Event SRV error 2012

Good Day,

Over the few months we have been having an ongoing issue with the following
error messages and they appear on all of our servers.

Event Type: Warning
Event Source: Srv
Event Category: None
Event ID: 2012
Date: 8/17/2007
Time: 2:18:26 AM
User: N/A
Computer: HSMAIN
Description:
While transmitting or receiving data, the server encountered a network
error. Occassional errors are expected,
but large amounts of these indicate a possible error in your network
configuration.
The error status code is contained within the returned data (formatted as
Words) and may point you towards the problem.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00040000 00540001 00000000 800007dc
0010: 00000000 c0000184 00000000 00000000
0020: 00000000 00000000 0000097a


I have looked at this from so many ways but I can not find the point of the
error. You see the problem goes away on weekends. We pretty much turn off
all desktops but all servers and printer (network connected) and switches
stay on. I thought that it was a desktop and checked over all the desktops
and identified some that may have bad Nics. After fixing them I am still
getting errors but again they disappear over the weekend.

The error message says to look in the error code which may point me in the
right direction but I can not make heads or tails out to the error message.
If somebody knows how to read this and point me in the right direction it
would be a great help.

Thank You
Adam Raff

Sorry a little more info on this problem

We are running a Windows 2003 SP1 network. Desktops are all windows XP SP2.
With all updated security patches on server and desktop side.

I have also looked into KB913446 MS06-007 as this may lead to issues with
connectivity. All my servers have this update as well as a new one that is
also getting the errors as well.

Thanks
Adam Raff



"Adam Raff" <araff@newsgroup.nospam> wrote in message
news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
> Good Day,
>
> Over the few months we have been having an ongoing issue with the
> following error messages and they appear on all of our servers.
>
> Event Type: Warning
> Event Source: Srv
> Event Category: None
> Event ID: 2012
> Date: 8/17/2007
> Time: 2:18:26 AM
> User: N/A
> Computer: HSMAIN
> Description:
> While transmitting or receiving data, the server encountered a network
> error. Occassional errors are expected,
> but large amounts of these indicate a possible error in your network
> configuration.
> The error status code is contained within the returned data (formatted as
> Words) and may point you towards the problem.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 00040000 00540001 00000000 800007dc
> 0010: 00000000 c0000184 00000000 00000000
> 0020: 00000000 00000000 0000097a
>
>
> I have looked at this from so many ways but I can not find the point of
> the error. You see the problem goes away on weekends. We pretty much
> turn off all desktops but all servers and printer (network connected) and
> switches stay on. I thought that it was a desktop and checked over all
> the desktops and identified some that may have bad Nics. After fixing
> them I am still getting errors but again they disappear over the weekend.
>
> The error message says to look in the error code which may point me in the
> right direction but I can not make heads or tails out to the error
> message. If somebody knows how to read this and point me in the right
> direction it would be a great help.
>
> Thank You
> Adam Raff
>

Hi Adam,

Some people have found that the Event ID you have is resolved by this
Microsoft article... http://support.microsoft.com/kb/898060/

Coraleigh Miller

"Adam Raff" <araff@newsgroup.nospam> wrote in message
news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
> Sorry a little more info on this problem
>
> We are running a Windows 2003 SP1 network. Desktops are all windows XP
> SP2. With all updated security patches on server and desktop side.
>
> I have also looked into KB913446 MS06-007 as this may lead to issues with
> connectivity. All my servers have this update as well as a new one that
> is also getting the errors as well.
>
> Thanks
> Adam Raff
>
>
>
> "Adam Raff" <araff@newsgroup.nospam> wrote in message
> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
>> Good Day,
>>
>> Over the few months we have been having an ongoing issue with the
>> following error messages and they appear on all of our servers.
>>
>> Event Type: Warning
>> Event Source: Srv
>> Event Category: None
>> Event ID: 2012
>> Date: 8/17/2007
>> Time: 2:18:26 AM
>> User: N/A
>> Computer: HSMAIN
>> Description:
>> While transmitting or receiving data, the server encountered a network
>> error. Occassional errors are expected,
>> but large amounts of these indicate a possible error in your network
>> configuration.
>> The error status code is contained within the returned data (formatted as
>> Words) and may point you towards the problem.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: 00040000 00540001 00000000 800007dc
>> 0010: 00000000 c0000184 00000000 00000000
>> 0020: 00000000 00000000 0000097a
>>
>>
>> I have looked at this from so many ways but I can not find the point of
>> the error. You see the problem goes away on weekends. We pretty much
>> turn off all desktops but all servers and printer (network connected) and
>> switches stay on. I thought that it was a desktop and checked over all
>> the desktops and identified some that may have bad Nics. After fixing
>> them I am still getting errors but again they disappear over the weekend.
>>
>> The error message says to look in the error code which may point me in
>> the right direction but I can not make heads or tails out to the error
>> message. If somebody knows how to read this and point me in the right
>> direction it would be a great help.
>>
>> Thank You
>> Adam Raff
>>
>
>

Hi Coraleigh,

Thank you for responding but if I am not mistaken if you install or have
installed 913446 that updated supersedes security update 893066. I have
913446 installed on all my servers already.
I verified that which is way I added the sub note to let people know that I
checked this information.

If I am wrong then please correct me. I will check the version number on
the TCP stack to see if it's that version or newer which I also assume will
be as good.

I was hoping that somebody out there can read this error and the code that
goes with it and perhaps it points to a Mac address or something like that.
Is there a cheap way of sniffing around the network just to get an idea to
see if I am getting any of these errors listed in 898060?

Thanks
Adam Raff


"Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
> Hi Adam,
>
> Some people have found that the Event ID you have is resolved by this
> Microsoft article... http://support.microsoft.com/kb/898060/
>
> Coraleigh Miller
>
> "Adam Raff" <araff@newsgroup.nospam> wrote in message
> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
>> Sorry a little more info on this problem
>>
>> We are running a Windows 2003 SP1 network. Desktops are all windows XP
>> SP2. With all updated security patches on server and desktop side.
>>
>> I have also looked into KB913446 MS06-007 as this may lead to issues with
>> connectivity. All my servers have this update as well as a new one that
>> is also getting the errors as well.
>>
>> Thanks
>> Adam Raff
>>
>>
>>
>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
>>> Good Day,
>>>
>>> Over the few months we have been having an ongoing issue with the
>>> following error messages and they appear on all of our servers.
>>>
>>> Event Type: Warning
>>> Event Source: Srv
>>> Event Category: None
>>> Event ID: 2012
>>> Date: 8/17/2007
>>> Time: 2:18:26 AM
>>> User: N/A
>>> Computer: HSMAIN
>>> Description:
>>> While transmitting or receiving data, the server encountered a network
>>> error. Occassional errors are expected,
>>> but large amounts of these indicate a possible error in your network
>>> configuration.
>>> The error status code is contained within the returned data (formatted
>>> as Words) and may point you towards the problem.
>>>
>>> For more information, see Help and Support Center at
>>> http://go.microsoft.com/fwlink/events.asp.
>>> Data:
>>> 0000: 00040000 00540001 00000000 800007dc
>>> 0010: 00000000 c0000184 00000000 00000000
>>> 0020: 00000000 00000000 0000097a
>>>
>>>
>>> I have looked at this from so many ways but I can not find the point of
>>> the error. You see the problem goes away on weekends. We pretty much
>>> turn off all desktops but all servers and printer (network connected)
>>> and switches stay on. I thought that it was a desktop and checked over
>>> all the desktops and identified some that may have bad Nics. After
>>> fixing them I am still getting errors but again they disappear over the
>>> weekend.
>>>
>>> The error message says to look in the error code which may point me in
>>> the right direction but I can not make heads or tails out to the error
>>> message. If somebody knows how to read this and point me in the right
>>> direction it would be a great help.
>>>
>>> Thank You
>>> Adam Raff
>>>
>>
>>
>
>

Hello Adam,

Thank you for using newsgroup!

Based on my research, this basically is an error that the network driver is
giving SRV on the send IRPs. First thing that I would see is if the
customer is running any 3rd party network software that is bound to the
server. You can see this by checking the following registry key.

HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
Bind: REG_MULTI_SZ

317249: How to troubleshoot Event ID 2021 and Event ID 2022
http://support.microsoft.com/kb/317249/en-us

In addition, this may be caused due to a race between send and disconnect.
The customer can ignore this error.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.




--------------------
| From: "Adam Raff" <araff@newsgroup.nospam>
| References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
<#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
<eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
| Subject: Re: Event SRV error 2012
| Date: Fri, 17 Aug 2007 17:29:35 -0400
| Lines: 99
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| X-RFC2646: Format=Flowed; Response
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
| Newsgroups: microsoft.public.windows.server.general
| NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:19785
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| Hi Coraleigh,
|
| Thank you for responding but if I am not mistaken if you install or have
| installed 913446 that updated supersedes security update 893066. I have
| 913446 installed on all my servers already.
| I verified that which is way I added the sub note to let people know that
I
| checked this information.
|
| If I am wrong then please correct me. I will check the version number on
| the TCP stack to see if it's that version or newer which I also assume
will
| be as good.
|
| I was hoping that somebody out there can read this error and the code
that
| goes with it and perhaps it points to a Mac address or something like
that.
| Is there a cheap way of sniffing around the network just to get an idea
to
| see if I am getting any of these errors listed in 898060?
|
| Thanks
| Adam Raff
|
|
| "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
| news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
| > Hi Adam,
| >
| > Some people have found that the Event ID you have is resolved by this
| > Microsoft article... http://support.microsoft.com/kb/898060/
| >
| > Coraleigh Miller
| >
| > "Adam Raff" <araff@newsgroup.nospam> wrote in message
| > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
| >> Sorry a little more info on this problem
| >>
| >> We are running a Windows 2003 SP1 network. Desktops are all windows
XP
| >> SP2. With all updated security patches on server and desktop side.
| >>
| >> I have also looked into KB913446 MS06-007 as this may lead to issues
with
| >> connectivity. All my servers have this update as well as a new one
that
| >> is also getting the errors as well.
| >>
| >> Thanks
| >> Adam Raff
| >>
| >>
| >>
| >> "Adam Raff" <araff@newsgroup.nospam> wrote in message
| >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
| >>> Good Day,
| >>>
| >>> Over the few months we have been having an ongoing issue with the
| >>> following error messages and they appear on all of our servers.
| >>>
| >>> Event Type: Warning
| >>> Event Source: Srv
| >>> Event Category: None
| >>> Event ID: 2012
| >>> Date: 8/17/2007
| >>> Time: 2:18:26 AM
| >>> User: N/A
| >>> Computer: HSMAIN
| >>> Description:
| >>> While transmitting or receiving data, the server encountered a
network
| >>> error. Occassional errors are expected,
| >>> but large amounts of these indicate a possible error in your network
| >>> configuration.
| >>> The error status code is contained within the returned data
(formatted
| >>> as Words) and may point you towards the problem.
| >>>
| >>> For more information, see Help and Support Center at
| >>> http://go.microsoft.com/fwlink/events.asp.
| >>> Data:
| >>> 0000: 00040000 00540001 00000000 800007dc
| >>> 0010: 00000000 c0000184 00000000 00000000
| >>> 0020: 00000000 00000000 0000097a
| >>>
| >>>
| >>> I have looked at this from so many ways but I can not find the point
of
| >>> the error. You see the problem goes away on weekends. We pretty
much
| >>> turn off all desktops but all servers and printer (network connected)
| >>> and switches stay on. I thought that it was a desktop and checked
over
| >>> all the desktops and identified some that may have bad Nics. After
| >>> fixing them I am still getting errors but again they disappear over
the
| >>> weekend.
| >>>
| >>> The error message says to look in the error code which may point me
in
| >>> the right direction but I can not make heads or tails out to the
error
| >>> message. If somebody knows how to read this and point me in the right
| >>> direction it would be a great help.
| >>>
| >>> Thank You
| >>> Adam Raff
| >>>
| >>
| >>
| >
| >
|
|
|

Hi Adam,

Have you tried using Network Monitor?
http://support.microsoft.com/kb/243270
This article http://support.microsoft.com/kb/898060/ suggests using a tool
like this to help troubleshoot....
"There may be some other similar scenarios where these symptoms occur. These
scenarios can typically be diagnosed by sniffing the network traffic on
either the source host side or on one of the intermediate network routers.
If there are multiple ICMP destination unreachable messages sent over time
for a destination, the source host that has the MS05-019 security update or
Windows Server 2003 SP1 installed is likely to have this problem. "

Hope this helps.

