Guest Adam Raff Posted August 17, 2007 Posted August 17, 2007 Good Day, Over the few months we have been having an ongoing issue with the following error messages and they appear on all of our servers. Event Type: Warning Event Source: Srv Event Category: None Event ID: 2012 Date: 8/17/2007 Time: 2:18:26 AM User: N/A Computer: HSMAIN Description: While transmitting or receiving data, the server encountered a network error. Occassional errors are expected, but large amounts of these indicate a possible error in your network configuration. The error status code is contained within the returned data (formatted as Words) and may point you towards the problem. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 00040000 00540001 00000000 800007dc 0010: 00000000 c0000184 00000000 00000000 0020: 00000000 00000000 0000097a I have looked at this from so many ways but I can not find the point of the error. You see the problem goes away on weekends. We pretty much turn off all desktops but all servers and printer (network connected) and switches stay on. I thought that it was a desktop and checked over all the desktops and identified some that may have bad Nics. After fixing them I am still getting errors but again they disappear over the weekend. The error message says to look in the error code which may point me in the right direction but I can not make heads or tails out to the error message. If somebody knows how to read this and point me in the right direction it would be a great help. Thank You Adam Raff
Guest Adam Raff Posted August 17, 2007 Posted August 17, 2007 Re: Event SRV error 2012 Sorry a little more info on this problem We are running a Windows 2003 SP1 network. Desktops are all windows XP SP2. With all updated security patches on server and desktop side. I have also looked into KB913446 MS06-007 as this may lead to issues with connectivity. All my servers have this update as well as a new one that is also getting the errors as well. Thanks Adam Raff "Adam Raff" <araff@newsgroup.nospam> wrote in message news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... > Good Day, > > Over the few months we have been having an ongoing issue with the > following error messages and they appear on all of our servers. > > Event Type: Warning > Event Source: Srv > Event Category: None > Event ID: 2012 > Date: 8/17/2007 > Time: 2:18:26 AM > User: N/A > Computer: HSMAIN > Description: > While transmitting or receiving data, the server encountered a network > error. Occassional errors are expected, > but large amounts of these indicate a possible error in your network > configuration. > The error status code is contained within the returned data (formatted as > Words) and may point you towards the problem. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 00040000 00540001 00000000 800007dc > 0010: 00000000 c0000184 00000000 00000000 > 0020: 00000000 00000000 0000097a > > > I have looked at this from so many ways but I can not find the point of > the error. You see the problem goes away on weekends. We pretty much > turn off all desktops but all servers and printer (network connected) and > switches stay on. I thought that it was a desktop and checked over all > the desktops and identified some that may have bad Nics. After fixing > them I am still getting errors but again they disappear over the weekend. > > The error message says to look in the error code which may point me in the > right direction but I can not make heads or tails out to the error > message. If somebody knows how to read this and point me in the right > direction it would be a great help. > > Thank You > Adam Raff >
Guest Coraleigh Miller Posted August 17, 2007 Posted August 17, 2007 Re: Event SRV error 2012 Hi Adam, Some people have found that the Event ID you have is resolved by this Microsoft article... http://support.microsoft.com/kb/898060/ Coraleigh Miller "Adam Raff" <araff@newsgroup.nospam> wrote in message news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... > Sorry a little more info on this problem > > We are running a Windows 2003 SP1 network. Desktops are all windows XP > SP2. With all updated security patches on server and desktop side. > > I have also looked into KB913446 MS06-007 as this may lead to issues with > connectivity. All my servers have this update as well as a new one that > is also getting the errors as well. > > Thanks > Adam Raff > > > > "Adam Raff" <araff@newsgroup.nospam> wrote in message > news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... >> Good Day, >> >> Over the few months we have been having an ongoing issue with the >> following error messages and they appear on all of our servers. >> >> Event Type: Warning >> Event Source: Srv >> Event Category: None >> Event ID: 2012 >> Date: 8/17/2007 >> Time: 2:18:26 AM >> User: N/A >> Computer: HSMAIN >> Description: >> While transmitting or receiving data, the server encountered a network >> error. Occassional errors are expected, >> but large amounts of these indicate a possible error in your network >> configuration. >> The error status code is contained within the returned data (formatted as >> Words) and may point you towards the problem. >> >> For more information, see Help and Support Center at >> http://go.microsoft.com/fwlink/events.asp. >> Data: >> 0000: 00040000 00540001 00000000 800007dc >> 0010: 00000000 c0000184 00000000 00000000 >> 0020: 00000000 00000000 0000097a >> >> >> I have looked at this from so many ways but I can not find the point of >> the error. You see the problem goes away on weekends. We pretty much >> turn off all desktops but all servers and printer (network connected) and >> switches stay on. I thought that it was a desktop and checked over all >> the desktops and identified some that may have bad Nics. After fixing >> them I am still getting errors but again they disappear over the weekend. >> >> The error message says to look in the error code which may point me in >> the right direction but I can not make heads or tails out to the error >> message. If somebody knows how to read this and point me in the right >> direction it would be a great help. >> >> Thank You >> Adam Raff >> > >
Guest Adam Raff Posted August 17, 2007 Posted August 17, 2007 Re: Event SRV error 2012 Hi Coraleigh, Thank you for responding but if I am not mistaken if you install or have installed 913446 that updated supersedes security update 893066. I have 913446 installed on all my servers already. I verified that which is way I added the sub note to let people know that I checked this information. If I am wrong then please correct me. I will check the version number on the TCP stack to see if it's that version or newer which I also assume will be as good. I was hoping that somebody out there can read this error and the code that goes with it and perhaps it points to a Mac address or something like that. Is there a cheap way of sniffing around the network just to get an idea to see if I am getting any of these errors listed in 898060? Thanks Adam Raff "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... > Hi Adam, > > Some people have found that the Event ID you have is resolved by this > Microsoft article... http://support.microsoft.com/kb/898060/ > > Coraleigh Miller > > "Adam Raff" <araff@newsgroup.nospam> wrote in message > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... >> Sorry a little more info on this problem >> >> We are running a Windows 2003 SP1 network. Desktops are all windows XP >> SP2. With all updated security patches on server and desktop side. >> >> I have also looked into KB913446 MS06-007 as this may lead to issues with >> connectivity. All my servers have this update as well as a new one that >> is also getting the errors as well. >> >> Thanks >> Adam Raff >> >> >> >> "Adam Raff" <araff@newsgroup.nospam> wrote in message >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... >>> Good Day, >>> >>> Over the few months we have been having an ongoing issue with the >>> following error messages and they appear on all of our servers. >>> >>> Event Type: Warning >>> Event Source: Srv >>> Event Category: None >>> Event ID: 2012 >>> Date: 8/17/2007 >>> Time: 2:18:26 AM >>> User: N/A >>> Computer: HSMAIN >>> Description: >>> While transmitting or receiving data, the server encountered a network >>> error. Occassional errors are expected, >>> but large amounts of these indicate a possible error in your network >>> configuration. >>> The error status code is contained within the returned data (formatted >>> as Words) and may point you towards the problem. >>> >>> For more information, see Help and Support Center at >>> http://go.microsoft.com/fwlink/events.asp. >>> Data: >>> 0000: 00040000 00540001 00000000 800007dc >>> 0010: 00000000 c0000184 00000000 00000000 >>> 0020: 00000000 00000000 0000097a >>> >>> >>> I have looked at this from so many ways but I can not find the point of >>> the error. You see the problem goes away on weekends. We pretty much >>> turn off all desktops but all servers and printer (network connected) >>> and switches stay on. I thought that it was a desktop and checked over >>> all the desktops and identified some that may have bad Nics. After >>> fixing them I am still getting errors but again they disappear over the >>> weekend. >>> >>> The error message says to look in the error code which may point me in >>> the right direction but I can not make heads or tails out to the error >>> message. If somebody knows how to read this and point me in the right >>> direction it would be a great help. >>> >>> Thank You >>> Adam Raff >>> >> >> > >
Guest Ken Zhao [MSFT] Posted August 20, 2007 Posted August 20, 2007 Re: Event SRV error 2012 Hello Adam, Thank you for using newsgroup! Based on my research, this basically is an error that the network driver is giving SRV on the send IRPs. First thing that I would see is if the customer is running any 3rd party network software that is bound to the server. You can see this by checking the following registry key. HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage Bind: REG_MULTI_SZ 317249: How to troubleshoot Event ID 2021 and Event ID 2022 http://support.microsoft.com/kb/317249/en-us In addition, this may be caused due to a race between send and disconnect. The customer can ignore this error. Thanks & Regards, Ken Zhao Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | From: "Adam Raff" <araff@newsgroup.nospam> | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | Subject: Re: Event SRV error 2012 | Date: Fri, 17 Aug 2007 17:29:35 -0400 | Lines: 99 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | X-RFC2646: Format=Flowed; Response | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | Newsgroups: microsoft.public.windows.server.general | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:19785 | X-Tomcat-NG: microsoft.public.windows.server.general | | Hi Coraleigh, | | Thank you for responding but if I am not mistaken if you install or have | installed 913446 that updated supersedes security update 893066. I have | 913446 installed on all my servers already. | I verified that which is way I added the sub note to let people know that I | checked this information. | | If I am wrong then please correct me. I will check the version number on | the TCP stack to see if it's that version or newer which I also assume will | be as good. | | I was hoping that somebody out there can read this error and the code that | goes with it and perhaps it points to a Mac address or something like that. | Is there a cheap way of sniffing around the network just to get an idea to | see if I am getting any of these errors listed in 898060? | | Thanks | Adam Raff | | | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... | > Hi Adam, | > | > Some people have found that the Event ID you have is resolved by this | > Microsoft article... http://support.microsoft.com/kb/898060/ | > | > Coraleigh Miller | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... | >> Sorry a little more info on this problem | >> | >> We are running a Windows 2003 SP1 network. Desktops are all windows XP | >> SP2. With all updated security patches on server and desktop side. | >> | >> I have also looked into KB913446 MS06-007 as this may lead to issues with | >> connectivity. All my servers have this update as well as a new one that | >> is also getting the errors as well. | >> | >> Thanks | >> Adam Raff | >> | >> | >> | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... | >>> Good Day, | >>> | >>> Over the few months we have been having an ongoing issue with the | >>> following error messages and they appear on all of our servers. | >>> | >>> Event Type: Warning | >>> Event Source: Srv | >>> Event Category: None | >>> Event ID: 2012 | >>> Date: 8/17/2007 | >>> Time: 2:18:26 AM | >>> User: N/A | >>> Computer: HSMAIN | >>> Description: | >>> While transmitting or receiving data, the server encountered a network | >>> error. Occassional errors are expected, | >>> but large amounts of these indicate a possible error in your network | >>> configuration. | >>> The error status code is contained within the returned data (formatted | >>> as Words) and may point you towards the problem. | >>> | >>> For more information, see Help and Support Center at | >>> http://go.microsoft.com/fwlink/events.asp. | >>> Data: | >>> 0000: 00040000 00540001 00000000 800007dc | >>> 0010: 00000000 c0000184 00000000 00000000 | >>> 0020: 00000000 00000000 0000097a | >>> | >>> | >>> I have looked at this from so many ways but I can not find the point of | >>> the error. You see the problem goes away on weekends. We pretty much | >>> turn off all desktops but all servers and printer (network connected) | >>> and switches stay on. I thought that it was a desktop and checked over | >>> all the desktops and identified some that may have bad Nics. After | >>> fixing them I am still getting errors but again they disappear over the | >>> weekend. | >>> | >>> The error message says to look in the error code which may point me in | >>> the right direction but I can not make heads or tails out to the error | >>> message. If somebody knows how to read this and point me in the right | >>> direction it would be a great help. | >>> | >>> Thank You | >>> Adam Raff | >>> | >> | >> | > | > | | |
