Event SRV error 2012

August 17, 2007

Good Day,

Over the few months we have been having an ongoing issue with the following

error messages and they appear on all of our servers.

Event Type: Warning

Event Source: Srv

Event Category: None

Event ID: 2012

Date: 8/17/2007

Time: 2:18:26 AM

User: N/A

Computer: HSMAIN

Description:

While transmitting or receiving data, the server encountered a network

error. Occassional errors are expected,

but large amounts of these indicate a possible error in your network

configuration.

The error status code is contained within the returned data (formatted as

Words) and may point you towards the problem.

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

Data:

0000: 00040000 00540001 00000000 800007dc

0010: 00000000 c0000184 00000000 00000000

0020: 00000000 00000000 0000097a

I have looked at this from so many ways but I can not find the point of the

error. You see the problem goes away on weekends. We pretty much turn off

all desktops but all servers and printer (network connected) and switches

stay on. I thought that it was a desktop and checked over all the desktops

and identified some that may have bad Nics. After fixing them I am still

getting errors but again they disappear over the weekend.

The error message says to look in the error code which may point me in the

right direction but I can not make heads or tails out to the error message.

If somebody knows how to read this and point me in the right direction it

would be a great help.

Thank You

Adam Raff

August 17, 2007

Re: Event SRV error 2012

Sorry a little more info on this problem

We are running a Windows 2003 SP1 network. Desktops are all windows XP SP2.

With all updated security patches on server and desktop side.

I have also looked into KB913446 MS06-007 as this may lead to issues with

connectivity. All my servers have this update as well as a new one that is

also getting the errors as well.

Thanks

Adam Raff

"Adam Raff" <araff@newsgroup.nospam> wrote in message

news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

> Good Day,

>

> Over the few months we have been having an ongoing issue with the

> following error messages and they appear on all of our servers.

>

> Event Type: Warning

> Event Source: Srv

> Event Category: None

> Event ID: 2012

> Date: 8/17/2007

> Time: 2:18:26 AM

> User: N/A

> Computer: HSMAIN

> Description:

> While transmitting or receiving data, the server encountered a network

> error. Occassional errors are expected,

> but large amounts of these indicate a possible error in your network

> configuration.

> The error status code is contained within the returned data (formatted as

> Words) and may point you towards the problem.

>

> For more information, see Help and Support Center at

> http://go.microsoft.com/fwlink/events.asp.

> Data:

> 0000: 00040000 00540001 00000000 800007dc

> 0010: 00000000 c0000184 00000000 00000000

> 0020: 00000000 00000000 0000097a

>

> I have looked at this from so many ways but I can not find the point of

> the error. You see the problem goes away on weekends. We pretty much

> turn off all desktops but all servers and printer (network connected) and

> switches stay on. I thought that it was a desktop and checked over all

> the desktops and identified some that may have bad Nics. After fixing

> them I am still getting errors but again they disappear over the weekend.

>

> The error message says to look in the error code which may point me in the

> right direction but I can not make heads or tails out to the error

> message. If somebody knows how to read this and point me in the right

> direction it would be a great help.

>

> Thank You

> Adam Raff

>

August 17, 2007

Re: Event SRV error 2012

Hi Adam,

Some people have found that the Event ID you have is resolved by this

Microsoft article... http://support.microsoft.com/kb/898060/

Coraleigh Miller

"Adam Raff" <araff@newsgroup.nospam> wrote in message

news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

> Sorry a little more info on this problem

>

> We are running a Windows 2003 SP1 network. Desktops are all windows XP

> SP2. With all updated security patches on server and desktop side.

>

> I have also looked into KB913446 MS06-007 as this may lead to issues with

> connectivity. All my servers have this update as well as a new one that

> is also getting the errors as well.

>

> Thanks

> Adam Raff

>

> "Adam Raff" <araff@newsgroup.nospam> wrote in message

> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

>> Good Day,

>>

>> Over the few months we have been having an ongoing issue with the

>> following error messages and they appear on all of our servers.

>>

>> Event Type: Warning

>> Event Source: Srv

>> Event Category: None

>> Event ID: 2012

>> Date: 8/17/2007

>> Time: 2:18:26 AM

>> User: N/A

>> Computer: HSMAIN

>> Description:

>> While transmitting or receiving data, the server encountered a network

>> error. Occassional errors are expected,

>> but large amounts of these indicate a possible error in your network

>> configuration.

>> The error status code is contained within the returned data (formatted as

>> Words) and may point you towards the problem.

>>

>> For more information, see Help and Support Center at

>> http://go.microsoft.com/fwlink/events.asp.

>> Data:

>> 0000: 00040000 00540001 00000000 800007dc

>> 0010: 00000000 c0000184 00000000 00000000

>> 0020: 00000000 00000000 0000097a

>>

>> I have looked at this from so many ways but I can not find the point of

>> the error. You see the problem goes away on weekends. We pretty much

>> turn off all desktops but all servers and printer (network connected) and

>> switches stay on. I thought that it was a desktop and checked over all

>> the desktops and identified some that may have bad Nics. After fixing

>> them I am still getting errors but again they disappear over the weekend.

>>

>> The error message says to look in the error code which may point me in

>> the right direction but I can not make heads or tails out to the error

>> message. If somebody knows how to read this and point me in the right

>> direction it would be a great help.

>>

>> Thank You

>> Adam Raff

>>

>

August 17, 2007

Re: Event SRV error 2012

Hi Coraleigh,

Thank you for responding but if I am not mistaken if you install or have

installed 913446 that updated supersedes security update 893066. I have

913446 installed on all my servers already.

I verified that which is way I added the sub note to let people know that I

checked this information.

If I am wrong then please correct me. I will check the version number on

the TCP stack to see if it's that version or newer which I also assume will

be as good.

I was hoping that somebody out there can read this error and the code that

goes with it and perhaps it points to a Mac address or something like that.

Is there a cheap way of sniffing around the network just to get an idea to

see if I am getting any of these errors listed in 898060?

Thanks

Adam Raff

"Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

> Hi Adam,

>

> Some people have found that the Event ID you have is resolved by this

> Microsoft article... http://support.microsoft.com/kb/898060/

>

> Coraleigh Miller

>

> "Adam Raff" <araff@newsgroup.nospam> wrote in message

> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

>> Sorry a little more info on this problem

>>

>> We are running a Windows 2003 SP1 network. Desktops are all windows XP

>> SP2. With all updated security patches on server and desktop side.

>>

>> I have also looked into KB913446 MS06-007 as this may lead to issues with

>> connectivity. All my servers have this update as well as a new one that

>> is also getting the errors as well.

>>

>> Thanks

>> Adam Raff

>>

>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

>>> Good Day,

>>>

>>> Over the few months we have been having an ongoing issue with the

>>> following error messages and they appear on all of our servers.

>>>

>>> Event Type: Warning

>>> Event Source: Srv

>>> Event Category: None

>>> Event ID: 2012

>>> Date: 8/17/2007

>>> Time: 2:18:26 AM

>>> User: N/A

>>> Computer: HSMAIN

>>> Description:

>>> While transmitting or receiving data, the server encountered a network

>>> error. Occassional errors are expected,

>>> but large amounts of these indicate a possible error in your network

>>> configuration.

>>> The error status code is contained within the returned data (formatted

>>> as Words) and may point you towards the problem.

>>>

>>> For more information, see Help and Support Center at

>>> http://go.microsoft.com/fwlink/events.asp.

>>> Data:

>>> 0000: 00040000 00540001 00000000 800007dc

>>> 0010: 00000000 c0000184 00000000 00000000

>>> 0020: 00000000 00000000 0000097a

>>>

>>> I have looked at this from so many ways but I can not find the point of

>>> the error. You see the problem goes away on weekends. We pretty much

>>> turn off all desktops but all servers and printer (network connected)

>>> and switches stay on. I thought that it was a desktop and checked over

>>> all the desktops and identified some that may have bad Nics. After

>>> fixing them I am still getting errors but again they disappear over the

>>> weekend.

>>>

>>> The error message says to look in the error code which may point me in

>>> the right direction but I can not make heads or tails out to the error

>>> message. If somebody knows how to read this and point me in the right

>>> direction it would be a great help.

>>>

>>> Thank You

>>> Adam Raff

>>>

>>

>

August 20, 2007

Re: Event SRV error 2012

Hello Adam,

Thank you for using newsgroup!

Based on my research, this basically is an error that the network driver is

giving SRV on the send IRPs. First thing that I would see is if the

customer is running any 3rd party network software that is bound to the

server. You can see this by checking the following registry key.

HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

Bind: REG_MULTI_SZ

317249: How to troubleshoot Event ID 2021 and Event ID 2022

http://support.microsoft.com/kb/317249/en-us

In addition, this may be caused due to a race between send and disconnect.

The customer can ignore this error.

Thanks & Regards,

Ken Zhao

Microsoft Online Support

Microsoft Global Technical Support Center

Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security>

====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

| From: "Adam Raff" <araff@newsgroup.nospam>

| References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

<#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

<eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| Subject: Re: Event SRV error 2012

| Date: Fri, 17 Aug 2007 17:29:35 -0400

| Lines: 99

| X-Priority: 3

| X-MSMail-Priority: Normal

| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| X-RFC2646: Format=Flowed; Response

| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| Newsgroups: microsoft.public.windows.server.general

| NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128

| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl

| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:19785

| X-Tomcat-NG: microsoft.public.windows.server.general

|

| Hi Coraleigh,

|

| Thank you for responding but if I am not mistaken if you install or have

| installed 913446 that updated supersedes security update 893066. I have

| 913446 installed on all my servers already.

| I verified that which is way I added the sub note to let people know that

I

| checked this information.

|

| If I am wrong then please correct me. I will check the version number on

| the TCP stack to see if it's that version or newer which I also assume

will

| be as good.

|

| I was hoping that somebody out there can read this error and the code

that

| goes with it and perhaps it points to a Mac address or something like

that.

| Is there a cheap way of sniffing around the network just to get an idea

to

| see if I am getting any of these errors listed in 898060?

|

| Thanks

| Adam Raff

|

| "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

| news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

| > Hi Adam,

| >

| > Some people have found that the Event ID you have is resolved by this

| > Microsoft article... http://support.microsoft.com/kb/898060/

| >

| > Coraleigh Miller

| >

| > "Adam Raff" <araff@newsgroup.nospam> wrote in message

| > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

| >> Sorry a little more info on this problem

| >>

| >> We are running a Windows 2003 SP1 network. Desktops are all windows

XP

| >> SP2. With all updated security patches on server and desktop side.

| >>

| >> I have also looked into KB913446 MS06-007 as this may lead to issues

with

| >> connectivity. All my servers have this update as well as a new one

that

| >> is also getting the errors as well.

| >>

| >> Thanks

| >> Adam Raff

| >>

| >> "Adam Raff" <araff@newsgroup.nospam> wrote in message

| >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

| >>> Good Day,

| >>>

| >>> Over the few months we have been having an ongoing issue with the

| >>> following error messages and they appear on all of our servers.

| >>>

| >>> Event Type: Warning

| >>> Event Source: Srv

| >>> Event Category: None

| >>> Event ID: 2012

| >>> Date: 8/17/2007

| >>> Time: 2:18:26 AM

| >>> User: N/A

| >>> Computer: HSMAIN

| >>> Description:

| >>> While transmitting or receiving data, the server encountered a

network

| >>> error. Occassional errors are expected,

| >>> but large amounts of these indicate a possible error in your network

| >>> configuration.

| >>> The error status code is contained within the returned data

(formatted

| >>> as Words) and may point you towards the problem.

| >>>

| >>> For more information, see Help and Support Center at

| >>> http://go.microsoft.com/fwlink/events.asp.

| >>> Data:

| >>> 0000: 00040000 00540001 00000000 800007dc

| >>> 0010: 00000000 c0000184 00000000 00000000

| >>> 0020: 00000000 00000000 0000097a

| >>>

| >>> I have looked at this from so many ways but I can not find the point

of

| >>> the error. You see the problem goes away on weekends. We pretty

much

| >>> turn off all desktops but all servers and printer (network connected)

| >>> and switches stay on. I thought that it was a desktop and checked

over

| >>> all the desktops and identified some that may have bad Nics. After

| >>> fixing them I am still getting errors but again they disappear over

the

| >>> weekend.

| >>>

| >>> The error message says to look in the error code which may point me

in

| >>> the right direction but I can not make heads or tails out to the

error

| >>> message. If somebody knows how to read this and point me in the right

| >>> direction it would be a great help.

| >>>

| >>> Thank You

| >>> Adam Raff

| >>>

| >>

| >

|

August 20, 2007

Re: Event SRV error 2012

Hi Adam,

Have you tried using Network Monitor?

http://support.microsoft.com/kb/243270

This article http://support.microsoft.com/kb/898060/ suggests using a tool

like this to help troubleshoot....

"There may be some other similar scenarios where these symptoms occur. These

scenarios can typically be diagnosed by sniffing the network traffic on

either the source host side or on one of the intermediate network routers.

If there are multiple ICMP destination unreachable messages sent over time

for a destination, the source host that has the MS05-019 security update or

Windows Server 2003 SP1 installed is likely to have this problem. "

Hope this helps.

Coraleigh Miller

"Adam Raff" <araff@newsgroup.nospam> wrote in message

news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl...

> Hi Coraleigh,

>

> Thank you for responding but if I am not mistaken if you install or have

> installed 913446 that updated supersedes security update 893066. I have

> 913446 installed on all my servers already.

> I verified that which is way I added the sub note to let people know that

> I checked this information.

