From: Adam Raff on
Good Day,

Over the few months we have been having an ongoing issue with the following
error messages and they appear on all of our servers.

Event Type: Warning
Event Source: Srv
Event Category: None
Event ID: 2012
Date: 8/17/2007
Time: 2:18:26 AM
User: N/A
Computer: HSMAIN
Description:
While transmitting or receiving data, the server encountered a network
error. Occassional errors are expected,
but large amounts of these indicate a possible error in your network
configuration.
The error status code is contained within the returned data (formatted as
Words) and may point you towards the problem.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00040000 00540001 00000000 800007dc
0010: 00000000 c0000184 00000000 00000000
0020: 00000000 00000000 0000097a


I have looked at this from so many ways but I can not find the point of the
error. You see the problem goes away on weekends. We pretty much turn off
all desktops but all servers and printer (network connected) and switches
stay on. I thought that it was a desktop and checked over all the desktops
and identified some that may have bad Nics. After fixing them I am still
getting errors but again they disappear over the weekend.

The error message says to look in the error code which may point me in the
right direction but I can not make heads or tails out to the error message.
If somebody knows how to read this and point me in the right direction it
would be a great help.

Thank You
Adam Raff


From: Adam Raff on
Sorry a little more info on this problem

We are running a Windows 2003 SP1 network. Desktops are all windows XP SP2.
With all updated security patches on server and desktop side.

I have also looked into KB913446 MS06-007 as this may lead to issues with
connectivity. All my servers have this update as well as a new one that is
also getting the errors as well.

Thanks
Adam Raff



"Adam Raff" <araff(a)newsgroup.nospam> wrote in message
news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl...
> Good Day,
>
> Over the few months we have been having an ongoing issue with the
> following error messages and they appear on all of our servers.
>
> Event Type: Warning
> Event Source: Srv
> Event Category: None
> Event ID: 2012
> Date: 8/17/2007
> Time: 2:18:26 AM
> User: N/A
> Computer: HSMAIN
> Description:
> While transmitting or receiving data, the server encountered a network
> error. Occassional errors are expected,
> but large amounts of these indicate a possible error in your network
> configuration.
> The error status code is contained within the returned data (formatted as
> Words) and may point you towards the problem.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 00040000 00540001 00000000 800007dc
> 0010: 00000000 c0000184 00000000 00000000
> 0020: 00000000 00000000 0000097a
>
>
> I have looked at this from so many ways but I can not find the point of
> the error. You see the problem goes away on weekends. We pretty much
> turn off all desktops but all servers and printer (network connected) and
> switches stay on. I thought that it was a desktop and checked over all
> the desktops and identified some that may have bad Nics. After fixing
> them I am still getting errors but again they disappear over the weekend.
>
> The error message says to look in the error code which may point me in the
> right direction but I can not make heads or tails out to the error
> message. If somebody knows how to read this and point me in the right
> direction it would be a great help.
>
> Thank You
> Adam Raff
>


From: Coraleigh Miller on
Hi Adam,

Some people have found that the Event ID you have is resolved by this
Microsoft article... http://support.microsoft.com/kb/898060/

Coraleigh Miller

"Adam Raff" <araff(a)newsgroup.nospam> wrote in message
news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl...
> Sorry a little more info on this problem
>
> We are running a Windows 2003 SP1 network. Desktops are all windows XP
> SP2. With all updated security patches on server and desktop side.
>
> I have also looked into KB913446 MS06-007 as this may lead to issues with
> connectivity. All my servers have this update as well as a new one that
> is also getting the errors as well.
>
> Thanks
> Adam Raff
>
>
>
> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl...
>> Good Day,
>>
>> Over the few months we have been having an ongoing issue with the
>> following error messages and they appear on all of our servers.
>>
>> Event Type: Warning
>> Event Source: Srv
>> Event Category: None
>> Event ID: 2012
>> Date: 8/17/2007
>> Time: 2:18:26 AM
>> User: N/A
>> Computer: HSMAIN
>> Description:
>> While transmitting or receiving data, the server encountered a network
>> error. Occassional errors are expected,
>> but large amounts of these indicate a possible error in your network
>> configuration.
>> The error status code is contained within the returned data (formatted as
>> Words) and may point you towards the problem.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: 00040000 00540001 00000000 800007dc
>> 0010: 00000000 c0000184 00000000 00000000
>> 0020: 00000000 00000000 0000097a
>>
>>
>> I have looked at this from so many ways but I can not find the point of
>> the error. You see the problem goes away on weekends. We pretty much
>> turn off all desktops but all servers and printer (network connected) and
>> switches stay on. I thought that it was a desktop and checked over all
>> the desktops and identified some that may have bad Nics. After fixing
>> them I am still getting errors but again they disappear over the weekend.
>>
>> The error message says to look in the error code which may point me in
>> the right direction but I can not make heads or tails out to the error
>> message. If somebody knows how to read this and point me in the right
>> direction it would be a great help.
>>
>> Thank You
>> Adam Raff
>>
>
>