Coraleigh Miller


"Adam Raff" <araff@newsgroup.nospam> wrote in message
news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl...
> Hi Coraleigh,
>
> Thank you for responding but if I am not mistaken if you install or have
> installed 913446 that updated supersedes security update 893066. I have
> 913446 installed on all my servers already.
> I verified that which is way I added the sub note to let people know that
> I checked this information.
>
> If I am wrong then please correct me. I will check the version number on
> the TCP stack to see if it's that version or newer which I also assume
> will be as good.
>
> I was hoping that somebody out there can read this error and the code that
> goes with it and perhaps it points to a Mac address or something like
> that. Is there a cheap way of sniffing around the network just to get an
> idea to see if I am getting any of these errors listed in 898060?
>
> Thanks
> Adam Raff
>
>
> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
>> Hi Adam,
>>
>> Some people have found that the Event ID you have is resolved by this
>> Microsoft article... http://support.microsoft.com/kb/898060/
>>
>> Coraleigh Miller
>>
>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
>>> Sorry a little more info on this problem
>>>
>>> We are running a Windows 2003 SP1 network. Desktops are all windows XP
>>> SP2. With all updated security patches on server and desktop side.
>>>
>>> I have also looked into KB913446 MS06-007 as this may lead to issues
>>> with connectivity. All my servers have this update as well as a new one
>>> that is also getting the errors as well.
>>>
>>> Thanks
>>> Adam Raff
>>>
>>>
>>>
>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
>>>> Good Day,
>>>>
>>>> Over the few months we have been having an ongoing issue with the
>>>> following error messages and they appear on all of our servers.
>>>>
>>>> Event Type: Warning
>>>> Event Source: Srv
>>>> Event Category: None
>>>> Event ID: 2012
>>>> Date: 8/17/2007
>>>> Time: 2:18:26 AM
>>>> User: N/A
>>>> Computer: HSMAIN
>>>> Description:
>>>> While transmitting or receiving data, the server encountered a network
>>>> error. Occassional errors are expected,
>>>> but large amounts of these indicate a possible error in your network
>>>> configuration.
>>>> The error status code is contained within the returned data (formatted
>>>> as Words) and may point you towards the problem.
>>>>
>>>> For more information, see Help and Support Center at
>>>> http://go.microsoft.com/fwlink/events.asp.
>>>> Data:
>>>> 0000: 00040000 00540001 00000000 800007dc
>>>> 0010: 00000000 c0000184 00000000 00000000
>>>> 0020: 00000000 00000000 0000097a
>>>>
>>>>
>>>> I have looked at this from so many ways but I can not find the point of
>>>> the error. You see the problem goes away on weekends. We pretty much
>>>> turn off all desktops but all servers and printer (network connected)
>>>> and switches stay on. I thought that it was a desktop and checked over
>>>> all the desktops and identified some that may have bad Nics. After
>>>> fixing them I am still getting errors but again they disappear over the
>>>> weekend.
>>>>
>>>> The error message says to look in the error code which may point me in
>>>> the right direction but I can not make heads or tails out to the error
>>>> message. If somebody knows how to read this and point me in the right
>>>> direction it would be a great help.
>>>>
>>>> Thank You
>>>> Adam Raff
>>>>
>>>
>>>
>>
>>
>
>

Hi Ken

Thanks for the feed back. Not sure why you pointed my to 317249 as I am not
getting 2021 or 2022 event errors. My errors are 2012.

Now in that reg key what am I looking for. Can you give me an example by
chance.

Also all the errors disappear on the weekends so I do not think it's a
server issue or something related in my server room as they are up 24x7. If
we have a long weekend no errors then as well. that is why I am hoping that
the return code that I am getting back from the error can point me some
where.

Adam Raff

""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...
> Hello Adam,
>
> Thank you for using newsgroup!
>
> Based on my research, this basically is an error that the network driver
> is
> giving SRV on the send IRPs. First thing that I would see is if the
> customer is running any 3rd party network software that is bound to the
> server. You can see this by checking the following registry key.
>
> HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
> Bind: REG_MULTI_SZ
>
> 317249: How to troubleshoot Event ID 2021 and Event ID 2022
> http://support.microsoft.com/kb/317249/en-us
>
> In addition, this may be caused due to a race between send and disconnect.
> The customer can ignore this error.
>
> Thanks & Regards,
>
> Ken Zhao
>
> Microsoft Online Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> <http://www.microsoft.com/security>
> ====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>
>
> --------------------
> | From: "Adam Raff" <araff@newsgroup.nospam>
> | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
> | Subject: Re: Event SRV error 2012
> | Date: Fri, 17 Aug 2007 17:29:35 -0400
> | Lines: 99
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> | X-RFC2646: Format=Flowed; Response
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
> | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
> | Newsgroups: microsoft.public.windows.server.general
> | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128
> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
> | Xref: TK2MSFTNGHUB02.phx.gbl
> microsoft.public.windows.server.general:19785
> | X-Tomcat-NG: microsoft.public.windows.server.general
> |
> | Hi Coraleigh,
> |
> | Thank you for responding but if I am not mistaken if you install or have
> | installed 913446 that updated supersedes security update 893066. I have
> | 913446 installed on all my servers already.
> | I verified that which is way I added the sub note to let people know
> that
> I
> | checked this information.
> |
> | If I am wrong then please correct me. I will check the version number
> on
> | the TCP stack to see if it's that version or newer which I also assume
> will
> | be as good.
> |
> | I was hoping that somebody out there can read this error and the code
> that
> | goes with it and perhaps it points to a Mac address or something like
> that.
> | Is there a cheap way of sniffing around the network just to get an idea
> to
> | see if I am getting any of these errors listed in 898060?
> |
> | Thanks
> | Adam Raff
> |
> |
> | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
> | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
> | > Hi Adam,
> | >
> | > Some people have found that the Event ID you have is resolved by this
> | > Microsoft article... http://support.microsoft.com/kb/898060/
> | >
> | > Coraleigh Miller
> | >
> | > "Adam Raff" <araff@newsgroup.nospam> wrote in message
> | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
> | >> Sorry a little more info on this problem
> | >>
> | >> We are running a Windows 2003 SP1 network. Desktops are all windows
> XP
> | >> SP2. With all updated security patches on server and desktop side.
> | >>
> | >> I have also looked into KB913446 MS06-007 as this may lead to issues
> with
> | >> connectivity. All my servers have this update as well as a new one
> that
> | >> is also getting the errors as well.
> | >>
> | >> Thanks
> | >> Adam Raff
> | >>
> | >>
> | >>
> | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message
> | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
> | >>> Good Day,
> | >>>
> | >>> Over the few months we have been having an ongoing issue with the
> | >>> following error messages and they appear on all of our servers.
> | >>>
> | >>> Event Type: Warning
> | >>> Event Source: Srv
> | >>> Event Category: None
> | >>> Event ID: 2012
> | >>> Date: 8/17/2007
> | >>> Time: 2:18:26 AM
> | >>> User: N/A
> | >>> Computer: HSMAIN
> | >>> Description:
> | >>> While transmitting or receiving data, the server encountered a
> network
> | >>> error. Occassional errors are expected,
> | >>> but large amounts of these indicate a possible error in your network
> | >>> configuration.
> | >>> The error status code is contained within the returned data
> (formatted
> | >>> as Words) and may point you towards the problem.
> | >>>
> | >>> For more information, see Help and Support Center at
> | >>> http://go.microsoft.com/fwlink/events.asp.
> | >>> Data:
> | >>> 0000: 00040000 00540001 00000000 800007dc
> | >>> 0010: 00000000 c0000184 00000000 00000000
> | >>> 0020: 00000000 00000000 0000097a
> | >>>
> | >>>
> | >>> I have looked at this from so many ways but I can not find the point
> of
> | >>> the error. You see the problem goes away on weekends. We pretty
> much
> | >>> turn off all desktops but all servers and printer (network
> connected)
> | >>> and switches stay on. I thought that it was a desktop and checked
> over
> | >>> all the desktops and identified some that may have bad Nics. After
> | >>> fixing them I am still getting errors but again they disappear over
> the
> | >>> weekend.
> | >>>
> | >>> The error message says to look in the error code which may point me
> in
> | >>> the right direction but I can not make heads or tails out to the
> error
> | >>> message. If somebody knows how to read this and point me in the
> right
> | >>> direction it would be a great help.
> | >>>
> | >>> Thank You
> | >>> Adam Raff
> | >>>
> | >>
> | >>
> | >
> | >
> |
> |
> |
>

Coraleigh,

Just installed it on my server. You wouldn't know a good place to get
directions on how to use this program do you by chance?