>

> If I am wrong then please correct me. I will check the version number on

> the TCP stack to see if it's that version or newer which I also assume

> will be as good.

>

> I was hoping that somebody out there can read this error and the code that

> goes with it and perhaps it points to a Mac address or something like

> that. Is there a cheap way of sniffing around the network just to get an

> idea to see if I am getting any of these errors listed in 898060?

>

> Thanks

> Adam Raff

>

> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

>> Hi Adam,

>>

>> Some people have found that the Event ID you have is resolved by this

>> Microsoft article... http://support.microsoft.com/kb/898060/

>>

>> Coraleigh Miller

>>

>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

>>> Sorry a little more info on this problem

>>>

>>> We are running a Windows 2003 SP1 network. Desktops are all windows XP

>>> SP2. With all updated security patches on server and desktop side.

>>>

>>> I have also looked into KB913446 MS06-007 as this may lead to issues

>>> with connectivity. All my servers have this update as well as a new one

>>> that is also getting the errors as well.

>>>

>>> Thanks

>>> Adam Raff

>>>

>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

>>>> Good Day,

>>>>

>>>> Over the few months we have been having an ongoing issue with the

>>>> following error messages and they appear on all of our servers.

>>>>

>>>> Event Type: Warning

>>>> Event Source: Srv

>>>> Event Category: None

>>>> Event ID: 2012

>>>> Date: 8/17/2007

>>>> Time: 2:18:26 AM

>>>> User: N/A

>>>> Computer: HSMAIN

>>>> Description:

>>>> While transmitting or receiving data, the server encountered a network

>>>> error. Occassional errors are expected,

>>>> but large amounts of these indicate a possible error in your network

>>>> configuration.

>>>> The error status code is contained within the returned data (formatted

>>>> as Words) and may point you towards the problem.

>>>>

>>>> For more information, see Help and Support Center at

>>>> http://go.microsoft.com/fwlink/events.asp.

>>>> Data:

>>>> 0000: 00040000 00540001 00000000 800007dc

>>>> 0010: 00000000 c0000184 00000000 00000000

>>>> 0020: 00000000 00000000 0000097a

>>>>

>>>> I have looked at this from so many ways but I can not find the point of

>>>> the error. You see the problem goes away on weekends. We pretty much

>>>> turn off all desktops but all servers and printer (network connected)

>>>> and switches stay on. I thought that it was a desktop and checked over

>>>> all the desktops and identified some that may have bad Nics. After

>>>> fixing them I am still getting errors but again they disappear over the

>>>> weekend.

>>>>

>>>> The error message says to look in the error code which may point me in

>>>> the right direction but I can not make heads or tails out to the error

>>>> message. If somebody knows how to read this and point me in the right

>>>> direction it would be a great help.

>>>>

>>>> Thank You

>>>> Adam Raff

>>>>

>>>

>>

>

August 21, 2007

Re: Event SRV error 2012

Hi Ken

Thanks for the feed back. Not sure why you pointed my to 317249 as I am not

getting 2021 or 2022 event errors. My errors are 2012.

Now in that reg key what am I looking for. Can you give me an example by

chance.

Also all the errors disappear on the weekends so I do not think it's a

server issue or something related in my server room as they are up 24x7. If

we have a long weekend no errors then as well. that is why I am hoping that

the return code that I am getting back from the error can point me some

where.

Adam Raff

""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...

> Hello Adam,

>

> Thank you for using newsgroup!

>

> Based on my research, this basically is an error that the network driver

> is

> giving SRV on the send IRPs. First thing that I would see is if the

> customer is running any 3rd party network software that is bound to the

> server. You can see this by checking the following registry key.

>

> HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

> Bind: REG_MULTI_SZ

>

> 317249: How to troubleshoot Event ID 2021 and Event ID 2022

> http://support.microsoft.com/kb/317249/en-us

>

> In addition, this may be caused due to a race between send and disconnect.

> The customer can ignore this error.

>

> Thanks & Regards,

>

> Ken Zhao

>

> Microsoft Online Support

> Microsoft Global Technical Support Center

>

> Get Secure! - http://www.microsoft.com/security

> <http://www.microsoft.com/security>

> ====================================================

> When responding to posts, please "Reply to Group" via your newsreader so

> that others may learn and benefit from your issue.

> ====================================================

> This posting is provided "AS IS" with no warranties, and confers no

> rights.

>

> --------------------

> | From: "Adam Raff" <araff@newsgroup.nospam>

> | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

> | Subject: Re: Event SRV error 2012

> | Date: Fri, 17 Aug 2007 17:29:35 -0400

> | Lines: 99

> | X-Priority: 3

> | X-MSMail-Priority: Normal

> | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

> | X-RFC2646: Format=Flowed; Response

> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

> | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

> | Newsgroups: microsoft.public.windows.server.general

> | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128

> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl

> | Xref: TK2MSFTNGHUB02.phx.gbl

> microsoft.public.windows.server.general:19785

> | X-Tomcat-NG: microsoft.public.windows.server.general

> |

> | Hi Coraleigh,

> |

> | Thank you for responding but if I am not mistaken if you install or have

> | installed 913446 that updated supersedes security update 893066. I have

> | 913446 installed on all my servers already.

> | I verified that which is way I added the sub note to let people know

> that

> I

> | checked this information.

> |

> | If I am wrong then please correct me. I will check the version number

> on

> | the TCP stack to see if it's that version or newer which I also assume

> will

> | be as good.

> |

> | I was hoping that somebody out there can read this error and the code

> that

> | goes with it and perhaps it points to a Mac address or something like

> that.

> | Is there a cheap way of sniffing around the network just to get an idea

> to

> | see if I am getting any of these errors listed in 898060?

> |

> | Thanks

> | Adam Raff

> |

> | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

> | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

> | > Hi Adam,

> | >

> | > Some people have found that the Event ID you have is resolved by this

> | > Microsoft article... http://support.microsoft.com/kb/898060/

> | >

> | > Coraleigh Miller

> | >

> | > "Adam Raff" <araff@newsgroup.nospam> wrote in message

> | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

> | >> Sorry a little more info on this problem

> | >>

> | >> We are running a Windows 2003 SP1 network. Desktops are all windows

> XP

> | >> SP2. With all updated security patches on server and desktop side.

> | >>

> | >> I have also looked into KB913446 MS06-007 as this may lead to issues

> with

> | >> connectivity. All my servers have this update as well as a new one

> that

> | >> is also getting the errors as well.

> | >>

> | >> Thanks

> | >> Adam Raff

> | >>

> | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message

> | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

> | >>> Good Day,

> | >>>

> | >>> Over the few months we have been having an ongoing issue with the

> | >>> following error messages and they appear on all of our servers.

> | >>>

> | >>> Event Type: Warning

> | >>> Event Source: Srv

> | >>> Event Category: None

> | >>> Event ID: 2012

> | >>> Date: 8/17/2007

> | >>> Time: 2:18:26 AM

> | >>> User: N/A

> | >>> Computer: HSMAIN

> | >>> Description:

> | >>> While transmitting or receiving data, the server encountered a

> network

> | >>> error. Occassional errors are expected,

> | >>> but large amounts of these indicate a possible error in your network

> | >>> configuration.

> | >>> The error status code is contained within the returned data

> (formatted

> | >>> as Words) and may point you towards the problem.

> | >>>

> | >>> For more information, see Help and Support Center at

> | >>> http://go.microsoft.com/fwlink/events.asp.

> | >>> Data:

> | >>> 0000: 00040000 00540001 00000000 800007dc

> | >>> 0010: 00000000 c0000184 00000000 00000000

> | >>> 0020: 00000000 00000000 0000097a

> | >>>

> | >>> I have looked at this from so many ways but I can not find the point

> of

> | >>> the error. You see the problem goes away on weekends. We pretty

> much

> | >>> turn off all desktops but all servers and printer (network

> connected)

> | >>> and switches stay on. I thought that it was a desktop and checked

> over

> | >>> all the desktops and identified some that may have bad Nics. After

> | >>> fixing them I am still getting errors but again they disappear over

> the

> | >>> weekend.

> | >>>

> | >>> The error message says to look in the error code which may point me

> in

> | >>> the right direction but I can not make heads or tails out to the

> error

> | >>> message. If somebody knows how to read this and point me in the

> right

> | >>> direction it would be a great help.

> | >>>

> | >>> Thank You

> | >>> Adam Raff

> | >>>

> | >>

> | >

> |

>

August 21, 2007

Re: Event SRV error 2012

Coraleigh,

Just installed it on my server. You wouldn't know a good place to get

directions on how to use this program do you by chance?

Adam Raff

"Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

news:%23LkEx1u4HHA.1992@TK2MSFTNGP03.phx.gbl...

> Hi Adam,

>

> Have you tried using Network Monitor?

> http://support.microsoft.com/kb/243270

> This article http://support.microsoft.com/kb/898060/ suggests using a tool

> like this to help troubleshoot....

> "There may be some other similar scenarios where these symptoms occur.

> These scenarios can typically be diagnosed by sniffing the network traffic

> on either the source host side or on one of the intermediate network

> routers. If there are multiple ICMP destination unreachable messages sent

> over time for a destination, the source host that has the MS05-019

> security update or Windows Server 2003 SP1 installed is likely to have

> this problem. "

>

> Hope this helps.

>

> Coraleigh Miller

>

> "Adam Raff" <araff@newsgroup.nospam> wrote in message

> news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl...

>> Hi Coraleigh,

>>

>> Thank you for responding but if I am not mistaken if you install or have

>> installed 913446 that updated supersedes security update 893066. I have

>> 913446 installed on all my servers already.

>> I verified that which is way I added the sub note to let people know that

>> I checked this information.

>>

>> If I am wrong then please correct me. I will check the version number on

>> the TCP stack to see if it's that version or newer which I also assume

>> will be as good.

>>

>> I was hoping that somebody out there can read this error and the code

>> that goes with it and perhaps it points to a Mac address or something

>> like that. Is there a cheap way of sniffing around the network just to

>> get an idea to see if I am getting any of these errors listed in 898060?

>>

>> Thanks

>> Adam Raff

>>

>> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

>> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

>>> Hi Adam,

>>>

>>> Some people have found that the Event ID you have is resolved by this

>>> Microsoft article... http://support.microsoft.com/kb/898060/

>>>

>>> Coraleigh Miller

>>>

>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

>>>> Sorry a little more info on this problem

>>>>

>>>> We are running a Windows 2003 SP1 network. Desktops are all windows XP

>>>> SP2. With all updated security patches on server and desktop side.

>>>>

>>>> I have also looked into KB913446 MS06-007 as this may lead to issues

>>>> with connectivity. All my servers have this update as well as a new

>>>> one that is also getting the errors as well.

>>>>

>>>> Thanks

>>>> Adam Raff

>>>>

>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

>>>>> Good Day,

>>>>>

>>>>> Over the few months we have been having an ongoing issue with the

>>>>> following error messages and they appear on all of our servers.

>>>>>

>>>>> Event Type: Warning

>>>>> Event Source: Srv

>>>>> Event Category: None

>>>>> Event ID: 2012

>>>>> Date: 8/17/2007

>>>>> Time: 2:18:26 AM

>>>>> User: N/A

>>>>> Computer: HSMAIN

>>>>> Description:

>>>>> While transmitting or receiving data, the server encountered a network

>>>>> error. Occassional errors are expected,

>>>>> but large amounts of these indicate a possible error in your network

>>>>> configuration.

>>>>> The error status code is contained within the returned data (formatted

>>>>> as Words) and may point you towards the problem.

>>>>>

>>>>> For more information, see Help and Support Center at

>>>>> http://go.microsoft.com/fwlink/events.asp.

>>>>> Data:

>>>>> 0000: 00040000 00540001 00000000 800007dc

>>>>> 0010: 00000000 c0000184 00000000 00000000

>>>>> 0020: 00000000 00000000 0000097a

>>>>>

>>>>> I have looked at this from so many ways but I can not find the point

>>>>> of the error. You see the problem goes away on weekends. We pretty

>>>>> much turn off all desktops but all servers and printer (network

>>>>> connected) and switches stay on. I thought that it was a desktop and

>>>>> checked over all the desktops and identified some that may have bad

>>>>> Nics. After fixing them I am still getting errors but again they

>>>>> disappear over the weekend.

>>>>>

>>>>> The error message says to look in the error code which may point me in

>>>>> the right direction but I can not make heads or tails out to the error

>>>>> message. If somebody knows how to read this and point me in the right

>>>>> direction it would be a great help.

>>>>>

>>>>> Thank You

>>>>> Adam Raff

>>>>>

>>>>

>>>

>>

>

August 21, 2007

Re: Event SRV error 2012

Hi Adam,

I found that there is a new version of Network Monitor which is supposed to

be alittle nicer..

http://www.microsoft.com/downloads/details.aspx?FamilyID=18b1d59d-f4d8-4213-8d17-2f6dde7d7aac&DisplayLang=en

Microsoft has this article, which while it talks about the earlier version

of the program, may still help.. http://support.microsoft.com/kb/812953

This article walks you through a basic data capture..

http://www.windowsnetworking.com/articles_tutorials/Working-With-Network-Monitor-Part2.html

This is a technet blogsite featuring posts by an MS Network Monitor

expert...

http://blogs.technet.com/netmon/archive/2006/09/28/overview-of-netmon-by-yuri-diogenes.aspx

Coraleigh

"Adam Raff" <araff@newsgroup.nospam> wrote in message

news:%238bE$TC5HHA.4476@TK2MSFTNGP06.phx.gbl...

> Coraleigh,

>

> Just installed it on my server. You wouldn't know a good place to get

> directions on how to use this program do you by chance?