From: Adam Raff on
Hi Coraleigh,

Thank you for responding but if I am not mistaken if you install or have
installed 913446 that updated supersedes security update 893066. I have
913446 installed on all my servers already.
I verified that which is way I added the sub note to let people know that I
checked this information.

If I am wrong then please correct me. I will check the version number on
the TCP stack to see if it's that version or newer which I also assume will
be as good.

I was hoping that somebody out there can read this error and the code that
goes with it and perhaps it points to a Mac address or something like that.
Is there a cheap way of sniffing around the network just to get an idea to
see if I am getting any of these errors listed in 898060?

Thanks
Adam Raff


"Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message
news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl...
> Hi Adam,
>
> Some people have found that the Event ID you have is resolved by this
> Microsoft article... http://support.microsoft.com/kb/898060/
>
> Coraleigh Miller
>
> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
> news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl...
>> Sorry a little more info on this problem
>>
>> We are running a Windows 2003 SP1 network. Desktops are all windows XP
>> SP2. With all updated security patches on server and desktop side.
>>
>> I have also looked into KB913446 MS06-007 as this may lead to issues with
>> connectivity. All my servers have this update as well as a new one that
>> is also getting the errors as well.
>>
>> Thanks
>> Adam Raff
>>
>>
>>
>> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
>> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl...
>>> Good Day,
>>>
>>> Over the few months we have been having an ongoing issue with the
>>> following error messages and they appear on all of our servers.
>>>
>>> Event Type: Warning
>>> Event Source: Srv
>>> Event Category: None
>>> Event ID: 2012
>>> Date: 8/17/2007
>>> Time: 2:18:26 AM
>>> User: N/A
>>> Computer: HSMAIN
>>> Description:
>>> While transmitting or receiving data, the server encountered a network
>>> error. Occassional errors are expected,
>>> but large amounts of these indicate a possible error in your network
>>> configuration.
>>> The error status code is contained within the returned data (formatted
>>> as Words) and may point you towards the problem.
>>>
>>> For more information, see Help and Support Center at
>>> http://go.microsoft.com/fwlink/events.asp.
>>> Data:
>>> 0000: 00040000 00540001 00000000 800007dc
>>> 0010: 00000000 c0000184 00000000 00000000
>>> 0020: 00000000 00000000 0000097a
>>>
>>>
>>> I have looked at this from so many ways but I can not find the point of
>>> the error. You see the problem goes away on weekends. We pretty much
>>> turn off all desktops but all servers and printer (network connected)
>>> and switches stay on. I thought that it was a desktop and checked over
>>> all the desktops and identified some that may have bad Nics. After
>>> fixing them I am still getting errors but again they disappear over the
>>> weekend.
>>>
>>> The error message says to look in the error code which may point me in
>>> the right direction but I can not make heads or tails out to the error
>>> message. If somebody knows how to read this and point me in the right
>>> direction it would be a great help.
>>>
>>> Thank You
>>> Adam Raff
>>>
>>
>>
>
>


From: "Ken Zhao [MSFT]" on
Hello Adam,

Thank you for using newsgroup!

Based on my research, this basically is an error that the network driver is
giving SRV on the send IRPs. First thing that I would see is if the
customer is running any 3rd party network software that is bound to the
server. You can see this by checking the following registry key.

HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
Bind: REG_MULTI_SZ

317249: How to troubleshoot Event ID 2021 and Event ID 2022
http://support.microsoft.com/kb/317249/en-us

In addition, this may be caused due to a race between send and disconnect.
The customer can ignore this error.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.