Adam Raff


"Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
news:%23LkEx1u4HHA.1992@TK2MSFTNGP03.phx.gbl...
> Hi Adam,
>
> Have you tried using Network Monitor?
> http://support.microsoft.com/kb/243270
> This article http://support.microsoft.com/kb/898060/ suggests using a tool
> like this to help troubleshoot....
> "There may be some other similar scenarios where these symptoms occur.
> These scenarios can typically be diagnosed by sniffing the network traffic
> on either the source host side or on one of the intermediate network
> routers. If there are multiple ICMP destination unreachable messages sent
> over time for a destination, the source host that has the MS05-019
> security update or Windows Server 2003 SP1 installed is likely to have
> this problem. "
>
> Hope this helps.
>
> Coraleigh Miller
>
>
> "Adam Raff" <araff@newsgroup.nospam> wrote in message
> news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl...
>> Hi Coraleigh,
>>
>> Thank you for responding but if I am not mistaken if you install or have
>> installed 913446 that updated supersedes security update 893066. I have
>> 913446 installed on all my servers already.
>> I verified that which is way I added the sub note to let people know that
>> I checked this information.
>>
>> If I am wrong then please correct me. I will check the version number on
>> the TCP stack to see if it's that version or newer which I also assume
>> will be as good.
>>
>> I was hoping that somebody out there can read this error and the code
>> that goes with it and perhaps it points to a Mac address or something
>> like that. Is there a cheap way of sniffing around the network just to
>> get an idea to see if I am getting any of these errors listed in 898060?
>>
>> Thanks
>> Adam Raff
>>
>>
>> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
>> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
>>> Hi Adam,
>>>
>>> Some people have found that the Event ID you have is resolved by this
>>> Microsoft article... http://support.microsoft.com/kb/898060/
>>>
>>> Coraleigh Miller
>>>
>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
>>>> Sorry a little more info on this problem
>>>>
>>>> We are running a Windows 2003 SP1 network. Desktops are all windows XP
>>>> SP2. With all updated security patches on server and desktop side.
>>>>
>>>> I have also looked into KB913446 MS06-007 as this may lead to issues
>>>> with connectivity. All my servers have this update as well as a new
>>>> one that is also getting the errors as well.
>>>>
>>>> Thanks
>>>> Adam Raff
>>>>
>>>>
>>>>
>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
>>>>> Good Day,
>>>>>
>>>>> Over the few months we have been having an ongoing issue with the
>>>>> following error messages and they appear on all of our servers.
>>>>>
>>>>> Event Type: Warning
>>>>> Event Source: Srv
>>>>> Event Category: None
>>>>> Event ID: 2012
>>>>> Date: 8/17/2007
>>>>> Time: 2:18:26 AM
>>>>> User: N/A
>>>>> Computer: HSMAIN
>>>>> Description:
>>>>> While transmitting or receiving data, the server encountered a network
>>>>> error. Occassional errors are expected,
>>>>> but large amounts of these indicate a possible error in your network
>>>>> configuration.
>>>>> The error status code is contained within the returned data (formatted
>>>>> as Words) and may point you towards the problem.
>>>>>
>>>>> For more information, see Help and Support Center at
>>>>> http://go.microsoft.com/fwlink/events.asp.
>>>>> Data:
>>>>> 0000: 00040000 00540001 00000000 800007dc
>>>>> 0010: 00000000 c0000184 00000000 00000000
>>>>> 0020: 00000000 00000000 0000097a
>>>>>
>>>>>
>>>>> I have looked at this from so many ways but I can not find the point
>>>>> of the error. You see the problem goes away on weekends. We pretty
>>>>> much turn off all desktops but all servers and printer (network
>>>>> connected) and switches stay on. I thought that it was a desktop and
>>>>> checked over all the desktops and identified some that may have bad
>>>>> Nics. After fixing them I am still getting errors but again they
>>>>> disappear over the weekend.
>>>>>
>>>>> The error message says to look in the error code which may point me in
>>>>> the right direction but I can not make heads or tails out to the error
>>>>> message. If somebody knows how to read this and point me in the right
>>>>> direction it would be a great help.
>>>>>
>>>>> Thank You
>>>>> Adam Raff
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

Hi Adam,

I found that there is a new version of Network Monitor which is supposed to
be alittle nicer..
http://www.microsoft.com/downloads/d...DisplayLang=en

Microsoft has this article, which while it talks about the earlier version
of the program, may still help.. http://support.microsoft.com/kb/812953

This article walks you through a basic data capture..
http://www.windowsnetworking.com/art...tor-Part2.html

This is a technet blogsite featuring posts by an MS Network Monitor
expert...
http://blogs.technet.com/netmon/arch...-diogenes.aspx


Coraleigh



"Adam Raff" <araff@newsgroup.nospam> wrote in message
news:%238bE$TC5HHA.4476@TK2MSFTNGP06.phx.gbl...
> Coraleigh,
>
> Just installed it on my server. You wouldn't know a good place to get
> directions on how to use this program do you by chance?
>
> Adam Raff
>
>
> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
> news:%23LkEx1u4HHA.1992@TK2MSFTNGP03.phx.gbl...
>> Hi Adam,
>>
>> Have you tried using Network Monitor?
>> http://support.microsoft.com/kb/243270
>> This article http://support.microsoft.com/kb/898060/ suggests using a
>> tool like this to help troubleshoot....
>> "There may be some other similar scenarios where these symptoms occur.
>> These scenarios can typically be diagnosed by sniffing the network
>> traffic on either the source host side or on one of the intermediate
>> network routers. If there are multiple ICMP destination unreachable
>> messages sent over time for a destination, the source host that has the
>> MS05-019 security update or Windows Server 2003 SP1 installed is likely
>> to have this problem. "
>>
>> Hope this helps.
>>
>> Coraleigh Miller
>>
>>
>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>> news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl...
>>> Hi Coraleigh,
>>>
>>> Thank you for responding but if I am not mistaken if you install or have
>>> installed 913446 that updated supersedes security update 893066. I have
>>> 913446 installed on all my servers already.
>>> I verified that which is way I added the sub note to let people know
>>> that I checked this information.
>>>
>>> If I am wrong then please correct me. I will check the version number
>>> on the TCP stack to see if it's that version or newer which I also
>>> assume will be as good.
>>>
>>> I was hoping that somebody out there can read this error and the code
>>> that goes with it and perhaps it points to a Mac address or something
>>> like that. Is there a cheap way of sniffing around the network just to
>>> get an idea to see if I am getting any of these errors listed in 898060?
>>>
>>> Thanks
>>> Adam Raff
>>>
>>>
>>> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
>>> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
>>>> Hi Adam,
>>>>
>>>> Some people have found that the Event ID you have is resolved by this
>>>> Microsoft article... http://support.microsoft.com/kb/898060/
>>>>
>>>> Coraleigh Miller
>>>>
>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>>>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
>>>>> Sorry a little more info on this problem
>>>>>
>>>>> We are running a Windows 2003 SP1 network. Desktops are all windows
>>>>> XP SP2. With all updated security patches on server and desktop side.
>>>>>
>>>>> I have also looked into KB913446 MS06-007 as this may lead to issues
>>>>> with connectivity. All my servers have this update as well as a new
>>>>> one that is also getting the errors as well.
>>>>>
>>>>> Thanks
>>>>> Adam Raff
>>>>>
>>>>>
>>>>>
>>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>>>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
>>>>>> Good Day,
>>>>>>
>>>>>> Over the few months we have been having an ongoing issue with the
>>>>>> following error messages and they appear on all of our servers.
>>>>>>
>>>>>> Event Type: Warning
>>>>>> Event Source: Srv
>>>>>> Event Category: None
>>>>>> Event ID: 2012
>>>>>> Date: 8/17/2007
>>>>>> Time: 2:18:26 AM
>>>>>> User: N/A
>>>>>> Computer: HSMAIN
>>>>>> Description:
>>>>>> While transmitting or receiving data, the server encountered a
>>>>>> network error. Occassional errors are expected,
>>>>>> but large amounts of these indicate a possible error in your network
>>>>>> configuration.
>>>>>> The error status code is contained within the returned data
>>>>>> (formatted as Words) and may point you towards the problem.
>>>>>>
>>>>>> For more information, see Help and Support Center at
>>>>>> http://go.microsoft.com/fwlink/events.asp.
>>>>>> Data:
>>>>>> 0000: 00040000 00540001 00000000 800007dc
>>>>>> 0010: 00000000 c0000184 00000000 00000000
>>>>>> 0020: 00000000 00000000 0000097a
>>>>>>
>>>>>>
>>>>>> I have looked at this from so many ways but I can not find the point
>>>>>> of the error. You see the problem goes away on weekends. We pretty
>>>>>> much turn off all desktops but all servers and printer (network
>>>>>> connected) and switches stay on. I thought that it was a desktop and
>>>>>> checked over all the desktops and identified some that may have bad
>>>>>> Nics. After fixing them I am still getting errors but again they
>>>>>> disappear over the weekend.
>>>>>>
>>>>>> The error message says to look in the error code which may point me
>>>>>> in the right direction but I can not make heads or tails out to the
>>>>>> error message. If somebody knows how to read this and point me in the
>>>>>> right direction it would be a great help.
>>>>>>
>>>>>> Thank You
>>>>>> Adam Raff
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

Hi Adam,

I found some similar cases that related to the following registry key:
HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
Bind: REG_MULTI_SZ