>

> Adam Raff

>

> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

> news:%23LkEx1u4HHA.1992@TK2MSFTNGP03.phx.gbl...

>> Hi Adam,

>>

>> Have you tried using Network Monitor?

>> http://support.microsoft.com/kb/243270

>> This article http://support.microsoft.com/kb/898060/ suggests using a

>> tool like this to help troubleshoot....

>> "There may be some other similar scenarios where these symptoms occur.

>> These scenarios can typically be diagnosed by sniffing the network

>> traffic on either the source host side or on one of the intermediate

>> network routers. If there are multiple ICMP destination unreachable

>> messages sent over time for a destination, the source host that has the

>> MS05-019 security update or Windows Server 2003 SP1 installed is likely

>> to have this problem. "

>>

>> Hope this helps.

>>

>> Coraleigh Miller

>>

>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>> news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl...

>>> Hi Coraleigh,

>>>

>>> Thank you for responding but if I am not mistaken if you install or have

>>> installed 913446 that updated supersedes security update 893066. I have

>>> 913446 installed on all my servers already.

>>> I verified that which is way I added the sub note to let people know

>>> that I checked this information.

>>>

>>> If I am wrong then please correct me. I will check the version number

>>> on the TCP stack to see if it's that version or newer which I also

>>> assume will be as good.

>>>

>>> I was hoping that somebody out there can read this error and the code

>>> that goes with it and perhaps it points to a Mac address or something

>>> like that. Is there a cheap way of sniffing around the network just to

>>> get an idea to see if I am getting any of these errors listed in 898060?

>>>

>>> Thanks

>>> Adam Raff

>>>

>>> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

>>> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

>>>> Hi Adam,

>>>>

>>>> Some people have found that the Event ID you have is resolved by this

>>>> Microsoft article... http://support.microsoft.com/kb/898060/

>>>>

>>>> Coraleigh Miller

>>>>

>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>>>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

>>>>> Sorry a little more info on this problem

>>>>>

>>>>> We are running a Windows 2003 SP1 network. Desktops are all windows

>>>>> XP SP2. With all updated security patches on server and desktop side.

>>>>>

>>>>> I have also looked into KB913446 MS06-007 as this may lead to issues

>>>>> with connectivity. All my servers have this update as well as a new

>>>>> one that is also getting the errors as well.

>>>>>

>>>>> Thanks

>>>>> Adam Raff

>>>>>

>>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>>>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

>>>>>> Good Day,

>>>>>>

>>>>>> Over the few months we have been having an ongoing issue with the

>>>>>> following error messages and they appear on all of our servers.

>>>>>>

>>>>>> Event Type: Warning

>>>>>> Event Source: Srv

>>>>>> Event Category: None

>>>>>> Event ID: 2012

>>>>>> Date: 8/17/2007

>>>>>> Time: 2:18:26 AM

>>>>>> User: N/A

>>>>>> Computer: HSMAIN

>>>>>> Description:

>>>>>> While transmitting or receiving data, the server encountered a

>>>>>> network error. Occassional errors are expected,

>>>>>> but large amounts of these indicate a possible error in your network

>>>>>> configuration.

>>>>>> The error status code is contained within the returned data

>>>>>> (formatted as Words) and may point you towards the problem.

>>>>>>

>>>>>> For more information, see Help and Support Center at

>>>>>> http://go.microsoft.com/fwlink/events.asp.

>>>>>> Data:

>>>>>> 0000: 00040000 00540001 00000000 800007dc

>>>>>> 0010: 00000000 c0000184 00000000 00000000

>>>>>> 0020: 00000000 00000000 0000097a

>>>>>>

>>>>>> I have looked at this from so many ways but I can not find the point

>>>>>> of the error. You see the problem goes away on weekends. We pretty

>>>>>> much turn off all desktops but all servers and printer (network

>>>>>> connected) and switches stay on. I thought that it was a desktop and

>>>>>> checked over all the desktops and identified some that may have bad

>>>>>> Nics. After fixing them I am still getting errors but again they

>>>>>> disappear over the weekend.

>>>>>>

>>>>>> The error message says to look in the error code which may point me

>>>>>> in the right direction but I can not make heads or tails out to the

>>>>>> error message. If somebody knows how to read this and point me in the

>>>>>> right direction it would be a great help.

>>>>>>

>>>>>> Thank You

>>>>>> Adam Raff

>>>>>>

>>>>>

>>>>

>>>

>>

>

August 22, 2007

Re: Event SRV error 2012

Hi Adam,

I found some similar cases that related to the following registry key:

HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

Bind: REG_MULTI_SZ

In addition, I am not sure what symptoms you are encountering on the

server. If everything works fine, you can ignore this error.

Thanks & Regards,

Ken Zhao

Microsoft Online Support

Microsoft Global Technical Support Center

Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security>

====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

| From: "Adam Raff" <araff@newsgroup.nospam>

| References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

<#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

<eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

<#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

<h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

| Subject: Re: Event SRV error 2012

| Date: Tue, 21 Aug 2007 14:42:03 -0400

| Lines: 200

| X-Priority: 3

| X-MSMail-Priority: Normal

| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| X-RFC2646: Format=Flowed; Original

| Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

| Newsgroups: microsoft.public.windows.server.general

| NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189

| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl

| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20147

| X-Tomcat-NG: microsoft.public.windows.server.general

|

| Hi Ken

|

| Thanks for the feed back. Not sure why you pointed my to 317249 as I am

not

| getting 2021 or 2022 event errors. My errors are 2012.

|

| Now in that reg key what am I looking for. Can you give me an example by

| chance.

|

| Also all the errors disappear on the weekends so I do not think it's a

| server issue or something related in my server room as they are up 24x7.

If

| we have a long weekend no errors then as well. that is why I am hoping

that

| the return code that I am getting back from the error can point me some

| where.

|

| Adam Raff

|

| ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

| news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...

| > Hello Adam,

| >

| > Thank you for using newsgroup!

| >

| > Based on my research, this basically is an error that the network

driver

| > is

| > giving SRV on the send IRPs. First thing that I would see is if the

| > customer is running any 3rd party network software that is bound to the

| > server. You can see this by checking the following registry key.

| >

| > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

| > Bind: REG_MULTI_SZ

| >

| > 317249: How to troubleshoot Event ID 2021 and Event ID 2022

| > http://support.microsoft.com/kb/317249/en-us

| >

| > In addition, this may be caused due to a race between send and

disconnect.

| > The customer can ignore this error.

| >

| > Thanks & Regards,

| >

| > Ken Zhao

| >

| > Microsoft Online Support

| > Microsoft Global Technical Support Center

| >

| > Get Secure! - http://www.microsoft.com/security

| > <http://www.microsoft.com/security>

| > ====================================================

| > When responding to posts, please "Reply to Group" via your newsreader so

| > that others may learn and benefit from your issue.

| > ====================================================

| > This posting is provided "AS IS" with no warranties, and confers no

| > rights.

| >

| > --------------------

| > | From: "Adam Raff" <araff@newsgroup.nospam>

| > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

| > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

| > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| > | Subject: Re: Event SRV error 2012

| > | Date: Fri, 17 Aug 2007 17:29:35 -0400

| > | Lines: 99

| > | X-Priority: 3

| > | X-MSMail-Priority: Normal

| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| > | X-RFC2646: Format=Flowed; Response

| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| > | Newsgroups: microsoft.public.windows.server.general

| > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128

| > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl

| > | Xref: TK2MSFTNGHUB02.phx.gbl

| > microsoft.public.windows.server.general:19785

| > | X-Tomcat-NG: microsoft.public.windows.server.general

| > |

| > | Hi Coraleigh,

| > |

| > | Thank you for responding but if I am not mistaken if you install or

have

| > | installed 913446 that updated supersedes security update 893066. I

have

| > | 913446 installed on all my servers already.

| > | I verified that which is way I added the sub note to let people know

| > that

| > I

| > | checked this information.

| > |

| > | If I am wrong then please correct me. I will check the version

number

| > on

| > | the TCP stack to see if it's that version or newer which I also assume

| > will

| > | be as good.

| > |

| > | I was hoping that somebody out there can read this error and the code

| > that

| > | goes with it and perhaps it points to a Mac address or something like

| > that.

| > | Is there a cheap way of sniffing around the network just to get an

idea

| > to

| > | see if I am getting any of these errors listed in 898060?

| > |

| > | Thanks

| > | Adam Raff

| > |

| > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

| > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

| > | > Hi Adam,

| > | >

| > | > Some people have found that the Event ID you have is resolved by

this

| > | > Microsoft article... http://support.microsoft.com/kb/898060/

| > | >

| > | > Coraleigh Miller

| > | >

| > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message

| > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

| > | >> Sorry a little more info on this problem

| > | >>

| > | >> We are running a Windows 2003 SP1 network. Desktops are all

windows

| > XP

| > | >> SP2. With all updated security patches on server and desktop side.

| > | >>

| > | >> I have also looked into KB913446 MS06-007 as this may lead to

issues

| > with

| > | >> connectivity. All my servers have this update as well as a new one

| > that

| > | >> is also getting the errors as well.

| > | >>

| > | >> Thanks

| > | >> Adam Raff

| > | >>

| > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message

| > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

| > | >>> Good Day,

| > | >>>

| > | >>> Over the few months we have been having an ongoing issue with the

| > | >>> following error messages and they appear on all of our servers.

| > | >>>

| > | >>> Event Type: Warning

| > | >>> Event Source: Srv

| > | >>> Event Category: None

| > | >>> Event ID: 2012

| > | >>> Date: 8/17/2007

| > | >>> Time: 2:18:26 AM

| > | >>> User: N/A

| > | >>> Computer: HSMAIN

| > | >>> Description:

| > | >>> While transmitting or receiving data, the server encountered a

| > network

| > | >>> error. Occassional errors are expected,

| > | >>> but large amounts of these indicate a possible error in your

network

| > | >>> configuration.

| > | >>> The error status code is contained within the returned data

| > (formatted

| > | >>> as Words) and may point you towards the problem.

| > | >>>

| > | >>> For more information, see Help and Support Center at

| > | >>> http://go.microsoft.com/fwlink/events.asp.

| > | >>> Data:

| > | >>> 0000: 00040000 00540001 00000000 800007dc

| > | >>> 0010: 00000000 c0000184 00000000 00000000

| > | >>> 0020: 00000000 00000000 0000097a

| > | >>>

| > | >>> I have looked at this from so many ways but I can not find the

point

| > of

| > | >>> the error. You see the problem goes away on weekends. We pretty

| > much

| > | >>> turn off all desktops but all servers and printer (network

| > connected)

| > | >>> and switches stay on. I thought that it was a desktop and checked

| > over

| > | >>> all the desktops and identified some that may have bad Nics.

After

| > | >>> fixing them I am still getting errors but again they disappear

over

| > the

| > | >>> weekend.

| > | >>>

| > | >>> The error message says to look in the error code which may point

me

| > in

| > | >>> the right direction but I can not make heads or tails out to the

| > error

| > | >>> message. If somebody knows how to read this and point me in the

| > right

| > | >>> direction it would be a great help.

| > | >>>

| > | >>> Thank You

| > | >>> Adam Raff

| > | >>>

| > | >>

| > | >

| > |

| >

|

August 23, 2007

Re: Event SRV error 2012

Coraleigh,

Thanks for your help, I did a brief capture with the old version that came

with 2003 and was it a lot of data of which made little or know sense. I

hope the new version is a little better.

I did not see the errors that the article was pointing to but I will use the

new version to see if I missed anything.

I will keep you posted in what I find out.

Thanks

Adam Raff

"Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

news:eDH1ItC5HHA.1184@TK2MSFTNGP04.phx.gbl...

> Hi Adam,

>

> I found that there is a new version of Network Monitor which is supposed

> to be alittle nicer..

> http://www.microsoft.com/downloads/details.aspx?FamilyID=18b1d59d-f4d8-4213-8d17-2f6dde7d7aac&DisplayLang=en

>

> Microsoft has this article, which while it talks about the earlier version

> of the program, may still help.. http://support.microsoft.com/kb/812953

>

> This article walks you through a basic data capture..

> http://www.windowsnetworking.com/articles_tutorials/Working-With-Network-Monitor-Part2.html

>

> This is a technet blogsite featuring posts by an MS Network Monitor

> expert...

> http://blogs.technet.com/netmon/archive/2006/09/28/overview-of-netmon-by-yuri-diogenes.aspx

>

> Coraleigh

>

> "Adam Raff" <araff@newsgroup.nospam> wrote in message

> news:%238bE$TC5HHA.4476@TK2MSFTNGP06.phx.gbl...

>> Coraleigh,

>>

>> Just installed it on my server. You wouldn't know a good place to get

>> directions on how to use this program do you by chance?

>>

>> Adam Raff

>>

>> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

>> news:%23LkEx1u4HHA.1992@TK2MSFTNGP03.phx.gbl...

>>> Hi Adam,

>>>

>>> Have you tried using Network Monitor?

>>> http://support.microsoft.com/kb/243270

>>> This article http://support.microsoft.com/kb/898060/ suggests using a

>>> tool like this to help troubleshoot....

>>> "There may be some other similar scenarios where these symptoms occur.

>>> These scenarios can typically be diagnosed by sniffing the network

>>> traffic on either the source host side or on one of the intermediate

>>> network routers. If there are multiple ICMP destination unreachable

>>> messages sent over time for a destination, the source host that has the

>>> MS05-019 security update or Windows Server 2003 SP1 installed is likely

>>> to have this problem. "

>>>

>>> Hope this helps.

