From: paulhaskew on 31 Aug 2007 14:42 On Aug 17, 8:42 am, "Adam Raff" <ar...(a)newsgroup.nospam> wrote: > Good Day, > > Over the few months we have been having an ongoing issue with the following > error messages and they appear on all of our servers. > > Event Type: Warning > Event Source: Srv > Event Category: None > Event ID: 2012 > Date: 8/17/2007 > Time: 2:18:26 AM > User: N/A > Computer: HSMAIN > Description: > While transmitting or receiving data, the server encountered a network > error. Occassional errors are expected, > but large amounts of these indicate a possible error in your network > configuration. > The error status code is contained within the returned data (formatted as > Words) and may point you towards the problem. > > For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 00040000 00540001 00000000 800007dc > 0010: 00000000 c0000184 00000000 00000000 > 0020: 00000000 00000000 0000097a > > I have looked at this from so many ways but I can not find the point of the > error. You see the problem goes away on weekends. We pretty much turn off > all desktops but all servers and printer (network connected) and switches > stay on. I thought that it was a desktop and checked over all the desktops > and identified some that may have bad Nics. After fixing them I am still > getting errors but again they disappear over the weekend. > > The error message says to look in the error code which may point me in the > right direction but I can not make heads or tails out to the error message. > If somebody knows how to read this and point me in the right direction it > would be a great help. > > Thank You > Adam Raff Check here >> http://www.wildpackets.com/elements/misc/SMB_NT_Status_Codes.txt
From: "Ken Zhao [MSFT]" on 4 Sep 2007 04:17 Hi Adam, If you have any updates or need any further assistance on this issue, please feel free to let me know. Thanks & Regards, Ken Zhao Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | X-Tomcat-ID: 120838450 | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> <#2rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl> <uifn14Z5HHA.4928(a)TK2MSFTNGP05.phx.gbl> <KOmjUDJ6HHA.6140(a)TK2MSFTNGHUB02.phx.gbl> <#nRb3ke6HHA.2208(a)TK2MSFTNGP06.phx.gbl> | MIME-Version: 1.0 | Content-Type: text/plain | Content-Transfer-Encoding: 7bit | From: v-kzhao(a)online.microsoft.com ("Ken Zhao [MSFT]") | Organization: Microsoft | Date: Thu, 30 Aug 2007 09:06:47 GMT | Subject: Re: Event SRV error 2012 | X-Tomcat-NG: microsoft.public.windows.server.general | Message-ID: <m4EVgUu6HHA.5608(a)TK2MSFTNGHUB02.phx.gbl> | Newsgroups: microsoft.public.windows.server.general | Lines: 440 | Path: TK2MSFTNGHUB02.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20963 | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182 | | Hello Adam, | | The only issue is network slow? | | Please understand performance issues can be difficult to troubleshoot and | resolve in a newsgroup setting due to the number of variables and the | amount of time required to narrow down possible causes and observe the | effects. | | Thanks & Regards, | | Ken Zhao | | Microsoft Online Support | Microsoft Global Technical Support Center | | Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> | ==================================================== | When responding to posts, please "Reply to Group" via your newsreader so | that others may learn and benefit from your issue. | ==================================================== | This posting is provided "AS IS" with no warranties, and confers no rights. | | | | | | -------------------- | | From: "Adam Raff" <araff(a)newsgroup.nospam> | | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> | <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> | <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> | <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> | <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> | <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> | <#2rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl> | <uifn14Z5HHA.4928(a)TK2MSFTNGP05.phx.gbl> | <KOmjUDJ6HHA.6140(a)TK2MSFTNGHUB02.phx.gbl> | | Subject: Re: Event SRV error 2012 | | Date: Tue, 28 Aug 2007 23:03:51 -0400 | | Lines: 422 | | X-Priority: 3 | | X-MSMail-Priority: Normal | | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | | X-RFC2646: Format=Flowed; Original | | Message-ID: <#nRb3ke6HHA.2208(a)TK2MSFTNGP06.phx.gbl> | | Newsgroups: microsoft.public.windows.server.general | | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 | | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20868 | | X-Tomcat-NG: microsoft.public.windows.server.general | | | | Hi Ken, | | | | From what I can see nothing seems to be affecting the network but I am | | getting some people complaining that the network seems slow. Not sure if | it | | is related or not. | | | | Just to give you more info. I have already updated the nic drivers on | one | | of the servers to see if that helps. No luck there as well. I am trying | to | | power systems down at night but what I can tell the problem is still | there. | | It seems that I have to do it my trial and error. | | | | Adam | | | | | | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message | | news:KOmjUDJ6HHA.6140(a)TK2MSFTNGHUB02.phx.gbl... | | > Hi Adam, | | > | | > Actually, this event error may be caused by more reasons. Could you let | us | | > know what symptoms you are encountering on the server? What issues are | | > occurring when the event error is logged? | | > | | > Thanks & Regards, | | > | | > Ken Zhao | | > | | > Microsoft Online Support | | > Microsoft Global Technical Support Center | | > | | > Get Secure! - www.microsoft.com/security | | > <http://www.microsoft.com/security> | | > ==================================================== | | > When responding to posts, please "Reply to Group" via your newsreader so | | > that others may learn and benefit from your issue. | | > ==================================================== | | > This posting is provided "AS IS" with no warranties, and confers no | | > rights. | | > | | > | | > | | > | | > | | > -------------------- | | > | From: "Adam Raff" <araff(a)newsgroup.nospam> | | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> | | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> | | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> | | > <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> | | > <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> | | > <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> | | > <#2rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl> | | > | Subject: Re: Event SRV error 2012 | | > | Date: Thu, 23 Aug 2007 11:56:44 -0400 | | > | Lines: 315 | | > | X-Priority: 3 | | > | X-MSMail-Priority: Normal | | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | | > | X-RFC2646: Format=Flowed; Original | | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | | > | Message-ID: <uifn14Z5HHA.4928(a)TK2MSFTNGP05.phx.gbl> | | > | Newsgroups: microsoft.public.windows.server.general | | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net | 208.39.138.189 | | > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl | | > | Xref: TK2MSFTNGHUB02.phx.gbl | | > microsoft.public.windows.server.general:20380 | | > | X-Tomcat-NG: microsoft.public.windows.server.general | | > | | | > | Hi Ken, | | > | | | > | To be honest I am not sure what I am looking for when I look at these | | > | setting in the registry. If you could give me an example that would | be | | > | great. | | > | | | > | I am getting a lot of errors and I just want to make sure that it's | not | | > the | | > | network. I believe it's a computer or device but I am having a ton of | | > | problems tracking the problem down. Since the issues seem to stop on | | > | weekends, I would think it's a computer as we shut all the systems | down | | > on | | > | Friday for the weekend (Servers, networked printers and the like stay | on | | > | including switches and routes). I am thinking that it may be a | computer | | > | hitting a bad port on a switch but this is above my head and not sure | | > how | | > to | | > | trouble shoot this or how to go about find the problem. That is why I | | > was | | > | hoping that the codes in the event may point be in some direction as | | > they | | > | state that the error is there | | > | | | > | The error status code is contained within the returned data | | > | > | > (formatted | | > | > | > | >>> as Words) and may point you towards the problem. | | > | | | > | I was hoping that something in the error code could point be | someplace. | | > I | | > | am planning on testing some systems over the weekend and leave them | on | | > to | | > | see if I get any errors or not. | | > | | | > | Thanks | | > | Adam Raff | | > | | | > | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in message | | > | news:%232rLzEL5HHA.2340(a)TK2MSFTNGHUB02.phx.gbl... | | > | > Hi Adam, | | > | > | | > | > I found some similar cases that related to the following registry | key: | | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | | > | > Bind: REG_MULTI_SZ | | > | > | | > | > In addition, I am not sure what symptoms you are encountering on the | | > | > server. If everything works fine, you can ignore this error. | | > | > | | > | > Thanks & Regards, | | > | > | | > | > Ken Zhao | | > | > | | > | > Microsoft Online Support | | > | > Microsoft Global Technical Support Center | | > | > | | > | > Get Secure! - www.microsoft.com/security | | > | > <http://www.microsoft.com/security> | | > | > ==================================================== | | > | > When responding to posts, please "Reply to Group" via your | newsreader | | > so | | > | > that others may learn and benefit from your issue. | | > | > ==================================================== | | > | > This posting is provided "AS IS" with no warranties, and confers no | | > | > rights. | | > | > | | > | > | | > | > | | > | > | | > | > | | > | > -------------------- | | > | > | From: "Adam Raff" <araff(a)newsgroup.nospam> | | > | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> | | > | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> | | > | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> | | > | > <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> | | > | > <h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl> | | > | > | Subject: Re: Event SRV error 2012 | | > | > | Date: Tue, 21 Aug 2007 14:42:03 -0400 | | > | > | Lines: 200 | | > | > | X-Priority: 3 | | > | > | X-MSMail-Priority: Normal | | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | | > | > | X-RFC2646: Format=Flowed; Original | | > | > | Message-ID: <eQmm4LC5HHA.4476(a)TK2MSFTNGP06.phx.gbl> | | > | > | Newsgroups: microsoft.public.windows.server.general | | > | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net | | > 208.39.138.189 | | > | > | Path: | | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | | > | > | Xref: TK2MSFTNGHUB02.phx.gbl | | > | > microsoft.public.windows.server.general:20147 | | > | > | X-Tomcat-NG: microsoft.public.windows.server.general | | > | > | | | > | > | Hi Ken | | > | > | | | > | > | Thanks for the feed back. Not sure why you pointed my to 317249 | as | | > I | | > am | | > | > not | | > | > | getting 2021 or 2022 event errors. My errors are 2012. | | > | > | | | > | > | Now in that reg key what am I looking for. Can you give me an | | > example | | > | > by | | > | > | chance. | | > | > | | | > | > | Also all the errors disappear on the weekends so I do not think | it's | | > a | | > | > | server issue or something related in my server room as they are up | | > 24x7. | | > | > If | | > | > | we have a long weekend no errors then as well. that is why I am | | > hoping | | > | > that | | > | > | the return code that I am getting back from the error can point me | | > some | | > | > | where. | | > | > | | | > | > | Adam Raff | | > | > | | | > | > | ""Ken Zhao [MSFT]"" <v-kzhao(a)online.microsoft.com> wrote in | message | | > | > | news:h7unbou4HHA.4200(a)TK2MSFTNGHUB02.phx.gbl... | | > | > | > Hello Adam, | | > | > | > | | > | > | > Thank you for using newsgroup! | | > | > | > | | > | > | > Based on my research, this basically is an error that the | network | | > | > driver | | > | > | > is | | > | > | > giving SRV on the send IRPs. First thing that I would see is if | | > the | | > | > | > customer is running any 3rd party network software that is | bound | | > to | | > | > the | | > | > | > server. You can see this by checking the following registry key. | | > | > | > | | > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | | > | > | > Bind: REG_MULTI_SZ | | > | > | > | | > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 | | > | > | > http://support.microsoft.com/kb/317249/en-us | | > | > | > | | > | > | > In addition, this may be caused due to a race between send and | | > | > disconnect. | | > | > | > The customer can ignore this error. | | > | > | > | | > | > | > Thanks & Regards, | | > | > | > | | > | > | > Ken Zhao | | > | > | > | | > | > | > Microsoft Online Support | | > | > | > Microsoft Global Technical Support Center | | > | > | > | | > | > | > Get Secure! - www.microsoft.com/security | | > | > | > <http://www.microsoft.com/security> | | > | > | > ==================================================== | | > | > | > When responding to posts, please "Reply to Group" via your | | > newsreader | | > | > so | | > | > | > that others may learn and benefit from your issue. | | > | > | > ==================================================== | | > | > | > This posting is provided "AS IS" with no warranties, and | confers | | > no | | > | > | > rights. | | > | > | > | | > | > | > | | > | > | > | | > | > | > | | > | > | > -------------------- | | > | > | > | From: "Adam Raff" <araff(a)newsgroup.nospam> | | > | > | > | References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl> | | > | > | > <#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl> | | > | > | > <eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl> | | > | > | > | Subject: Re: Event SRV error 2012 | | > | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 | | > | > | > | Lines: 99 | | > | > | > | X-Priority: 3 | | > | > | > | X-MSMail-Priority: Normal | | > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | | > | > | > | X-RFC2646: Format=Flowed; Response | | > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | | > | > | > | Message-ID: <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl> | | > | > | > | Newsgroups: microsoft.public.windows.server.general | | > | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net | 69.115.51.128 | | > | > | > | Path: | | > | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl | | > | > | > | Xref: TK2MSFTNGHUB02.phx.gbl | | > | > | > microsoft.public.windows.server.general:19785 | | > | > | > | X-Tomcat-NG: microsoft.public.windows.server.general | | > | > | > | | | > | > | > | Hi Coraleigh, | | > | > | > | | | > | > | > | Thank you for responding but if I am not mistaken if you | install | | > or | | > | > have | | > | > | > | installed 913446 that updated supersedes security update | 893066. | | > I | | > | > have | | > | > | > | 913446 installed on all my servers already. | | > | > | > | I verified that which is way I added the sub note to let | people | | > know | | > | > | > that | | > | > | > I | | > | > | > | checked this information. | | > | > | > | | | > | > | > | If I am wrong then please correct me. I will check the | version | | > | > number | | > | > | > on | | > | > | > | the TCP stack to see if it's that version or newer which I | also | | > | > assume | | > | > | > will | | > | > | > | be as good. | | > | > | > | | | > | > | > | I was hoping that somebody out there can read this error and | the | | > | > code | | > | > | > that | | > | > | > | goes with it and perhaps it points to a Mac address or | something | | > | > like | | > | > | > that. | | > | > | > | Is there a cheap way of sniffing around the network just to | get | | > an | | > | > idea | | > | > | > to | | > | > | > | see if I am getting any of these errors listed in 898060? | | > | > | > | | | > | > | > | Thanks | | > | > | > | Adam Raff | | > | > | > | | | > | > | > | | | > | > | > | "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in | message | | > | > | > | news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl... | | > | > | > | > Hi Adam, | | > | > | > | > | | > | > | > | > Some people have found that the Event ID you have is | resolved | | > by | | > | > this | | > | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/ | | > | > | > | > | | > | > | > | > Coraleigh Miller | | > | > | > | > | | > | > | > | > "Adam Raff" <araff(a)newsgroup.nospam> wrote in message | | > | > | > | > news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl... | | > | > | > | >> Sorry a little more info on this problem | | > | > | > | >> | | > | > | > | >> We are running a Windows 2003 SP1 network. Desktops are | all | | > | > windows | | > | > | > XP | | > | > | > | >> SP2. With all updated security patches on server and | desktop | | > | > side. | | > | > | > | >> | | > | > | > | >> I have also looked into KB913446 MS06-007 as this may lead | to | | > | > issues | | > | > | > with | | > | > | > | >> connectivity. All my servers have this update as well as a | | > new | | > | > one | | > | > | > that | | > | > | > | >> is also getting the errors as well. | | > | > | > | >> | | > | > | > | >> Thanks | | > | > | > | >> Adam Raff | | > | > | > | >> | | > | > | > | >> | | > | > | > | >> | | > | > | > | >> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message | | > | > | > | >> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl... | | > | > | > | >>> Good Day, | | > | > | > | >>> | | > | > | > | >>> Over the few months we have been having an ongoing issue | | > with | | > | > the | | > | > | > | >>> following error messages and they appear on all of our | | > servers. | | > | > | > | >>> | | > | > | > | >>> Event Type: Warning | | > | > | > | >>> Event Source: Srv | | > | > | > | >>> Event Category: None | | > | > | > | >>> Event ID: 2012 | | > | > | > | >>> Date: 8/17/2007 | | > | > | > | >>> Time: 2:18:26 AM | | > | > | > | >>> User: N/A | | > | > | > | >>> Computer: HSMAIN | | > | > | > | >>> Description: | | > | > | > | >>> While transmitting or receiving data, the server | encountered | | > a | | > | > | > network | | > | > | > | >>> error. Occassional errors are expected, | | > | > | > | >>> but large amounts of these indicate a possible error in | your | | > | > network | | > | > | > | >>> configuration. | | > | > | > | >>> The error status code is contained within the returned | data | | > | > | > (formatted | | > | > | > | >>> as Words) and may point you towards the problem. | | > | > | > | >>> | | > | > | > | >>> For more information, see Help and Support Center at | | > | > | > | >>> http://go.microsoft.com/fwlink/events.asp. | | > | > | > | >>> Data: | | > | > | > | >>> 0000: 00040000 00540001 00000000 800007dc | | > | > | > | >>> 0010: 00000000 c0000184 00000000 00000000 | | > | > | > | >>> 0020: 00000000 00000000 0000097a | | > | > | > | >>> | | > | > | > | >>> | | > | > | > | >>> I have looked at this from so many ways but I can not | find | | > the | | > | > point | | > | > | > of | | > | > | > | >>> the error. You see the problem goes away on weekends. We | | > | > pretty | | > | > | > much | | > | > | > | >>> turn off all desktops but all servers and printer (network | | > | > | > connected) | | > | > | > | >>> and switches stay on. I thought that it was a desktop and | | > | > checked | | > | > | > over | | > | > | > | >>> all the desktops and identified some that may have bad | Nics. | | > | > After | | > | > | > | >>> fixing them I am still getting errors but again they | | > disappear | | > | > over | | > | > | > the | | > | > | > | >>> weekend. | | > | > | > | >>> | | > | > | > | >>> The error message says to look in the error code which may | | > point | | > | > me | | > | > | > in | | > | > | > | >>> the right direction but I can not make heads or tails out | to | | > the | | > | > | > error | | > | > | > | >>> message. If somebody knows how to read this and point me | in | | > the | | > | > | > right | | > | > | > | >>> direction it would be a great help. | | > | > | > | >>> | | > | > | > | >>> Thank You | | > | > | > | >>> Adam Raff | | > | > | > | >>> | | > | > | > | >> | | > | > | > | >> | | > | > | > | > | | > | > | > | > | | > | > | > | | | > | > | > | | | > | > | > | | | > | > | > | | > | > | | | > | > | | | > | > | | | > | > | | > | | | > | | | > | | | > | | | | | | | |
First
|
Prev
|
Pages: 1 2 3 4 Prev: Help with a stop message Next: event id 7024 Source: Service Control Manager |