Guest Coraleigh Miller Posted August 20, 2007 Posted August 20, 2007 Re: Event SRV error 2012 Hi Adam, Have you tried using Network Monitor? http://support.microsoft.com/kb/243270 This article http://support.microsoft.com/kb/898060/ suggests using a tool like this to help troubleshoot.... "There may be some other similar scenarios where these symptoms occur. These scenarios can typically be diagnosed by sniffing the network traffic on either the source host side or on one of the intermediate network routers. If there are multiple ICMP destination unreachable messages sent over time for a destination, the source host that has the MS05-019 security update or Windows Server 2003 SP1 installed is likely to have this problem. " Hope this helps. Coraleigh Miller "Adam Raff" <araff@newsgroup.nospam> wrote in message news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl... > Hi Coraleigh, > > Thank you for responding but if I am not mistaken if you install or have > installed 913446 that updated supersedes security update 893066. I have > 913446 installed on all my servers already. > I verified that which is way I added the sub note to let people know that > I checked this information. > > If I am wrong then please correct me. I will check the version number on > the TCP stack to see if it's that version or newer which I also assume > will be as good. > > I was hoping that somebody out there can read this error and the code that > goes with it and perhaps it points to a Mac address or something like > that. Is there a cheap way of sniffing around the network just to get an > idea to see if I am getting any of these errors listed in 898060? > > Thanks > Adam Raff > > > "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message > news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... >> Hi Adam, >> >> Some people have found that the Event ID you have is resolved by this >> Microsoft article... http://support.microsoft.com/kb/898060/ >> >> Coraleigh Miller >> >> "Adam Raff" <araff@newsgroup.nospam> wrote in message >> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... >>> Sorry a little more info on this problem >>> >>> We are running a Windows 2003 SP1 network. Desktops are all windows XP >>> SP2. With all updated security patches on server and desktop side. >>> >>> I have also looked into KB913446 MS06-007 as this may lead to issues >>> with connectivity. All my servers have this update as well as a new one >>> that is also getting the errors as well. >>> >>> Thanks >>> Adam Raff >>> >>> >>> >>> "Adam Raff" <araff@newsgroup.nospam> wrote in message >>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... >>>> Good Day, >>>> >>>> Over the few months we have been having an ongoing issue with the >>>> following error messages and they appear on all of our servers. >>>> >>>> Event Type: Warning >>>> Event Source: Srv >>>> Event Category: None >>>> Event ID: 2012 >>>> Date: 8/17/2007 >>>> Time: 2:18:26 AM >>>> User: N/A >>>> Computer: HSMAIN >>>> Description: >>>> While transmitting or receiving data, the server encountered a network >>>> error. Occassional errors are expected, >>>> but large amounts of these indicate a possible error in your network >>>> configuration. >>>> The error status code is contained within the returned data (formatted >>>> as Words) and may point you towards the problem. >>>> >>>> For more information, see Help and Support Center at >>>> http://go.microsoft.com/fwlink/events.asp. >>>> Data: >>>> 0000: 00040000 00540001 00000000 800007dc >>>> 0010: 00000000 c0000184 00000000 00000000 >>>> 0020: 00000000 00000000 0000097a >>>> >>>> >>>> I have looked at this from so many ways but I can not find the point of >>>> the error. You see the problem goes away on weekends. We pretty much >>>> turn off all desktops but all servers and printer (network connected) >>>> and switches stay on. I thought that it was a desktop and checked over >>>> all the desktops and identified some that may have bad Nics. After >>>> fixing them I am still getting errors but again they disappear over the >>>> weekend. >>>> >>>> The error message says to look in the error code which may point me in >>>> the right direction but I can not make heads or tails out to the error >>>> message. If somebody knows how to read this and point me in the right >>>> direction it would be a great help. >>>> >>>> Thank You >>>> Adam Raff >>>> >>> >>> >> >> > >
Guest Adam Raff Posted August 21, 2007 Posted August 21, 2007 Re: Event SRV error 2012 Hi Ken Thanks for the feed back. Not sure why you pointed my to 317249 as I am not getting 2021 or 2022 event errors. My errors are 2012. Now in that reg key what am I looking for. Can you give me an example by chance. Also all the errors disappear on the weekends so I do not think it's a server issue or something related in my server room as they are up 24x7. If we have a long weekend no errors then as well. that is why I am hoping that the return code that I am getting back from the error can point me some where. Adam Raff ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl... > Hello Adam, > > Thank you for using newsgroup! > > Based on my research, this basically is an error that the network driver > is > giving SRV on the send IRPs. First thing that I would see is if the > customer is running any 3rd party network software that is bound to the > server. You can see this by checking the following registry key. > > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage > Bind: REG_MULTI_SZ > > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 > http://support.microsoft.com/kb/317249/en-us > > In addition, this may be caused due to a race between send and disconnect. > The customer can ignore this error. > > Thanks & Regards, > > Ken Zhao > > Microsoft Online Support > Microsoft Global Technical Support Center > > Get Secure! - http://www.microsoft.com/security > <http://www.microsoft.com/security> > ==================================================== > When responding to posts, please "Reply to Group" via your newsreader so > that others may learn and benefit from your issue. > ==================================================== > This posting is provided "AS IS" with no warranties, and confers no > rights. > > > > > -------------------- > | From: "Adam Raff" <araff@newsgroup.nospam> > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> > | Subject: Re: Event SRV error 2012 > | Date: Fri, 17 Aug 2007 17:29:35 -0400 > | Lines: 99 > | X-Priority: 3 > | X-MSMail-Priority: Normal > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | X-RFC2646: Format=Flowed; Response > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> > | Newsgroups: microsoft.public.windows.server.general > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl > | Xref: TK2MSFTNGHUB02.phx.gbl > microsoft.public.windows.server.general:19785 > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | Hi Coraleigh, > | > | Thank you for responding but if I am not mistaken if you install or have > | installed 913446 that updated supersedes security update 893066. I have > | 913446 installed on all my servers already. > | I verified that which is way I added the sub note to let people know > that > I > | checked this information. > | > | If I am wrong then please correct me. I will check the version number > on > | the TCP stack to see if it's that version or newer which I also assume > will > | be as good. > | > | I was hoping that somebody out there can read this error and the code > that > | goes with it and perhaps it points to a Mac address or something like > that. > | Is there a cheap way of sniffing around the network just to get an idea > to > | see if I am getting any of these errors listed in 898060? > | > | Thanks > | Adam Raff > | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... > | > Hi Adam, > | > > | > Some people have found that the Event ID you have is resolved by this > | > Microsoft article... http://support.microsoft.com/kb/898060/ > | > > | > Coraleigh Miller > | > > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... > | >> Sorry a little more info on this problem > | >> > | >> We are running a Windows 2003 SP1 network. Desktops are all windows > XP > | >> SP2. With all updated security patches on server and desktop side. > | >> > | >> I have also looked into KB913446 MS06-007 as this may lead to issues > with > | >> connectivity. All my servers have this update as well as a new one > that > | >> is also getting the errors as well. > | >> > | >> Thanks > | >> Adam Raff > | >> > | >> > | >> > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... > | >>> Good Day, > | >>> > | >>> Over the few months we have been having an ongoing issue with the > | >>> following error messages and they appear on all of our servers. > | >>> > | >>> Event Type: Warning > | >>> Event Source: Srv > | >>> Event Category: None > | >>> Event ID: 2012 > | >>> Date: 8/17/2007 > | >>> Time: 2:18:26 AM > | >>> User: N/A > | >>> Computer: HSMAIN > | >>> Description: > | >>> While transmitting or receiving data, the server encountered a > network > | >>> error. Occassional errors are expected, > | >>> but large amounts of these indicate a possible error in your network > | >>> configuration. > | >>> The error status code is contained within the returned data > (formatted > | >>> as Words) and may point you towards the problem. > | >>> > | >>> For more information, see Help and Support Center at > | >>> http://go.microsoft.com/fwlink/events.asp. > | >>> Data: > | >>> 0000: 00040000 00540001 00000000 800007dc > | >>> 0010: 00000000 c0000184 00000000 00000000 > | >>> 0020: 00000000 00000000 0000097a > | >>> > | >>> > | >>> I have looked at this from so many ways but I can not find the point > of > | >>> the error. You see the problem goes away on weekends. We pretty > much > | >>> turn off all desktops but all servers and printer (network > connected) > | >>> and switches stay on. I thought that it was a desktop and checked > over > | >>> all the desktops and identified some that may have bad Nics. After > | >>> fixing them I am still getting errors but again they disappear over > the > | >>> weekend. > | >>> > | >>> The error message says to look in the error code which may point me > in > | >>> the right direction but I can not make heads or tails out to the > error > | >>> message. If somebody knows how to read this and point me in the > right > | >>> direction it would be a great help. > | >>> > | >>> Thank You > | >>> Adam Raff > | >>> > | >> > | >> > | > > | > > | > | > | >
Guest Adam Raff Posted August 21, 2007 Posted August 21, 2007 Re: Event SRV error 2012 Coraleigh, Just installed it on my server. You wouldn't know a good place to get directions on how to use this program do you by chance? Adam Raff "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message news:%23LkEx1u4HHA.1992@TK2MSFTNGP03.phx.gbl... > Hi Adam, > > Have you tried using Network Monitor? > http://support.microsoft.com/kb/243270 > This article http://support.microsoft.com/kb/898060/ suggests using a tool > like this to help troubleshoot.... > "There may be some other similar scenarios where these symptoms occur. > These scenarios can typically be diagnosed by sniffing the network traffic > on either the source host side or on one of the intermediate network > routers. If there are multiple ICMP destination unreachable messages sent > over time for a destination, the source host that has the MS05-019 > security update or Windows Server 2003 SP1 installed is likely to have > this problem. " > > Hope this helps. > > Coraleigh Miller > > > "Adam Raff" <araff@newsgroup.nospam> wrote in message > news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl... >> Hi Coraleigh, >> >> Thank you for responding but if I am not mistaken if you install or have >> installed 913446 that updated supersedes security update 893066. I have >> 913446 installed on all my servers already. >> I verified that which is way I added the sub note to let people know that >> I checked this information. >> >> If I am wrong then please correct me. I will check the version number on >> the TCP stack to see if it's that version or newer which I also assume >> will be as good. >> >> I was hoping that somebody out there can read this error and the code >> that goes with it and perhaps it points to a Mac address or something >> like that. Is there a cheap way of sniffing around the network just to >> get an idea to see if I am getting any of these errors listed in 898060? >> >> Thanks >> Adam Raff >> >> >> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message >> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... >>> Hi Adam, >>> >>> Some people have found that the Event ID you have is resolved by this >>> Microsoft article... http://support.microsoft.com/kb/898060/ >>> >>> Coraleigh Miller >>> >>> "Adam Raff" <araff@newsgroup.nospam> wrote in message >>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... >>>> Sorry a little more info on this problem >>>> >>>> We are running a Windows 2003 SP1 network. Desktops are all windows XP >>>> SP2. With all updated security patches on server and desktop side. >>>> >>>> I have also looked into KB913446 MS06-007 as this may lead to issues >>>> with connectivity. All my servers have this update as well as a new >>>> one that is also getting the errors as well. >>>> >>>> Thanks >>>> Adam Raff >>>> >>>> >>>> >>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message >>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... >>>>> Good Day, >>>>> >>>>> Over the few months we have been having an ongoing issue with the >>>>> following error messages and they appear on all of our servers. >>>>> >>>>> Event Type: Warning >>>>> Event Source: Srv >>>>> Event Category: None >>>>> Event ID: 2012 >>>>> Date: 8/17/2007 >>>>> Time: 2:18:26 AM >>>>> User: N/A >>>>> Computer: HSMAIN >>>>> Description: >>>>> While transmitting or receiving data, the server encountered a network >>>>> error. Occassional errors are expected, >>>>> but large amounts of these indicate a possible error in your network >>>>> configuration. >>>>> The error status code is contained within the returned data (formatted >>>>> as Words) and may point you towards the problem. >>>>> >>>>> For more information, see Help and Support Center at >>>>> http://go.microsoft.com/fwlink/events.asp. >>>>> Data: >>>>> 0000: 00040000 00540001 00000000 800007dc >>>>> 0010: 00000000 c0000184 00000000 00000000 >>>>> 0020: 00000000 00000000 0000097a >>>>> >>>>> >>>>> I have looked at this from so many ways but I can not find the point >>>>> of the error. You see the problem goes away on weekends. We pretty >>>>> much turn off all desktops but all servers and printer (network >>>>> connected) and switches stay on. I thought that it was a desktop and >>>>> checked over all the desktops and identified some that may have bad >>>>> Nics. After fixing them I am still getting errors but again they >>>>> disappear over the weekend. >>>>> >>>>> The error message says to look in the error code which may point me in >>>>> the right direction but I can not make heads or tails out to the error >>>>> message. If somebody knows how to read this and point me in the right >>>>> direction it would be a great help. >>>>> >>>>> Thank You >>>>> Adam Raff >>>>> >>>> >>>> >>> >>> >> >> > >
Guest Coraleigh Miller Posted August 21, 2007 Posted August 21, 2007 Re: Event SRV error 2012 Hi Adam, I found that there is a new version of Network Monitor which is supposed to be alittle nicer.. http://www.microsoft.com/downloads/details.aspx?FamilyID=18b1d59d-f4d8-4213-8d17-2f6dde7d7aac&DisplayLang=en Microsoft has this article, which while it talks about the earlier version of the program, may still help.. http://support.microsoft.com/kb/812953 This article walks you through a basic data capture.. http://www.windowsnetworking.com/articles_tutorials/Working-With-Network-Monitor-Part2.html This is a technet blogsite featuring posts by an MS Network Monitor expert... http://blogs.technet.com/netmon/archive/2006/09/28/overview-of-netmon-by-yuri-diogenes.aspx Coraleigh "Adam Raff" <araff@newsgroup.nospam> wrote in message news:%238bE$TC5HHA.4476@TK2MSFTNGP06.phx.gbl... > Coraleigh, > > Just installed it on my server. You wouldn't know a good place to get > directions on how to use this program do you by chance? > > Adam Raff > > > "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message > news:%23LkEx1u4HHA.1992@TK2MSFTNGP03.phx.gbl... >> Hi Adam, >> >> Have you tried using Network Monitor? >> http://support.microsoft.com/kb/243270 >> This article http://support.microsoft.com/kb/898060/ suggests using a >> tool like this to help troubleshoot.... >> "There may be some other similar scenarios where these symptoms occur. >> These scenarios can typically be diagnosed by sniffing the network >> traffic on either the source host side or on one of the intermediate >> network routers. If there are multiple ICMP destination unreachable >> messages sent over time for a destination, the source host that has the >> MS05-019 security update or Windows Server 2003 SP1 installed is likely >> to have this problem. " >> >> Hope this helps. >> >> Coraleigh Miller >> >> >> "Adam Raff" <araff@newsgroup.nospam> wrote in message >> news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl... >>> Hi Coraleigh, >>> >>> Thank you for responding but if I am not mistaken if you install or have >>> installed 913446 that updated supersedes security update 893066. I have >>> 913446 installed on all my servers already. >>> I verified that which is way I added the sub note to let people know >>> that I checked this information. >>> >>> If I am wrong then please correct me. I will check the version number >>> on the TCP stack to see if it's that version or newer which I also >>> assume will be as good. >>> >>> I was hoping that somebody out there can read this error and the code >>> that goes with it and perhaps it points to a Mac address or something >>> like that. Is there a cheap way of sniffing around the network just to >>> get an idea to see if I am getting any of these errors listed in 898060? >>> >>> Thanks >>> Adam Raff >>> >>> >>> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message >>> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... >>>> Hi Adam, >>>> >>>> Some people have found that the Event ID you have is resolved by this >>>> Microsoft article... http://support.microsoft.com/kb/898060/ >>>> >>>> Coraleigh Miller >>>> >>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message >>>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... >>>>> Sorry a little more info on this problem >>>>> >>>>> We are running a Windows 2003 SP1 network. Desktops are all windows >>>>> XP SP2. With all updated security patches on server and desktop side. >>>>> >>>>> I have also looked into KB913446 MS06-007 as this may lead to issues >>>>> with connectivity. All my servers have this update as well as a new >>>>> one that is also getting the errors as well. >>>>> >>>>> Thanks >>>>> Adam Raff >>>>> >>>>> >>>>> >>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message >>>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... >>>>>> Good Day, >>>>>> >>>>>> Over the few months we have been having an ongoing issue with the >>>>>> following error messages and they appear on all of our servers. >>>>>> >>>>>> Event Type: Warning >>>>>> Event Source: Srv >>>>>> Event Category: None >>>>>> Event ID: 2012 >>>>>> Date: 8/17/2007 >>>>>> Time: 2:18:26 AM >>>>>> User: N/A >>>>>> Computer: HSMAIN >>>>>> Description: >>>>>> While transmitting or receiving data, the server encountered a >>>>>> network error. Occassional errors are expected, >>>>>> but large amounts of these indicate a possible error in your network >>>>>> configuration. >>>>>> The error status code is contained within the returned data >>>>>> (formatted as Words) and may point you towards the problem. >>>>>> >>>>>> For more information, see Help and Support Center at >>>>>> http://go.microsoft.com/fwlink/events.asp. >>>>>> Data: >>>>>> 0000: 00040000 00540001 00000000 800007dc >>>>>> 0010: 00000000 c0000184 00000000 00000000 >>>>>> 0020: 00000000 00000000 0000097a >>>>>> >>>>>> >>>>>> I have looked at this from so many ways but I can not find the point >>>>>> of the error. You see the problem goes away on weekends. We pretty >>>>>> much turn off all desktops but all servers and printer (network >>>>>> connected) and switches stay on. I thought that it was a desktop and >>>>>> checked over all the desktops and identified some that may have bad >>>>>> Nics. After fixing them I am still getting errors but again they >>>>>> disappear over the weekend. >>>>>> >>>>>> The error message says to look in the error code which may point me >>>>>> in the right direction but I can not make heads or tails out to the >>>>>> error message. If somebody knows how to read this and point me in the >>>>>> right direction it would be a great help. >>>>>> >>>>>> Thank You >>>>>> Adam Raff >>>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> >> > >
Guest Ken Zhao [MSFT] Posted August 22, 2007 Posted August 22, 2007 Re: Event SRV error 2012 Hi Adam, I found some similar cases that related to the following registry key: HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage Bind: REG_MULTI_SZ In addition, I am not sure what symptoms you are encountering on the server. If everything works fine, you can ignore this error. Thanks & Regards, Ken Zhao Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | From: "Adam Raff" <araff@newsgroup.nospam> | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> | Subject: Re: Event SRV error 2012 | Date: Tue, 21 Aug 2007 14:42:03 -0400 | Lines: 200 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | X-RFC2646: Format=Flowed; Original | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> | Newsgroups: microsoft.public.windows.server.general | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20147 | X-Tomcat-NG: microsoft.public.windows.server.general | | Hi Ken | | Thanks for the feed back. Not sure why you pointed my to 317249 as I am not | getting 2021 or 2022 event errors. My errors are 2012. | | Now in that reg key what am I looking for. Can you give me an example by | chance. | | Also all the errors disappear on the weekends so I do not think it's a | server issue or something related in my server room as they are up 24x7. If | we have a long weekend no errors then as well. that is why I am hoping that | the return code that I am getting back from the error can point me some | where. | | Adam Raff | | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl... | > Hello Adam, | > | > Thank you for using newsgroup! | > | > Based on my research, this basically is an error that the network driver | > is | > giving SRV on the send IRPs. First thing that I would see is if the | > customer is running any 3rd party network software that is bound to the | > server. You can see this by checking the following registry key. | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | > Bind: REG_MULTI_SZ | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 | > http://support.microsoft.com/kb/317249/en-us | > | > In addition, this may be caused due to a race between send and disconnect. | > The customer can ignore this error. | > | > Thanks & Regards, | > | > Ken Zhao | > | > Microsoft Online Support | > Microsoft Global Technical Support Center | > | > Get Secure! - http://www.microsoft.com/security | > <http://www.microsoft.com/security> | > ==================================================== | > When responding to posts, please "Reply to Group" via your newsreader so | > that others may learn and benefit from your issue. | > ==================================================== | > This posting is provided "AS IS" with no warranties, and confers no | > rights. | > | > | > | > | > -------------------- | > | From: "Adam Raff" <araff@newsgroup.nospam> | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | > | Subject: Re: Event SRV error 2012 | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 | > | Lines: 99 | > | X-Priority: 3 | > | X-MSMail-Priority: Normal | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | X-RFC2646: Format=Flowed; Response | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | > | Newsgroups: microsoft.public.windows.server.general | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 | > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl | > | Xref: TK2MSFTNGHUB02.phx.gbl | > microsoft.public.windows.server.general:19785 | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | | > | Hi Coraleigh, | > | | > | Thank you for responding but if I am not mistaken if you install or have | > | installed 913446 that updated supersedes security update 893066. I have | > | 913446 installed on all my servers already. | > | I verified that which is way I added the sub note to let people know | > that | > I | > | checked this information. | > | | > | If I am wrong then please correct me. I will check the version number | > on | > | the TCP stack to see if it's that version or newer which I also assume | > will | > | be as good. | > | | > | I was hoping that somebody out there can read this error and the code | > that | > | goes with it and perhaps it points to a Mac address or something like | > that. | > | Is there a cheap way of sniffing around the network just to get an idea | > to | > | see if I am getting any of these errors listed in 898060? | > | | > | Thanks | > | Adam Raff | > | | > | | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... | > | > Hi Adam, | > | > | > | > Some people have found that the Event ID you have is resolved by this | > | > Microsoft article... http://support.microsoft.com/kb/898060/ | > | > | > | > Coraleigh Miller | > | > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... | > | >> Sorry a little more info on this problem | > | >> | > | >> We are running a Windows 2003 SP1 network. Desktops are all windows | > XP | > | >> SP2. With all updated security patches on server and desktop side. | > | >> | > | >> I have also looked into KB913446 MS06-007 as this may lead to issues | > with | > | >> connectivity. All my servers have this update as well as a new one | > that | > | >> is also getting the errors as well. | > | >> | > | >> Thanks | > | >> Adam Raff | > | >> | > | >> | > | >> | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... | > | >>> Good Day, | > | >>> | > | >>> Over the few months we have been having an ongoing issue with the | > | >>> following error messages and they appear on all of our servers. | > | >>> | > | >>> Event Type: Warning | > | >>> Event Source: Srv | > | >>> Event Category: None | > | >>> Event ID: 2012 | > | >>> Date: 8/17/2007 | > | >>> Time: 2:18:26 AM | > | >>> User: N/A | > | >>> Computer: HSMAIN | > | >>> Description: | > | >>> While transmitting or receiving data, the server encountered a | > network | > | >>> error. Occassional errors are expected, | > | >>> but large amounts of these indicate a possible error in your network | > | >>> configuration. | > | >>> The error status code is contained within the returned data | > (formatted | > | >>> as Words) and may point you towards the problem. | > | >>> | > | >>> For more information, see Help and Support Center at | > | >>> http://go.microsoft.com/fwlink/events.asp. | > | >>> Data: | > | >>> 0000: 00040000 00540001 00000000 800007dc | > | >>> 0010: 00000000 c0000184 00000000 00000000 | > | >>> 0020: 00000000 00000000 0000097a | > | >>> | > | >>> | > | >>> I have looked at this from so many ways but I can not find the point | > of | > | >>> the error. You see the problem goes away on weekends. We pretty | > much | > | >>> turn off all desktops but all servers and printer (network | > connected) | > | >>> and switches stay on. I thought that it was a desktop and checked | > over | > | >>> all the desktops and identified some that may have bad Nics. After | > | >>> fixing them I am still getting errors but again they disappear over | > the | > | >>> weekend. | > | >>> | > | >>> The error message says to look in the error code which may point me | > in | > | >>> the right direction but I can not make heads or tails out to the | > error | > | >>> message. If somebody knows how to read this and point me in the | > right | > | >>> direction it would be a great help. | > | >>> | > | >>> Thank You | > | >>> Adam Raff | > | >>> | > | >> | > | >> | > | > | > | > | > | | > | | > | | > | | |