>>>

>>> Coraleigh Miller

>>>

>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>>> news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl...

>>>> Hi Coraleigh,

>>>>

>>>> Thank you for responding but if I am not mistaken if you install or

>>>> have installed 913446 that updated supersedes security update 893066.

>>>> I have 913446 installed on all my servers already.

>>>> I verified that which is way I added the sub note to let people know

>>>> that I checked this information.

>>>>

>>>> If I am wrong then please correct me. I will check the version number

>>>> on the TCP stack to see if it's that version or newer which I also

>>>> assume will be as good.

>>>>

>>>> I was hoping that somebody out there can read this error and the code

>>>> that goes with it and perhaps it points to a Mac address or something

>>>> like that. Is there a cheap way of sniffing around the network just to

>>>> get an idea to see if I am getting any of these errors listed in

>>>> 898060?

>>>>

>>>> Thanks

>>>> Adam Raff

>>>>

>>>> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

>>>> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

>>>>> Hi Adam,

>>>>>

>>>>> Some people have found that the Event ID you have is resolved by this

>>>>> Microsoft article... http://support.microsoft.com/kb/898060/

>>>>>

>>>>> Coraleigh Miller

>>>>>

>>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>>>>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

>>>>>> Sorry a little more info on this problem

>>>>>>

>>>>>> We are running a Windows 2003 SP1 network. Desktops are all windows

>>>>>> XP SP2. With all updated security patches on server and desktop side.

>>>>>>

>>>>>> I have also looked into KB913446 MS06-007 as this may lead to issues

>>>>>> with connectivity. All my servers have this update as well as a new

>>>>>> one that is also getting the errors as well.

>>>>>>

>>>>>> Thanks

>>>>>> Adam Raff

>>>>>>

>>>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message

>>>>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

>>>>>>> Good Day,

>>>>>>>

>>>>>>> Over the few months we have been having an ongoing issue with the

>>>>>>> following error messages and they appear on all of our servers.

>>>>>>>

>>>>>>> Event Type: Warning

>>>>>>> Event Source: Srv

>>>>>>> Event Category: None

>>>>>>> Event ID: 2012

>>>>>>> Date: 8/17/2007

>>>>>>> Time: 2:18:26 AM

>>>>>>> User: N/A

>>>>>>> Computer: HSMAIN

>>>>>>> Description:

>>>>>>> While transmitting or receiving data, the server encountered a

>>>>>>> network error. Occassional errors are expected,

>>>>>>> but large amounts of these indicate a possible error in your network

>>>>>>> configuration.

>>>>>>> The error status code is contained within the returned data

>>>>>>> (formatted as Words) and may point you towards the problem.

>>>>>>>

>>>>>>> For more information, see Help and Support Center at

>>>>>>> http://go.microsoft.com/fwlink/events.asp.

>>>>>>> Data:

>>>>>>> 0000: 00040000 00540001 00000000 800007dc

>>>>>>> 0010: 00000000 c0000184 00000000 00000000

>>>>>>> 0020: 00000000 00000000 0000097a

>>>>>>>

>>>>>>> I have looked at this from so many ways but I can not find the point

>>>>>>> of the error. You see the problem goes away on weekends. We pretty

>>>>>>> much turn off all desktops but all servers and printer (network

>>>>>>> connected) and switches stay on. I thought that it was a desktop

>>>>>>> and checked over all the desktops and identified some that may have

>>>>>>> bad Nics. After fixing them I am still getting errors but again

>>>>>>> they disappear over the weekend.

>>>>>>>

>>>>>>> The error message says to look in the error code which may point me

>>>>>>> in the right direction but I can not make heads or tails out to the

>>>>>>> error message. If somebody knows how to read this and point me in

>>>>>>> the right direction it would be a great help.

>>>>>>>

>>>>>>> Thank You

>>>>>>> Adam Raff

>>>>>>>

>>>>>>

>>>>>

>>>>

>>>

>>

>

August 23, 2007

Re: Event SRV error 2012

Hi Ken,

To be honest I am not sure what I am looking for when I look at these

setting in the registry. If you could give me an example that would be

great.

I am getting a lot of errors and I just want to make sure that it's not the

network. I believe it's a computer or device but I am having a ton of

problems tracking the problem down. Since the issues seem to stop on

weekends, I would think it's a computer as we shut all the systems down on

Friday for the weekend (Servers, networked printers and the like stay on

including switches and routes). I am thinking that it may be a computer

hitting a bad port on a switch but this is above my head and not sure how to

trouble shoot this or how to go about find the problem. That is why I was

hoping that the codes in the event may point be in some direction as they

state that the error is there

The error status code is contained within the returned data

> | > (formatted

> | > | >>> as Words) and may point you towards the problem.

I was hoping that something in the error code could point be someplace. I

am planning on testing some systems over the weekend and leave them on to

see if I get any errors or not.

Thanks

Adam Raff

""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl...

> Hi Adam,

>

> I found some similar cases that related to the following registry key:

> HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

> Bind: REG_MULTI_SZ

>

> In addition, I am not sure what symptoms you are encountering on the

> server. If everything works fine, you can ignore this error.

>

> Thanks & Regards,

>

> Ken Zhao

>

> Microsoft Online Support

> Microsoft Global Technical Support Center

>

> Get Secure! - http://www.microsoft.com/security

> <http://www.microsoft.com/security>

> ====================================================

> When responding to posts, please "Reply to Group" via your newsreader so

> that others may learn and benefit from your issue.

> ====================================================

> This posting is provided "AS IS" with no warranties, and confers no

> rights.

>

> --------------------

> | From: "Adam Raff" <araff@newsgroup.nospam>

> | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

> <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

> <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

> | Subject: Re: Event SRV error 2012

> | Date: Tue, 21 Aug 2007 14:42:03 -0400

> | Lines: 200

> | X-Priority: 3

> | X-MSMail-Priority: Normal

> | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

> | X-RFC2646: Format=Flowed; Original

> | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

> | Newsgroups: microsoft.public.windows.server.general

> | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189

> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl

> | Xref: TK2MSFTNGHUB02.phx.gbl

> microsoft.public.windows.server.general:20147

> | X-Tomcat-NG: microsoft.public.windows.server.general

> |

> | Hi Ken

> |

> | Thanks for the feed back. Not sure why you pointed my to 317249 as I am

> not

> | getting 2021 or 2022 event errors. My errors are 2012.

> |

> | Now in that reg key what am I looking for. Can you give me an example

> by

> | chance.

> |

> | Also all the errors disappear on the weekends so I do not think it's a

> | server issue or something related in my server room as they are up 24x7.

> If

> | we have a long weekend no errors then as well. that is why I am hoping

> that

> | the return code that I am getting back from the error can point me some

> | where.

> |

> | Adam Raff

> |

> | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

> | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...

> | > Hello Adam,

> | >

> | > Thank you for using newsgroup!

> | >

> | > Based on my research, this basically is an error that the network

> driver

> | > is

> | > giving SRV on the send IRPs. First thing that I would see is if the

> | > customer is running any 3rd party network software that is bound to

> the

> | > server. You can see this by checking the following registry key.

> | >

> | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

> | > Bind: REG_MULTI_SZ

> | >

> | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022

> | > http://support.microsoft.com/kb/317249/en-us

> | >

> | > In addition, this may be caused due to a race between send and

> disconnect.

> | > The customer can ignore this error.

> | >

> | > Thanks & Regards,

> | >

> | > Ken Zhao

> | >

> | > Microsoft Online Support

> | > Microsoft Global Technical Support Center

> | >

> | > Get Secure! - http://www.microsoft.com/security

> | > <http://www.microsoft.com/security>

> | > ====================================================

> | > When responding to posts, please "Reply to Group" via your newsreader

> so

> | > that others may learn and benefit from your issue.

> | > ====================================================

> | > This posting is provided "AS IS" with no warranties, and confers no

> | > rights.

> | >

> | > --------------------

> | > | From: "Adam Raff" <araff@newsgroup.nospam>

> | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

> | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

> | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

> | > | Subject: Re: Event SRV error 2012

> | > | Date: Fri, 17 Aug 2007 17:29:35 -0400

> | > | Lines: 99

> | > | X-Priority: 3

> | > | X-MSMail-Priority: Normal

> | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

> | > | X-RFC2646: Format=Flowed; Response

> | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

> | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

> | > | Newsgroups: microsoft.public.windows.server.general

> | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128

> | > | Path:

> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl

> | > | Xref: TK2MSFTNGHUB02.phx.gbl

> | > microsoft.public.windows.server.general:19785

> | > | X-Tomcat-NG: microsoft.public.windows.server.general

> | > |

> | > | Hi Coraleigh,

> | > |

> | > | Thank you for responding but if I am not mistaken if you install or

> have

> | > | installed 913446 that updated supersedes security update 893066. I

> have

> | > | 913446 installed on all my servers already.

> | > | I verified that which is way I added the sub note to let people know

> | > that

> | > I

> | > | checked this information.

> | > |

> | > | If I am wrong then please correct me. I will check the version

> number

> | > on

> | > | the TCP stack to see if it's that version or newer which I also

> assume

> | > will

> | > | be as good.

> | > |

> | > | I was hoping that somebody out there can read this error and the

> code

> | > that

> | > | goes with it and perhaps it points to a Mac address or something

> like

> | > that.

> | > | Is there a cheap way of sniffing around the network just to get an

> idea

> | > to

> | > | see if I am getting any of these errors listed in 898060?

> | > |

> | > | Thanks

> | > | Adam Raff

> | > |

> | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

> | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

> | > | > Hi Adam,

> | > | >

> | > | > Some people have found that the Event ID you have is resolved by

> this

> | > | > Microsoft article... http://support.microsoft.com/kb/898060/

> | > | >

> | > | > Coraleigh Miller

> | > | >

> | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message

> | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

> | > | >> Sorry a little more info on this problem

> | > | >>

> | > | >> We are running a Windows 2003 SP1 network. Desktops are all

> windows

> | > XP

> | > | >> SP2. With all updated security patches on server and desktop

> side.

> | > | >>

> | > | >> I have also looked into KB913446 MS06-007 as this may lead to

> issues

> | > with

> | > | >> connectivity. All my servers have this update as well as a new

> one

> | > that

> | > | >> is also getting the errors as well.

> | > | >>

> | > | >> Thanks

> | > | >> Adam Raff

> | > | >>

> | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message

> | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

> | > | >>> Good Day,

> | > | >>>

> | > | >>> Over the few months we have been having an ongoing issue with

> the

> | > | >>> following error messages and they appear on all of our servers.

> | > | >>>

> | > | >>> Event Type: Warning

> | > | >>> Event Source: Srv

> | > | >>> Event Category: None

> | > | >>> Event ID: 2012

> | > | >>> Date: 8/17/2007

> | > | >>> Time: 2:18:26 AM

> | > | >>> User: N/A

> | > | >>> Computer: HSMAIN

> | > | >>> Description:

> | > | >>> While transmitting or receiving data, the server encountered a

> | > network

> | > | >>> error. Occassional errors are expected,

> | > | >>> but large amounts of these indicate a possible error in your

> network

> | > | >>> configuration.

> | > | >>> The error status code is contained within the returned data

> | > (formatted

> | > | >>> as Words) and may point you towards the problem.

> | > | >>>

> | > | >>> For more information, see Help and Support Center at

> | > | >>> http://go.microsoft.com/fwlink/events.asp.

> | > | >>> Data:

> | > | >>> 0000: 00040000 00540001 00000000 800007dc

> | > | >>> 0010: 00000000 c0000184 00000000 00000000

> | > | >>> 0020: 00000000 00000000 0000097a

> | > | >>>

> | > | >>> I have looked at this from so many ways but I can not find the

> point

> | > of

> | > | >>> the error. You see the problem goes away on weekends. We

> pretty

> | > much

> | > | >>> turn off all desktops but all servers and printer (network

> | > connected)

> | > | >>> and switches stay on. I thought that it was a desktop and

> checked

> | > over

> | > | >>> all the desktops and identified some that may have bad Nics.

> After

> | > | >>> fixing them I am still getting errors but again they disappear

> over

> | > the

> | > | >>> weekend.

> | > | >>>

> | > | >>> The error message says to look in the error code which may point

> me

> | > in

> | > | >>> the right direction but I can not make heads or tails out to the

> | > error

> | > | >>> message. If somebody knows how to read this and point me in the

> | > right

> | > | >>> direction it would be a great help.

> | > | >>>

> | > | >>> Thank You

> | > | >>> Adam Raff

> | > | >>>

> | > | >>

> | > | >

> | > |

> | >

> |

>

August 27, 2007

Re: Event SRV error 2012

Hi Adam,

Actually, this event error may be caused by more reasons. Could you let us

know what symptoms you are encountering on the server? What issues are

occurring when the event error is logged?

Thanks & Regards,

Ken Zhao

Microsoft Online Support

Microsoft Global Technical Support Center

Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security>

====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

| From: "Adam Raff" <araff@newsgroup.nospam>

| References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

<#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

<eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

<#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

<h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

<eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

<#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>

| Subject: Re: Event SRV error 2012

| Date: Thu, 23 Aug 2007 11:56:44 -0400

| Lines: 315

| X-Priority: 3

| X-MSMail-Priority: Normal

| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| X-RFC2646: Format=Flowed; Original

| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>

| Newsgroups: microsoft.public.windows.server.general

| NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189

| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl

| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20380

| X-Tomcat-NG: microsoft.public.windows.server.general

|

| Hi Ken,

|

| To be honest I am not sure what I am looking for when I look at these

| setting in the registry. If you could give me an example that would be

| great.

|

| I am getting a lot of errors and I just want to make sure that it's not

the

| network. I believe it's a computer or device but I am having a ton of

| problems tracking the problem down. Since the issues seem to stop on

| weekends, I would think it's a computer as we shut all the systems down

on

| Friday for the weekend (Servers, networked printers and the like stay on

| including switches and routes). I am thinking that it may be a computer

| hitting a bad port on a switch but this is above my head and not sure how

to

| trouble shoot this or how to go about find the problem. That is why I

was

| hoping that the codes in the event may point be in some direction as they

| state that the error is there

|

| The error status code is contained within the returned data

| > | > (formatted

| > | > | >>> as Words) and may point you towards the problem.

|

| I was hoping that something in the error code could point be someplace.

I

| am planning on testing some systems over the weekend and leave them on to

| see if I get any errors or not.

|

| Thanks

| Adam Raff

|

| ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

| news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl...

| > Hi Adam,

| >

| > I found some similar cases that related to the following registry key:

| > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

| > Bind: REG_MULTI_SZ

| >

| > In addition, I am not sure what symptoms you are encountering on the

| > server. If everything works fine, you can ignore this error.

| >

| > Thanks & Regards,

| >

| > Ken Zhao

| >

| > Microsoft Online Support

| > Microsoft Global Technical Support Center

| >

| > Get Secure! - http://www.microsoft.com/security

| > <http://www.microsoft.com/security>

| > ====================================================

| > When responding to posts, please "Reply to Group" via your newsreader so

| > that others may learn and benefit from your issue.

| > ====================================================

| > This posting is provided "AS IS" with no warranties, and confers no

| > rights.

| >

| > --------------------

| > | From: "Adam Raff" <araff@newsgroup.nospam>

| > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

| > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

| > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

| > | Subject: Re: Event SRV error 2012

| > | Date: Tue, 21 Aug 2007 14:42:03 -0400

| > | Lines: 200

| > | X-Priority: 3

| > | X-MSMail-Priority: Normal

| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| > | X-RFC2646: Format=Flowed; Original

| > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

| > | Newsgroups: microsoft.public.windows.server.general

| > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net

208.39.138.189

| > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl

| > | Xref: TK2MSFTNGHUB02.phx.gbl

| > microsoft.public.windows.server.general:20147

| > | X-Tomcat-NG: microsoft.public.windows.server.general

| > |

| > | Hi Ken

| > |

| > | Thanks for the feed back. Not sure why you pointed my to 317249 as I

am

| > not

| > | getting 2021 or 2022 event errors. My errors are 2012.

| > |

| > | Now in that reg key what am I looking for. Can you give me an

example

| > by

| > | chance.

| > |

| > | Also all the errors disappear on the weekends so I do not think it's a

| > | server issue or something related in my server room as they are up

24x7.

| > If

| > | we have a long weekend no errors then as well. that is why I am

hoping

| > that

| > | the return code that I am getting back from the error can point me

some

| > | where.

| > |

| > | Adam Raff

| > |

| > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

| > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...

| > | > Hello Adam,

| > | >

| > | > Thank you for using newsgroup!

| > | >

| > | > Based on my research, this basically is an error that the network

| > driver

| > | > is

| > | > giving SRV on the send IRPs. First thing that I would see is if the

| > | > customer is running any 3rd party network software that is bound to

| > the

| > | > server. You can see this by checking the following registry key.

| > | >

| > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

| > | > Bind: REG_MULTI_SZ

| > | >

| > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022

| > | > http://support.microsoft.com/kb/317249/en-us

| > | >

| > | > In addition, this may be caused due to a race between send and

| > disconnect.

| > | > The customer can ignore this error.

| > | >

| > | > Thanks & Regards,

| > | >

| > | > Ken Zhao

| > | >

| > | > Microsoft Online Support

| > | > Microsoft Global Technical Support Center

| > | >

| > | > Get Secure! - http://www.microsoft.com/security

| > | > <http://www.microsoft.com/security>

| > | > ====================================================

| > | > When responding to posts, please "Reply to Group" via your

newsreader

| > so

| > | > that others may learn and benefit from your issue.

| > | > ====================================================

| > | > This posting is provided "AS IS" with no warranties, and confers no

| > | > rights.

| > | >

| > | > --------------------

| > | > | From: "Adam Raff" <araff@newsgroup.nospam>

| > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

| > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

| > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| > | > | Subject: Re: Event SRV error 2012

| > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400

| > | > | Lines: 99

| > | > | X-Priority: 3

| > | > | X-MSMail-Priority: Normal

| > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| > | > | X-RFC2646: Format=Flowed; Response

| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| > | > | Newsgroups: microsoft.public.windows.server.general

| > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128

| > | > | Path:

| > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl

| > | > | Xref: TK2MSFTNGHUB02.phx.gbl

| > | > microsoft.public.windows.server.general:19785

| > | > | X-Tomcat-NG: microsoft.public.windows.server.general

| > | > |

| > | > | Hi Coraleigh,

| > | > |

| > | > | Thank you for responding but if I am not mistaken if you install

or

| > have

| > | > | installed 913446 that updated supersedes security update 893066.

I

| > have

| > | > | 913446 installed on all my servers already.

| > | > | I verified that which is way I added the sub note to let people

know

| > | > that

| > | > I

| > | > | checked this information.

| > | > |

| > | > | If I am wrong then please correct me. I will check the version

| > number

| > | > on

| > | > | the TCP stack to see if it's that version or newer which I also

| > assume

| > | > will

| > | > | be as good.

| > | > |

| > | > | I was hoping that somebody out there can read this error and the

| > code

| > | > that

| > | > | goes with it and perhaps it points to a Mac address or something

| > like

| > | > that.

| > | > | Is there a cheap way of sniffing around the network just to get an

| > idea

| > | > to

| > | > | see if I am getting any of these errors listed in 898060?

| > | > |

| > | > | Thanks

| > | > | Adam Raff

| > | > |

| > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

| > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

| > | > | > Hi Adam,

| > | > | >

| > | > | > Some people have found that the Event ID you have is resolved by

| > this

| > | > | > Microsoft article... http://support.microsoft.com/kb/898060/

| > | > | >

| > | > | > Coraleigh Miller

| > | > | >

| > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message

| > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

| > | > | >> Sorry a little more info on this problem

| > | > | >>

| > | > | >> We are running a Windows 2003 SP1 network. Desktops are all

| > windows

| > | > XP

| > | > | >> SP2. With all updated security patches on server and desktop

| > side.

| > | > | >>

| > | > | >> I have also looked into KB913446 MS06-007 as this may lead to

| > issues

| > | > with

| > | > | >> connectivity. All my servers have this update as well as a

new

| > one

| > | > that

| > | > | >> is also getting the errors as well.

| > | > | >>

| > | > | >> Thanks

| > | > | >> Adam Raff

| > | > | >>

| > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message

| > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

| > | > | >>> Good Day,

| > | > | >>>

| > | > | >>> Over the few months we have been having an ongoing issue with

| > the

| > | > | >>> following error messages and they appear on all of our

servers.

| > | > | >>>

| > | > | >>> Event Type: Warning

| > | > | >>> Event Source: Srv

| > | > | >>> Event Category: None

| > | > | >>> Event ID: 2012

| > | > | >>> Date: 8/17/2007

| > | > | >>> Time: 2:18:26 AM

| > | > | >>> User: N/A

| > | > | >>> Computer: HSMAIN

| > | > | >>> Description:

| > | > | >>> While transmitting or receiving data, the server encountered a

| > | > network

| > | > | >>> error. Occassional errors are expected,

| > | > | >>> but large amounts of these indicate a possible error in your

| > network

| > | > | >>> configuration.

| > | > | >>> The error status code is contained within the returned data

| > | > (formatted

| > | > | >>> as Words) and may point you towards the problem.

| > | > | >>>

| > | > | >>> For more information, see Help and Support Center at

| > | > | >>> http://go.microsoft.com/fwlink/events.asp.

| > | > | >>> Data:

| > | > | >>> 0000: 00040000 00540001 00000000 800007dc

| > | > | >>> 0010: 00000000 c0000184 00000000 00000000

| > | > | >>> 0020: 00000000 00000000 0000097a

| > | > | >>>

| > | > | >>> I have looked at this from so many ways but I can not find the

| > point

| > | > of

| > | > | >>> the error. You see the problem goes away on weekends. We

| > pretty

| > | > much

| > | > | >>> turn off all desktops but all servers and printer (network

| > | > connected)

| > | > | >>> and switches stay on. I thought that it was a desktop and

| > checked

| > | > over

| > | > | >>> all the desktops and identified some that may have bad Nics.

| > After

| > | > | >>> fixing them I am still getting errors but again they disappear

| > over

| > | > the

| > | > | >>> weekend.

| > | > | >>>

| > | > | >>> The error message says to look in the error code which may

point

| > me

| > | > in

| > | > | >>> the right direction but I can not make heads or tails out to

the

| > | > error

| > | > | >>> message. If somebody knows how to read this and point me in

the

| > | > right

| > | > | >>> direction it would be a great help.

| > | > | >>>

| > | > | >>> Thank You

| > | > | >>> Adam Raff

| > | > | >>>

| > | > | >>

| > | > | >

| > | > |

| > | >

| > |

| >

|

August 29, 2007

Re: Event SRV error 2012

Hi Ken,

From what I can see nothing seems to be affecting the network but I am

getting some people complaining that the network seems slow. Not sure if it

is related or not.

Just to give you more info. I have already updated the nic drivers on one

of the servers to see if that helps. No luck there as well. I am trying to

power systems down at night but what I can tell the problem is still there.

It seems that I have to do it my trial and error.

Adam

""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

news:KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl...

> Hi Adam,

>

> Actually, this event error may be caused by more reasons. Could you let us

> know what symptoms you are encountering on the server? What issues are

> occurring when the event error is logged?

>

> Thanks & Regards,

>

> Ken Zhao

>

> Microsoft Online Support

> Microsoft Global Technical Support Center

>

> Get Secure! - http://www.microsoft.com/security

> <http://www.microsoft.com/security>

> ====================================================

> When responding to posts, please "Reply to Group" via your newsreader so

> that others may learn and benefit from your issue.

> ====================================================

> This posting is provided "AS IS" with no warranties, and confers no

> rights.

>

> --------------------

> | From: "Adam Raff" <araff@newsgroup.nospam>

> | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

> <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

> <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

> <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

> <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>

> | Subject: Re: Event SRV error 2012

> | Date: Thu, 23 Aug 2007 11:56:44 -0400

> | Lines: 315

> | X-Priority: 3

> | X-MSMail-Priority: Normal

> | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

> | X-RFC2646: Format=Flowed; Original

> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

> | Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>

> | Newsgroups: microsoft.public.windows.server.general

> | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189

> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl

> | Xref: TK2MSFTNGHUB02.phx.gbl

> microsoft.public.windows.server.general:20380

> | X-Tomcat-NG: microsoft.public.windows.server.general

> |

> | Hi Ken,

> |

> | To be honest I am not sure what I am looking for when I look at these

> | setting in the registry. If you could give me an example that would be

> | great.

> |

> | I am getting a lot of errors and I just want to make sure that it's not

> the

> | network. I believe it's a computer or device but I am having a ton of

> | problems tracking the problem down. Since the issues seem to stop on

> | weekends, I would think it's a computer as we shut all the systems down

> on

> | Friday for the weekend (Servers, networked printers and the like stay on

> | including switches and routes). I am thinking that it may be a computer

> | hitting a bad port on a switch but this is above my head and not sure

> how

> to

> | trouble shoot this or how to go about find the problem. That is why I

> was

> | hoping that the codes in the event may point be in some direction as

> they

> | state that the error is there

> |

> | The error status code is contained within the returned data

> | > | > (formatted

> | > | > | >>> as Words) and may point you towards the problem.

> |

> | I was hoping that something in the error code could point be someplace.

> I

> | am planning on testing some systems over the weekend and leave them on

> to

> | see if I get any errors or not.

> |

> | Thanks

> | Adam Raff

> |

> | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

> | news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl...

> | > Hi Adam,

> | >

> | > I found some similar cases that related to the following registry key:

> | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

> | > Bind: REG_MULTI_SZ

> | >

> | > In addition, I am not sure what symptoms you are encountering on the

> | > server. If everything works fine, you can ignore this error.

> | >

> | > Thanks & Regards,

> | >

> | > Ken Zhao

> | >

> | > Microsoft Online Support

> | > Microsoft Global Technical Support Center

> | >

> | > Get Secure! - http://www.microsoft.com/security

> | > <http://www.microsoft.com/security>

> | > ====================================================

> | > When responding to posts, please "Reply to Group" via your newsreader

> so

> | > that others may learn and benefit from your issue.

> | > ====================================================

> | > This posting is provided "AS IS" with no warranties, and confers no

> | > rights.

> | >

> | > --------------------

> | > | From: "Adam Raff" <araff@newsgroup.nospam>

> | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

> | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

> | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

> | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

> | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

> | > | Subject: Re: Event SRV error 2012

> | > | Date: Tue, 21 Aug 2007 14:42:03 -0400

> | > | Lines: 200

> | > | X-Priority: 3

> | > | X-MSMail-Priority: Normal

> | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

> | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

> | > | X-RFC2646: Format=Flowed; Original

> | > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

> | > | Newsgroups: microsoft.public.windows.server.general

> | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net

> 208.39.138.189

> | > | Path:

> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl

> | > | Xref: TK2MSFTNGHUB02.phx.gbl

> | > microsoft.public.windows.server.general:20147

> | > | X-Tomcat-NG: microsoft.public.windows.server.general

> | > |

> | > | Hi Ken

> | > |

> | > | Thanks for the feed back. Not sure why you pointed my to 317249 as

> I

> am

> | > not

> | > | getting 2021 or 2022 event errors. My errors are 2012.

> | > |

> | > | Now in that reg key what am I looking for. Can you give me an

> example

> | > by

> | > | chance.

> | > |

> | > | Also all the errors disappear on the weekends so I do not think it's

> a

> | > | server issue or something related in my server room as they are up

> 24x7.

> | > If

> | > | we have a long weekend no errors then as well. that is why I am

> hoping

> | > that

> | > | the return code that I am getting back from the error can point me

> some

> | > | where.

> | > |

> | > | Adam Raff

> | > |

> | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

> | > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...

> | > | > Hello Adam,

> | > | >

> | > | > Thank you for using newsgroup!

> | > | >

> | > | > Based on my research, this basically is an error that the network

> | > driver

> | > | > is

> | > | > giving SRV on the send IRPs. First thing that I would see is if

> the

> | > | > customer is running any 3rd party network software that is bound

> to

> | > the

> | > | > server. You can see this by checking the following registry key.

> | > | >

> | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

> | > | > Bind: REG_MULTI_SZ

> | > | >

> | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022

> | > | > http://support.microsoft.com/kb/317249/en-us

> | > | >

> | > | > In addition, this may be caused due to a race between send and

> | > disconnect.

> | > | > The customer can ignore this error.

> | > | >

> | > | > Thanks & Regards,

> | > | >

> | > | > Ken Zhao

> | > | >

> | > | > Microsoft Online Support

> | > | > Microsoft Global Technical Support Center

> | > | >

> | > | > Get Secure! - http://www.microsoft.com/security

> | > | > <http://www.microsoft.com/security>

> | > | > ====================================================

> | > | > When responding to posts, please "Reply to Group" via your

> newsreader

> | > so

> | > | > that others may learn and benefit from your issue.

> | > | > ====================================================

> | > | > This posting is provided "AS IS" with no warranties, and confers

> no

> | > | > rights.

> | > | >

> | > | > --------------------

> | > | > | From: "Adam Raff" <araff@newsgroup.nospam>

> | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

> | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

> | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

> | > | > | Subject: Re: Event SRV error 2012

> | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400

> | > | > | Lines: 99

> | > | > | X-Priority: 3

> | > | > | X-MSMail-Priority: Normal

> | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

> | > | > | X-RFC2646: Format=Flowed; Response

> | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

> | > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

> | > | > | Newsgroups: microsoft.public.windows.server.general

> | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128

> | > | > | Path:

> | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl

> | > | > | Xref: TK2MSFTNGHUB02.phx.gbl

> | > | > microsoft.public.windows.server.general:19785

> | > | > | X-Tomcat-NG: microsoft.public.windows.server.general

> | > | > |

> | > | > | Hi Coraleigh,

> | > | > |

> | > | > | Thank you for responding but if I am not mistaken if you install

> or

> | > have

> | > | > | installed 913446 that updated supersedes security update 893066.

> I

> | > have

> | > | > | 913446 installed on all my servers already.

> | > | > | I verified that which is way I added the sub note to let people

> know

> | > | > that

> | > | > I

> | > | > | checked this information.

> | > | > |

> | > | > | If I am wrong then please correct me. I will check the version

> | > number

> | > | > on

> | > | > | the TCP stack to see if it's that version or newer which I also

> | > assume

> | > | > will

> | > | > | be as good.

> | > | > |

> | > | > | I was hoping that somebody out there can read this error and the

> | > code

> | > | > that

> | > | > | goes with it and perhaps it points to a Mac address or something

> | > like

> | > | > that.

> | > | > | Is there a cheap way of sniffing around the network just to get

> an

> | > idea

> | > | > to

> | > | > | see if I am getting any of these errors listed in 898060?

> | > | > |

> | > | > | Thanks

> | > | > | Adam Raff

> | > | > |

> | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message

> | > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

> | > | > | > Hi Adam,

> | > | > | >

> | > | > | > Some people have found that the Event ID you have is resolved

> by

> | > this

> | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/

> | > | > | >

> | > | > | > Coraleigh Miller

> | > | > | >

> | > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message

> | > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

> | > | > | >> Sorry a little more info on this problem

> | > | > | >>

> | > | > | >> We are running a Windows 2003 SP1 network. Desktops are all

> | > windows

> | > | > XP

> | > | > | >> SP2. With all updated security patches on server and desktop

> | > side.

> | > | > | >>

> | > | > | >> I have also looked into KB913446 MS06-007 as this may lead to

> | > issues

> | > | > with

> | > | > | >> connectivity. All my servers have this update as well as a

> new

> | > one

> | > | > that

> | > | > | >> is also getting the errors as well.

> | > | > | >>

> | > | > | >> Thanks

> | > | > | >> Adam Raff

> | > | > | >>

> | > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message

> | > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

> | > | > | >>> Good Day,

> | > | > | >>>

> | > | > | >>> Over the few months we have been having an ongoing issue

> with

> | > the

> | > | > | >>> following error messages and they appear on all of our

> servers.

> | > | > | >>>

> | > | > | >>> Event Type: Warning

> | > | > | >>> Event Source: Srv

> | > | > | >>> Event Category: None

> | > | > | >>> Event ID: 2012

> | > | > | >>> Date: 8/17/2007

> | > | > | >>> Time: 2:18:26 AM

> | > | > | >>> User: N/A

> | > | > | >>> Computer: HSMAIN

> | > | > | >>> Description:

> | > | > | >>> While transmitting or receiving data, the server encountered

> a

> | > | > network

> | > | > | >>> error. Occassional errors are expected,

> | > | > | >>> but large amounts of these indicate a possible error in your

> | > network

> | > | > | >>> configuration.

> | > | > | >>> The error status code is contained within the returned data

> | > | > (formatted

> | > | > | >>> as Words) and may point you towards the problem.

> | > | > | >>>

> | > | > | >>> For more information, see Help and Support Center at

> | > | > | >>> http://go.microsoft.com/fwlink/events.asp.

> | > | > | >>> Data:

> | > | > | >>> 0000: 00040000 00540001 00000000 800007dc

> | > | > | >>> 0010: 00000000 c0000184 00000000 00000000

> | > | > | >>> 0020: 00000000 00000000 0000097a

> | > | > | >>>

> | > | > | >>> I have looked at this from so many ways but I can not find

> the

> | > point

> | > | > of

> | > | > | >>> the error. You see the problem goes away on weekends. We

> | > pretty

> | > | > much

> | > | > | >>> turn off all desktops but all servers and printer (network

> | > | > connected)

> | > | > | >>> and switches stay on. I thought that it was a desktop and

> | > checked

> | > | > over

> | > | > | >>> all the desktops and identified some that may have bad Nics.

> | > After

> | > | > | >>> fixing them I am still getting errors but again they

> disappear

> | > over

> | > | > the

> | > | > | >>> weekend.

> | > | > | >>>

> | > | > | >>> The error message says to look in the error code which may

> point

> | > me

> | > | > in

> | > | > | >>> the right direction but I can not make heads or tails out to

> the

> | > | > error

> | > | > | >>> message. If somebody knows how to read this and point me in

> the

> | > | > right

> | > | > | >>> direction it would be a great help.

> | > | > | >>>

> | > | > | >>> Thank You

> | > | > | >>> Adam Raff

> | > | > | >>>

> | > | > | >>

> | > | > | >

> | > | > |

> | > | >

> | > |

> | >

> |

>

August 30, 2007

Re: Event SRV error 2012

Hello Adam,

The only issue is network slow?

Please understand performance issues can be difficult to troubleshoot and

resolve in a newsgroup setting due to the number of variables and the

amount of time required to narrow down possible causes and observe the

effects.

Thanks & Regards,

Ken Zhao

Microsoft Online Support

Microsoft Global Technical Support Center

Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security>

====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

| From: "Adam Raff" <araff@newsgroup.nospam>

| References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

<#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

<eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

<#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

<h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

<eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

<#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>

<uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>

<KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl>

| Subject: Re: Event SRV error 2012

| Date: Tue, 28 Aug 2007 23:03:51 -0400

| Lines: 422

| X-Priority: 3

| X-MSMail-Priority: Normal

| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| X-RFC2646: Format=Flowed; Original

| Message-ID: <#nRb3ke6HHA.2208@TK2MSFTNGP06.phx.gbl>

| Newsgroups: microsoft.public.windows.server.general

| NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128

| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl

| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20868

| X-Tomcat-NG: microsoft.public.windows.server.general

|

| Hi Ken,

|

| From what I can see nothing seems to be affecting the network but I am

| getting some people complaining that the network seems slow. Not sure if

it

| is related or not.

|

| Just to give you more info. I have already updated the nic drivers on

one

| of the servers to see if that helps. No luck there as well. I am trying

to

| power systems down at night but what I can tell the problem is still

there.

| It seems that I have to do it my trial and error.

|

| Adam

|

| ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

| news:KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl...

| > Hi Adam,

| >

| > Actually, this event error may be caused by more reasons. Could you let

us

| > know what symptoms you are encountering on the server? What issues are

| > occurring when the event error is logged?

| >

| > Thanks & Regards,

| >

| > Ken Zhao

| >

| > Microsoft Online Support

| > Microsoft Global Technical Support Center

| >

| > Get Secure! - http://www.microsoft.com/security

| > <http://www.microsoft.com/security>

| > ====================================================

| > When responding to posts, please "Reply to Group" via your newsreader so

| > that others may learn and benefit from your issue.

| > ====================================================

| > This posting is provided "AS IS" with no warranties, and confers no

| > rights.

| >

| > --------------------

| > | From: "Adam Raff" <araff@newsgroup.nospam>

| > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

| > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

| > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

| > <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

| > <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>

| > | Subject: Re: Event SRV error 2012

| > | Date: Thu, 23 Aug 2007 11:56:44 -0400

| > | Lines: 315

| > | X-Priority: 3

| > | X-MSMail-Priority: Normal

| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| > | X-RFC2646: Format=Flowed; Original

| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| > | Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>

| > | Newsgroups: microsoft.public.windows.server.general

| > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net

208.39.138.189

| > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl

| > | Xref: TK2MSFTNGHUB02.phx.gbl

| > microsoft.public.windows.server.general:20380

| > | X-Tomcat-NG: microsoft.public.windows.server.general

| > |

| > | Hi Ken,

| > |

| > | To be honest I am not sure what I am looking for when I look at these

| > | setting in the registry. If you could give me an example that would

be

| > | great.

| > |

| > | I am getting a lot of errors and I just want to make sure that it's

not

| > the

| > | network. I believe it's a computer or device but I am having a ton of

| > | problems tracking the problem down. Since the issues seem to stop on

| > | weekends, I would think it's a computer as we shut all the systems

down

| > on

| > | Friday for the weekend (Servers, networked printers and the like stay

on

| > | including switches and routes). I am thinking that it may be a

computer

| > | hitting a bad port on a switch but this is above my head and not sure

| > how

| > to

| > | trouble shoot this or how to go about find the problem. That is why I

| > was

| > | hoping that the codes in the event may point be in some direction as

| > they

| > | state that the error is there

| > |

| > | The error status code is contained within the returned data

| > | > | > (formatted

| > | > | > | >>> as Words) and may point you towards the problem.

| > |

| > | I was hoping that something in the error code could point be

someplace.

| > I

| > | am planning on testing some systems over the weekend and leave them

on

| > to

| > | see if I get any errors or not.

| > |

| > | Thanks

| > | Adam Raff

| > |

| > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

| > | news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl...

| > | > Hi Adam,

| > | >

| > | > I found some similar cases that related to the following registry

key:

| > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

| > | > Bind: REG_MULTI_SZ

| > | >

| > | > In addition, I am not sure what symptoms you are encountering on the

| > | > server. If everything works fine, you can ignore this error.

| > | >

| > | > Thanks & Regards,

| > | >

| > | > Ken Zhao

| > | >

| > | > Microsoft Online Support

| > | > Microsoft Global Technical Support Center

| > | >

| > | > Get Secure! - http://www.microsoft.com/security

| > | > <http://www.microsoft.com/security>

| > | > ====================================================

| > | > When responding to posts, please "Reply to Group" via your

newsreader

| > so

| > | > that others may learn and benefit from your issue.

| > | > ====================================================

| > | > This posting is provided "AS IS" with no warranties, and confers no

| > | > rights.

| > | >

| > | > --------------------

| > | > | From: "Adam Raff" <araff@newsgroup.nospam>

| > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

| > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

| > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| > | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| > | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

| > | > | Subject: Re: Event SRV error 2012

| > | > | Date: Tue, 21 Aug 2007 14:42:03 -0400

| > | > | Lines: 200

| > | > | X-Priority: 3

| > | > | X-MSMail-Priority: Normal

| > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| > | > | X-RFC2646: Format=Flowed; Original

| > | > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

| > | > | Newsgroups: microsoft.public.windows.server.general

| > | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net

| > 208.39.138.189

| > | > | Path:

| > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl

| > | > | Xref: TK2MSFTNGHUB02.phx.gbl

| > | > microsoft.public.windows.server.general:20147

| > | > | X-Tomcat-NG: microsoft.public.windows.server.general

| > | > |

| > | > | Hi Ken

| > | > |

| > | > | Thanks for the feed back. Not sure why you pointed my to 317249

as

| > I

| > am

| > | > not

| > | > | getting 2021 or 2022 event errors. My errors are 2012.

