Strange error in Event Log
I have found that there are literally thousands of the following errors on my servers: All the errors are as follows: Event Type: Error Event Source: Application Event Category: None Event ID: 0 Date: 6/15/2010 Time: 1:30:07 PM User: N/A Computer: ATL-IT-OPS-08 Description: The description for Event ID ( 0 ) in Source ( Application ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: The event log file is corrupt.. Data: 0000: 53 4f 43 4b 45 54 3a 20 SOCKET: 0008: 5b 31 30 2e 32 31 39 2e [10.219. 0010: 34 30 2e 31 35 37 2d 3e 40.157-> 0018: 31 30 2e 32 32 30 2e 32 10.220.2 0020: 36 2e 32 35 34 5d 20 43 6.254] C 0028: 6f 6e 6e 65 63 74 69 6f onnectio 0030: 6e 20 46 61 69 6c 65 64 n Failed 0038: 2e 20 28 2d 32 31 34 37 . (-2147 0040: 30 31 34 38 33 36 29 0a 014836). I am trying to isolate what they are and how to get rid of them or prevent them from occuring. I have searched the web for code -2147014836 and turned up a couple of good hits but nothing I can use. Any assistance would be appreciated
June 15th, 2010 9:45pm

SOCKET: [10.219.40.157->10.220.26.254] Connection Failed (-2147014836). The error lookup tool returns 60 errors looking for this error, but nothing really telling (I have posted them below). When you look at it with the reliability and performance monitor, are there any errors reported by the Network Interface\Packets Outbound Errors or Packets Received Errors Counter? It is possible that there may be a hardware issue with the system or a network device. Do the errors appear on both systems involved with the connection? Also, are there any problems with memory on the system? -------------Output of err.exe---------------- C:\Users\Administrator\Desktop\Err>err -2147014836 # for hex 0x1 / decimal 1 : BTH_ERROR_UNKNOWN_HCI_COMMAND bthdef.h APC_INDEX_MISMATCH bugcodes.h CDERR_STRUCTSIZE cderr.h EVENT_MSCEP_LOADED ceplog.mc # SCEP Add-on is successfully loaded and initialized. MSG_NO_MEMORY certlog.mc # Out of memory initializing %1. %2. CR_DEFAULT cfgmgr32.h LOG_MODULE_API clusvmsg.h MSG_ROOT_AUTO_UPDATE_INFORMATIONAL crypt32msg.mc # Successful auto update of third-party root certificate:: # Subject: <%1> Sha1 thumbprint: <%2> MSG_RKEYSVC_COULDNT_INIT_SECURITY cryptmsg.mc # Remote Keysvc could not initialize RPC security. You may # not be able to # install PFX files remotely. The error was: %1: %2 # If you wish to use remote PFX installation, restart # cryptsvc. If the # error persists, your system may be low on memory, or your # installation # may be damaged. DHCP_DROP_DUPLICATE dhcpssdk.h LLC_STATUS_INVALID_COMMAND dlcapi.h GPMC_E_REQUIRESWINXP gpmc_msgs.mc # Windows XP or later is required to run Group Policy # Management. GPMC_E_ERRORTEXTNOTFOUND gpmc_msgs.mc # Error text not available. Error code = %1!x! HIDP_GETCOLDESC_RESOURCES hidpddi.h IAAPI_OUTMEMORY iaapi.h # /* No more memory can be allocated */ MD_ERROR_SUB401_LOGON iiscnfg.h MD_ERROR_SUB403_EXECUTE_ACCESS_DENIED iiscnfg.h MD_ERROR_SUB404_SITE_NOT_FOUND iiscnfg.h MD_ERROR_SUB502_TIMEOUT iiscnfg.h MD_ERROR_SUB503_CPU_LIMIT iiscnfg.h IME_RS_ERROR ime.h # general error KDC_ERR_NAME_EXP kerberr.h # Client's entry in database has expired RSVP_Err_ADMISSION lpmapi.h RSVP_Erv_DelayBnd lpmapi.h # /* Cannot meet delay bound req */ RSVP_Erv_Conflict_Serv lpmapi.h # /* Service Conflict */ RSVP_Erv_MEMORY lpmapi.h # /* Out of memory */ POLICY_ERRV_NO_MORE_INFO lpmapi.h POLICY_ERRV_GLOBAL_DEF_FLOW_COUNT lpmapi.h CATEGORY_SPM lsapmsgs.mc # NULL SID # Everyone # LOCAL # CREATOR OWNER # CREATOR GROUP # NT Pseudo Domain # NT AUTHORITY # DIALUP # NETWORK # BATCH # INTERACTIVE # SERVICE # BUILTIN # SYSTEM # ANONYMOUS LOGON # CREATOR OWNER SERVER # CREATOR GROUP SERVER # ENTERPRISE DOMAIN CONTROLLERS # SELF # Authenticated Users # RESTRICTED # Internet$ # TERMINAL SERVER USER # PROXY # LOCAL SERVICE # NETWORK SERVICE # REMOTE INTERACTIVE LOGON # USERS # NTLM