In addition, I am not sure what symptoms you are encountering on the
server. If everything works fine, you can ignore this error.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
| From: "Adam Raff" <araff@newsgroup.nospam>
| References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
<#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
<eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
<#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
<h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>
| Subject: Re: Event SRV error 2012
| Date: Tue, 21 Aug 2007 14:42:03 -0400
| Lines: 200
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| X-RFC2646: Format=Flowed; Original
| Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>
| Newsgroups: microsoft.public.windows.server.general
| NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20147
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| Hi Ken
|
| Thanks for the feed back. Not sure why you pointed my to 317249 as I am
not
| getting 2021 or 2022 event errors. My errors are 2012.
|
| Now in that reg key what am I looking for. Can you give me an example by
| chance.
|
| Also all the errors disappear on the weekends so I do not think it's a
| server issue or something related in my server room as they are up 24x7.
If
| we have a long weekend no errors then as well. that is why I am hoping
that
| the return code that I am getting back from the error can point me some
| where.
|
| Adam Raff
|
| ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
| news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...
| > Hello Adam,
| >
| > Thank you for using newsgroup!
| >
| > Based on my research, this basically is an error that the network
driver
| > is
| > giving SRV on the send IRPs. First thing that I would see is if the
| > customer is running any 3rd party network software that is bound to the
| > server. You can see this by checking the following registry key.
| >
| > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
| > Bind: REG_MULTI_SZ
| >
| > 317249: How to troubleshoot Event ID 2021 and Event ID 2022
| > http://support.microsoft.com/kb/317249/en-us
| >
| > In addition, this may be caused due to a race between send and
disconnect.
| > The customer can ignore this error.
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
| > <http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| >
| >
| >
| > --------------------
| > | From: "Adam Raff" <araff@newsgroup.nospam>
| > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
| > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
| > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
| > | Subject: Re: Event SRV error 2012
| > | Date: Fri, 17 Aug 2007 17:29:35 -0400
| > | Lines: 99
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| > | X-RFC2646: Format=Flowed; Response
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
| > | Newsgroups: microsoft.public.windows.server.general
| > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128
| > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windows.server.general:19785
| > | X-Tomcat-NG: microsoft.public.windows.server.general
| > |
| > | Hi Coraleigh,
| > |
| > | Thank you for responding but if I am not mistaken if you install or
have
| > | installed 913446 that updated supersedes security update 893066. I
have
| > | 913446 installed on all my servers already.
| > | I verified that which is way I added the sub note to let people know
| > that
| > I
| > | checked this information.
| > |
| > | If I am wrong then please correct me. I will check the version
number
| > on
| > | the TCP stack to see if it's that version or newer which I also assume
| > will
| > | be as good.
| > |
| > | I was hoping that somebody out there can read this error and the code
| > that
| > | goes with it and perhaps it points to a Mac address or something like
| > that.
| > | Is there a cheap way of sniffing around the network just to get an
idea
| > to
| > | see if I am getting any of these errors listed in 898060?
| > |
| > | Thanks
| > | Adam Raff
| > |
| > |
| > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
| > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
| > | > Hi Adam,
| > | >
| > | > Some people have found that the Event ID you have is resolved by
this
| > | > Microsoft article... http://support.microsoft.com/kb/898060/
| > | >
| > | > Coraleigh Miller
| > | >
| > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message
| > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
| > | >> Sorry a little more info on this problem
| > | >>
| > | >> We are running a Windows 2003 SP1 network. Desktops are all
windows
| > XP
| > | >> SP2. With all updated security patches on server and desktop side.
| > | >>
| > | >> I have also looked into KB913446 MS06-007 as this may lead to
issues
| > with
| > | >> connectivity. All my servers have this update as well as a new one
| > that
| > | >> is also getting the errors as well.
| > | >>
| > | >> Thanks
| > | >> Adam Raff
| > | >>
| > | >>
| > | >>
| > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message
| > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
| > | >>> Good Day,
| > | >>>
| > | >>> Over the few months we have been having an ongoing issue with the
| > | >>> following error messages and they appear on all of our servers.
| > | >>>
| > | >>> Event Type: Warning
| > | >>> Event Source: Srv
| > | >>> Event Category: None
| > | >>> Event ID: 2012
| > | >>> Date: 8/17/2007
| > | >>> Time: 2:18:26 AM
| > | >>> User: N/A
| > | >>> Computer: HSMAIN
| > | >>> Description:
| > | >>> While transmitting or receiving data, the server encountered a
| > network
| > | >>> error. Occassional errors are expected,
| > | >>> but large amounts of these indicate a possible error in your
network
| > | >>> configuration.
| > | >>> The error status code is contained within the returned data
| > (formatted
| > | >>> as Words) and may point you towards the problem.
| > | >>>
| > | >>> For more information, see Help and Support Center at
| > | >>> http://go.microsoft.com/fwlink/events.asp.
| > | >>> Data:
| > | >>> 0000: 00040000 00540001 00000000 800007dc
| > | >>> 0010: 00000000 c0000184 00000000 00000000
| > | >>> 0020: 00000000 00000000 0000097a
| > | >>>
| > | >>>
| > | >>> I have looked at this from so many ways but I can not find the
point
| > of
| > | >>> the error. You see the problem goes away on weekends. We pretty
| > much
| > | >>> turn off all desktops but all servers and printer (network
| > connected)
| > | >>> and switches stay on. I thought that it was a desktop and checked
| > over
| > | >>> all the desktops and identified some that may have bad Nics.
After
| > | >>> fixing them I am still getting errors but again they disappear
over
| > the
| > | >>> weekend.
| > | >>>
| > | >>> The error message says to look in the error code which may point
me
| > in
| > | >>> the right direction but I can not make heads or tails out to the
| > error
| > | >>> message. If somebody knows how to read this and point me in the
| > right
| > | >>> direction it would be a great help.
| > | >>>
| > | >>> Thank You
| > | >>> Adam Raff
| > | >>>
| > | >>
| > | >>
| > | >
| > | >
| > |
| > |
| > |
| >
|
|
|

Coraleigh,

Thanks for your help, I did a brief capture with the old version that came
with 2003 and was it a lot of data of which made little or know sense. I
hope the new version is a little better.

I did not see the errors that the article was pointing to but I will use the
new version to see if I missed anything.

I will keep you posted in what I find out.

Thanks
Adam Raff


"Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
news:eDH1ItC5HHA.1184@TK2MSFTNGP04.phx.gbl...
> Hi Adam,
>
> I found that there is a new version of Network Monitor which is supposed
> to be alittle nicer..
> http://www.microsoft.com/downloads/d...DisplayLang=en
>
> Microsoft has this article, which while it talks about the earlier version
> of the program, may still help.. http://support.microsoft.com/kb/812953
>
> This article walks you through a basic data capture..
> http://www.windowsnetworking.com/art...tor-Part2.html
>
> This is a technet blogsite featuring posts by an MS Network Monitor
> expert...
> http://blogs.technet.com/netmon/arch...-diogenes.aspx
>
>
> Coraleigh
>
>
>
> "Adam Raff" <araff@newsgroup.nospam> wrote in message
> news:%238bE$TC5HHA.4476@TK2MSFTNGP06.phx.gbl...
>> Coraleigh,
>>
>> Just installed it on my server. You wouldn't know a good place to get
>> directions on how to use this program do you by chance?
>>
>> Adam Raff
>>
>>
>> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
>> news:%23LkEx1u4HHA.1992@TK2MSFTNGP03.phx.gbl...
>>> Hi Adam,
>>>
>>> Have you tried using Network Monitor?
>>> http://support.microsoft.com/kb/243270
>>> This article http://support.microsoft.com/kb/898060/ suggests using a
>>> tool like this to help troubleshoot....
>>> "There may be some other similar scenarios where these symptoms occur.
>>> These scenarios can typically be diagnosed by sniffing the network
>>> traffic on either the source host side or on one of the intermediate
>>> network routers. If there are multiple ICMP destination unreachable
>>> messages sent over time for a destination, the source host that has the
>>> MS05-019 security update or Windows Server 2003 SP1 installed is likely
>>> to have this problem. "
>>>
>>> Hope this helps.
>>>
>>> Coraleigh Miller
>>>
>>>
>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>>> news:%23IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl...
>>>> Hi Coraleigh,
>>>>
>>>> Thank you for responding but if I am not mistaken if you install or
>>>> have installed 913446 that updated supersedes security update 893066.
>>>> I have 913446 installed on all my servers already.
>>>> I verified that which is way I added the sub note to let people know
>>>> that I checked this information.
>>>>
>>>> If I am wrong then please correct me. I will check the version number
>>>> on the TCP stack to see if it's that version or newer which I also
>>>> assume will be as good.
>>>>
>>>> I was hoping that somebody out there can read this error and the code
>>>> that goes with it and perhaps it points to a Mac address or something
>>>> like that. Is there a cheap way of sniffing around the network just to
>>>> get an idea to see if I am getting any of these errors listed in
>>>> 898060?
>>>>
>>>> Thanks
>>>> Adam Raff
>>>>
>>>>
>>>> "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
>>>> news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
>>>>> Hi Adam,
>>>>>
>>>>> Some people have found that the Event ID you have is resolved by this
>>>>> Microsoft article... http://support.microsoft.com/kb/898060/
>>>>>
>>>>> Coraleigh Miller
>>>>>
>>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>>>>> news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
>>>>>> Sorry a little more info on this problem
>>>>>>
>>>>>> We are running a Windows 2003 SP1 network. Desktops are all windows
>>>>>> XP SP2. With all updated security patches on server and desktop side.
>>>>>>
>>>>>> I have also looked into KB913446 MS06-007 as this may lead to issues
>>>>>> with connectivity. All my servers have this update as well as a new
>>>>>> one that is also getting the errors as well.
>>>>>>
>>>>>> Thanks
>>>>>> Adam Raff
>>>>>>
>>>>>>
>>>>>>
>>>>>> "Adam Raff" <araff@newsgroup.nospam> wrote in message
>>>>>> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
>>>>>>> Good Day,
>>>>>>>
>>>>>>> Over the few months we have been having an ongoing issue with the
>>>>>>> following error messages and they appear on all of our servers.
>>>>>>>
>>>>>>> Event Type: Warning
>>>>>>> Event Source: Srv
>>>>>>> Event Category: None
>>>>>>> Event ID: 2012
>>>>>>> Date: 8/17/2007
>>>>>>> Time: 2:18:26 AM
>>>>>>> User: N/A
>>>>>>> Computer: HSMAIN
>>>>>>> Description:
>>>>>>> While transmitting or receiving data, the server encountered a
>>>>>>> network error. Occassional errors are expected,
>>>>>>> but large amounts of these indicate a possible error in your network
>>>>>>> configuration.
>>>>>>> The error status code is contained within the returned data
>>>>>>> (formatted as Words) and may point you towards the problem.
>>>>>>>
>>>>>>> For more information, see Help and Support Center at
>>>>>>> http://go.microsoft.com/fwlink/events.asp.
>>>>>>> Data:
>>>>>>> 0000: 00040000 00540001 00000000 800007dc
>>>>>>> 0010: 00000000 c0000184 00000000 00000000
>>>>>>> 0020: 00000000 00000000 0000097a
>>>>>>>
>>>>>>>
>>>>>>> I have looked at this from so many ways but I can not find the point
>>>>>>> of the error. You see the problem goes away on weekends. We pretty
>>>>>>> much turn off all desktops but all servers and printer (network
>>>>>>> connected) and switches stay on. I thought that it was a desktop
>>>>>>> and checked over all the desktops and identified some that may have
>>>>>>> bad Nics. After fixing them I am still getting errors but again
>>>>>>> they disappear over the weekend.
>>>>>>>
>>>>>>> The error message says to look in the error code which may point me
>>>>>>> in the right direction but I can not make heads or tails out to the
>>>>>>> error message. If somebody knows how to read this and point me in
>>>>>>> the right direction it would be a great help.
>>>>>>>
>>>>>>> Thank You
>>>>>>> Adam Raff
>>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

Hi Ken,

To be honest I am not sure what I am looking for when I look at these
setting in the registry. If you could give me an example that would be
great.

I am getting a lot of errors and I just want to make sure that it's not the
network. I believe it's a computer or device but I am having a ton of
problems tracking the problem down. Since the issues seem to stop on
weekends, I would think it's a computer as we shut all the systems down on
Friday for the weekend (Servers, networked printers and the like stay on
including switches and routes). I am thinking that it may be a computer
hitting a bad port on a switch but this is above my head and not sure how to
trouble shoot this or how to go about find the problem. That is why I was
hoping that the codes in the event may point be in some direction as they
state that the error is there

The error status code is contained within the returned data
> | > (formatted
> | > | >>> as Words) and may point you towards the problem.

I was hoping that something in the error code could point be someplace. I
am planning on testing some systems over the weekend and leave them on to
see if I get any errors or not.

Thanks
Adam Raff

""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl...
> Hi Adam,
>
> I found some similar cases that related to the following registry key:
> HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
> Bind: REG_MULTI_SZ
>
> In addition, I am not sure what symptoms you are encountering on the
> server. If everything works fine, you can ignore this error.
>
> Thanks & Regards,
>
> Ken Zhao
>
> Microsoft Online Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> <http://www.microsoft.com/security>
> ====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>
>
>
> --------------------
> | From: "Adam Raff" <araff@newsgroup.nospam>
> | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
> <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
> <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>
> | Subject: Re: Event SRV error 2012
> | Date: Tue, 21 Aug 2007 14:42:03 -0400
> | Lines: 200
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
> | X-RFC2646: Format=Flowed; Original
> | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>
> | Newsgroups: microsoft.public.windows.server.general
> | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189
> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
> | Xref: TK2MSFTNGHUB02.phx.gbl
> microsoft.public.windows.server.general:20147
> | X-Tomcat-NG: microsoft.public.windows.server.general
> |
> | Hi Ken
> |
> | Thanks for the feed back. Not sure why you pointed my to 317249 as I am
> not
> | getting 2021 or 2022 event errors. My errors are 2012.
> |
> | Now in that reg key what am I looking for. Can you give me an example
> by
> | chance.
> |
> | Also all the errors disappear on the weekends so I do not think it's a
> | server issue or something related in my server room as they are up 24x7.
> If
> | we have a long weekend no errors then as well. that is why I am hoping
> that
> | the return code that I am getting back from the error can point me some
> | where.
> |
> | Adam Raff
> |
> | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
> | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...
> | > Hello Adam,
> | >
> | > Thank you for using newsgroup!
> | >
> | > Based on my research, this basically is an error that the network
> driver
> | > is
> | > giving SRV on the send IRPs. First thing that I would see is if the
> | > customer is running any 3rd party network software that is bound to
> the
> | > server. You can see this by checking the following registry key.
> | >
> | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
> | > Bind: REG_MULTI_SZ
> | >
> | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022
> | > http://support.microsoft.com/kb/317249/en-us
> | >
> | > In addition, this may be caused due to a race between send and
> disconnect.
> | > The customer can ignore this error.
> | >
> | > Thanks & Regards,
> | >
> | > Ken Zhao
> | >
> | > Microsoft Online Support
> | > Microsoft Global Technical Support Center
> | >
> | > Get Secure! - www.microsoft.com/security
> | > <http://www.microsoft.com/security>
> | > ====================================================
> | > When responding to posts, please "Reply to Group" via your newsreader
> so
> | > that others may learn and benefit from your issue.
> | > ====================================================
> | > This posting is provided "AS IS" with no warranties, and confers no
> | > rights.
> | >
> | >
> | >
> | >
> | > --------------------
> | > | From: "Adam Raff" <araff@newsgroup.nospam>
> | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
> | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
> | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
> | > | Subject: Re: Event SRV error 2012
> | > | Date: Fri, 17 Aug 2007 17:29:35 -0400
> | > | Lines: 99
> | > | X-Priority: 3
> | > | X-MSMail-Priority: Normal
> | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> | > | X-RFC2646: Format=Flowed; Response
> | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
> | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
> | > | Newsgroups: microsoft.public.windows.server.general
> | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128
> | > | Path:
> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
> | > | Xref: TK2MSFTNGHUB02.phx.gbl
> | > microsoft.public.windows.server.general:19785
> | > | X-Tomcat-NG: microsoft.public.windows.server.general
> | > |
> | > | Hi Coraleigh,
> | > |
> | > | Thank you for responding but if I am not mistaken if you install or
> have
> | > | installed 913446 that updated supersedes security update 893066. I
> have
> | > | 913446 installed on all my servers already.
> | > | I verified that which is way I added the sub note to let people know
> | > that
> | > I
> | > | checked this information.
> | > |
> | > | If I am wrong then please correct me. I will check the version
> number
> | > on
> | > | the TCP stack to see if it's that version or newer which I also
> assume
> | > will
> | > | be as good.
> | > |
> | > | I was hoping that somebody out there can read this error and the
> code
> | > that
> | > | goes with it and perhaps it points to a Mac address or something
> like
> | > that.
> | > | Is there a cheap way of sniffing around the network just to get an
> idea
> | > to
> | > | see if I am getting any of these errors listed in 898060?
> | > |
> | > | Thanks
> | > | Adam Raff
> | > |
> | > |
> | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
> | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
> | > | > Hi Adam,
> | > | >
> | > | > Some people have found that the Event ID you have is resolved by
> this
> | > | > Microsoft article... http://support.microsoft.com/kb/898060/
> | > | >
> | > | > Coraleigh Miller
> | > | >
> | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message
> | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
> | > | >> Sorry a little more info on this problem
> | > | >>
> | > | >> We are running a Windows 2003 SP1 network. Desktops are all
> windows
> | > XP
> | > | >> SP2. With all updated security patches on server and desktop
> side.
> | > | >>
> | > | >> I have also looked into KB913446 MS06-007 as this may lead to
> issues
> | > with
> | > | >> connectivity. All my servers have this update as well as a new
> one
> | > that
> | > | >> is also getting the errors as well.
> | > | >>
> | > | >> Thanks
> | > | >> Adam Raff
> | > | >>
> | > | >>
> | > | >>
> | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message
> | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
> | > | >>> Good Day,
> | > | >>>
> | > | >>> Over the few months we have been having an ongoing issue with
> the
> | > | >>> following error messages and they appear on all of our servers.
> | > | >>>
> | > | >>> Event Type: Warning
> | > | >>> Event Source: Srv
> | > | >>> Event Category: None
> | > | >>> Event ID: 2012
> | > | >>> Date: 8/17/2007
> | > | >>> Time: 2:18:26 AM
> | > | >>> User: N/A
> | > | >>> Computer: HSMAIN
> | > | >>> Description:
> | > | >>> While transmitting or receiving data, the server encountered a
> | > network
> | > | >>> error. Occassional errors are expected,
> | > | >>> but large amounts of these indicate a possible error in your
> network
> | > | >>> configuration.
> | > | >>> The error status code is contained within the returned data
> | > (formatted
> | > | >>> as Words) and may point you towards the problem.
> | > | >>>
> | > | >>> For more information, see Help and Support Center at
> | > | >>> http://go.microsoft.com/fwlink/events.asp.
> | > | >>> Data:
> | > | >>> 0000: 00040000 00540001 00000000 800007dc
> | > | >>> 0010: 00000000 c0000184 00000000 00000000
> | > | >>> 0020: 00000000 00000000 0000097a
> | > | >>>
> | > | >>>
> | > | >>> I have looked at this from so many ways but I can not find the
> point
> | > of
> | > | >>> the error. You see the problem goes away on weekends. We
> pretty
> | > much
> | > | >>> turn off all desktops but all servers and printer (network
> | > connected)
> | > | >>> and switches stay on. I thought that it was a desktop and
> checked
> | > over
> | > | >>> all the desktops and identified some that may have bad Nics.
> After
> | > | >>> fixing them I am still getting errors but again they disappear
> over
> | > the
> | > | >>> weekend.
> | > | >>>
> | > | >>> The error message says to look in the error code which may point
> me
> | > in
> | > | >>> the right direction but I can not make heads or tails out to the
> | > error
> | > | >>> message. If somebody knows how to read this and point me in the
> | > right
> | > | >>> direction it would be a great help.
> | > | >>>
> | > | >>> Thank You
> | > | >>> Adam Raff
> | > | >>>
> | > | >>
> | > | >>
> | > | >
> | > | >
> | > |
> | > |
> | > |
> | >
> |
> |
> |
>

Hi Adam,

Actually, this event error may be caused by more reasons. Could you let us
know what symptoms you are encountering on the server? What issues are
occurring when the event error is logged?