| > | > |

| > | > | Now in that reg key what am I looking for. Can you give me an

| > example

| > | > by

| > | > | chance.

| > | > |

| > | > | Also all the errors disappear on the weekends so I do not think

it's

| > a

| > | > | server issue or something related in my server room as they are up

| > 24x7.

| > | > If

| > | > | we have a long weekend no errors then as well. that is why I am

| > hoping

| > | > that

| > | > | the return code that I am getting back from the error can point me

| > some

| > | > | where.

| > | > |

| > | > | Adam Raff

| > | > |

| > | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in

message

| > | > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...

| > | > | > Hello Adam,

| > | > | >

| > | > | > Thank you for using newsgroup!

| > | > | >

| > | > | > Based on my research, this basically is an error that the

network

| > | > driver

| > | > | > is

| > | > | > giving SRV on the send IRPs. First thing that I would see is if

| > the

| > | > | > customer is running any 3rd party network software that is

bound

| > to

| > | > the

| > | > | > server. You can see this by checking the following registry key.

| > | > | >

| > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

| > | > | > Bind: REG_MULTI_SZ

| > | > | >

| > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022

| > | > | > http://support.microsoft.com/kb/317249/en-us

| > | > | >

| > | > | > In addition, this may be caused due to a race between send and

| > | > disconnect.

| > | > | > The customer can ignore this error.

| > | > | >

| > | > | > Thanks & Regards,

| > | > | >

| > | > | > Ken Zhao

| > | > | >

| > | > | > Microsoft Online Support

| > | > | > Microsoft Global Technical Support Center

| > | > | >

| > | > | > Get Secure! - http://www.microsoft.com/security

| > | > | > <http://www.microsoft.com/security>

| > | > | > ====================================================

| > | > | > When responding to posts, please "Reply to Group" via your

| > newsreader

| > | > so

| > | > | > that others may learn and benefit from your issue.

| > | > | > ====================================================

| > | > | > This posting is provided "AS IS" with no warranties, and

confers

| > no

| > | > | > rights.

| > | > | >

| > | > | > --------------------

| > | > | > | From: "Adam Raff" <araff@newsgroup.nospam>

| > | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

| > | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

| > | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| > | > | > | Subject: Re: Event SRV error 2012

| > | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400

| > | > | > | Lines: 99

| > | > | > | X-Priority: 3

| > | > | > | X-MSMail-Priority: Normal

| > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| > | > | > | X-RFC2646: Format=Flowed; Response

| > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| > | > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| > | > | > | Newsgroups: microsoft.public.windows.server.general

| > | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net

69.115.51.128

| > | > | > | Path:

| > | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl

| > | > | > | Xref: TK2MSFTNGHUB02.phx.gbl

| > | > | > microsoft.public.windows.server.general:19785

| > | > | > | X-Tomcat-NG: microsoft.public.windows.server.general

| > | > | > |

| > | > | > | Hi Coraleigh,

| > | > | > |

| > | > | > | Thank you for responding but if I am not mistaken if you

install

| > or

| > | > have

| > | > | > | installed 913446 that updated supersedes security update

893066.

| > I

| > | > have

| > | > | > | 913446 installed on all my servers already.

| > | > | > | I verified that which is way I added the sub note to let

people

| > know

| > | > | > that

| > | > | > I

| > | > | > | checked this information.

| > | > | > |

| > | > | > | If I am wrong then please correct me. I will check the

version

| > | > number

| > | > | > on

| > | > | > | the TCP stack to see if it's that version or newer which I

also

| > | > assume

| > | > | > will

| > | > | > | be as good.

| > | > | > |

| > | > | > | I was hoping that somebody out there can read this error and

the

| > | > code

| > | > | > that

| > | > | > | goes with it and perhaps it points to a Mac address or

something

| > | > like

| > | > | > that.

| > | > | > | Is there a cheap way of sniffing around the network just to

get

| > an

| > | > idea

| > | > | > to

| > | > | > | see if I am getting any of these errors listed in 898060?

| > | > | > |

| > | > | > | Thanks

| > | > | > | Adam Raff

| > | > | > |

| > | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in

message

| > | > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

| > | > | > | > Hi Adam,

| > | > | > | >

| > | > | > | > Some people have found that the Event ID you have is

resolved

| > by

| > | > this

| > | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/

| > | > | > | >

| > | > | > | > Coraleigh Miller

| > | > | > | >

| > | > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message

| > | > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

| > | > | > | >> Sorry a little more info on this problem

| > | > | > | >>

| > | > | > | >> We are running a Windows 2003 SP1 network. Desktops are

all

| > | > windows

| > | > | > XP

| > | > | > | >> SP2. With all updated security patches on server and

desktop

| > | > side.

| > | > | > | >>

| > | > | > | >> I have also looked into KB913446 MS06-007 as this may lead

to

| > | > issues

| > | > | > with

| > | > | > | >> connectivity. All my servers have this update as well as a

| > new

| > | > one

| > | > | > that

| > | > | > | >> is also getting the errors as well.

| > | > | > | >>

| > | > | > | >> Thanks

| > | > | > | >> Adam Raff

| > | > | > | >>

| > | > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message

| > | > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

| > | > | > | >>> Good Day,

| > | > | > | >>>

| > | > | > | >>> Over the few months we have been having an ongoing issue

| > with

| > | > the

| > | > | > | >>> following error messages and they appear on all of our

| > servers.

| > | > | > | >>>

| > | > | > | >>> Event Type: Warning

| > | > | > | >>> Event Source: Srv

| > | > | > | >>> Event Category: None

| > | > | > | >>> Event ID: 2012

| > | > | > | >>> Date: 8/17/2007

| > | > | > | >>> Time: 2:18:26 AM

| > | > | > | >>> User: N/A

| > | > | > | >>> Computer: HSMAIN

| > | > | > | >>> Description:

| > | > | > | >>> While transmitting or receiving data, the server

encountered

| > a

| > | > | > network

| > | > | > | >>> error. Occassional errors are expected,

| > | > | > | >>> but large amounts of these indicate a possible error in

your

| > | > network

| > | > | > | >>> configuration.

| > | > | > | >>> The error status code is contained within the returned

data

| > | > | > (formatted

| > | > | > | >>> as Words) and may point you towards the problem.

| > | > | > | >>>

| > | > | > | >>> For more information, see Help and Support Center at

| > | > | > | >>> http://go.microsoft.com/fwlink/events.asp.

| > | > | > | >>> Data:

| > | > | > | >>> 0000: 00040000 00540001 00000000 800007dc

| > | > | > | >>> 0010: 00000000 c0000184 00000000 00000000

| > | > | > | >>> 0020: 00000000 00000000 0000097a

| > | > | > | >>>

| > | > | > | >>> I have looked at this from so many ways but I can not

find

| > the

| > | > point

| > | > | > of

| > | > | > | >>> the error. You see the problem goes away on weekends. We

| > | > pretty

| > | > | > much

| > | > | > | >>> turn off all desktops but all servers and printer (network

| > | > | > connected)

| > | > | > | >>> and switches stay on. I thought that it was a desktop and

| > | > checked

| > | > | > over

| > | > | > | >>> all the desktops and identified some that may have bad

Nics.

| > | > After

| > | > | > | >>> fixing them I am still getting errors but again they

| > disappear

| > | > over

| > | > | > the

| > | > | > | >>> weekend.

| > | > | > | >>>

| > | > | > | >>> The error message says to look in the error code which may

| > point

| > | > me

| > | > | > in

| > | > | > | >>> the right direction but I can not make heads or tails out

to

| > the

| > | > | > error

| > | > | > | >>> message. If somebody knows how to read this and point me

in

| > the

| > | > | > right

| > | > | > | >>> direction it would be a great help.

| > | > | > | >>>

| > | > | > | >>> Thank You

| > | > | > | >>> Adam Raff

| > | > | > | >>>

| > | > | > | >>

| > | > | > | >

| > | > | > |

| > | > | >

| > | > |

| > | >

| > |

| >

|

August 31, 2007

Re: Event SRV error 2012

On Aug 17, 8:42 am, "Adam Raff" <ar...@newsgroup.nospam> wrote:

> Good Day,

>

> Over the few months we have been having an ongoing issue with the following

> error messages and they appear on all of our servers.

>

> Event Type: Warning

> Event Source: Srv

> Event Category: None

> Event ID: 2012

> Date: 8/17/2007

> Time: 2:18:26 AM

> User: N/A

> Computer: HSMAIN

> Description:

> While transmitting or receiving data, the server encountered a network

> error. Occassional errors are expected,

> but large amounts of these indicate a possible error in your network

> configuration.

> The error status code is contained within the returned data (formatted as

> Words) and may point you towards the problem.

>

> For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

> Data:

> 0000: 00040000 00540001 00000000 800007dc

> 0010: 00000000 c0000184 00000000 00000000

> 0020: 00000000 00000000 0000097a

>

> I have looked at this from so many ways but I can not find the point of the

> error. You see the problem goes away on weekends. We pretty much turn off

> all desktops but all servers and printer (network connected) and switches

> stay on. I thought that it was a desktop and checked over all the desktops

> and identified some that may have bad Nics. After fixing them I am still

> getting errors but again they disappear over the weekend.

>

> The error message says to look in the error code which may point me in the

> right direction but I can not make heads or tails out to the error message.

> If somebody knows how to read this and point me in the right direction it

> would be a great help.

>

> Thank You

> Adam Raff

Check here >> http://www.wildpackets.com/elements/misc/SMB_NT_Status_Codes.txt

September 4, 2007

Re: Event SRV error 2012

Hi Adam,

If you have any updates or need any further assistance on this issue,

please feel free to let me know.

Thanks & Regards,

Ken Zhao

Microsoft Online Support

Microsoft Global Technical Support Center

Get Secure! - http://www.microsoft.com/security <http://www.microsoft.com/security>

====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.

====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------

| X-Tomcat-ID: 120838450

| References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

<#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

<eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

<#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

<h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

<eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

<#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>

<uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>

<KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl>

<#nRb3ke6HHA.2208@TK2MSFTNGP06.phx.gbl>

| MIME-Version: 1.0

| Content-Type: text/plain

| Content-Transfer-Encoding: 7bit

| From: v-kzhao@online.microsoft.com ("Ken Zhao [MSFT]")

| Organization: Microsoft

| Date: Thu, 30 Aug 2007 09:06:47 GMT

| Subject: Re: Event SRV error 2012

| X-Tomcat-NG: microsoft.public.windows.server.general

| Message-ID: <m4EVgUu6HHA.5608@TK2MSFTNGHUB02.phx.gbl>

| Newsgroups: microsoft.public.windows.server.general

| Lines: 440

| Path: TK2MSFTNGHUB02.phx.gbl

| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20963

| NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182

|

| Hello Adam,

|

| The only issue is network slow?

|

| Please understand performance issues can be difficult to troubleshoot and

| resolve in a newsgroup setting due to the number of variables and the

| amount of time required to narrow down possible causes and observe the

| effects.

|

| Thanks & Regards,

|

| Ken Zhao

|

| Microsoft Online Support

| Microsoft Global Technical Support Center

|

| Get Secure! - http://www.microsoft.com/security

<http://www.microsoft.com/security>

| ====================================================

| When responding to posts, please "Reply to Group" via your newsreader so

| that others may learn and benefit from your issue.

| ====================================================

| This posting is provided "AS IS" with no warranties, and confers no

rights.

|

| --------------------

| | From: "Adam Raff" <araff@newsgroup.nospam>

| | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

| <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

| <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

| <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

| <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>

| <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>

| <KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl>

| | Subject: Re: Event SRV error 2012

| | Date: Tue, 28 Aug 2007 23:03:51 -0400

| | Lines: 422

| | X-Priority: 3

| | X-MSMail-Priority: Normal

| | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| | X-RFC2646: Format=Flowed; Original

| | Message-ID: <#nRb3ke6HHA.2208@TK2MSFTNGP06.phx.gbl>

| | Newsgroups: microsoft.public.windows.server.general

| | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128

| | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl

| | Xref: TK2MSFTNGHUB02.phx.gbl

microsoft.public.windows.server.general:20868

| | X-Tomcat-NG: microsoft.public.windows.server.general

| |

| | Hi Ken,

| |

| | From what I can see nothing seems to be affecting the network but I am

| | getting some people complaining that the network seems slow. Not sure

if

| it

| | is related or not.

| |

| | Just to give you more info. I have already updated the nic drivers on

| one

| | of the servers to see if that helps. No luck there as well. I am

trying

| to

| | power systems down at night but what I can tell the problem is still

| there.

| | It seems that I have to do it my trial and error.

| |

| | Adam

| |

| | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

| | news:KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl...

| | > Hi Adam,

| | >

| | > Actually, this event error may be caused by more reasons. Could you

let

| us

| | > know what symptoms you are encountering on the server? What issues are

| | > occurring when the event error is logged?

| | >

| | > Thanks & Regards,

| | >

| | > Ken Zhao

| | >

| | > Microsoft Online Support

| | > Microsoft Global Technical Support Center

| | >

| | > Get Secure! - http://www.microsoft.com/security

| | > <http://www.microsoft.com/security>

| | > ====================================================

| | > When responding to posts, please "Reply to Group" via your newsreader

so

| | > that others may learn and benefit from your issue.

| | > ====================================================

| | > This posting is provided "AS IS" with no warranties, and confers no

| | > rights.

