⚑ Deus Ex Machina ➽ Eventlog Lookup

Deus Ex Machina » Eventlog » Event 2012 - Srv

Srv - 2012


Description »
While transmitting or receiving data, the server encountered a network error. Occassional errors are expected, but large amounts of these indicate a possible error in your network configuration.  The error status code is contained within the returned data (formatted as Words) and may point you towards the problem.
Data formatted as » WORDS
0000: 00040000 00540001 00000000 800007dc
0010: 00000000 c0000184 00000000 00000000
0020: 00000000 00000000 0000097a

The NSTATUS code C0000184 appears here, and it means STATUS_INVALID_DEVICE_STATE. The value 800007dc in decimal is 2012 - which happens to be the event ID of this entry.
This warning suggests that some CIFS traffic was sent on a connection that had either already been closed, or was not yet ready to receive the traffic.

This may be caused by one of the following:

Mostly, this warning appears infrequently, and can be ignored. If you *are* getting large volumes of ID 2012 in your logs, you might want to use a sniffer to see what's happening to your CIFS traffic.

Action Plan
Your action plan for resolving this issue should be firstly to update all NIC-related drivers and software (including firewalls, teaming drivers and NIC firmware) to the latest available versions. Secondly, check the settings on your NIC and compare them with the switch. Are you using the correct duplex/speed? Thirdly, try moving to another switch port and using a different piece of network cable. If you are using CIFS acceleration devices, you should probably use the sniffer before you go ahead with these steps. In the case of RiverBed SteelHeads, you might want to try temporarily disabling latency optimisation, to see if the warnings continue.