Authentication # Digest Authentication # SChannel Authentication # This Organization # Other Organization # LsaSetupDomain MAPI_DIAG_OR_NAME_AMBIGUOUS mapidefs.h MMSYSERR_ERROR mmsystem.h 0x00000000L msaudite.h # Unused message ID # Message ID 0 is unused - just used to flush out the diagram # min/max limits on audit category-id and event-id of audit # events SE_CATEGID_SYSTEM msaudite.h # System Event MSIDBERROR_DUPLICATEKEY msiquery.h # new record duplicates primary keys of existing record in # table NRC_BUFLEN nb30.h # /* illegal buffer length */ NDDE_ACCESS_DENIED nddeapi.h NMERR_MEMORY_MAPPED_FILE_ERROR netmon.h ERROR_LABEL_UNREADABLE ntddchgr.h # Bar code scanner could not read bar code label. SMART_IDE_ERROR ntdddisk.h # Error from IDE controller DS_NAME_ERROR_RESOLVING ntdsapi.h SAM_PWD_CHANGE_PASSWORD_TOO_SHORT ntsam.h STATUS_WAIT_1 ntstatus.h ODBC_ERROR_GENERAL_ERR odbcinst.h PDH_CSTATUS_NEW_DATA pdhmsg.h # The return data value is valid and different from the last # sample. MSG_BAD_REGISTRY pollog.mc # ;//Certificate Services configuration information is # corrupted. # ;//. # ;//MessageId=0x3 # ;//Severity=Error # ;//Facility=Init # ;//SymbolicName=MSG_ERR_NO_ISSUER_CERTIFICATE # ;//Language=English # ;//The Issuing Certificate could not be found. The # Certificate Services may need to be reinstalled. # ;//. # MessageId=0x4 # Severity=Error # Facility=Init # SymbolicName=MSG_NO_CA_OBJECT # Language=English # Certificate Services could not find required Active # Directory information. MFE_REACHED_CORE routprot.h # this router is an RP/core for the group SCESTATUS_INVALID_PARAMETER scesvc.h SNMP_ERRORSTATUS_TOOBIG snmp.h SNMP_GENERICTRAP_WARMSTART snmp.h TWCC_BUMMER twain.h # /* Failure due to unknown causes */ ICERR_DONTDRAW vfw.h MSG_TIMEPROV_ERROR w32timemsg.mc # The time provider '%1' logged the following error: %2 WBEM_S_FALSE wbemcli.h CMC_FAIL_BAD_MESSAGE_CHECK wincrypt.h ERROR_INVALID_FUNCTION winerror.h # Incorrect function. S_FALSE winerror.h ERROR_LABEL_UNREADABLE winioctl.h # Bar code scanner could not read bar code label. LDAP_OPERATIONS_ERROR winldap.h SNMP_ERROR_TOOBIG winsnmp.h CATEGORY_CONTROLLER wsiperr.h # WinSIP # 60 matches found for "-2147014836" -- Mike Burr
Free Windows Admin Tool Kit Click here and download it now
June 16th, 2010 3:43am

Convert the number to HEX you get this number 0x8007274C. Search the web for that error number returns this. A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. The issue appears to be the fact the other server did not respond, which tends to indicate that the "LISTENER" is not running or not working correctly. Test using telnet to the application port, exampl using HTTP (port 80). Telnet 10.1.1.1 80 On the target server run the following netstat -an Verify that your application is listening on the port by reviewing the Local Address column for the appropirate 0.0.0.0:## in the list.
June 16th, 2010 5:33am

Thanks Here is the caviat. the address .254 is not in use by any device that is currently in our network. According to some of the people here it was a gateway device in the past but has been removed. It will not respond to ping telnet ftp etc and solar winds shows the address as unused as well as wins and dns/dhcp. This error is occuring on all of my machines in one datacenter and when we started migrating some of the VM's to the new datacenter we are bringing up I started seeing it there as well. Note that the new datacenter servers we put up were fresh builds not migrations from one DC to the other. Beats my 2 pair.
Free Windows Admin Tool Kit Click here and download it now
June 16th, 2010 4:19pm

Here is what I have found. We havs some software that was misconfigured that pointed to that .254 addesss and was causing the issue. Thanks for the replys. They al assisted me in isolating the issue.
June 18th, 2010 7:21pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics