but if I am not mistaken if you install or | > have | > | > | installed 913446 that updated supersedes security update 893066. I | > have | > | > | 913446 installed on all my servers already. | > | > | I verified that which is way I added the sub note to let people know | > | > that | > | > I | > | > | checked this information. | > | > | | > | > | If I am wrong then please correct me. I will check the version | > number | > | > on | > | > | the TCP stack to see if it's that version or newer which I also | > assume | > | > will | > | > | be as good. | > | > | | > | > | I was hoping that somebody out there can read this error and the | > code | > | > that | > | > | goes with it and perhaps it points to a Mac address or something | > like | > | > that. | > | > | Is there a cheap way of sniffing around the network just to get an | > idea | > | > to | > | > | see if I am getting any of these errors listed in 898060? | > | > | | > | > | Thanks | > | > | Adam Raff | > | > | | > | > | | > | > | "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message | > | > | news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl... | > | > | > Hi Adam, | > | > | > | > | > | > Some people have found that the Event ID you have is resolved by | > this | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/ | > | > | > | > | > | > Coraleigh Miller | > | > | > | > | > | > "Adam Raff" <araff(a)newsgroup.nospam> wrote in message | > | > | > news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl... | > | > | >> Sorry a little more info on this problem | > | > | >> | > | > | >> We are running a Windows 2003 SP1 network. Desktops are all | > windows | > | > XP | > | > | >> SP2. With all updated security patches on server and desktop | > side. | > | > | >> | > | > | >> I have also looked into KB913446 MS06-007 as this may lead to | > issues | > | > with | > | > | >> connectivity. All my servers have this update as well as a new | > one | > | > that | > | > | >> is also getting the errors as well. | > | > | >> | > | > | >> Thanks | > | > | >> Adam Raff | > | > | >> | > | > | >> | > | > | >> | > | > | >> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message | > | > | >> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl... | > | > | >>> Good Day, | > | > | >>> | > | > | >>> Over the few months we have been having an ongoing issue with | > the | > | > | >>> following error messages and they appear on all of our servers. | > | > | >>> | > | > | >>> Event Type: Warning | > | > | >>> Event Source: Srv | > | > | >>> Event Category: None | > | > | >>> Event ID: 2012 | > | > | >>> Date: 8/17/2007 | > | > | >>> Time: 2:18:26 AM | > | > | >>> User: N/A | > | > | >>> Computer: HSMAIN | > | > | >>> Description: | > | > | >>> While transmitting or receiving data, the server encountered a | > | > network | > | > | >>> error. Occassional errors are expected, | > | > | >>> but large amounts of these indicate a possible error in your | > network | > | > | >>> configuration. | > | > | >>> The error status code is contained within the returned data | > | > (formatted | > | > | >>> as Words) and may point you towards the problem. | > | > | >>> | > | > | >>> For more information, see Help and Support Center at | > | > | >>> http://go.microsoft.com/fwlink/events.asp. | > | > | >>> Data: | > | > | >>> 0000: 00040000 00540001 00000000 800007dc | > | > | >>> 0010: 00000000 c0000184 00000000 00000000 | > | > | >>> 0020: 00000000 00000000 0000097a | > | > | >>> | > | > | >>> | > | > | >>> I have looked at this from so many ways but I can not find the | > point | > | > of | > | > | >>> the error. You see the problem goes away on weekends. We | > pretty | > | > much | > | > | >>> turn off all desktops but all servers and printer (network | > | > connected) | > | > | >>> and switches stay on. I thought that it was a desktop and | > checked | > | > over | > | > | >>> all the desktops and identified some that may have bad Nics. | > After | > | > | >>> fixing them I am still getting errors but again they disappear | > over | > | > the | > | > | >>> weekend. | > | > | >>> | > | > | >>> The error message says to look in the error code which may point | > me | > | > in | > | > | >>> the right direction but I can not make heads or tails out to the | > | > error | > | > | >>> message. If somebody knows how to read this and point me in the | > | > right | > | > | >>> direction it would be a great help. | > | > | >>> | > | > | >>> Thank You | > | > | >>> Adam Raff | > | > | >>> | > | > | >> | > | > | >> | > | > | > | > | > | > | > | > | | > | > | | > | > | | > | > | > | | > | | > | | > | | |
From: Adam Raff on 28 Aug 2007 23:03 Hi Ken, From what I can see nothing seems to be affecting the network but I am getting some people complaining that the network seems slow. Not sure if it is related or not. Just to give you more info. I have already updated the nic drivers on one of the servers to see if that helps. No luck there as well. I am trying to power systems down at night but what I can tell the problem is still there. It seems that I have to do it my trial and error. Adam ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message news:KOmjUDJ6HHA.6140(a)TK2MSFTNGHUB02.phx.gbl... > Hi Adam, > > Actually, this event error may be caused by more reasons. Could you let us > know what symptoms you are encountering on the server? What issues are > occurring when the event error is logged? > > Thanks & Regards, > > Ken Zhao > > Microsoft Online Support > Microsoft Global Technical Support Center > > Get Secure! - www.microsoft.com/security > <http://www.microsoft.com/security> > ==================================================== > When responding to posts, please "Reply to Group" via your newsreader so > that others may learn and benefit from your issue. > ==================================================== > This posting is provided "AS IS" with no warranties, and confers no > rights. > > > > > > -------------------- > | From: "Adam Raff" <araff(a)newsgroup.nospam> > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> > <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> > <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> > <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> > <#2rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl> > | Subject: Re: Event SRV error 2012 > | Date: Thu, 23 Aug 2007 11:56:44 -0400 > | Lines: 315 > | X-Priority: 3 > | X-MSMail-Priority: Normal > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | X-RFC2646: Format=Flowed; Original > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | Message-ID: <uifn14Z5HHA.4928(a)TK2MSFTNGP05.phx.gbl> > | Newsgroups: microsoft.public.windows.server.general > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl > | Xref: TK2MSFTNGHUB02.phx.gbl > microsoft.public.windows.server.general:20380 > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | Hi Ken, > | > | To be honest I am not sure what I am looking for when I look at these > | setting in the registry. If you could give me an example that would be > | great. > | > | I am getting a lot of errors and I just want to make sure that it's not > the > | network. I believe it's a computer or device but I am having a ton of > | problems tracking the problem down. Since the issues seem to stop on > | weekends, I would think it's a computer as we shut all the systems down > on > | Friday for the weekend (Servers, networked printers and the like stay on > | including switches and routes). I am thinking that it may be a computer > | hitting a bad port on a switch but this is above my head and not sure > how > to > | trouble shoot this or how to go about find the problem. That is why I > was > | hoping that the codes in the event may point be in some direction as > they > | state that the error is there > | > | The error status code is contained within the returned data > | > | > (formatted > | > | > | >>> as Words) and may point you towards the problem. > | > | I was hoping that something in the error code could point be someplace. > I > | am planning on testing some systems over the weekend and leave them on > to > | see if I get any errors or not. > | > | Thanks > | Adam Raff > | > | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message > | news:%232rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl... > | > Hi Adam, > | > > | > I found some similar cases that related to the following registry key: > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage > | > Bind: REG_MULTI_SZ > | > > | > In addition, I am not sure what symptoms you are encountering on the > | > server. If everything works fine, you can ignore this error. > | > > | > Thanks & Regards, > | > > | > Ken Zhao > | > > | > Microsoft Online Support > | > Microsoft Global Technical Support Center > | > > | > Get Secure! - www.microsoft.com/security > | > <http://www.microsoft.com/security> > | > ==================================================== > | > When responding to posts, please "Reply to Group" via your newsreader > so > | > that others may learn and benefit from your issue. > | > ==================================================== > | > This posting is provided "AS IS" with no warranties, and confers no > | > rights. > | > > | > > | > > | > > | > > | > -------------------- > | > | From: "Adam Raff" <araff(a)newsgroup.nospam> > | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> > | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> > | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> > | > <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> > | > <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> > | > | Subject: Re: Event SRV error 2012 > | > | Date: Tue, 21 Aug 2007 14:42:03 -0400 > | > | Lines: 200 > | > | X-Priority: 3 > | > | X-MSMail-Priority: Normal > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | > | X-RFC2646: Format=Flowed; Original > | > | Message-ID: <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> > | > | Newsgroups: microsoft.public.windows.server.general > | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net > 208.39.138.189 > | > | Path: > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl > | > | Xref: TK2MSFTNGHUB02.phx.gbl > | > microsoft.public.windows.server.general:20147 > | > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | > | > | Hi Ken > | > | > | > | Thanks for the feed back. Not sure why you pointed my to 317249 as > I > am > | > not > | > | getting 2021 or 2022 event errors. My errors are 2012. > | > | > | > | Now in that reg key what am I looking for. Can you give me an > example > | > by > | > | chance. > | > | > | > | Also all the errors disappear on the weekends so I do not think it's > a > | > | server issue or something related in my server room as they are up > 24x7. > | > If > | > | we have a long weekend no errors then as well. that is why I am > hoping > | > that > | > | the return code that I am getting back from the error can point me > some > | > | where. > | > | > | > | Adam Raff > | > | > | > | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message > | > | news:h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl... > | > | > Hello Adam, > | > | > > | > | > Thank you for using newsgroup! > | > | > > | > | > Based on my research, this basically is an error that the network > | > driver > | > | > is > | > | > giving SRV on the send IRPs. First thing that I would see is if > the > | > | > customer is running any 3rd party network software that is bound > to > | > the > | > | > server. You can see this by checking the following registry key. > | > | > > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage > | > | > Bind: REG_MULTI_SZ > | > | > > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 > | > | > http://support.microsoft.com/kb/317249/en-us > | > | > > | > | > In addition, this may be caused due to a race between send and > | > disconnect. > | > | > The customer can ignore this error. > | > | > > | > | > Thanks & Regards, > | > | > > | > | > Ken Zhao > | > | > > | > | > Microsoft Online Support > | > | > Microsoft Global Technical Support Center > | > | > > | > | > Get Secure! - www.microsoft.com/security > | > | > <http://www.microsoft.com/security> > | > | > ==================================================== > | > | > When responding to posts, please "Reply to Group" via your > newsreader > | > so > | > | > that others may learn and benefit from your issue. > | > | > ==================================================== > | > | > This posting is provided "AS IS" with no warranties, and confers > no > | > | > rights. > | > | > > | > | > > | > | > > | > | > > | > | > -------------------- > | > | > | From: "Adam Raff" <araff(a)newsgroup.nospam> > | > | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> > | > | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> > | > | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> > | > | > | Subject: Re: Event SRV error 2012 > | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 > | > | > | Lines: 99 > | > | > | X-Priority: 3 > | > | > | X-MSMail-Priority: Normal > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | > | > | X-RFC2646: Format=Flowed; Response > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | > | > | Message-ID: <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> > | > | > | Newsgroups: microsoft.public.windows.server.general > | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 > | > | > | Path: > | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl > | > | > | Xref: TK2MSFTNGHUB02.phx.gbl > | > | > microsoft.public.windows.server.general:19785 > | > | > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | > | > | > | > | Hi Coraleigh, > | > | > | > | > | > | Thank you for responding but if I am not mistaken if you install > or > | > have > | > | > | installed 913446 that updated supersedes security update 893066. > I > | > have > | > | > | 913446 installed on all my servers already. > | > | > | I verified that which is way I added the sub note to let people > know > | > | > that > | > | > I > | > | > | checked this information. > | > | > | > | > | > | If I am wrong then please correct me. I will check the version > | > number > | > | > on > | > | > | the TCP stack to see if it's that version or newer which I also > | > assume > | > | > will > | > | > | be as good. > | > | > | > | > | > | I was hoping that somebody out there can read this error and the > | > code > | > | > that > | > | > | goes with it and perhaps it points to a Mac address or something > | > like > | > | > that. > | > | > | Is there a cheap way of sniffing around the network just to get > an > | > idea > | > | > to > | > | > | see if I am getting any of these errors listed in 898060? > | > | > | > | > | > | Thanks > | > | > | Adam Raff > | > | > | > | > | > | > | > | > | "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message > | > | > | news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl... > | > | > | > Hi Adam, > | > | > | > > | > | > | > Some people have found that the Event ID you have is resolved > by > | > this > | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/ > | > | > | > > | > | > | > Coraleigh Miller > | > | > | > > | > | > | > "Adam Raff" <araff(a)newsgroup.nospam> wrote in message > | > | > | > news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl... > | > | > | >> Sorry a little more info on this problem > | > | > | >> > | > | > | >> We are running a Windows 2003 SP1 network. Desktops are all > | > windows > | > | > XP > | > | > | >> SP2. With all updated security patches on server and desktop > | > side. > | > | > | >> > | > | > | >> I have also looked into KB913446 MS06-007 as this may lead to > | > issues > | > | > with > | > | > | >> connectivity. All my servers have this update as well as a > new > | > one > | > | > that > | > | > | >> is also getting the errors as well. > | > | > | >> > | > | > | >> Thanks > | > | > | >> Adam Raff > | > | > | >> > | > | > | >> > | > | > | >> > | > | > | >> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message > | > | > | >> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl... > | > | > | >>> Good Day, > | > | > | >>> > | > | > | >>> Over the few months we have been having an ongoing issue > with > | > the > | > | > | >>> following error messages and they appear on all of our > servers. > | > | > | >>> > | > | > | >>> Event Type: Warning > | > | > | >>> Event Source: Srv > | > | > | >>> Event Category: None > | > | > | >>> Event ID: 2012 > | > | > | >>> Date: 8/17/2007 > | > | > | >>> Time: 2:18:26 AM > | > | > | >>> User: N/A > | > | > | >>> Computer: HSMAIN > | > | > | >>> Description: > | > | > | >>> While transmitting or receiving data, the server encountered > a > | > | > network > | > | > | >>> error. Occassional errors are expected, > | > | > | >>> but large amounts of these indicate a possible error in your > | > network > | > | > | >>> configuration. > | > | > | >>> The error status code is contained within the returned data > | > | > (formatted > | > | > | >>> as Words) and may point you towards the problem. > | > | > | >>> > | > | > | >>> For more information, see Help and Support Center at > | > | > | >>> http://go.microsoft.com/fwlink/events.asp. > | > | > | >>> Data: > | > | > | >>> 0000: 00040000 00540001 00000000 800007dc > | > | > | >>> 0010: 00000000 c0000184 00000000 00000000 > | > | > | >>> 0020: 00000000 00000000 0000097a > | > | > | >>> > | > | > | >>> > | > | > | >>> I have looked at this from so many ways but I can not find > the > | > point > | > | > of > | > | > | >>> the error. You see the problem goes away on weekends. We > | > pretty > | > | > much > | > | > | >>> turn off all desktops but all servers and printer (network > | > | > connected) > | > | > | >>> and switches stay on. I thought that it was a desktop and > | > checked > | > | > over > | > | > | >>> all the desktops and identified some that may have bad Nics. > | > After > | > | > | >>> fixing them I am still getting errors but again they > disappear > | > over > | > | > the > | > | > | >>> weekend. > | > | > | >>> > | > | > | >>> The error message says to look in the error code which may > point > | > me > | > | > in > | > | > | >>> the right direction but I can not make heads or tails out to > the > | > | > error > | > | > | >>> message. If somebody knows how to read this and point me in > the > | > | > right > | > | > | >>> direction it would be a great help. > | > | > | >>> > | > | > | >>> Thank You > | > | > | >>> Adam Raff > | > | > | >>> > | > | > | >> > | > | > | >> > | > | > | > > | > | > | > > | > | > | > | > | > | > | > | > | > | > | > > | > | > | > | > | > | > | > > | > | > | >
From: "Ken Zhao [MSFT]" on 30 Aug 2007 05:06 Hello Adam, The only issue is network slow? Please understand performance issues can be difficult to troubleshoot and resolve in a newsgroup setting due to the number of variables and the amount of time required to narrow down possible causes and observe the effects. Thanks & Regards, Ken Zhao Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | From: "Adam Raff" <araff(a)newsgroup.nospam> | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> <#2rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl> <uifn14Z5HHA.4928(a)TK2MSFTNGP05.phx.gbl> <KOmjUDJ6HHA.6140(a)TK2MSFTNGHUB02.phx.gbl> | Subject: Re: Event SRV error 2012 | Date: Tue, 28 Aug 2007 23:03:51 -0400 | Lines: 422 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | X-RFC2646: Format=Flowed; Original | Message-ID: <#nRb3ke6HHA.2208(a)TK2MSFTNGP06.phx.gbl> | Newsgroups: microsoft.public.windows.server.general | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20868 | X-Tomcat-NG: microsoft.public.windows.server.general | | Hi Ken, | | From what I can see nothing seems to be affecting the network but I am | getting some people complaining that the network seems slow. Not sure if it | is related or not. | | Just to give you more info. I have already updated the nic drivers on one | of the servers to see if that helps. No luck there as well. I am trying to | power systems down at night but what I can tell the problem is still there. | It seems that I have to do it my trial and error. | | Adam | | | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message | news:KOmjUDJ6HHA.6140(a)TK2MSFTNGHUB02.phx.gbl... | > Hi Adam, | > | > Actually, this event error may be caused by more reasons. Could you let us | > know what symptoms you are encountering on the server? What issues are | > occurring when the event error is logged? | > | > Thanks & Regards, | > | > Ken Zhao | > | > Microsoft Online Support | > Microsoft Global Technical Support Center | > | > Get Secure! - www.microsoft.com/security | > <http://www.microsoft.com/security> | > ==================================================== | > When responding to posts, please "Reply to Group" via your newsreader so | > that others may learn and benefit from your issue. | > ==================================================== | > This posting is provided "AS IS" with no warranties, and confers no | > rights. | > | > | > | > | > | > -------------------- | > | From: "Adam Raff" <araff(a)newsgroup.nospam> | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> | > <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> | > <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> | > <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> | > <#2rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl> | > | Subject: Re: Event SRV error 2012 | > | Date: Thu, 23 Aug 2007 11:56:44 -0400 | > | Lines: 315 | > | X-Priority: 3 | > | X-MSMail-Priority: Normal | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | X-RFC2646: Format=Flowed; Original | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | Message-ID: <uifn14Z5HHA.4928(a)TK2MSFTNGP05.phx.gbl> | > | Newsgroups: microsoft.public.windows.server.general | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 | > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl | > | Xref: TK2MSFTNGHUB02.phx.gbl | > microsoft.public.windows.server.general:20380 | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | | > | Hi Ken, | > | | > | To be honest I am not sure what I am looking for when I look at these | > | setting in the registry. If you could give me an example that would be | > | great. | > | | > | I am getting a lot of errors and I just want to make sure that it's not | > the | > | network. I believe it's a computer or device but I am having a ton of | > | problems tracking the problem down. Since the issues seem to stop on | > | weekends, I would think it's a computer as we shut all the systems down | > on | > | Friday for the weekend (Servers, networked printers and the like stay on | > | including switches and routes). I am thinking that it may be a computer | > | hitting a bad port on a switch but this is above my head and not sure | > how | > to | > | trouble shoot this or how to go about find the problem. That is why I | > was | > | hoping that the codes in the event may point be in some direction as | > they | > | state that the error is there | > | | > | The error status code is contained within the returned data | > | > | > (formatted | > | > | > | >>> as Words) and may point you towards the problem. | > | | > | I was hoping that something in the error code could point be someplace. | > I | > | am planning on testing some systems over the weekend and leave them on | > to | > | see if I get any errors or not. | > | | > | Thanks | > | Adam Raff | > | | > | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message | > | news:%232rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl... | > | > Hi Adam, | > | > | > | > I found some similar cases that related to the following registry key: | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | > | > Bind: REG_MULTI_SZ | > | > | > | > In addition, I am not sure what symptoms you are encountering on the | > | > server. If everything works fine, you can ignore this error. | > | > | > | > Thanks & Regards, | > | > | > | > Ken Zhao | > | > | > | > Microsoft Online Support | > | > Microsoft Global Technical Support Center | > | > | > | > Get Secure! - www.microsoft.com/security | > | > <http://www.microsoft.com/security> | > | > ==================================================== | > | > When responding to posts, please "Reply to Group" via your newsreader | > so | > | > that others may learn and benefit from your issue. | > | > ==================================================== | > | > This posting is provided "AS IS" with no warranties, and confers no | > | > rights. | > | > | > | > | > | > | > | > | > | > | > | > -------------------- | > | > | From: "Adam