Guest Adam Raff Posted August 23, 2007 Posted August 23, 2007 Re: Event SRV error 2012 Coraleigh, Thanks for your help, I did a brief capture with the old version that came with 2003 and was it a lot of data of which made little or know sense. I hope the new version is a little better. I did not see the errors that the article was pointing to but I will use the new version to see if I missed anything. I will keep you posted in what I find out. Thanks Adam Raff "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message news:eDH1ItC5HHA.1184@TK2MSFTNGP04.phx.gbl... > Hi Adam, > > I found that there is a new version of Network Monitor which is supposed > to be alittle nicer.. > http://www.microsoft.com/downloads/details.aspx?FamilyID=18b1d59d-f4d8-4213-8d17-2f6dde7d7aac&DisplayLang=en > > Microsoft has this article, which while it talks about the earlier version > of the program, may still help.. http://support.microsoft.com/kb/812953 > > This article walks you through a basic data capture.. > http://www.windowsnetworking.com/articles_tutorials/Working-With-Network-Monitor-Part2.html > > This is a technet blogsite featuring posts by an MS Network Monitor > expert... > http://blogs.technet.com/netmon/archive/2006/09/28/overview-of-netmon-by-yuri-diogenes.aspx > > > Coraleigh > > > > "Adam Raff" <araff@newsgroup.nospam> wrote in message > news:%238bE$TC5HHA.4476@TK2MSFTNGP06.phx.gbl... >> Coraleigh, >> >> Just installed it on my server. You wouldn't know a good place to get >> directions on how to use this program do you by chance? >> >> Adam Raff >> >> >> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message >> news:%23LkEx1u4HHA.1992@TK2MSFTNGP03.phx.gbl... >>> Hi Adam, >>> >>> Have you tried using Network Monitor? >>> http://support.microsoft.com/kb/243270 >>> This article http://support.microsoft.com/kb/898060/ suggests using a >>> tool like this to help troubleshoot.... >>> "There may be some other similar scenarios where these symptoms occur. >>> These scenarios can typically be diagnosed by sniffing the network >>> traffic on either the source host side or on one of the intermediate >>> network routers. If there are multiple ICMP destination unreachable >>> messages sent over time for a destination, the source host that has the >>> MS05-019 security update or Windows Server 2003 SP1 installed is likely >>> to have this problem. " >>> >>> Hope this helps. >>> >>> Coraleigh Miller >>> >>> >>> "Adam Raff" <araff@newsgroup.nospam> wrote in message >>> news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl... >>>> Hi Coraleigh, >>>> >>>> Thank you for responding but if I am not mistaken if you install or >>>> have installed 913446 that updated supersedes security update 893066. >>>> I have 913446 installed on all my servers already. >>>> I verified that which is way I added the sub note to let people know >>>> that I checked this information. >>>> >>>> If I am wrong then please correct me. I will check the version number >>>> on the TCP stack to see if it's that version or newer which I also >>>> assume will be as good. >>>> >>>> I was hoping that somebody out there can read this error and the code >>>> that goes with it and perhaps it points to a Mac address or something >>>> like that. Is there a cheap way of sniffing around the network just to >>>> get an idea to see if I am getting any of these errors listed in >>>> 898060? >>>> >>>> Thanks >>>> Adam Raff >>>> >>>> >>>> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message >>>> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... >>>>> Hi Adam, >>>>> >>>>> Some people have found that the Event ID you have is resolved by this >>>>> Microsoft article... http://support.microsoft.com/kb/898060/ >>>>> >>>>> Coraleigh Miller >>>>> >>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message >>>>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... >>>>>> Sorry a little more info on this problem >>>>>> >>>>>> We are running a Windows 2003 SP1 network. Desktops are all windows >>>>>> XP SP2. With all updated security patches on server and desktop side. >>>>>> >>>>>> I have also looked into KB913446 MS06-007 as this may lead to issues >>>>>> with connectivity. All my servers have this update as well as a new >>>>>> one that is also getting the errors as well. >>>>>> >>>>>> Thanks >>>>>> Adam Raff >>>>>> >>>>>> >>>>>> >>>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message >>>>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... >>>>>>> Good Day, >>>>>>> >>>>>>> Over the few months we have been having an ongoing issue with the >>>>>>> following error messages and they appear on all of our servers. >>>>>>> >>>>>>> Event Type: Warning >>>>>>> Event Source: Srv >>>>>>> Event Category: None >>>>>>> Event ID: 2012 >>>>>>> Date: 8/17/2007 >>>>>>> Time: 2:18:26 AM >>>>>>> User: N/A >>>>>>> Computer: HSMAIN >>>>>>> Description: >>>>>>> While transmitting or receiving data, the server encountered a >>>>>>> network error. Occassional errors are expected, >>>>>>> but large amounts of these indicate a possible error in your network >>>>>>> configuration. >>>>>>> The error status code is contained within the returned data >>>>>>> (formatted as Words) and may point you towards the problem. >>>>>>> >>>>>>> For more information, see Help and Support Center at >>>>>>> http://go.microsoft.com/fwlink/events.asp. >>>>>>> Data: >>>>>>> 0000: 00040000 00540001 00000000 800007dc >>>>>>> 0010: 00000000 c0000184 00000000 00000000 >>>>>>> 0020: 00000000 00000000 0000097a >>>>>>> >>>>>>> >>>>>>> I have looked at this from so many ways but I can not find the point >>>>>>> of the error. You see the problem goes away on weekends. We pretty >>>>>>> much turn off all desktops but all servers and printer (network >>>>>>> connected) and switches stay on. I thought that it was a desktop >>>>>>> and checked over all the desktops and identified some that may have >>>>>>> bad Nics. After fixing them I am still getting errors but again >>>>>>> they disappear over the weekend. >>>>>>> >>>>>>> The error message says to look in the error code which may point me >>>>>>> in the right direction but I can not make heads or tails out to the >>>>>>> error message. If somebody knows how to read this and point me in >>>>>>> the right direction it would be a great help. >>>>>>> >>>>>>> Thank You >>>>>>> Adam Raff >>>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>> >>>> >>> >>> >> >> > >
Guest Adam Raff Posted August 23, 2007 Posted August 23, 2007 Re: Event SRV error 2012 Hi Ken, To be honest I am not sure what I am looking for when I look at these setting in the registry. If you could give me an example that would be great. I am getting a lot of errors and I just want to make sure that it's not the network. I believe it's a computer or device but I am having a ton of problems tracking the problem down. Since the issues seem to stop on weekends, I would think it's a computer as we shut all the systems down on Friday for the weekend (Servers, networked printers and the like stay on including switches and routes). I am thinking that it may be a computer hitting a bad port on a switch but this is above my head and not sure how to trouble shoot this or how to go about find the problem. That is why I was hoping that the codes in the event may point be in some direction as they state that the error is there The error status code is contained within the returned data > | > (formatted > | > | >>> as Words) and may point you towards the problem. I was hoping that something in the error code could point be someplace. I am planning on testing some systems over the weekend and leave them on to see if I get any errors or not. Thanks Adam Raff ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl... > Hi Adam, > > I found some similar cases that related to the following registry key: > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage > Bind: REG_MULTI_SZ > > In addition, I am not sure what symptoms you are encountering on the > server. If everything works fine, you can ignore this error. > > Thanks & Regards, > > Ken Zhao > > Microsoft Online Support > Microsoft Global Technical Support Center > > Get Secure! - http://www.microsoft.com/security > <http://www.microsoft.com/security> > ==================================================== > When responding to posts, please "Reply to Group" via your newsreader so > that others may learn and benefit from your issue. > ==================================================== > This posting is provided "AS IS" with no warranties, and confers no > rights. > > > > > > -------------------- > | From: "Adam Raff" <araff@newsgroup.nospam> > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> > | Subject: Re: Event SRV error 2012 > | Date: Tue, 21 Aug 2007 14:42:03 -0400 > | Lines: 200 > | X-Priority: 3 > | X-MSMail-Priority: Normal > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | X-RFC2646: Format=Flowed; Original > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> > | Newsgroups: microsoft.public.windows.server.general > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl > | Xref: TK2MSFTNGHUB02.phx.gbl > microsoft.public.windows.server.general:20147 > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | Hi Ken > | > | Thanks for the feed back. Not sure why you pointed my to 317249 as I am > not > | getting 2021 or 2022 event errors. My errors are 2012. > | > | Now in that reg key what am I looking for. Can you give me an example > by > | chance. > | > | Also all the errors disappear on the weekends so I do not think it's a > | server issue or something related in my server room as they are up 24x7. > If > | we have a long weekend no errors then as well. that is why I am hoping > that > | the return code that I am getting back from the error can point me some > | where. > | > | Adam Raff > | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl... > | > Hello Adam, > | > > | > Thank you for using newsgroup! > | > > | > Based on my research, this basically is an error that the network > driver > | > is > | > giving SRV on the send IRPs. First thing that I would see is if the > | > customer is running any 3rd party network software that is bound to > the > | > server. You can see this by checking the following registry key. > | > > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage > | > Bind: REG_MULTI_SZ > | > > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 > | > http://support.microsoft.com/kb/317249/en-us > | > > | > In addition, this may be caused due to a race between send and > disconnect. > | > The customer can ignore this error. > | > > | > Thanks & Regards, > | > > | > Ken Zhao > | > > | > Microsoft Online Support > | > Microsoft Global Technical Support Center > | > > | > Get Secure! - http://www.microsoft.com/security > | > <http://www.microsoft.com/security> > | > ==================================================== > | > When responding to posts, please "Reply to Group" via your newsreader > so > | > that others may learn and benefit from your issue. > | > ==================================================== > | > This posting is provided "AS IS" with no warranties, and confers no > | > rights. > | > > | > > | > > | > > | > -------------------- > | > | From: "Adam Raff" <araff@newsgroup.nospam> > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> > | > | Subject: Re: Event SRV error 2012 > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 > | > | Lines: 99 > | > | X-Priority: 3 > | > | X-MSMail-Priority: Normal > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | > | X-RFC2646: Format=Flowed; Response > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> > | > | Newsgroups: microsoft.public.windows.server.general > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 > | > | Path: > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl > | > | Xref: TK2MSFTNGHUB02.phx.gbl > | > microsoft.public.windows.server.general:19785 > | > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | > | > | Hi Coraleigh, > | > | > | > | Thank you for responding but if I am not mistaken if you install or > have > | > | installed 913446 that updated supersedes security update 893066. I > have > | > | 913446 installed on all my servers already. > | > | I verified that which is way I added the sub note to let people know > | > that > | > I > | > | checked this information. > | > | > | > | If I am wrong then please correct me. I will check the version > number > | > on > | > | the TCP stack to see if it's that version or newer which I also > assume > | > will > | > | be as good. > | > | > | > | I was hoping that somebody out there can read this error and the > code > | > that > | > | goes with it and perhaps it points to a Mac address or something > like > | > that. > | > | Is there a cheap way of sniffing around the network just to get an > idea > | > to > | > | see if I am getting any of these errors listed in 898060? > | > | > | > | Thanks > | > | Adam Raff > | > | > | > | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... > | > | > Hi Adam, > | > | > > | > | > Some people have found that the Event ID you have is resolved by > this > | > | > Microsoft article... http://support.microsoft.com/kb/898060/ > | > | > > | > | > Coraleigh Miller > | > | > > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... > | > | >> Sorry a little more info on this problem > | > | >> > | > | >> We are running a Windows 2003 SP1 network. Desktops are all > windows > | > XP > | > | >> SP2. With all updated security patches on server and desktop > side. > | > | >> > | > | >> I have also looked into KB913446 MS06-007 as this may lead to > issues > | > with > | > | >> connectivity. All my servers have this update as well as a new > one > | > that > | > | >> is also getting the errors as well. > | > | >> > | > | >> Thanks > | > | >> Adam Raff > | > | >> > | > | >> > | > | >> > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... > | > | >>> Good Day, > | > | >>> > | > | >>> Over the few months we have been having an ongoing issue with > the > | > | >>> following error messages and they appear on all of our servers. > | > | >>> > | > | >>> Event Type: Warning > | > | >>> Event Source: Srv > | > | >>> Event Category: None > | > | >>> Event ID: 2012 > | > | >>> Date: 8/17/2007 > | > | >>> Time: 2:18:26 AM > | > | >>> User: N/A > | > | >>> Computer: HSMAIN > | > | >>> Description: > | > | >>> While transmitting or receiving data, the server encountered a > | > network > | > | >>> error. Occassional errors are expected, > | > | >>> but large amounts of these indicate a possible error in your > network > | > | >>> configuration. > | > | >>> The error status code is contained within the returned data > | > (formatted > | > | >>> as Words) and may point you towards the problem. > | > | >>> > | > | >>> For more information, see Help and Support Center at > | > | >>> http://go.microsoft.com/fwlink/events.asp. > | > | >>> Data: > | > | >>> 0000: 00040000 00540001 00000000 800007dc > | > | >>> 0010: 00000000 c0000184 00000000 00000000 > | > | >>> 0020: 00000000 00000000 0000097a > | > | >>> > | > | >>> > | > | >>> I have looked at this from so many ways but I can not find the > point > | > of > | > | >>> the error. You see the problem goes away on weekends. We > pretty > | > much > | > | >>> turn off all desktops but all servers and printer (network > | > connected) > | > | >>> and switches stay on. I thought that it was a desktop and > checked > | > over > | > | >>> all the desktops and identified some that may have bad Nics. > After > | > | >>> fixing them I am still getting errors but again they disappear > over > | > the > | > | >>> weekend. > | > | >>> > | > | >>> The error message says to look in the error code which may point > me > | > in > | > | >>> the right direction but I can not make heads or tails out to the > | > error > | > | >>> message. If somebody knows how to read this and point me in the > | > right > | > | >>> direction it would be a great help. > | > | >>> > | > | >>> Thank You > | > | >>> Adam Raff > | > | >>> > | > | >> > | > | >> > | > | > > | > | > > | > | > | > | > | > | > | > > | > | > | >
