analyze Eventvwr

[Guest Mistake]

hello all,

 

in eventwr sometimes we have

Data: 0000: 0000007a

microsoft says:

 

The data section of the events may contain important information for

troubleshooting. Change the view of the data section of the event from bytes

to words. Investigate the status code in the data words of the events. The

error code gives an additional hint for the reason why the event has been

logged.

 

At a command prompt, type Net Helpmsg ErrorNumber to obtain an explanation

of that error.

 

NET HELPMSG 0000007a cannot work

 

How to interpret this?

[Guest Meinolf Weber]

Re: analyze Eventvwr

 

Hello Mistake,

 

If you post the complete error from event viewer would be nice. So we can

have a look on this.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> hello all,

>

> in eventwr sometimes we have

> Data: 0000: 0000007a

> microsoft says:

> The data section of the events may contain important information for

> troubleshooting. Change the view of the data section of the event from

> bytes to words. Investigate the status code in the data words of the

> events. The error code gives an additional hint for the reason why the

> event has been logged.

>

> At a command prompt, type Net Helpmsg ErrorNumber to obtain an

> explanation of that error.

>

> NET HELPMSG 0000007a cannot work

>

> How to interpret this?

>

[Guest Mistake]

Re: analyze Eventvwr

 

hello, thank u

 

Event ID: 8032

Source: Browser

Type: Error

Description: The Browser service has failed to retrieve the backup list too

many times on transport \Device\Protocol_NetworkAdaptor. The backup browser

is stopping.

Data Words:

Data: 0000: 0000007a

 

just want to understand how to analyze the Data Words.

 

Thank u

[Guest Meinolf Weber]

Re: analyze Eventvwr

 

Hello Mistake,

 

See here:

http://support.microsoft.com/kb/135404

 

Is the machine multihomed?

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> 8032

>

[Guest Mistake]

Re: analyze Eventvwr

 

thank u but like I said above, Microsoft through their tutorial says :

 

The data section of the events may contain important information for

troubleshooting. Change the view of the data section of the event from bytes

to words. Investigate the status code in the data words of the events. The

error code gives an additional hint for the reason why the event has been

logged.

 

At a command prompt, type Net Helpmsg ErrorNumber to obtain an explanation

of that error.

 

and my Data is : 0000: 0000007a

 

so my question is how to use Net Helpmsg ErrorNumber with data word?

 

thank u

 

"Meinolf Weber" wrote:

> Hello Mistake,

>

> See here:

> http://support.microsoft.com/kb/135404

>

> Is the machine multihomed?

>

> Best regards

>

> Meinolf Weber

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

> ** Please do NOT email, only reply to Newsgroups

> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>

> > 8032

> >

>

>

>

[Guest Ace Fekay [MVP]]

Re: analyze Eventvwr

 

In news:268F1302-3175-4BF0-8C37-9159A5C01FFB@microsoft.com,

Mistake <Mistake@discussions.microsoft.com> typed:

> thank u but like I said above, Microsoft through their tutorial says :

>

> The data section of the events may contain important information for

> troubleshooting. Change the view of the data section of the event

> from bytes to words. Investigate the status code in the data words of

> the events. The error code gives an additional hint for the reason

> why the event has been logged.

>

> At a command prompt, type Net Helpmsg ErrorNumber to obtain an

> explanation of that error.

>

> and my Data is : 0000: 0000007a

>

> so my question is how to use Net Helpmsg ErrorNumber with data word?

>

> thank u

>

 

Also, looking at the event viewer in Word view will shed some light, and

what it simply does is look at the data, which is in Hexadecimal, and give

you the decimal/character view. However when you get something like "Data:

0000: 0000007a", there is NO character equivalent other than looking up what

Hex 7a is equal to, which in this case wouldn't help in determining the

error.

 

In most cases we do not look at that part of the Event log message anyway,

rather look at the specific Event ID# and Source name. Meinolf provided a

link that directly explains the error. Main cause of this is a multihomed

machine, especially if it is a Browse Master, such as on a domain

controller. Multihomed domain controllers can cause numerous other issues as

well.

 

You can also lookup errors such as this at eventid.net. Here is what I

found, which the article Meinolf posted explains anyway, however sometimes

you can get a better perspective from contributors at eventid.net:

 

EventID 8032, Source = Browser:

http://eventid.net/display.asp?eventid=8032&eventno=118&source=BROWSER&phase=1

 

So coming back to the original question, is this machine multihomed?

Also, is it a domain controller?

 

--

Regards,

Ace

 

This posting is provided "AS-IS" with no warranties or guarantees and

confers no rights.

 

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,

MVP Microsoft MVP - Directory Services

Microsoft Certified Trainer

 

For urgent issues, you may want to contact Microsoft PSS directly. Please

check http://support.microsoft.com for regional support phone numbers.

 

Infinite Diversities in Infinite Combinations

 

 

 

 

The