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
| From: "Adam Raff" <araff@newsgroup.nospam>
| References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
<#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
<eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
<#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
<h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>
<eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>
<#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>
| Subject: Re: Event SRV error 2012
| Date: Thu, 23 Aug 2007 11:56:44 -0400
| Lines: 315
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| X-RFC2646: Format=Flowed; Original
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>
| Newsgroups: microsoft.public.windows.server.general
| NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20380
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| Hi Ken,
|
| To be honest I am not sure what I am looking for when I look at these
| setting in the registry. If you could give me an example that would be
| great.
|
| I am getting a lot of errors and I just want to make sure that it's not
the
| network. I believe it's a computer or device but I am having a ton of
| problems tracking the problem down. Since the issues seem to stop on
| weekends, I would think it's a computer as we shut all the systems down
on
| Friday for the weekend (Servers, networked printers and the like stay on
| including switches and routes). I am thinking that it may be a computer
| hitting a bad port on a switch but this is above my head and not sure how
to
| trouble shoot this or how to go about find the problem. That is why I
was
| hoping that the codes in the event may point be in some direction as they
| state that the error is there
|
| The error status code is contained within the returned data
| > | > (formatted
| > | > | >>> as Words) and may point you towards the problem.
|
| I was hoping that something in the error code could point be someplace.
I
| am planning on testing some systems over the weekend and leave them on to
| see if I get any errors or not.
|
| Thanks
| Adam Raff
|
| ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
| news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl...
| > Hi Adam,
| >
| > I found some similar cases that related to the following registry key:
| > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
| > Bind: REG_MULTI_SZ
| >
| > In addition, I am not sure what symptoms you are encountering on the
| > server. If everything works fine, you can ignore this error.
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
| > <http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| >
| >
| >
| >
| > --------------------
| > | From: "Adam Raff" <araff@newsgroup.nospam>
| > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
| > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
| > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
| > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
| > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>
| > | Subject: Re: Event SRV error 2012
| > | Date: Tue, 21 Aug 2007 14:42:03 -0400
| > | Lines: 200
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| > | X-RFC2646: Format=Flowed; Original
| > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>
| > | Newsgroups: microsoft.public.windows.server.general
| > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net
208.39.138.189
| > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windows.server.general:20147
| > | X-Tomcat-NG: microsoft.public.windows.server.general
| > |
| > | Hi Ken
| > |
| > | Thanks for the feed back. Not sure why you pointed my to 317249 as I
am
| > not
| > | getting 2021 or 2022 event errors. My errors are 2012.
| > |
| > | Now in that reg key what am I looking for. Can you give me an
example
| > by
| > | chance.
| > |
| > | Also all the errors disappear on the weekends so I do not think it's a
| > | server issue or something related in my server room as they are up
24x7.
| > If
| > | we have a long weekend no errors then as well. that is why I am
hoping
| > that
| > | the return code that I am getting back from the error can point me
some
| > | where.
| > |
| > | Adam Raff
| > |
| > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
| > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...
| > | > Hello Adam,
| > | >
| > | > Thank you for using newsgroup!
| > | >
| > | > Based on my research, this basically is an error that the network
| > driver
| > | > is
| > | > giving SRV on the send IRPs. First thing that I would see is if the
| > | > customer is running any 3rd party network software that is bound to
| > the
| > | > server. You can see this by checking the following registry key.
| > | >
| > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
| > | > Bind: REG_MULTI_SZ
| > | >
| > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022
| > | > http://support.microsoft.com/kb/317249/en-us
| > | >
| > | > In addition, this may be caused due to a race between send and
| > disconnect.
| > | > The customer can ignore this error.
| > | >
| > | > Thanks & Regards,
| > | >
| > | > Ken Zhao
| > | >
| > | > Microsoft Online Support
| > | > Microsoft Global Technical Support Center
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | > <http://www.microsoft.com/security>
| > | > ====================================================
| > | > When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > that others may learn and benefit from your issue.
| > | > ====================================================
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > | > rights.
| > | >
| > | >
| > | >
| > | >
| > | > --------------------
| > | > | From: "Adam Raff" <araff@newsgroup.nospam>
| > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
| > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
| > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
| > | > | Subject: Re: Event SRV error 2012
| > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400
| > | > | Lines: 99
| > | > | X-Priority: 3
| > | > | X-MSMail-Priority: Normal
| > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| > | > | X-RFC2646: Format=Flowed; Response
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
| > | > | Newsgroups: microsoft.public.windows.server.general
| > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128
| > | > | Path:
| > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| > | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > | > microsoft.public.windows.server.general:19785
| > | > | X-Tomcat-NG: microsoft.public.windows.server.general
| > | > |
| > | > | Hi Coraleigh,
| > | > |
| > | > | Thank you for responding but if I am not mistaken if you install
or
| > have
| > | > | installed 913446 that updated supersedes security update 893066.
I
| > have
| > | > | 913446 installed on all my servers already.
| > | > | I verified that which is way I added the sub note to let people
know
| > | > that
| > | > I
| > | > | checked this information.
| > | > |
| > | > | If I am wrong then please correct me. I will check the version
| > number
| > | > on
| > | > | the TCP stack to see if it's that version or newer which I also
| > assume
| > | > will
| > | > | be as good.
| > | > |
| > | > | I was hoping that somebody out there can read this error and the
| > code
| > | > that
| > | > | goes with it and perhaps it points to a Mac address or something
| > like
| > | > that.
| > | > | Is there a cheap way of sniffing around the network just to get an
| > idea
| > | > to
| > | > | see if I am getting any of these errors listed in 898060?
| > | > |
| > | > | Thanks
| > | > | Adam Raff
| > | > |
| > | > |
| > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
| > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
| > | > | > Hi Adam,
| > | > | >
| > | > | > Some people have found that the Event ID you have is resolved by
| > this
| > | > | > Microsoft article... http://support.microsoft.com/kb/898060/
| > | > | >
| > | > | > Coraleigh Miller
| > | > | >
| > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message
| > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
| > | > | >> Sorry a little more info on this problem
| > | > | >>
| > | > | >> We are running a Windows 2003 SP1 network. Desktops are all
| > windows
| > | > XP
| > | > | >> SP2. With all updated security patches on server and desktop
| > side.
| > | > | >>
| > | > | >> I have also looked into KB913446 MS06-007 as this may lead to
| > issues
| > | > with
| > | > | >> connectivity. All my servers have this update as well as a
new
| > one
| > | > that
| > | > | >> is also getting the errors as well.
| > | > | >>
| > | > | >> Thanks
| > | > | >> Adam Raff
| > | > | >>
| > | > | >>
| > | > | >>
| > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message
| > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
| > | > | >>> Good Day,
| > | > | >>>
| > | > | >>> Over the few months we have been having an ongoing issue with
| > the
| > | > | >>> following error messages and they appear on all of our
servers.
| > | > | >>>
| > | > | >>> Event Type: Warning
| > | > | >>> Event Source: Srv
| > | > | >>> Event Category: None
| > | > | >>> Event ID: 2012
| > | > | >>> Date: 8/17/2007
| > | > | >>> Time: 2:18:26 AM
| > | > | >>> User: N/A
| > | > | >>> Computer: HSMAIN
| > | > | >>> Description:
| > | > | >>> While transmitting or receiving data, the server encountered a
| > | > network
| > | > | >>> error. Occassional errors are expected,
| > | > | >>> but large amounts of these indicate a possible error in your
| > network
| > | > | >>> configuration.
| > | > | >>> The error status code is contained within the returned data
| > | > (formatted
| > | > | >>> as Words) and may point you towards the problem.
| > | > | >>>
| > | > | >>> For more information, see Help and Support Center at
| > | > | >>> http://go.microsoft.com/fwlink/events.asp.
| > | > | >>> Data:
| > | > | >>> 0000: 00040000 00540001 00000000 800007dc
| > | > | >>> 0010: 00000000 c0000184 00000000 00000000
| > | > | >>> 0020: 00000000 00000000 0000097a
| > | > | >>>
| > | > | >>>
| > | > | >>> I have looked at this from so many ways but I can not find the
| > point
| > | > of
| > | > | >>> the error. You see the problem goes away on weekends. We
| > pretty
| > | > much
| > | > | >>> turn off all desktops but all servers and printer (network
| > | > connected)
| > | > | >>> and switches stay on. I thought that it was a desktop and
| > checked
| > | > over
| > | > | >>> all the desktops and identified some that may have bad Nics.
| > After
| > | > | >>> fixing them I am still getting errors but again they disappear
| > over
| > | > the
| > | > | >>> weekend.
| > | > | >>>
| > | > | >>> The error message says to look in the error code which may
point
| > me
| > | > in
| > | > | >>> the right direction but I can not make heads or tails out to
the
| > | > error
| > | > | >>> message. If somebody knows how to read this and point me in
the
| > | > right
| > | > | >>> direction it would be a great help.
| > | > | >>>
| > | > | >>> Thank You
| > | > | >>> Adam Raff
| > | > | >>>
| > | > | >>
| > | > | >>
| > | > | >
| > | > | >
| > | > |
| > | > |
| > | > |
| > | >
| > |
| > |
| > |
| >
|
|
|

Hi Ken,

From what I can see nothing seems to be affecting the network but I am
getting some people complaining that the network seems slow. Not sure if it
is related or not.

Just to give you more info. I have already updated the nic drivers on one
of the servers to see if that helps. No luck there as well. I am trying to
power systems down at night but what I can tell the problem is still there.
It seems that I have to do it my trial and error.

Adam


""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
news:KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl...
> Hi Adam,
>
> Actually, this event error may be caused by more reasons. Could you let us
> know what symptoms you are encountering on the server? What issues are
> occurring when the event error is logged?
>
> Thanks & Regards,
>
> Ken Zhao
>
> Microsoft Online Support
> Microsoft Global Technical Support Center
>
> Get Secure! - www.microsoft.com/security
> <http://www.microsoft.com/security>
> ====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ====================================================
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>
>
>
> --------------------
> | From: "Adam Raff" <araff@newsgroup.nospam>
> | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
> <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
> <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
> <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
> <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>
> <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>
> <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>
> | Subject: Re: Event SRV error 2012
> | Date: Thu, 23 Aug 2007 11:56:44 -0400
> | Lines: 315
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> | X-RFC2646: Format=Flowed; Original
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
> | Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>
> | Newsgroups: microsoft.public.windows.server.general
> | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net 208.39.138.189
> | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
> | Xref: TK2MSFTNGHUB02.phx.gbl
> microsoft.public.windows.server.general:20380
> | X-Tomcat-NG: microsoft.public.windows.server.general
> |
> | Hi Ken,
> |
> | To be honest I am not sure what I am looking for when I look at these
> | setting in the registry. If you could give me an example that would be
> | great.
> |
> | I am getting a lot of errors and I just want to make sure that it's not
> the
> | network. I believe it's a computer or device but I am having a ton of
> | problems tracking the problem down. Since the issues seem to stop on
> | weekends, I would think it's a computer as we shut all the systems down
> on
> | Friday for the weekend (Servers, networked printers and the like stay on
> | including switches and routes). I am thinking that it may be a computer
> | hitting a bad port on a switch but this is above my head and not sure
> how
> to
> | trouble shoot this or how to go about find the problem. That is why I
> was
> | hoping that the codes in the event may point be in some direction as
> they
> | state that the error is there
> |
> | The error status code is contained within the returned data
> | > | > (formatted
> | > | > | >>> as Words) and may point you towards the problem.
> |
> | I was hoping that something in the error code could point be someplace.
> I
> | am planning on testing some systems over the weekend and leave them on
> to
> | see if I get any errors or not.
> |
> | Thanks
> | Adam Raff
> |
> | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
> | news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl...
> | > Hi Adam,
> | >
> | > I found some similar cases that related to the following registry key:
> | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
> | > Bind: REG_MULTI_SZ
> | >
> | > In addition, I am not sure what symptoms you are encountering on the
> | > server. If everything works fine, you can ignore this error.
> | >
> | > Thanks & Regards,
> | >
> | > Ken Zhao
> | >
> | > Microsoft Online Support
> | > Microsoft Global Technical Support Center
> | >
> | > Get Secure! - www.microsoft.com/security
> | > <http://www.microsoft.com/security>
> | > ====================================================
> | > When responding to posts, please "Reply to Group" via your newsreader
> so
> | > that others may learn and benefit from your issue.
> | > ====================================================
> | > This posting is provided "AS IS" with no warranties, and confers no
> | > rights.
> | >
> | >
> | >
> | >
> | >
> | > --------------------
> | > | From: "Adam Raff" <araff@newsgroup.nospam>
> | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
> | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
> | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
> | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
> | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>
> | > | Subject: Re: Event SRV error 2012
> | > | Date: Tue, 21 Aug 2007 14:42:03 -0400
> | > | Lines: 200
> | > | X-Priority: 3
> | > | X-MSMail-Priority: Normal
> | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
> | > | X-RFC2646: Format=Flowed; Original
> | > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>
> | > | Newsgroups: microsoft.public.windows.server.general
> | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net
> 208.39.138.189
> | > | Path:
> TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
> | > | Xref: TK2MSFTNGHUB02.phx.gbl
> | > microsoft.public.windows.server.general:20147
> | > | X-Tomcat-NG: microsoft.public.windows.server.general
> | > |
> | > | Hi Ken
> | > |
> | > | Thanks for the feed back. Not sure why you pointed my to 317249 as
> I
> am
> | > not
> | > | getting 2021 or 2022 event errors. My errors are 2012.
> | > |
> | > | Now in that reg key what am I looking for. Can you give me an
> example
> | > by
> | > | chance.
> | > |
> | > | Also all the errors disappear on the weekends so I do not think it's
> a
> | > | server issue or something related in my server room as they are up
> 24x7.
> | > If
> | > | we have a long weekend no errors then as well. that is why I am
> hoping
> | > that
> | > | the return code that I am getting back from the error can point me
> some
> | > | where.
> | > |
> | > | Adam Raff
> | > |
> | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
> | > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...
> | > | > Hello Adam,
> | > | >
> | > | > Thank you for using newsgroup!
> | > | >
> | > | > Based on my research, this basically is an error that the network
> | > driver
> | > | > is
> | > | > giving SRV on the send IRPs. First thing that I would see is if
> the
> | > | > customer is running any 3rd party network software that is bound
> to
> | > the
> | > | > server. You can see this by checking the following registry key.
> | > | >
> | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
> | > | > Bind: REG_MULTI_SZ
> | > | >
> | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022
> | > | > http://support.microsoft.com/kb/317249/en-us
> | > | >
> | > | > In addition, this may be caused due to a race between send and
> | > disconnect.
> | > | > The customer can ignore this error.
> | > | >
> | > | > Thanks & Regards,
> | > | >
> | > | > Ken Zhao
> | > | >
> | > | > Microsoft Online Support
> | > | > Microsoft Global Technical Support Center
> | > | >
> | > | > Get Secure! - www.microsoft.com/security
> | > | > <http://www.microsoft.com/security>
> | > | > ====================================================
> | > | > When responding to posts, please "Reply to Group" via your
> newsreader
> | > so
> | > | > that others may learn and benefit from your issue.
> | > | > ====================================================
> | > | > This posting is provided "AS IS" with no warranties, and confers
> no
> | > | > rights.
> | > | >
> | > | >
> | > | >
> | > | >
> | > | > --------------------
> | > | > | From: "Adam Raff" <araff@newsgroup.nospam>
> | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
> | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
> | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
> | > | > | Subject: Re: Event SRV error 2012
> | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400
> | > | > | Lines: 99
> | > | > | X-Priority: 3
> | > | > | X-MSMail-Priority: Normal
> | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
> | > | > | X-RFC2646: Format=Flowed; Response
> | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
> | > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
> | > | > | Newsgroups: microsoft.public.windows.server.general
> | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128
> | > | > | Path:
> | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
> | > | > | Xref: TK2MSFTNGHUB02.phx.gbl
> | > | > microsoft.public.windows.server.general:19785
> | > | > | X-Tomcat-NG: microsoft.public.windows.server.general
> | > | > |
> | > | > | Hi Coraleigh,
> | > | > |
> | > | > | Thank you for responding but if I am not mistaken if you install
> or
> | > have
> | > | > | installed 913446 that updated supersedes security update 893066.
> I
> | > have
> | > | > | 913446 installed on all my servers already.
> | > | > | I verified that which is way I added the sub note to let people
> know
> | > | > that
> | > | > I
> | > | > | checked this information.
> | > | > |
> | > | > | If I am wrong then please correct me. I will check the version
> | > number
> | > | > on
> | > | > | the TCP stack to see if it's that version or newer which I also
> | > assume
> | > | > will
> | > | > | be as good.
> | > | > |
> | > | > | I was hoping that somebody out there can read this error and the
> | > code
> | > | > that
> | > | > | goes with it and perhaps it points to a Mac address or something
> | > like
> | > | > that.
> | > | > | Is there a cheap way of sniffing around the network just to get
> an
> | > idea
> | > | > to
> | > | > | see if I am getting any of these errors listed in 898060?
> | > | > |
> | > | > | Thanks
> | > | > | Adam Raff
> | > | > |
> | > | > |
> | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in message
> | > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
> | > | > | > Hi Adam,
> | > | > | >
> | > | > | > Some people have found that the Event ID you have is resolved
> by
> | > this
> | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/
> | > | > | >
> | > | > | > Coraleigh Miller
> | > | > | >
> | > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message
> | > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
> | > | > | >> Sorry a little more info on this problem
> | > | > | >>
> | > | > | >> We are running a Windows 2003 SP1 network. Desktops are all
> | > windows
> | > | > XP
> | > | > | >> SP2. With all updated security patches on server and desktop
> | > side.
> | > | > | >>
> | > | > | >> I have also looked into KB913446 MS06-007 as this may lead to
> | > issues
> | > | > with
> | > | > | >> connectivity. All my servers have this update as well as a
> new
> | > one
> | > | > that
> | > | > | >> is also getting the errors as well.
> | > | > | >>
> | > | > | >> Thanks
> | > | > | >> Adam Raff
> | > | > | >>
> | > | > | >>
> | > | > | >>
> | > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message
> | > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
> | > | > | >>> Good Day,
> | > | > | >>>
> | > | > | >>> Over the few months we have been having an ongoing issue
> with
> | > the
> | > | > | >>> following error messages and they appear on all of our
> servers.
> | > | > | >>>
> | > | > | >>> Event Type: Warning
> | > | > | >>> Event Source: Srv
> | > | > | >>> Event Category: None
> | > | > | >>> Event ID: 2012
> | > | > | >>> Date: 8/17/2007
> | > | > | >>> Time: 2:18:26 AM
> | > | > | >>> User: N/A
> | > | > | >>> Computer: HSMAIN
> | > | > | >>> Description:
> | > | > | >>> While transmitting or receiving data, the server encountered
> a
> | > | > network
> | > | > | >>> error. Occassional errors are expected,
> | > | > | >>> but large amounts of these indicate a possible error in your
> | > network
> | > | > | >>> configuration.
> | > | > | >>> The error status code is contained within the returned data
> | > | > (formatted
> | > | > | >>> as Words) and may point you towards the problem.
> | > | > | >>>
> | > | > | >>> For more information, see Help and Support Center at
> | > | > | >>> http://go.microsoft.com/fwlink/events.asp.
> | > | > | >>> Data:
> | > | > | >>> 0000: 00040000 00540001 00000000 800007dc
> | > | > | >>> 0010: 00000000 c0000184 00000000 00000000
> | > | > | >>> 0020: 00000000 00000000 0000097a
> | > | > | >>>
> | > | > | >>>
> | > | > | >>> I have looked at this from so many ways but I can not find
> the
> | > point
> | > | > of
> | > | > | >>> the error. You see the problem goes away on weekends. We
> | > pretty
> | > | > much
> | > | > | >>> turn off all desktops but all servers and printer (network
> | > | > connected)
> | > | > | >>> and switches stay on. I thought that it was a desktop and
> | > checked
> | > | > over
> | > | > | >>> all the desktops and identified some that may have bad Nics.
> | > After
> | > | > | >>> fixing them I am still getting errors but again they
> disappear
> | > over
> | > | > the
> | > | > | >>> weekend.
> | > | > | >>>
> | > | > | >>> The error message says to look in the error code which may
> point
> | > me
> | > | > in
> | > | > | >>> the right direction but I can not make heads or tails out to
> the
> | > | > error
> | > | > | >>> message. If somebody knows how to read this and point me in
> the
> | > | > right
> | > | > | >>> direction it would be a great help.
> | > | > | >>>
> | > | > | >>> Thank You
> | > | > | >>> Adam Raff
> | > | > | >>>
> | > | > | >>
> | > | > | >>
> | > | > | >
> | > | > | >
> | > | > |
> | > | > |
> | > | > |
> | > | >
> | > |
> | > |
> | > |
> | >
> |
> |
> |
>

Hello Adam,

The only issue is network slow?

Please understand performance issues can be difficult to troubleshoot and
resolve in a newsgroup setting due to the number of variables and the
amount of time required to narrow down possible causes and observe the
effects.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
| From: "Adam Raff" <araff@newsgroup.nospam>
| References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
<#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
<eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
<#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
<h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>
<eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>
<#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>
<uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>
<KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl>
| Subject: Re: Event SRV error 2012
| Date: Tue, 28 Aug 2007 23:03:51 -0400
| Lines: 422
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| X-RFC2646: Format=Flowed; Original
| Message-ID: <#nRb3ke6HHA.2208@TK2MSFTNGP06.phx.gbl>
| Newsgroups: microsoft.public.windows.server.general
| NNTP-Posting-Host: ool-45733380.dyn.optonline.net 69.115.51.128
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.general:20868
| X-Tomcat-NG: microsoft.public.windows.server.general
|
| Hi Ken,
|
| From what I can see nothing seems to be affecting the network but I am
| getting some people complaining that the network seems slow. Not sure if
it
| is related or not.
|
| Just to give you more info. I have already updated the nic drivers on
one
| of the servers to see if that helps. No luck there as well. I am trying
to
| power systems down at night but what I can tell the problem is still
there.
| It seems that I have to do it my trial and error.
|
| Adam
|
|
| ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
| news:KOmjUDJ6HHA.6140@TK2MSFTNGHUB02.phx.gbl...
| > Hi Adam,
| >
| > Actually, this event error may be caused by more reasons. Could you let
us
| > know what symptoms you are encountering on the server? What issues are
| > occurring when the event error is logged?
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Support
| > Microsoft Global Technical Support Center
| >
| > Get Secure! - www.microsoft.com/security
| > <http://www.microsoft.com/security>
| > ====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > ====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| >
| >
| >
| >
| >
| > --------------------
| > | From: "Adam Raff" <araff@newsgroup.nospam>
| > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
| > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
| > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
| > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
| > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>
| > <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>
| > <#2rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl>
| > | Subject: Re: Event SRV error 2012
| > | Date: Thu, 23 Aug 2007 11:56:44 -0400
| > | Lines: 315
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| > | X-RFC2646: Format=Flowed; Original
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| > | Message-ID: <uifn14Z5HHA.4928@TK2MSFTNGP05.phx.gbl>
| > | Newsgroups: microsoft.public.windows.server.general
| > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net
208.39.138.189
| > | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl
| > | Xref: TK2MSFTNGHUB02.phx.gbl
| > microsoft.public.windows.server.general:20380
| > | X-Tomcat-NG: microsoft.public.windows.server.general
| > |
| > | Hi Ken,
| > |
| > | To be honest I am not sure what I am looking for when I look at these
| > | setting in the registry. If you could give me an example that would
be
| > | great.
| > |
| > | I am getting a lot of errors and I just want to make sure that it's
not
| > the
| > | network. I believe it's a computer or device but I am having a ton of
| > | problems tracking the problem down. Since the issues seem to stop on
| > | weekends, I would think it's a computer as we shut all the systems
down
| > on
| > | Friday for the weekend (Servers, networked printers and the like stay
on
| > | including switches and routes). I am thinking that it may be a
computer
| > | hitting a bad port on a switch but this is above my head and not sure
| > how
| > to
| > | trouble shoot this or how to go about find the problem. That is why I
| > was
| > | hoping that the codes in the event may point be in some direction as
| > they
| > | state that the error is there
| > |
| > | The error status code is contained within the returned data
| > | > | > (formatted
| > | > | > | >>> as Words) and may point you towards the problem.
| > |
| > | I was hoping that something in the error code could point be
someplace.
| > I
| > | am planning on testing some systems over the weekend and leave them
on
| > to
| > | see if I get any errors or not.
| > |
| > | Thanks
| > | Adam Raff
| > |
| > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in message
| > | news:%232rLzEL5HHA.2340@TK2MSFTNGHUB02.phx.gbl...
| > | > Hi Adam,
| > | >
| > | > I found some similar cases that related to the following registry
key:
| > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
| > | > Bind: REG_MULTI_SZ
| > | >
| > | > In addition, I am not sure what symptoms you are encountering on the
| > | > server. If everything works fine, you can ignore this error.
| > | >
| > | > Thanks & Regards,
| > | >
| > | > Ken Zhao
| > | >
| > | > Microsoft Online Support
| > | > Microsoft Global Technical Support Center
| > | >
| > | > Get Secure! - www.microsoft.com/security
| > | > <http://www.microsoft.com/security>
| > | > ====================================================
| > | > When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > that others may learn and benefit from your issue.
| > | > ====================================================
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > | > rights.
| > | >
| > | >
| > | >
| > | >
| > | >
| > | > --------------------
| > | > | From: "Adam Raff" <araff@newsgroup.nospam>
| > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
| > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
| > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
| > | > <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
| > | > <h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl>
| > | > | Subject: Re: Event SRV error 2012
| > | > | Date: Tue, 21 Aug 2007 14:42:03 -0400
| > | > | Lines: 200
| > | > | X-Priority: 3
| > | > | X-MSMail-Priority: Normal
| > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| > | > | X-RFC2646: Format=Flowed; Original
| > | > | Message-ID: <eQmm4LC5HHA.4476@TK2MSFTNGP06.phx.gbl>
| > | > | Newsgroups: microsoft.public.windows.server.general
| > | > | NNTP-Posting-Host: 208-39-138-189.isp.comcastbusiness.net
| > 208.39.138.189
| > | > | Path:
| > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP06.phx.gbl
| > | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > | > microsoft.public.windows.server.general:20147
| > | > | X-Tomcat-NG: microsoft.public.windows.server.general
| > | > |
| > | > | Hi Ken
| > | > |
| > | > | Thanks for the feed back. Not sure why you pointed my to 317249
as
| > I
| > am
| > | > not
| > | > | getting 2021 or 2022 event errors. My errors are 2012.
| > | > |
| > | > | Now in that reg key what am I looking for. Can you give me an
| > example
| > | > by
| > | > | chance.
| > | > |
| > | > | Also all the errors disappear on the weekends so I do not think
it's
| > a
| > | > | server issue or something related in my server room as they are up
| > 24x7.
| > | > If
| > | > | we have a long weekend no errors then as well. that is why I am
| > hoping
| > | > that
| > | > | the return code that I am getting back from the error can point me
| > some
| > | > | where.
| > | > |
| > | > | Adam Raff
| > | > |
| > | > | ""Ken Zhao [MSFT]"" <v-kzhao@online.microsoft.com> wrote in
message
| > | > | news:h7unbou4HHA.4200@TK2MSFTNGHUB02.phx.gbl...
| > | > | > Hello Adam,
| > | > | >
| > | > | > Thank you for using newsgroup!
| > | > | >
| > | > | > Based on my research, this basically is an error that the
network
| > | > driver
| > | > | > is
| > | > | > giving SRV on the send IRPs. First thing that I would see is if
| > the
| > | > | > customer is running any 3rd party network software that is
bound
| > to
| > | > the
| > | > | > server. You can see this by checking the following registry key.
| > | > | >
| > | > | > HKLM\SYSTEM\CCS\Services\LanmanServer\Linkage
| > | > | > Bind: REG_MULTI_SZ
| > | > | >
| > | > | > 317249: How to troubleshoot Event ID 2021 and Event ID 2022
| > | > | > http://support.microsoft.com/kb/317249/en-us
| > | > | >
| > | > | > In addition, this may be caused due to a race between send and
| > | > disconnect.
| > | > | > The customer can ignore this error.
| > | > | >
| > | > | > Thanks & Regards,
| > | > | >
| > | > | > Ken Zhao
| > | > | >
| > | > | > Microsoft Online Support
| > | > | > Microsoft Global Technical Support Center
| > | > | >
| > | > | > Get Secure! - www.microsoft.com/security
| > | > | > <http://www.microsoft.com/security>
| > | > | > ====================================================
| > | > | > When responding to posts, please "Reply to Group" via your
| > newsreader
| > | > so
| > | > | > that others may learn and benefit from your issue.
| > | > | > ====================================================
| > | > | > This posting is provided "AS IS" with no warranties, and
confers
| > no
| > | > | > rights.
| > | > | >
| > | > | >
| > | > | >
| > | > | >
| > | > | > --------------------
| > | > | > | From: "Adam Raff" <araff@newsgroup.nospam>
| > | > | > | References: <Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl>
| > | > | > <#VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl>
| > | > | > <eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl>
| > | > | > | Subject: Re: Event SRV error 2012
| > | > | > | Date: Fri, 17 Aug 2007 17:29:35 -0400
| > | > | > | Lines: 99
| > | > | > | X-Priority: 3
| > | > | > | X-MSMail-Priority: Normal
| > | > | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.3138
| > | > | > | X-RFC2646: Format=Flowed; Response
| > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
| > | > | > | Message-ID: <#IUi3WR4HHA.4880@TK2MSFTNGP03.phx.gbl>
| > | > | > | Newsgroups: microsoft.public.windows.server.general
| > | > | > | NNTP-Posting-Host: ool-45733380.dyn.optonline.net
69.115.51.128
| > | > | > | Path:
| > | > TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| > | > | > | Xref: TK2MSFTNGHUB02.phx.gbl
| > | > | > microsoft.public.windows.server.general:19785
| > | > | > | X-Tomcat-NG: microsoft.public.windows.server.general
| > | > | > |
| > | > | > | Hi Coraleigh,
| > | > | > |
| > | > | > | Thank you for responding but if I am not mistaken if you
install
| > or
| > | > have
| > | > | > | installed 913446 that updated supersedes security update
893066.
| > I
| > | > have
| > | > | > | 913446 installed on all my servers already.
| > | > | > | I verified that which is way I added the sub note to let
people
| > know
| > | > | > that
| > | > | > I
| > | > | > | checked this information.
| > | > | > |
| > | > | > | If I am wrong then please correct me. I will check the
version
| > | > number
| > | > | > on
| > | > | > | the TCP stack to see if it's that version or newer which I
also
| > | > assume
| > | > | > will
| > | > | > | be as good.
| > | > | > |
| > | > | > | I was hoping that somebody out there can read this error and
the
| > | > code
| > | > | > that
| > | > | > | goes with it and perhaps it points to a Mac address or
something
| > | > like
| > | > | > that.
| > | > | > | Is there a cheap way of sniffing around the network just to
get
| > an
| > | > idea
| > | > | > to
| > | > | > | see if I am getting any of these errors listed in 898060?
| > | > | > |
| > | > | > | Thanks
| > | > | > | Adam Raff
| > | > | > |
| > | > | > |
| > | > | > | "Coraleigh Miller" <CoraleighMiller@yahoo.com> wrote in
message
| > | > | > | news:eBqMGeP4HHA.1208@TK2MSFTNGP03.phx.gbl...
| > | > | > | > Hi Adam,
| > | > | > | >
| > | > | > | > Some people have found that the Event ID you have is
resolved
| > by
| > | > this
| > | > | > | > Microsoft article... http://support.microsoft.com/kb/898060/
| > | > | > | >
| > | > | > | > Coraleigh Miller
| > | > | > | >
| > | > | > | > "Adam Raff" <araff@newsgroup.nospam> wrote in message
| > | > | > | > news:%23VLpidO4HHA.5424@TK2MSFTNGP02.phx.gbl...
| > | > | > | >> Sorry a little more info on this problem
| > | > | > | >>
| > | > | > | >> We are running a Windows 2003 SP1 network. Desktops are
all
| > | > windows
| > | > | > XP
| > | > | > | >> SP2. With all updated security patches on server and
desktop
| > | > side.
| > | > | > | >>
| > | > | > | >> I have also looked into KB913446 MS06-007 as this may lead
to
| > | > issues
| > | > | > with
| > | > | > | >> connectivity. All my servers have this update as well as a
| > new
| > | > one
| > | > | > that
| > | > | > | >> is also getting the errors as well.
| > | > | > | >>
| > | > | > | >> Thanks
| > | > | > | >> Adam Raff
| > | > | > | >>
| > | > | > | >>
| > | > | > | >>
| > | > | > | >> "Adam Raff" <araff@newsgroup.nospam> wrote in message
| > | > | > | >> news:Ovn8tUO4HHA.5212@TK2MSFTNGP04.phx.gbl...
| > | > | > | >>> Good Day,
| > | > | > | >>>
| > | > | > | >>> Over the few months we have been having an ongoing issue
| > with
| > | > the
| > | > | > | >>> following error messages and they appear on all of our
| > servers.
| > | > | > | >>>
| > | > | > | >>> Event Type: Warning
| > | > | > | >>> Event Source: Srv
| > | > | > | >>> Event Category: None
| > | > | > | >>> Event ID: 2012
| > | > | > | >>> Date: 8/17/2007
| > | > | > | >>> Time: 2:18:26 AM
| > | > | > | >>> User: N/A
| > | > | > | >>> Computer: HSMAIN
| > | > | > | >>> Description:
| > | > | > | >>> While transmitting or receiving data, the server
encountered
| > a
| > | > | > network
| > | > | > | >>> error. Occassional errors are expected,
| > | > | > | >>> but large amounts of these indicate a possible error in
your
| > | > network
| > | > | > | >>> configuration.
| > | > | > | >>> The error status code is contained within the returned
data
| > | > | > (formatted
| > | > | > | >>> as Words) and may point you towards the problem.
| > | > | > | >>>
| > | > | > | >>> For more information, see Help and Support Center at
| > | > | > | >>> http://go.microsoft.com/fwlink/events.asp.
| > | > | > | >>> Data:
| > | > | > | >>> 0000: 00040000 00540001 00000000 800007dc
| > | > | > | >>> 0010: 00000000 c0000184 00000000 00000000
| > | > | > | >>> 0020: 00000000 00000000 0000097a
| > | > | > | >>>
| > | > | > | >>>
| > | > | > | >>> I have looked at this from so many ways but I can not
find
| > the
| > | > point
| > | > | > of
| > | > | > | >>> the error. You see the problem goes away on weekends. We
| > | > pretty
| > | > | > much
| > | > | > | >>> turn off all desktops but all servers and printer (network
| > | > | > connected)
| > | > | > | >>> and switches stay on. I thought that it was a desktop and
| > | > checked
| > | > | > over
| > | > | > | >>> all the desktops and identified some that may have bad
Nics.
| > | > After
| > | > | > | >>> fixing them I am still getting errors but again they
| > disappear
| > | > over
| > | > | > the
| > | > | > | >>> weekend.
| > | > | > | >>>
| > | > | > | >>> The error message says to look in the error code which may
| > point
| > | > me
| > | > | > in
| > | > | > | >>> the right direction but I can not make heads or tails out
to
| > the
| > | > | > error
| > | > | > | >>> message. If somebody knows how to read this and point me
in
| > the
| > | > | > right
| > | > | > | >>> direction it would be a great help.
| > | > | > | >>>
| > | > | > | >>> Thank You
| > | > | > | >>> Adam Raff
| > | > | > | >>>
| > | > | > | >>
| > | > | > | >>
| > | > | > | >
| > | > | > | >
| > | > | > |
| > | > | > |
| > | > | > |
| > | > | >
| > | > |
| > | > |
| > | > |
| > | >
| > |
| > |
| > |
| >
|
|
|