Guest Ken Zhao [MSFT] Posted August 27, 2007 Posted August 27, 2007 Re: Event SRV error 2012 Hi Adam, Actually, this event error may be caused by more reasons. Could you let us know what symptoms you are encountering on the server? What issues are occurring when the event error is logged? Thanks & Regards, Ken Zhao Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | From: "Adam Raff" <araff@newsgroup.nospam> | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl> | Subject: Re: Event SRV error 2012 | Date: Thu, 23 Aug 2007 11:56:44 -0400 | Lines: 315 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | X-RFC2646: Format=Flowed; Original | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl> | Newsgroups: microsoft.public.windows.server.general | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20380 | X-Tomcat-NG: microsoft.public.windows.server.general | | Hi Ken, | | To be honest I am not sure what I am looking for when I look at these | setting in the registry. If you could give me an example that would be | great. | | I am getting a lot of errors and I just want to make sure that it's not the | network. I believe it's a computer or device but I am having a ton of | problems tracking the problem down. Since the issues seem to stop on | weekends, I would think it's a computer as we shut all the systems down on | Friday for the weekend (Servers, networked printers and the like stay on | including switches and routes). I am thinking that it may be a computer | hitting a bad port on a switch but this is above my head and not sure how to | trouble shoot this or how to go about find the problem. That is why I was | hoping that the codes in the event may point be in some direction as they | state that the error is there | | The error status code is contained within the returned data | > | > (formatted | > | > | >>> as Words) and may point you towards the problem. | | I was hoping that something in the error code could point be someplace. I | am planning on testing some systems over the weekend and leave them on to | see if I get any errors or not. | | Thanks | Adam Raff | | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message | news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl... | > Hi Adam, | > | > I found some similar cases that related to the following registry key: | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | > Bind: REG_MULTI_SZ | > | > In addition, I am not sure what symptoms you are encountering on the | > server. If everything works fine, you can ignore this error. | > | > Thanks & Regards, | > | > Ken Zhao | > | > Microsoft Online Support | > Microsoft Global Technical Support Center | > | > Get Secure! - http://www.microsoft.com/security | > <http://www.microsoft.com/security> | > ==================================================== | > When responding to posts, please "Reply to Group" via your newsreader so | > that others may learn and benefit from your issue. | > ==================================================== | > This posting is provided "AS IS" with no warranties, and confers no | > rights. | > | > | > | > | > | > -------------------- | > | From: "Adam Raff" <araff@newsgroup.nospam> | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> | > | Subject: Re: Event SRV error 2012 | > | Date: Tue, 21 Aug 2007 14:42:03 -0400 | > | Lines: 200 | > | X-Priority: 3 | > | X-MSMail-Priority: Normal | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | X-RFC2646: Format=Flowed; Original | > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> | > | Newsgroups: microsoft.public.windows.server.general | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 | > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | > | Xref: TK2MSFTNGHUB02.phx.gbl | > microsoft.public.windows.server.general:20147 | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | | > | Hi Ken | > | | > | Thanks for the feed back. Not sure why you pointed my to 317249 as I am | > not | > | getting 2021 or 2022 event errors. My errors are 2012. | > | | > | Now in that reg key what am I looking for. Can you give me an example | > by | > | chance. | > | | > | Also all the errors disappear on the weekends so I do not think it's a | > | server issue or something related in my server room as they are up 24x7. | > If | > | we have a long weekend no errors then as well. that is why I am hoping | > that | > | the return code that I am getting back from the error can point me some | > | where. | > | | > | Adam Raff | > | | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message | > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl... | > | > Hello Adam, | > | > | > | > Thank you for using newsgroup! | > | > | > | > Based on my research, this basically is an error that the network | > driver | > | > is | > | > giving SRV on the send IRPs. First thing that I would see is if the | > | > customer is running any 3rd party network software that is bound to | > the | > | > server. You can see this by checking the following registry key. | > | > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | > | > Bind: REG_MULTI_SZ | > | > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 | > | > http://support.microsoft.com/kb/317249/en-us | > | > | > | > In addition, this may be caused due to a race between send and | > disconnect. | > | > The customer can ignore this error. | > | > | > | > Thanks & Regards, | > | > | > | > Ken Zhao | > | > | > | > Microsoft Online Support | > | > Microsoft Global Technical Support Center | > | > | > | > Get Secure! - http://www.microsoft.com/security | > | > <http://www.microsoft.com/security> | > | > ==================================================== | > | > When responding to posts, please "Reply to Group" via your newsreader | > so | > | > that others may learn and benefit from your issue. | > | > ==================================================== | > | > This posting is provided "AS IS" with no warranties, and confers no | > | > rights. | > | > | > | > | > | > | > | > | > | > -------------------- | > | > | From: "Adam Raff" <araff@newsgroup.nospam> | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | > | > | Subject: Re: Event SRV error 2012 | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 | > | > | Lines: 99 | > | > | X-Priority: 3 | > | > | X-MSMail-Priority: Normal | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | > | X-RFC2646: Format=Flowed; Response | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | > | > | Newsgroups: microsoft.public.windows.server.general | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 | > | > | Path: | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl | > | > | Xref: TK2MSFTNGHUB02.phx.gbl | > | > microsoft.public.windows.server.general:19785 | > | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | > | | > | > | Hi Coraleigh, | > | > | | > | > | Thank you for responding but if I am not mistaken if you install or | > have | > | > | installed 913446 that updated supersedes security update 893066. I | > have | > | > | 913446 installed on all my servers already. | > | > | I verified that which is way I added the sub note to let people know | > | > that | > | > I | > | > | checked this information. | > | > | | > | > | If I am wrong then please correct me. I will check the version | > number | > | > on | > | > | the TCP stack to see if it's that version or newer which I also | > assume | > | > will | > | > | be as good. | > | > | | > | > | I was hoping that somebody out there can read this error and the | > code | > | > that | > | > | goes with it and perhaps it points to a Mac address or something | > like | > | > that. | > | > | Is there a cheap way of sniffing around the network just to get an | > idea | > | > to | > | > | see if I am getting any of these errors listed in 898060? | > | > | | > | > | Thanks | > | > | Adam Raff | > | > | | > | > | | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message | > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... | > | > | > Hi Adam, | > | > | > | > | > | > Some people have found that the Event ID you have is resolved by | > this | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/ | > | > | > | > | > | > Coraleigh Miller | > | > | > | > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message | > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... | > | > | >> Sorry a little more info on this problem | > | > | >> | > | > | >> We are running a Windows 2003 SP1 network. Desktops are all | > windows | > | > XP | > | > | >> SP2. With all updated security patches on server and desktop | > side. | > | > | >> | > | > | >> I have also looked into KB913446 MS06-007 as this may lead to | > issues | > | > with | > | > | >> connectivity. All my servers have this update as well as a new | > one | > | > that | > | > | >> is also getting the errors as well. | > | > | >> | > | > | >> Thanks | > | > | >> Adam Raff | > | > | >> | > | > | >> | > | > | >> | > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message | > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... | > | > | >>> Good Day, | > | > | >>> | > | > | >>> Over the few months we have been having an ongoing issue with | > the | > | > | >>> following error messages and they appear on all of our servers. | > | > | >>> | > | > | >>> Event Type: Warning | > | > | >>> Event Source: Srv | > | > | >>> Event Category: None | > | > | >>> Event ID: 2012 | > | > | >>> Date: 8/17/2007 | > | > | >>> Time: 2:18:26 AM | > | > | >>> User: N/A | > | > | >>> Computer: HSMAIN | > | > | >>> Description: | > | > | >>> While transmitting or receiving data, the server encountered a | > | > network | > | > | >>> error. Occassional errors are expected, | > | > | >>> but large amounts of these indicate a possible error in your | > network | > | > | >>> configuration. | > | > | >>> The error status code is contained within the returned data | > | > (formatted | > | > | >>> as Words) and may point you towards the problem. | > | > | >>> | > | > | >>> For more information, see Help and Support Center at | > | > | >>> http://go.microsoft.com/fwlink/events.asp. | > | > | >>> Data: | > | > | >>> 0000: 00040000 00540001 00000000 800007dc | > | > | >>> 0010: 00000000 c0000184 00000000 00000000 | > | > | >>> 0020: 00000000 00000000 0000097a | > | > | >>> | > | > | >>> | > | > | >>> I have looked at this from so many ways but I can not find the | > point | > | > of | > | > | >>> the error. You see the problem goes away on weekends. We | > pretty | > | > much | > | > | >>> turn off all desktops but all servers and printer (network | > | > connected) | > | > | >>> and switches stay on. I thought that it was a desktop and | > checked | > | > over | > | > | >>> all the desktops and identified some that may have bad Nics. | > After | > | > | >>> fixing them I am still getting errors but again they disappear | > over | > | > the | > | > | >>> weekend. | > | > | >>> | > | > | >>> The error message says to look in the error code which may point | > me | > | > in | > | > | >>> the right direction but I can not make heads or tails out to the | > | > error | > | > | >>> message. If somebody knows how to read this and point me in the | > | > right | > | > | >>> direction it would be a great help. | > | > | >>> | > | > | >>> Thank You | > | > | >>> Adam Raff | > | > | >>> | > | > | >> | > | > | >> | > | > | > | > | > | > | > | > | | > | > | | > | > | | > | > | > | | > | | > | | > | | |
Guest Adam Raff Posted August 29, 2007 Posted August 29, 2007 Re: Event SRV error 2012 Hi Ken, From what I can see nothing seems to be affecting the network but I am getting some people complaining that the network seems slow. Not sure if it is related or not. Just to give you more info. I have already updated the nic drivers on one of the servers to see if that helps. No luck there as well. I am trying to power systems down at night but what I can tell the problem is still there. It seems that I have to do it my trial and error. Adam ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message news:KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl... > Hi Adam, > > Actually, this event error may be caused by more reasons. Could you let us > know what symptoms you are encountering on the server? What issues are > occurring when the event error is logged? > > Thanks & Regards, > > Ken Zhao > > Microsoft Online Support > Microsoft Global Technical Support Center > > Get Secure! - http://www.microsoft.com/security > <http://www.microsoft.com/security> > ==================================================== > When responding to posts, please "Reply to Group" via your newsreader so > that others may learn and benefit from your issue. > ==================================================== > This posting is provided "AS IS" with no warranties, and confers no > rights. > > > > > > -------------------- > | From: "Adam Raff" <araff@newsgroup.nospam> > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> > <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> > <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl> > | Subject: Re: Event SRV error 2012 > | Date: Thu, 23 Aug 2007 11:56:44 -0400 > | Lines: 315 > | X-Priority: 3 > | X-MSMail-Priority: Normal > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | X-RFC2646: Format=Flowed; Original > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl> > | Newsgroups: microsoft.public.windows.server.general > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl > | Xref: TK2MSFTNGHUB02.phx.gbl > microsoft.public.windows.server.general:20380 > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | Hi Ken, > | > | To be honest I am not sure what I am looking for when I look at these > | setting in the registry. If you could give me an example that would be > | great. > | > | I am getting a lot of errors and I just want to make sure that it's not > the > | network. I believe it's a computer or device but I am having a ton of > | problems tracking the problem down. Since the issues seem to stop on > | weekends, I would think it's a computer as we shut all the systems down > on > | Friday for the weekend (Servers, networked printers and the like stay on > | including switches and routes). I am thinking that it may be a computer > | hitting a bad port on a switch but this is above my head and not sure > how > to > | trouble shoot this or how to go about find the problem. That is why I > was > | hoping that the codes in the event may point be in some direction as > they > | state that the error is there > | > | The error status code is contained within the returned data > | > | > (formatted > | > | > | >>> as Words) and may point you towards the problem. > | > | I was hoping that something in the error code could point be someplace. > I > | am planning on testing some systems over the weekend and leave them on > to > | see if I get any errors or not. > | > | Thanks > | Adam Raff > | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message > | news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl... > | > Hi Adam, > | > > | > I found some similar cases that related to the following registry key: > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage > | > Bind: REG_MULTI_SZ > | > > | > In addition, I am not sure what symptoms you are encountering on the > | > server. If everything works fine, you can ignore this error. > | > > | > Thanks & Regards, > | > > | > Ken Zhao > | > > | > Microsoft Online Support > | > Microsoft Global Technical Support Center > | > > | > Get Secure! - http://www.microsoft.com/security > | > <http://www.microsoft.com/security> > | > ==================================================== > | > When responding to posts, please "Reply to Group" via your newsreader > so > | > that others may learn and benefit from your issue. > | > ==================================================== > | > This posting is provided "AS IS" with no warranties, and confers no > | > rights. > | > > | > > | > > | > > | > > | > -------------------- > | > | From: "Adam Raff" <araff@newsgroup.nospam> > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> > | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> > | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> > | > | Subject: Re: Event SRV error 2012 > | > | Date: Tue, 21 Aug 2007 14:42:03 -0400 > | > | Lines: 200 > | > | X-Priority: 3 > | > | X-MSMail-Priority: Normal > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | > | X-RFC2646: Format=Flowed; Original > | > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> > | > | Newsgroups: microsoft.public.windows.server.general > | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net > 208.39.138.189 > | > | Path: > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl > | > | Xref: TK2MSFTNGHUB02.phx.gbl > | > microsoft.public.windows.server.general:20147 > | > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | > | > | Hi Ken > | > | > | > | Thanks for the feed back. Not sure why you pointed my to 317249 as > I > am > | > not > | > | getting 2021 or 2022 event errors. My errors are 2012. > | > | > | > | Now in that reg key what am I looking for. Can you give me an > example > | > by > | > | chance. > | > | > | > | Also all the errors disappear on the weekends so I do not think it's > a > | > | server issue or something related in my server room as they are up > 24x7. > | > If > | > | we have a long weekend no errors then as well. that is why I am > hoping > | > that > | > | the return code that I am getting back from the error can point me > some > | > | where. > | > | > | > | Adam Raff > | > | > | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message > | > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl... > | > | > Hello Adam, > | > | > > | > | > Thank you for using newsgroup! > | > | > > | > | > Based on my research, this basically is an error that the network > | > driver > | > | > is > | > | > giving SRV on the send IRPs. First thing that I would see is if > the > | > | > customer is running any 3rd party network software that is bound > to > | > the > | > | > server. You can see this by checking the following registry key. > | > | > > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage > | > | > Bind: REG_MULTI_SZ > | > | > > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 > | > | > http://support.microsoft.com/kb/317249/en-us > | > | > > | > | > In addition, this may be caused due to a race between send and > | > disconnect. > | > | > The customer can ignore this error. > | > | > > | > | > Thanks & Regards, > | > | > > | > | > Ken Zhao > | > | > > | > | > Microsoft Online Support > | > | > Microsoft Global Technical Support Center > | > | > > | > | > Get Secure! - http://www.microsoft.com/security > | > | > <http://www.microsoft.com/security> > | > | > ==================================================== > | > | > When responding to posts, please "Reply to Group" via your > newsreader > | > so > | > | > that others may learn and benefit from your issue. > | > | > ==================================================== > | > | > This posting is provided "AS IS" with no warranties, and confers > no > | > | > rights. > | > | > > | > | > > | > | > > | > | > > | > | > -------------------- > | > | > | From: "Adam Raff" <araff@newsgroup.nospam> > | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> > | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> > | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> > | > | > | Subject: Re: Event SRV error 2012 > | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 > | > | > | Lines: 99 > | > | > | X-Priority: 3 > | > | > | X-MSMail-Priority: Normal > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > | > | > | X-RFC2646: Format=Flowed; Response > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 > | > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> > | > | > | Newsgroups: microsoft.public.windows.server.general > | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 > | > | > | Path: > | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl > | > | > | Xref: TK2MSFTNGHUB02.phx.gbl > | > | > microsoft.public.windows.server.general:19785 > | > | > | X-Tomcat-NG: microsoft.public.windows.server.general > | > | > | > | > | > | Hi Coraleigh, > | > | > | > | > | > | Thank you for responding but if I am not mistaken if you install > or > | > have > | > | > | installed 913446 that updated supersedes security update 893066. > I > | > have > | > | > | 913446 installed on all my servers already. > | > | > | I verified that which is way I added the sub note to let people > know > | > | > that > | > | > I > | > | > | checked this information. > | > | > | > | > | > | If I am wrong then please correct me. I will check the version > | > number > | > | > on > | > | > | the TCP stack to see if it's that version or newer which I also > | > assume > | > | > will > | > | > | be as good. > | > | > | > | > | > | I was hoping that somebody out there can read this error and the > | > code > | > | > that > | > | > | goes with it and perhaps it points to a Mac address or something > | > like > | > | > that. > | > | > | Is there a cheap way of sniffing around the network just to get > an > | > idea > | > | > to > | > | > | see if I am getting any of these errors listed in 898060? > | > | > | > | > | > | Thanks > | > | > | Adam Raff > | > | > | > | > | > | > | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message > | > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... > | > | > | > Hi Adam, > | > | > | > > | > | > | > Some people have found that the Event ID you have is resolved > by > | > this > | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/ > | > | > | > > | > | > | > Coraleigh Miller > | > | > | > > | > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message > | > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... > | > | > | >> Sorry a little more info on this problem > | > | > | >> > | > | > | >> We are running a Windows 2003 SP1 network. Desktops are all > | > windows > | > | > XP > | > | > | >> SP2. With all updated security patches on server and desktop > | > side. > | > | > | >> > | > | > | >> I have also looked into KB913446 MS06-007 as this may lead to > | > issues > | > | > with > | > | > | >> connectivity. All my servers have this update as well as a > new > | > one > | > | > that > | > | > | >> is also getting the errors as well. > | > | > | >> > | > | > | >> Thanks > | > | > | >> Adam Raff > | > | > | >> > | > | > | >> > | > | > | >> > | > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message > | > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... > | > | > | >>> Good Day, > | > | > | >>> > | > | > | >>> Over the few months we have been having an ongoing issue > with > | > the > | > | > | >>> following error messages and they appear on all of our > servers. > | > | > | >>> > | > | > | >>> Event Type: Warning > | > | > | >>> Event Source: Srv > | > | > | >>> Event Category: None > | > | > | >>> Event ID: 2012 > | > | > | >>> Date: 8/17/2007 > | > | > | >>> Time: 2:18:26 AM > | > | > | >>> User: N/A > | > | > | >>> Computer: HSMAIN > | > | > | >>> Description: > | > | > | >>> While transmitting or receiving data, the server encountered > a > | > | > network > | > | > | >>> error. Occassional errors are expected, > | > | > | >>> but large amounts of these indicate a possible error in your > | > network > | > | > | >>> configuration. > | > | > | >>> The error status code is contained within the returned data > | > | > (formatted > | > | > | >>> as Words) and may point you towards the problem. > | > | > | >>> > | > | > | >>> For more information, see Help and Support Center at > | > | > | >>> http://go.microsoft.com/fwlink/events.asp. > | > | > | >>> Data: > | > | > | >>> 0000: 00040000 00540001 00000000 800007dc > | > | > | >>> 0010: 00000000 c0000184 00000000 00000000 > | > | > | >>> 0020: 00000000 00000000 0000097a > | > | > | >>> > | > | > | >>> > | > | > | >>> I have looked at this from so many ways but I can not find > the > | > point > | > | > of > | > | > | >>> the error. You see the problem goes away on weekends. We > | > pretty > | > | > much > | > | > | >>> turn off all desktops but all servers and printer (network > | > | > connected) > | > | > | >>> and switches stay on. I thought that it was a desktop and > | > checked > | > | > over > | > | > | >>> all the desktops and identified some that may have bad Nics. > | > After > | > | > | >>> fixing them I am still getting errors but again they > disappear > | > over > | > | > the > | > | > | >>> weekend. > | > | > | >>> > | > | > | >>> The error message says to look in the error code which may > point > | > me > | > | > in > | > | > | >>> the right direction but I can not make heads or tails out to > the > | > | > error > | > | > | >>> message. If somebody knows how to read this and point me in > the > | > | > right > | > | > | >>> direction it would be a great help. > | > | > | >>> > | > | > | >>> Thank You > | > | > | >>> Adam Raff > | > | > | >>> > | > | > | >> > | > | > | >> > | > | > | > > | > | > | > > | > | > | > | > | > | > | > | > | > | > | > > | > | > | > | > | > | > | > > | > | > | >
Guest Ken Zhao [MSFT] Posted August 30, 2007 Posted August 30, 2007 Re: Event SRV error 2012 Hello Adam, The only issue is network slow? Please understand performance issues can be difficult to troubleshoot and resolve in a newsgroup setting due to the number of variables and the amount of time required to narrow down possible causes and observe the effects. Thanks & Regards, Ken Zhao Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | From: "Adam Raff" <araff@newsgroup.nospam> | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl> <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl> <KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl> | Subject: Re: Event SRV error 2012 | Date: Tue, 28 Aug 2007 23:03:51 -0400 | Lines: 422 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | X-RFC2646: Format=Flowed; Original | Message-ID: <#nRb3ke6HHA.2208@TK2MSFTNGP06.phx.gbl> | Newsgroups: microsoft.public.windows.server.general | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20868 | X-Tomcat-NG: microsoft.public.windows.server.general | | Hi Ken, | | From what I can see nothing seems to be affecting the network but I am | getting some people complaining that the network seems slow. Not sure if it | is related or not. | | Just to give you more info. I have already updated the nic drivers on one | of the servers to see if that helps. No luck there as well. I am trying to | power systems down at night but what I can tell the problem is still there. | It seems that I have to do it my trial and error. | | Adam | | | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message | news:KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl... | > Hi Adam, | > | > Actually, this event error may be caused by more reasons. Could you let us | > know what symptoms you are encountering on the server? What issues are | > occurring when the event error is logged? | > | > Thanks & Regards, | > | > Ken Zhao | > | > Microsoft Online Support | > Microsoft Global Technical Support Center | > | > Get Secure! - http://www.microsoft.com/security | > <http://www.microsoft.com/security> | > ==================================================== | > When responding to posts, please "Reply to Group" via your newsreader so | > that others may learn and benefit from your issue. | > ==================================================== | > This posting is provided "AS IS" with no warranties, and confers no | > rights. | > | > | > | > | > | > -------------------- | > | From: "Adam Raff" <araff@newsgroup.nospam> | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> | > <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> | > <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl> | > | Subject: Re: Event SRV error 2012 | > | Date: Thu, 23 Aug 2007 11:56:44 -0400 | > | Lines: 315 | > | X-Priority: 3 | > | X-MSMail-Priority: Normal | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | X-RFC2646: Format=Flowed; Original | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl> | > | Newsgroups: microsoft.public.windows.server.general | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189 | > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl | > | Xref: TK2MSFTNGHUB02.phx.gbl | > microsoft.public.windows.server.general:20380 | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | | > | Hi Ken, | > | | > | To be honest I am not sure what I am looking for when I look at these | > | setting in the registry. If you could give me an example that would be | > | great. | > | | > | I am getting a lot of errors and I just want to make sure that it's not | > the | > | network. I believe it's a computer or device but I am having a ton of | > | problems tracking the problem down. Since the issues seem to stop on | > | weekends, I would think it's a computer as we shut all the systems down | > on | > | Friday for the weekend (Servers, networked printers and the like stay on | > | including switches and routes). I am thinking that it may be a computer | > | hitting a bad port on a switch but this is above my head and not sure | > how | > to | > | trouble shoot this or how to go about find the problem. That is why I | > was | > | hoping that the codes in the event may point be in some direction as | > they | > | state that the error is there | > | | > | The error status code is contained within the returned data | > | > | > (formatted | > | > | > | >>> as Words) and may point you towards the problem. | > | | > | I was hoping that something in the error code could point be someplace. | > I | > | am planning on testing some systems over the weekend and leave them on | > to | > | see if I get any errors or not. | > | | > | Thanks | > | Adam Raff | > | | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message | > | news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl... | > | > Hi Adam, | > | > | > | > I found some similar cases that related to the following registry key: | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | > | > Bind: REG_MULTI_SZ | > | > | > | > In addition, I am not sure what symptoms you are encountering on the | > | > server. If everything works fine, you can ignore this error. | > | > | > | > Thanks & Regards, | > | > | > | > Ken Zhao | > | > | > | > Microsoft Online Support | > | > Microsoft Global Technical Support Center | > | > | > | > Get Secure! - http://www.microsoft.com/security | > | > <http://www.microsoft.com/security> | > | > ==================================================== | > | > When responding to posts, please "Reply to Group" via your newsreader | > so | > | > that others may learn and benefit from your issue. | > | > ==================================================== | > | > This posting is provided "AS IS" with no warranties, and confers no | > | > rights. | > | > | > | > | > | > | > | > | > | > | > | > -------------------- | > | > | From: "Adam Raff" <araff@newsgroup.nospam> | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | > | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | > | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> | > | > | Subject: Re: Event SRV error 2012 | > | > | Date: Tue, 21 Aug 2007 14:42:03 -0400 | > | > | Lines: 200 | > | > | X-Priority: 3 | > | > | X-MSMail-Priority: Normal | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | > | X-RFC2646: Format=Flowed; Original | > | > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> | > | > | Newsgroups: microsoft.public.windows.server.general | > | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net | > 208.39.138.189 | > | > | Path: | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | > | > | Xref: TK2MSFTNGHUB02.phx.gbl | > | > microsoft.public.windows.server.general:20147 | > | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | > | | > | > | Hi Ken | > | > | | > | > | Thanks for the feed back. Not sure why you pointed my to 317249 as | > I | > am | > | > not | > | > | getting 2021 or 2022 event errors. My errors are 2012. | > | > | | > | > | Now in that reg key what am I looking for. Can you give me an | > example | > | > by | > | > | chance. | > | > | | > | > | Also all the errors disappear on the weekends so I do not think it's | > a | > | > | server issue or something related in my server room as they are up | > 24x7. | > | > If | > | > | we have a long weekend no errors then as well. that is why I am | > hoping | > | > that | > | > | the return code that I am getting back from the error can point me | > some | > | > | where. | > | > | | > | > | Adam Raff | > | > | | > | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message | > | > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl... | > | > | > Hello Adam, | > | > | > | > | > | > Thank you for using newsgroup! | > | > | > | > | > | > Based on my research, this basically is an error that the network | > | > driver | > | > | > is | > | > | > giving SRV on the send IRPs. First thing that I would see is if | > the | > | > | > customer is running any 3rd party network software that is bound | > to | > | > the | > | > | > server. You can see this by checking the following registry key. | > | > | > | > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | > | > | > Bind: REG_MULTI_SZ | > | > | > | > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 | > | > | > http://support.microsoft.com/kb/317249/en-us | > | > | > | > | > | > In addition, this may be caused due to a race between send and | > | > disconnect. | > | > | > The customer can ignore this error. | > | > | > | > | > | > Thanks & Regards, | > | > | > | > | > | > Ken Zhao | > | > | > | > | > | > Microsoft Online Support | > | > | > Microsoft Global Technical Support Center | > | > | > | > | > | > Get Secure! - http://www.microsoft.com/security | > | > | > <http://www.microsoft.com/security> | > | > | > ==================================================== | > | > | > When responding to posts, please "Reply to Group" via your | > newsreader | > | > so | > | > | > that others may learn and benefit from your issue. | > | > | > ==================================================== | > | > | > This posting is provided "AS IS" with no warranties, and confers | > no | > | > | > rights. | > | > | > | > | > | > | > | > | > | > | > | > | > | > | > -------------------- | > | > | > | From: "Adam Raff" <araff@newsgroup.nospam> | > | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> | > | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> | > | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | > | > | > | Subject: Re: Event SRV error 2012 | > | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 | > | > | > | Lines: 99 | > | > | > | X-Priority: 3 | > | > | > | X-MSMail-Priority: Normal | > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | > | > | > | X-RFC2646: Format=Flowed; Response | > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | > | > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | > | > | > | Newsgroups: microsoft.public.windows.server.general | > | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 | > | > | > | Path: | > | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl | > | > | > | Xref: TK2MSFTNGHUB02.phx.gbl | > | > | > microsoft.public.windows.server.general:19785 | > | > | > | X-Tomcat-NG: microsoft.public.windows.server.general | > | > | > | | > | > | > | Hi Coraleigh, | > | > | > | | > | > | > | Thank you for responding but if I am not mistaken if you install | > or | > | > have | > | > | > | installed 913446 that updated supersedes security update 893066. | > I | > | > have | > | > | > | 913446 installed on all my servers already. | > | > | > | I verified that which is way I added the sub note to let people | > know | > | > | > that | > | > | > I | > | > | > | checked this information. | > | > | > | | > | > | > | If I am wrong then please correct me. I will check the version | > | > number | > | > | > on | > | > | > | the TCP stack to see if it's that version or newer which I also | > | > assume | > | > | > will | > | > | > | be as good. | > | > | > | | > | > | > | I was hoping that somebody out there can read this error and the | > | > code | > | > | > that | > | > | > | goes with it and perhaps it points to a Mac address or something | > | > like | > | > | > that. | > | > | > | Is there a cheap way of sniffing around the network just to get | > an | > | > idea | > | > | > to | > | > | > | see if I am getting any of these errors listed in 898060? | > | > | > | | > | > | > | Thanks | > | > | > | Adam Raff | > | > | > | | > | > | > | | > | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message | > | > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... | > | > | > | > Hi Adam, | > | > | > | > | > | > | > | > Some people have found that the Event ID you have is resolved | > by | > | > this | > | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/ | > | > | > | > | > | > | > | > Coraleigh Miller | > | > | > | > | > | > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message | > | > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... | > | > | > | >> Sorry a little more info on this problem | > | > | > | >> | > | > | > | >> We are running a Windows 2003 SP1 network. Desktops are all | > | > windows | > | > | > XP | > | > | > | >> SP2. With all updated security patches on server and desktop | > | > side. | > | > | > | >> | > | > | > | >> I have also looked into KB913446 MS06-007 as this may lead to | > | > issues | > | > | > with | > | > | > | >> connectivity. All my servers have this update as well as a | > new | > | > one | > | > | > that | > | > | > | >> is also getting the errors as well. | > | > | > | >> | > | > | > | >> Thanks | > | > | > | >> Adam Raff | > | > | > | >> | > | > | > | >> | > | > | > | >> | > | > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message | > | > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... | > | > | > | >>> Good Day, | > | > | > | >>> | > | > | > | >>> Over the few months we have been having an ongoing issue | > with | > | > the | > | > | > | >>> following error messages and they appear on all of our | > servers. | > | > | > | >>> | > | > | > | >>> Event Type: Warning | > | > | > | >>> Event Source: Srv | > | > | > | >>> Event Category: None | > | > | > | >>> Event ID: 2012 | > | > | > | >>> Date: 8/17/2007 | > | > | > | >>> Time: 2:18:26 AM | > | > | > | >>> User: N/A | > | > | > | >>> Computer: HSMAIN | > | > | > | >>> Description: | > | > | > | >>> While transmitting or receiving data, the server encountered | > a | > | > | > network | > | > | > | >>> error. Occassional errors are expected, | > | > | > | >>> but large amounts of these indicate a possible error in your | > | > network | > | > | > | >>> configuration. | > | > | > | >>> The error status code is contained within the returned data | > | > | > (formatted | > | > | > | >>> as Words) and may point you towards the problem. | > | > | > | >>> | > | > | > | >>> For more information, see Help and Support Center at | > | > | > | >>> http://go.microsoft.com/fwlink/events.asp. | > | > | > | >>> Data: | > | > | > | >>> 0000: 00040000 00540001 00000000 800007dc | > | > | > | >>> 0010: 00000000 c0000184 00000000 00000000 | > | > | > | >>> 0020: 00000000 00000000 0000097a | > | > | > | >>> | > | > | > | >>> | > | > | > | >>> I have looked at this from so many ways but I can not find | > the | > | > point | > | > | > of | > | > | > | >>> the error. You see the problem goes away on weekends. We | > | > pretty | > | > | > much | > | > | > | >>> turn off all desktops but all servers and printer (network | > | > | > connected) | > | > | > | >>> and switches stay on. I thought that it was a desktop and | > | > checked | > | > | > over | > | > | > | >>> all the desktops and identified some that may have bad Nics. | > | > After | > | > | > | >>> fixing them I am still getting errors but again they | > disappear | > | > over | > | > | > the | > | > | > | >>> weekend. | > | > | > | >>> | > | > | > | >>> The error message says to look in the error code which may | > point | > | > me | > | > | > in | > | > | > | >>> the right direction but I can not make heads or tails out to | > the | > | > | > error | > | > | > | >>> message. If somebody knows how to read this and point me in | > the | > | > | > right | > | > | > | >>> direction it would be a great help. | > | > | > | >>> | > | > | > | >>> Thank You | > | > | > | >>> Adam Raff | > | > | > | >>> | > | > | > | >> | > | > | > | >> | > | > | > | > | > | > | > | > | > | > | > | | > | > | > | | > | > | > | | > | > | > | > | > | | > | > | | > | > | | > | > | > | | > | | > | | > | | |
Guest paulhaskew@gmail.com Posted August 31, 2007 Posted August 31, 2007 Re: Event SRV error 2012 On Aug 17, 8:42 am, "Adam Raff" <ar...@newsgroup.nospam> wrote: > Good Day, > > Over the few months we have been having an ongoing issue with the following > error messages and they appear on all of our servers. > > Event Type: Warning > Event Source: Srv > Event Category: None > Event ID: 2012 > Date: 8/17/2007 > Time: 2:18:26 AM > User: N/A > Computer: HSMAIN > Description: > While transmitting or receiving data, the server encountered a network > error. Occassional errors are expected, > but large amounts of these indicate a possible error in your network > configuration. > The error status code is contained within the returned data (formatted as > Words) and may point you towards the problem. > > For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 00040000 00540001 00000000 800007dc > 0010: 00000000 c0000184 00000000 00000000 > 0020: 00000000 00000000 0000097a > > I have looked at this from so many ways but I can not find the point of the > error. You see the problem goes away on weekends. We pretty much turn off > all desktops but all servers and printer (network connected) and switches > stay on. I thought that it was a desktop and checked over all the desktops > and identified some that may have bad Nics. After fixing them I am still > getting errors but again they disappear over the weekend. > > The error message says to look in the error code which may point me in the > right direction but I can not make heads or tails out to the error message. > If somebody knows how to read this and point me in the right direction it > would be a great help. > > Thank You > Adam Raff Check here >> http://www.wildpackets.com/elements/misc/SMB_NT_Status_Codes.txt
Guest Ken Zhao [MSFT] Posted September 4, 2007 Posted September 4, 2007 Re: Event SRV error 2012 Hi Adam, If you have any updates or need any further assistance on this issue, please feel free to let me know. Thanks & Regards, Ken Zhao Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | X-Tomcat-ID: 120838450 | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl> <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl> <KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl> <#nRb3ke6HHA.2208@TK2MSFTNGP06.phx.gbl> | MIME-Version: 1.0 | Content-Type: text/plain | Content-Transfer-Encoding: 7bit | From: v-kzhao@online.microsoft.com ("Ken Zhao [MSFT]") | Organization: Microsoft | Date: Thu, 30 Aug 2007 09:06:47 GMT | Subject: Re: Event SRV error 2012 | X-Tomcat-NG: microsoft.public.windows.server.general | Message-ID: <m4EVgUu6HHA.5608@TK2MSFTNGHUB02.phx.gbl> | Newsgroups: microsoft.public.windows.server.general | Lines: 440 | Path: TK2MSFTNGHUB02.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20963 | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182 | | Hello Adam, | | The only issue is network slow? | | Please understand performance issues can be difficult to troubleshoot and | resolve in a newsgroup setting due to the number of variables and the | amount of time required to narrow down possible causes and observe the | effects. | | Thanks & Regards, | | Ken Zhao | | Microsoft Online Support | Microsoft Global Technical Support Center | | Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security> | ==================================================== | When responding to posts, please "Reply to Group" via your newsreader so | that others may learn and benefit from your issue. | ==================================================== | This posting is provided "AS IS" with no warranties, and confers no rights. | | | | | | -------------------- | | From: "Adam Raff" <araff@newsgroup.nospam> | | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> | <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> | <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> | <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> | <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl> | <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl> | <KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl> | | Subject: Re: Event SRV error 2012 | | Date: Tue, 28 Aug 2007 23:03:51 -0400 | | Lines: 422 | | X-Priority: 3 | | X-MSMail-Priority: Normal | | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | | X-RFC2646: Format=Flowed; Original | | Message-ID: <#nRb3ke6HHA.2208@TK2MSFTNGP06.phx.gbl> | | Newsgroups: microsoft.public.windows.server.general | | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128 | | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20868 | | X-Tomcat-NG: microsoft.public.windows.server.general | | | | Hi Ken, | | | | From what I can see nothing seems to be affecting the network but I am | | getting some people complaining that the network seems slow. Not sure if | it | | is related or not. | | | | Just to give you more info. I have already updated the nic drivers on | one | | of the servers to see if that helps. No luck there as well. I am trying | to | | power systems down at night but what I can tell the problem is still | there. | | It seems that I have to do it my trial and error. | | | | Adam | | | | | | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message | | news:KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl... | | > Hi Adam, | | > | | > Actually, this event error may be caused by more reasons. Could you let | us | | > know what symptoms you are encountering