Raff" <araff(a)newsgroup.nospam> | > | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> | > | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> | > | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> | > | > <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> | > | > <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> | > | > | Subject: Re: Event SRV error 2012 | > | > | Date: Tue, 21 Aug 2007 14:42:03 -0400 | > | > | Lines: 200 | > | > | X-Priority: 3 | > | > | X-MSMail-Priority: Normal | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | > | X-RFC2646: Format=Flowed; Original | > | > | Message-ID: <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> | > | > | Newsgroups: microsoft.public.windows.server.general | > | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net | > 208.39.138.189 | > | > | Path: | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | > | > | Xref: TK2MSFTNGHUB02.phx.gbl | > | > microsoft.public.windows.server.general:20147 | > | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | > | | > | > | Hi Ken | > | > | | > | > | Thanks for the feed back. Not sure why you pointed my to 317249 as | > I | > am | > | > not | > | > | getting 2021 or 2022 event errors. My errors are 2012. | > | > | | > | > | Now in that reg key what am I looking for. Can you give me an | > example | > | > by | > | > | chance. | > | > | | > | > | Also all the errors disappear on the weekends so I do not think it's | > a | > | > | server issue or something related in my server room as they are up | > 24x7. | > | > If | > | > | we have a long weekend no errors then as well. that is why I am | > hoping | > | > that | > | > | the return code that I am getting back from the error can point me | > some | > | > | where. | > | > | | > | > | Adam Raff | > | > | | > | > | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message | > | > | news:h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl... | > | > | > Hello Adam, | > | > | > | > | > | > Thank you for using newsgroup! | > | > | > | > | > | > Based on my research, this basically is an error that the network | > | > driver | > | > | > is | > | > | > giving SRV on the send IRPs. First thing that I would see is if | > the | > | > | > customer is running any 3rd party network software that is bound | > to | > | > the | > | > | > server. You can see this by checking the following registry key. | > | > | > | > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | > | > | > Bind: REG_MULTI_SZ | > | > | > | > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 | > | > | > http://support.microsoft.com/kb/317249/en-us | > | > | > | > | > | > In addition, this may be caused due to a race between send and | > | > disconnect. | > | > | > The customer can ignore this error. | > | > | > | > | > | > Thanks & Regards, | > | > | > | > | > | > Ken Zhao | > | > | > | > | > | > Microsoft Online Support | > | > | > Microsoft Global Technical Support Center | > | > | > | > | > | > Get Secure! - www.microsoft.com/security | > | > | > <http://www.microsoft.com/security> | > | > | > ==================================================== | > | > | > When responding to posts, please "Reply to Group" via your | > newsreader | > | > so | > | > | > that others may learn and benefit from your issue. | > | > | > ==================================================== | > | > | > This posting is provided "AS IS" with no warranties, and confers | > no | > | > | > rights. | > | > | > | > | > | > | > | > | > | > | > | > | > | > | > -------------------- | > | > | > | From: "Adam Raff" <araff(a)newsgroup.nospam> | > | > | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> | > | > | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> | > | > | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> | > | > | > | Subject: Re: Event SRV error 2012 | > | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 | > | > | > | Lines: 99 | > | > | > | X-Priority: 3 | > | > | > | X-MSMail-Priority: Normal | > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | > | > | X-RFC2646: Format=Flowed; Response | > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | > | > | Message-ID: <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> | > | > | > | Newsgroups: microsoft.public.windows.server.general | > | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 | > | > | > | Path: | > | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl | > | > | > | Xref: TK2MSFTNGHUB02.phx.gbl | > | > | > microsoft.public.windows.server.general:19785 | > | > | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | > | > | | > | > | > | Hi Coraleigh, | > | > | > | | > | > | > | Thank you for responding but if I am not mistaken if you install | > or | > | > have | > | > | > | installed 913446 that updated supersedes security update 893066. | > I | > | > have | > | > | > | 913446 installed on all my servers already. | > | > | > | I verified that which is way I added the sub note to let people | > know | > | > | > that | > | > | > I | > | > | > | checked this information. | > | > | > | | > | > | > | If I am wrong