| | >

| | > --------------------

| | > | From: "Adam Raff" <araff@newsgroup.nospam>

| | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

| | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

| | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

| | > <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

| | > <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>

| | > | Subject: Re: Event SRV error 2012

| | > | Date: Thu, 23 Aug 2007 11:56:44 -0400

| | > | Lines: 315

| | > | X-Priority: 3

| | > | X-MSMail-Priority: Normal

| | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| | > | X-RFC2646: Format=Flowed; Original

| | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| | > | Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>

| | > | Newsgroups: microsoft.public.windows.server.general

| | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net

| 208.39.138.189

| | > | Path:

TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl

| | > | Xref: TK2MSFTNGHUB02.phx.gbl

| | > microsoft.public.windows.server.general:20380

| | > | X-Tomcat-NG: microsoft.public.windows.server.general

| | > |

| | > | Hi Ken,

| | > |

| | > | To be honest I am not sure what I am looking for when I look at

these

| | > | setting in the registry. If you could give me an example that

would

| be

| | > | great.

| | > |

| | > | I am getting a lot of errors and I just want to make sure that it's

| not

| | > the

| | > | network. I believe it's a computer or device but I am having a ton

of

| | > | problems tracking the problem down. Since the issues seem to stop

on

| | > | weekends, I would think it's a computer as we shut all the systems

| down

| | > on

| | > | Friday for the weekend (Servers, networked printers and the like

stay

| on

| | > | including switches and routes). I am thinking that it may be a

| computer

| | > | hitting a bad port on a switch but this is above my head and not

sure

| | > how

| | > to

| | > | trouble shoot this or how to go about find the problem. That is

why I

| | > was

| | > | hoping that the codes in the event may point be in some direction

as

| | > they

| | > | state that the error is there

| | > |

| | > | The error status code is contained within the returned data

| | > | > | > (formatted

| | > | > | > | >>> as Words) and may point you towards the problem.

| | > |

| | > | I was hoping that something in the error code could point be

| someplace.

| | > I

| | > | am planning on testing some systems over the weekend and leave them

| on

| | > to

| | > | see if I get any errors or not.

| | > |

| | > | Thanks

| | > | Adam Raff

| | > |

| | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message

| | > | news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl...

| | > | > Hi Adam,

| | > | >

| | > | > I found some similar cases that related to the following registry

| key:

| | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

| | > | > Bind: REG_MULTI_SZ

| | > | >

| | > | > In addition, I am not sure what symptoms you are encountering on

the

| | > | > server. If everything works fine, you can ignore this error.

| | > | >

| | > | > Thanks & Regards,

| | > | >

| | > | > Ken Zhao

| | > | >

| | > | > Microsoft Online Support

| | > | > Microsoft Global Technical Support Center

| | > | >

| | > | > Get Secure! - http://www.microsoft.com/security

| | > | > <http://www.microsoft.com/security>

| | > | > ====================================================

| | > | > When responding to posts, please "Reply to Group" via your

| newsreader

| | > so

| | > | > that others may learn and benefit from your issue.

| | > | > ====================================================

| | > | > This posting is provided "AS IS" with no warranties, and confers

no

| | > | > rights.

| | > | >

| | > | > --------------------

| | > | > | From: "Adam Raff" <araff@newsgroup.nospam>

| | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

| | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

| | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| | > | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| | > | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>

| | > | > | Subject: Re: Event SRV error 2012

| | > | > | Date: Tue, 21 Aug 2007 14:42:03 -0400

| | > | > | Lines: 200

| | > | > | X-Priority: 3

| | > | > | X-MSMail-Priority: Normal

| | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| | > | > | X-RFC2646: Format=Flowed; Original

| | > | > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>

| | > | > | Newsgroups: microsoft.public.windows.server.general

| | > | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net

| | > 208.39.138.189

| | > | > | Path:

| | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl

| | > | > | Xref: TK2MSFTNGHUB02.phx.gbl

| | > | > microsoft.public.windows.server.general:20147

| | > | > | X-Tomcat-NG: microsoft.public.windows.server.general

| | > | > |

| | > | > | Hi Ken

| | > | > |

| | > | > | Thanks for the feed back. Not sure why you pointed my to

317249

| as

| | > I

| | > am

| | > | > not

| | > | > | getting 2021 or 2022 event errors. My errors are 2012.

| | > | > |

| | > | > | Now in that reg key what am I looking for. Can you give me an

| | > example

| | > | > by

| | > | > | chance.

| | > | > |

| | > | > | Also all the errors disappear on the weekends so I do not think

| it's

| | > a

| | > | > | server issue or something related in my server room as they are

up

| | > 24x7.

| | > | > If

| | > | > | we have a long weekend no errors then as well. that is why I am

| | > hoping

| | > | > that

| | > | > | the return code that I am getting back from the error can point

me

| | > some

| | > | > | where.

| | > | > |

| | > | > | Adam Raff

| | > | > |

| | > | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in

| message

| | > | > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...

| | > | > | > Hello Adam,

| | > | > | >

| | > | > | > Thank you for using newsgroup!

| | > | > | >

| | > | > | > Based on my research, this basically is an error that the

| network

| | > | > driver

| | > | > | > is

| | > | > | > giving SRV on the send IRPs. First thing that I would see is

if

| | > the

| | > | > | > customer is running any 3rd party network software that is

| bound

| | > to

| | > | > the

| | > | > | > server. You can see this by checking the following registry

key.

| | > | > | >

| | > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage

| | > | > | > Bind: REG_MULTI_SZ

| | > | > | >

| | > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022

| | > | > | > http://support.microsoft.com/kb/317249/en-us

| | > | > | >

| | > | > | > In addition, this may be caused due to a race between send and

| | > | > disconnect.

| | > | > | > The customer can ignore this error.

| | > | > | >

| | > | > | > Thanks & Regards,

| | > | > | >

| | > | > | > Ken Zhao

| | > | > | >

| | > | > | > Microsoft Online Support

| | > | > | > Microsoft Global Technical Support Center

| | > | > | >

| | > | > | > Get Secure! - http://www.microsoft.com/security

| | > | > | > <http://www.microsoft.com/security>

| | > | > | > ====================================================

| | > | > | > When responding to posts, please "Reply to Group" via your

| | > newsreader

| | > | > so

| | > | > | > that others may learn and benefit from your issue.

| | > | > | > ====================================================

| | > | > | > This posting is provided "AS IS" with no warranties, and

| confers

| | > no

| | > | > | > rights.

| | > | > | >

| | > | > | > --------------------

| | > | > | > | From: "Adam Raff" <araff@newsgroup.nospam>

| | > | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>

| | > | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>

| | > | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>

| | > | > | > | Subject: Re: Event SRV error 2012

| | > | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400

| | > | > | > | Lines: 99

| | > | > | > | X-Priority: 3

| | > | > | > | X-MSMail-Priority: Normal

| | > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138

| | > | > | > | X-RFC2646: Format=Flowed; Response

| | > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138

| | > | > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>

| | > | > | > | Newsgroups: microsoft.public.windows.server.general

| | > | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net

| 69.115.51.128

| | > | > | > | Path:

| | > | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl

| | > | > | > | Xref: TK2MSFTNGHUB02.phx.gbl

| | > | > | > microsoft.public.windows.server.general:19785

| | > | > | > | X-Tomcat-NG: microsoft.public.windows.server.general

| | > | > | > |

| | > | > | > | Hi Coraleigh,

| | > | > | > |

| | > | > | > | Thank you for responding but if I am not mistaken if you

| install

| | > or

| | > | > have

| | > | > | > | installed 913446 that updated supersedes security update

| 893066.

| | > I

| | > | > have

| | > | > | > | 913446 installed on all my servers already.

| | > | > | > | I verified that which is way I added the sub note to let

| people

| | > know

| | > | > | > that

| | > | > | > I

| | > | > | > | checked this information.

| | > | > | > |

| | > | > | > | If I am wrong then please correct me. I will check the

| version

| | > | > number

| | > | > | > on

| | > | > | > | the TCP stack to see if it's that version or newer which I

| also

| | > | > assume

| | > | > | > will

| | > | > | > | be as good.

| | > | > | > |

| | > | > | > | I was hoping that somebody out there can read this error

and

| the

| | > | > code

| | > | > | > that

| | > | > | > | goes with it and perhaps it points to a Mac address or

| something

| | > | > like

| | > | > | > that.

| | > | > | > | Is there a cheap way of sniffing around the network just to

| get

| | > an

| | > | > idea

| | > | > | > to

| | > | > | > | see if I am getting any of these errors listed in 898060?

| | > | > | > |

| | > | > | > | Thanks

| | > | > | > | Adam Raff

| | > | > | > |

| | > | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in

| message

| | > | > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...

| | > | > | > | > Hi Adam,

| | > | > | > | >

| | > | > | > | > Some people have found that the Event ID you have is

| resolved

| | > by

| | > | > this

| | > | > | > | > Microsoft article...

http://support.microsoft.com/kb/898060/

| | > | > | > | >

| | > | > | > | > Coraleigh Miller

| | > | > | > | >

| | > | > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message

| | > | > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...

| | > | > | > | >> Sorry a little more info on this problem

| | > | > | > | >>

| | > | > | > | >> We are running a Windows 2003 SP1 network. Desktops are

| all

| | > | > windows

| | > | > | > XP

| | > | > | > | >> SP2. With all updated security patches on server and

| desktop

| | > | > side.

| | > | > | > | >>

| | > | > | > | >> I have also looked into KB913446 MS06-007 as this may

lead

| to

| | > | > issues

| | > | > | > with

| | > | > | > | >> connectivity. All my servers have this update as well

as a

| | > new

| | > | > one

| | > | > | > that

| | > | > | > | >> is also getting the errors as well.

| | > | > | > | >>

| | > | > | > | >> Thanks

| | > | > | > | >> Adam Raff

| | > | > | > | >>

| | > | > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message

| | > | > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...

| | > | > | > | >>> Good Day,

| | > | > | > | >>>

| | > | > | > | >>> Over the few months we have been having an ongoing

issue

| | > with

| | > | > the

| | > | > | > | >>> following error messages and they appear on all of our

| | > servers.

| | > | > | > | >>>

| | > | > | > | >>> Event Type: Warning

| | > | > | > | >>> Event Source: Srv

| | > | > | > | >>> Event Category: None

| | > | > | > | >>> Event ID: 2012

| | > | > | > | >>> Date: 8/17/2007

| | > | > | > | >>> Time: 2:18:26 AM

| | > | > | > | >>> User: N/A

| | > | > | > | >>> Computer: HSMAIN

| | > | > | > | >>> Description:

| | > | > | > | >>> While transmitting or receiving data, the server

| encountered

| | > a

| | > | > | > network

| | > | > | > | >>> error. Occassional errors are expected,

| | > | > | > | >>> but large amounts of these indicate a possible error in

| your

| | > | > network

| | > | > | > | >>> configuration.

| | > | > | > | >>> The error status code is contained within the returned

| data

| | > | > | > (formatted

| | > | > | > | >>> as Words) and may point you towards the problem.

| | > | > | > | >>>

| | > | > | > | >>> For more information, see Help and Support Center at

| | > | > | > | >>> http://go.microsoft.com/fwlink/events.asp.

| | > | > | > | >>> Data:

| | > | > | > | >>> 0000: 00040000 00540001 00000000 800007dc

| | > | > | > | >>> 0010: 00000000 c0000184 00000000 00000000

| | > | > | > | >>> 0020: 00000000 00000000 0000097a

| | > | > | > | >>>

| | > | > | > | >>> I have looked at this from so many ways but I can not

| find

| | > the

| | > | > point

| | > | > | > of

| | > | > | > | >>> the error. You see the problem goes away on weekends.

We

| | > | > pretty

| | > | > | > much

| | > | > | > | >>> turn off all desktops but all servers and printer

(network

| | > | > | > connected)

| | > | > | > | >>> and switches stay on. I thought that it was a desktop

and

| | > | > checked

| | > | > | > over

| | > | > | > | >>> all the desktops and identified some that may have bad

| Nics.

| | > | > After

| | > | > | > | >>> fixing them I am still getting errors but again they

| | > disappear

| | > | > over

| | > | > | > the

| | > | > | > | >>> weekend.

| | > | > | > | >>>

| | > | > | > | >>> The error message says to look in the error code which

may

| | > point

| | > | > me

| | > | > | > in

| | > | > | > | >>> the right direction but I can not make heads or tails

out

| to

| | > the

| | > | > | > error

| | > | > | > | >>> message. If somebody knows how to read this and point

me

| in

| | > the

| | > | > | > right

| | > | > | > | >>> direction it would be a great help.

| | > | > | > | >>>

| | > | > | > | >>> Thank You

| | > | > | > | >>> Adam Raff

| | > | > | > | >>>

| | > | > | > | >>

| | > | > | > | >

| | > | > | > |

| | > | > | >

| | > | > |

| | > | >

| | > |

| | >

| |

|

Sign In

Event SRV error 2012

Recommended Posts

Guest Adam Raff

Popular Days

Popular Days

Guest Adam Raff

Guest Coraleigh Miller

Guest Adam Raff

Guest Ken Zhao [MSFT]

Guest Coraleigh Miller

Guest Adam Raff

Guest Adam Raff

Guest Coraleigh Miller

Guest Ken Zhao [MSFT]

Guest Adam Raff

Guest Adam Raff

Guest Ken Zhao [MSFT]

Guest Adam Raff

Guest Ken Zhao [MSFT]

Guest paulhaskew@gmail.com

Guest Ken Zhao [MSFT]

Similar Content

Event 1000, Application error: lsass.exe (causing pc shutdowns.)

What to do with KMS server 2012 R2

can not upgrade directly from WS 2012 to 2019

Event 162, Event 41 BSOD

WHEA-Logger Event 1 Error

Browse

Activity

Site Info