--------------------
| From: "Adam Raff" <araff(a)newsgroup.nospam>
| References: <Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl>
<#VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl>
<eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl>
| Subject: Re: Event SRV error 2012
| Date: Fri, 17 Aug 2007 17:29:35 -0400
| Lines: 99
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| X-RFC2646: Format=Flowed; Response
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| Message-ID: <#IUi3WR4HHA.4880(a)TK2MSFTNGP03.phx.gbl>
| Newsgroups: microsoft.public.windows.server.general
| NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:19785
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| Hi Coraleigh,
|
| Thank you for responding but if I am not mistaken if you install or have
| installed 913446 that updated supersedes security update 893066. I have
| 913446 installed on all my servers already.
| I verified that which is way I added the sub note to let people know that
I
| checked this information.
|
| If I am wrong then please correct me. I will check the version number on
| the TCP stack to see if it's that version or newer which I also assume
will
| be as good.
|
| I was hoping that somebody out there can read this error and the code
that
| goes with it and perhaps it points to a Mac address or something like
that.
| Is there a cheap way of sniffing around the network just to get an idea
to
| see if I am getting any of these errors listed in 898060?
|
| Thanks
| Adam Raff
|
|
| "Coraleigh Miller" <CoraleighMiller(a)yahoo.com> wrote in message
| news:eBqMGeP4HHA.1208(a)TK2MSFTNGP03.phx.gbl...
| > Hi Adam,
| >
| > Some people have found that the Event ID you have is resolved by this
| > Microsoft article... http://support.microsoft.com/kb/898060/
| >
| > Coraleigh Miller
| >
| > "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
| > news:%23VLpidO4HHA.5424(a)TK2MSFTNGP02.phx.gbl...
| >> Sorry a little more info on this problem
| >>
| >> We are running a Windows 2003 SP1 network. Desktops are all windows
XP
| >> SP2. With all updated security patches on server and desktop side.
| >>
| >> I have also looked into KB913446 MS06-007 as this may lead to issues
with
| >> connectivity. All my servers have this update as well as a new one
that
| >> is also getting the errors as well.
| >>
| >> Thanks
| >> Adam Raff
| >>
| >>
| >>
| >> "Adam Raff" <araff(a)newsgroup.nospam> wrote in message
| >> news:Ovn8tUO4HHA.5212(a)TK2MSFTNGP04.phx.gbl...
| >>> Good Day,
| >>>
| >>> Over the few months we have been having an ongoing issue with the
| >>> following error messages and they appear on all of our servers.
| >>>
| >>> Event Type: Warning
| >>> Event Source: Srv
| >>> Event Category: None
| >>> Event ID: 2012
| >>> Date: 8/17/2007
| >>> Time: 2:18:26 AM
| >>> User: N/A
| >>> Computer: HSMAIN
| >>> Description:
| >>> While transmitting or receiving data, the server encountered a
network
| >>> error. Occassional errors are expected,
| >>> but large amounts of these indicate a possible error in your network
| >>> configuration.
| >>> The error status code is contained within the returned data
(formatted
| >>> as Words) and may point you towards the problem.
| >>>
| >>> For more information, see Help and Support Center at
| >>> http://go.microsoft.com/fwlink/events.asp.
| >>> Data:
| >>> 0000: 00040000 00540001 00000000 800007dc
| >>> 0010: 00000000 c0000184 00000000 00000000
| >>> 0020: 00000000 00000000 0000097a
| >>>
| >>>
| >>> I have looked at this from so many ways but I can not find the point
of
| >>> the error. You see the problem goes away on weekends. We pretty
much
| >>> turn off all desktops but all servers and printer (network connected)
| >>> and switches stay on. I thought that it was a desktop and checked
over
| >>> all the desktops and identified some that may have bad Nics. After
| >>> fixing them I am still getting errors but again they disappear over
the
| >>> weekend.
| >>>
| >>> The error message says to look in the error code which may point me
in
| >>> the right direction but I can not make heads or tails out to the
error
| >>> message. If somebody knows how to read this and point me in the right
| >>> direction it would be a great help.
| >>>
| >>> Thank You
| >>> Adam Raff
| >>>
| >>
| >>
| >
| >
|
|
|