then please correct me. I will check the version | > | > number | > | > | > on | > | > | > | the TCP stack to see if it's that version or newer which I also | > | > assume | > | > | > will | > | > | > | be as good. | > | > | > | | > | > | > | I was hoping that somebody out there can read this error and the | > | > code | > | > | > that | > | > | > | goes with it and perhaps it points to a Mac address or something | > | > like | > | > | > that. | > | > | > | Is there a cheap way of sniffing around the network just to get | > an | > | > idea | > | > | > to | > | > | > | see if I am getting any of these errors listed in 898060? | > | > | > | | > | > | > | Thanks | > | > | > | Adam Raff | > | > | > | | > | > | > | | > | > | > | "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message | > | > | > | news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl... | > | > | > | > Hi Adam, | > | > | > | > | > | > | > | > Some people have found that the Event ID you have is resolved | > by | > | > this | > | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/ | > | > | > | > | > | > | > | > Coraleigh Miller | > | > | > | > | > | > | > | > "Adam Raff" <araff(a)newsgroup.nospam> wrote in message | > | > | > | > news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl... | > | > | > | >> Sorry a little more info on this problem | > | > | > | >> | > | > | > | >> We are running a Windows 2003 SP1 network. Desktops are all | > | > windows | > | > | > XP | > | > | > | >> SP2. With all updated security patches on server and desktop | > | > side. | > | > | > | >> | > | > | > | >> I have also looked into KB913446 MS06-007 as this may lead to | > | > issues | > | > | > with | > | > | > | >> connectivity. All my servers have this update as well as a | > new | > | > one | > | > | > that | > | > | > | >> is also getting the errors as well. | > | > | > | >> | > | > | > | >> Thanks | > | > | > | >> Adam Raff | > | > | > | >> | > | > | > | >> | > | > | > | >> | > | > | > | >> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message | > | > | > | >> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl... | > | > | > | >>> Good Day, | > | > | > | >>> | > | > | > | >>> Over the few months we have been having an ongoing issue | > with | > | > the | > | > | > | >>> following error messages and they appear on all of our | > servers. | > | > | > | >>> | > | > | > | >>> Event Type: Warning | > | > | > | >>> Event Source: Srv | > | > | > | >>> Event Category: None | > | > | > | >>> Event ID: 2012 | > | > | > | >>> Date: 8/17/2007 | > | > | > | >>> Time: 2:18:26 AM | > | > | > | >>> User: N/A | > | > | > | >>> Computer: HSMAIN | > | > | > | >>> Description: | > | > | > | >>> While transmitting or receiving data, the server encountered | > a | > | > | > network | > | > | > | >>> error. Occassional errors are expected, | > | > | > | >>> but large amounts of these indicate a possible error in your | > | > network | > | > | > | >>> configuration. | > | > | > | >>> The error status code is contained within the returned data | > | > | > (formatted | > | > | > | >>> as Words) and may point you towards the problem. | > | > | > | >>> | > | > | > | >>> For more information, see Help and Support Center at | > | > | > | >>> http://go.microsoft.com/fwlink/events.asp. | > | > | > | >>> Data: | > | > | > | >>> 0000: 00040000 00540001 00000000 800007dc | > | > | > | >>> 0010: 00000000 c0000184 00000000 00000000 | > | > | > | >>> 0020: 00000000 00000000 0000097a | > | > | > | >>> | > | > | > | >>> | > | > | > | >>> I have looked at this from so many ways but I can not find | > the | > | > point | > | > | > of | > | > | > | >>> the error. You see the problem goes away on weekends. We | > | > pretty | > | > | > much | > | > | > | >>> turn off all desktops but all servers and printer (network | > | > | > connected) | > | > | > | >>> and switches stay on. I thought that it was a desktop and | > | > checked | > | > | > over | > | > | > | >>> all the desktops and identified some that may have bad Nics. | > | > After | > | > | > | >>> fixing them I am still getting errors but again they | > disappear | > | > over | > | > | > the | > | > | > | >>> weekend. | > | > | > | >>> | > | > | > | >>> The error message says to look in the error code which may | > point | > | > me | > | > | > in | > | > | > | >>> the right direction but I can not make heads or tails out to | > the | > | > | > error | > | > | > | >>> message. If somebody knows how to read this and point me in | > the | > | > | > right | > | > | > | >>> direction it would be a great help. | > | > | > | >>> | > | > | > | >>> Thank You | > | > | > | >>> Adam Raff | > | > | > | >>> | > | > | > | >> | > | > | > | >> | > | > | > | > | > | > | > | > | > | > | > | | > | > | > | | > | > | > | | > | > | > | > | > | | > | > | | > | > | | > | > | > | | > | | > | | > | | |
First
|
Prev
|
Next
|
Last
Pages: 1 2 3 4 Prev: Help with a stop message Next: event id 7024 Source: Service Control Manager |