on the server? What issues are | | > occurring when the event error is logged? | | > | | > Thanks & Regards, | | > | | > Ken Zhao | | > | | > Microsoft Online Support | | > Microsoft Global Technical Support Center | | > | | > Get Secure! - http://www.microsoft.com/security | | > <http://www.microsoft.com/security> | | > ==================================================== | | > When responding to posts, please "Reply to Group" via your newsreader so | | > that others may learn and benefit from your issue. | | > ==================================================== | | > This posting is provided "AS IS" with no warranties, and confers no | | > rights. | | > | | > | | > | | > | | > | | > -------------------- | | > | From: "Adam Raff" <araff@newsgroup.nospam> | | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> | | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> | | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> | | > <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> | | > <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl> | | > | Subject: Re: Event SRV error 2012 | | > | Date: Thu, 23 Aug 2007 11:56:44 -0400 | | > | Lines: 315 | | > | X-Priority: 3 | | > | X-MSMail-Priority: Normal | | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | | > | X-RFC2646: Format=Flowed; Original | | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | | > | Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl> | | > | Newsgroups: microsoft.public.windows.server.general | | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net | 208.39.138.189 | | > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl | | > | Xref: TK2MSFTNGHUB02.phx.gbl | | > microsoft.public.windows.server.general:20380 | | > | X-Tomcat-NG: microsoft.public.windows.server.general | | > | | | > | Hi Ken, | | > | | | > | To be honest I am not sure what I am looking for when I look at these | | > | setting in the registry. If you could give me an example that would | be | | > | great. | | > | | | > | I am getting a lot of errors and I just want to make sure that it's | not | | > the | | > | network. I believe it's a computer or device but I am having a ton of | | > | problems tracking the problem down. Since the issues seem to stop on | | > | weekends, I would think it's a computer as we shut all the systems | down | | > on | | > | Friday for the weekend (Servers, networked printers and the like stay | on | | > | including switches and routes). I am thinking that it may be a | computer | | > | hitting a bad port on a switch but this is above my head and not sure | | > how | | > to | | > | trouble shoot this or how to go about find the problem. That is why I | | > was | | > | hoping that the codes in the event may point be in some direction as | | > they | | > | state that the error is there | | > | | | > | The error status code is contained within the returned data | | > | > | > (formatted | | > | > | > | >>> as Words) and may point you towards the problem. | | > | | | > | I was hoping that something in the error code could point be | someplace. | | > I | | > | am planning on testing some systems over the weekend and leave them | on | | > to | | > | see if I get any errors or not. | | > | | | > | Thanks | | > | Adam Raff | | > | | | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message | | > | news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl... | | > | > Hi Adam, | | > | > | | > | > I found some similar cases that related to the following registry | key: | | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | | > | > Bind: REG_MULTI_SZ | | > | > | | > | > In addition, I am not sure what symptoms you are encountering on the | | > | > server. If everything works fine, you can ignore this error. | | > | > | | > | > Thanks & Regards, | | > | > | | > | > Ken Zhao | | > | > | | > | > Microsoft Online Support | | > | > Microsoft Global Technical Support Center | | > | > | | > | > Get Secure! - http://www.microsoft.com/security | | > | > <http://www.microsoft.com/security> | | > | > ==================================================== | | > | > When responding to posts, please "Reply to Group" via your | newsreader | | > so | | > | > that others may learn and benefit from your issue. | | > | > ==================================================== | | > | > This posting is provided "AS IS" with no warranties, and confers no | | > | > rights. | | > | > | | > | > | | > | > | | > | > | | > | > | | > | > -------------------- | | > | > | From: "Adam Raff" <araff@newsgroup.nospam> | | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> | | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> | | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | | > | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | | > | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl> | | > | > | Subject: Re: Event SRV error 2012 | | > | > | Date: Tue, 21 Aug 2007 14:42:03 -0400 | | > | > | Lines: 200 | | > | > | X-Priority: 3 | | > | > | X-MSMail-Priority: Normal | | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | | > | > | X-RFC2646: Format=Flowed; Original | | > | > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl> | | > | > | Newsgroups: microsoft.public.windows.server.general | | > | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net | | > 208.39.138.189 | | > | > | Path: | | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl | | > | > | Xref: TK2MSFTNGHUB02.phx.gbl | | > | > microsoft.public.windows.server.general:20147 | | > | > | X-Tomcat-NG: microsoft.public.windows.server.general | | > | > | | | > | > | Hi Ken | | > | > | | | > | > | Thanks for the feed back. Not sure why you pointed my to 317249 | as | | > I | | > am | | > | > not | | > | > | getting 2021 or 2022 event errors. My errors are 2012. | | > | > | | | > | > | Now in that reg key what am I looking for. Can you give me an | | > example | | > | > by | | > | > | chance. | | > | > | | | > | > | Also all the errors disappear on the weekends so I do not think | it's | | > a | | > | > | server issue or something related in my server room as they are up | | > 24x7. | | > | > If | | > | > | we have a long weekend no errors then as well. that is why I am | | > hoping | | > | > that | | > | > | the return code that I am getting back from the error can point me | | > some | | > | > | where. | | > | > | | | > | > | Adam Raff | | > | > | | | > | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in | message | | > | > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl... | | > | > | > Hello Adam, | | > | > | > | | > | > | > Thank you for using newsgroup! | | > | > | > | | > | > | > Based on my research, this basically is an error that the | network | | > | > driver | | > | > | > is | | > | > | > giving SRV on the send IRPs. First thing that I would see is if | | > the | | > | > | > customer is running any 3rd party network software that is | bound | | > to | | > | > the | | > | > | > server. You can see this by checking the following registry key. | | > | > | > | | > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage | | > | > | > Bind: REG_MULTI_SZ | | > | > | > | | > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022 | | > | > | > http://support.microsoft.com/kb/317249/en-us | | > | > | > | | > | > | > In addition, this may be caused due to a race between send and | | > | > disconnect. | | > | > | > The customer can ignore this error. | | > | > | > | | > | > | > Thanks & Regards, | | > | > | > | | > | > | > Ken Zhao | | > | > | > | | > | > | > Microsoft Online Support | | > | > | > Microsoft Global Technical Support Center | | > | > | > | | > | > | > Get Secure! - http://www.microsoft.com/security | | > | > | > <http://www.microsoft.com/security> | | > | > | > ==================================================== | | > | > | > When responding to posts, please "Reply to Group" via your | | > newsreader | | > | > so | | > | > | > that others may learn and benefit from your issue. | | > | > | > ==================================================== | | > | > | > This posting is provided "AS IS" with no warranties, and | confers | | > no | | > | > | > rights. | | > | > | > | | > | > | > | | > | > | > | | > | > | > | | > | > | > -------------------- | | > | > | > | From: "Adam Raff" <araff@newsgroup.nospam> | | > | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl> | | > | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl> | | > | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl> | | > | > | > | Subject: Re: Event SRV error 2012 | | > | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400 | | > | > | > | Lines: 99 | | > | > | > | X-Priority: 3 | | > | > | > | X-MSMail-Priority: Normal | | > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 | | > | > | > | X-RFC2646: Format=Flowed; Response | | > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 | | > | > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl> | | > | > | > | Newsgroups: microsoft.public.windows.server.general | | > | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net | 69.115.51.128 | | > | > | > | Path: | | > | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl | | > | > | > | Xref: TK2MSFTNGHUB02.phx.gbl | | > | > | > microsoft.public.windows.server.general:19785 | | > | > | > | X-Tomcat-NG: microsoft.public.windows.server.general | | > | > | > | | | > | > | > | Hi Coraleigh, | | > | > | > | | | > | > | > | Thank you for responding but if I am not mistaken if you | install | | > or | | > | > have | | > | > | > | installed 913446 that updated supersedes security update | 893066. | | > I | | > | > have | | > | > | > | 913446 installed on all my servers already. | | > | > | > | I verified that which is way I added the sub note to let | people | | > know | | > | > | > that | | > | > | > I | | > | > | > | checked this information. | | > | > | > | | | > | > | > | If I am wrong then please correct me. I will check the | version | | > | > number | | > | > | > on | | > | > | > | the TCP stack to see if it's that version or newer which I | also | | > | > assume | | > | > | > will | | > | > | > | be as good. | | > | > | > | | | > | > | > | I was hoping that somebody out there can read this error and | the | | > | > code | | > | > | > that | | > | > | > | goes with it and perhaps it points to a Mac address or | something | | > | > like | | > | > | > that. | | > | > | > | Is there a cheap way of sniffing around the network just to | get | | > an | | > | > idea | | > | > | > to | | > | > | > | see if I am getting any of these errors listed in 898060? | | > | > | > | | | > | > | > | Thanks | | > | > | > | Adam Raff | | > | > | > | | | > | > | > | | | > | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in | message | | > | > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl... | | > | > | > | > Hi Adam, | | > | > | > | > | | > | > | > | > Some people have found that the Event ID you have is | resolved | | > by | | > | > this | | > | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/ | | > | > | > | > | | > | > | > | > Coraleigh Miller | | > | > | > | > | | > | > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message | | > | > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl... | | > | > | > | >> Sorry a little more info on this problem | | > | > | > | >> | | > | > | > | >> We are running a Windows 2003 SP1 network. Desktops are | all | | > | > windows | | > | > | > XP | | > | > | > | >> SP2. With all updated security patches on server and | desktop | | > | > side. | | > | > | > | >> | | > | > | > | >> I have also looked into KB913446 MS06-007 as this may lead | to | | > | > issues | | > | > | > with | | > | > | > | >> connectivity. All my servers have this update as well as a | | > new | | > | > one | | > | > | > that | | > | > | > | >> is also getting the errors as well. | | > | > | > | >> | | > | > | > | >> Thanks | | > | > | > | >> Adam Raff | | > | > | > | >> | | > | > | > | >> | | > | > | > | >> | | > | > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message | | > | > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl... | | > | > | > | >>> Good Day, | | > | > | > | >>> | | > | > | > | >>> Over the few months we have been having an ongoing issue | | > with | | > | > the | | > | > | > | >>> following error messages and they appear on all of our | | > servers. | | > | > | > | >>> | | > | > | > | >>> Event Type: Warning | | > | > | > | >>> Event Source: Srv | | > | > | > | >>> Event Category: None | | > | > | > | >>> Event ID: 2012 | | > | > | > | >>> Date: 8/17/2007 | | > | > | > | >>> Time: 2:18:26 AM | | > | > | > | >>> User: N/A | | > | > | > | >>> Computer: HSMAIN | | > | > | > | >>> Description: | | > | > | > | >>> While transmitting or receiving data, the server | encountered | | > a | | > | > | > network | | > | > | > | >>> error. Occassional errors are expected, | | > | > | > | >>> but large amounts of these indicate a possible error in | your | | > | > network | | > | > | > | >>> configuration. | | > | > | > | >>> The error status code is contained within the returned | data | | > | > | > (formatted | | > | > | > | >>> as Words) and may point you towards the problem. | | > | > | > | >>> | | > | > | > | >>> For more information, see Help and Support Center at | | > | > | > | >>> http://go.microsoft.com/fwlink/events.asp. | | > | > | > | >>> Data: | | > | > | > | >>> 0000: 00040000 00540001 00000000 800007dc | | > | > | > | >>> 0010: 00000000 c0000184 00000000 00000000 | | > | > | > | >>> 0020: 00000000 00000000 0000097a | | > | > | > | >>> | | > | > | > | >>> | | > | > | > | >>> I have looked at this from so many ways but I can not | find | | > the | | > | > point | | > | > | > of | | > | > | > | >>> the error. You see the problem goes away on weekends. We | | > | > pretty | | > | > | > much | | > | > | > | >>> turn off all desktops but all servers and printer (network | | > | > | > connected) | | > | > | > | >>> and switches stay on. I thought that it was a desktop and | | > | > checked | | > | > | > over | | > | > | > | >>> all the desktops and identified some that may have bad | Nics. | | > | > After | | > | > | > | >>> fixing them I am still getting errors but again they | | > disappear | | > | > over | | > | > | > the | | > | > | > | >>> weekend. | | > | > | > | >>> | | > | > | > | >>> The error message says to look in the error code which may | | > point | | > | > me | | > | > | > in | | > | > | > | >>> the right direction but I can not make heads or tails out | to | | > the | | > | > | > error | | > | > | > | >>> message. If somebody knows how to read this and point me | in | | > the | | > | > | > right | | > | > | > | >>> direction it would be a great help. | | > | > | > | >>> | | > | > | > | >>> Thank You | | > | > | > | >>> Adam Raff | | > | > | > | >>> | | > | > | > | >> | | > | > | > | >> | | > | > | > | > | | > | > | > | > | | > | > | > | | | > | > | > | | | > | > | > | | | > | > | > | | > | > | | | > | > | | | > | > | | | > | > | | > | | | > | | | > | | | > | | | | | | | |
Recommended Posts