Re: Oops, here's the link - Re: Event ID: 5504

From: Dan Moynihan (dan.moynihan_at_cqlcorp.com)
Date: 11/12/04 

Date: Fri, 12 Nov 2004 09:05:30 -0500

Mark,

We are running windows 2000 with SP4. This is happening on our second
domain controller (dc2). We got those errors after we applied the hotfix
(Article ID: 838969). We haven't received any of those errors since late
afternoon yesterday.'

Thanks,

Dan

"Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message
news:O4L6KWDyEHA.1984@TK2MSFTNGP14.phx.gbl...
> Hi Dan
>
> If you're running Windows Server 2003, you can turn off DNS event
> suppression by using:
>
> dnscmd /Config /EventControlSuppression 1
>
> dnscmd.exe is available when you install the Support Tools available from
> \support\tools on the installation media.
>
> Kind regards
> --
> Mark Renoden [MSFT]
> Windows Platform Support Team
> Email: markreno@online.microsoft.com
>
> Please note you'll need to strip ".online" from my email address to email
> me; I'll post a response back to the group.
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> "Dan Moynihan" <dan.moynihan@cqlcorp.com> wrote in message
> news:O5UwvI$xEHA.2540@TK2MSFTNGP09.phx.gbl...
>> Ok, well we applied the hotfix (Article ID: 838969) to dc2 this morning.
>> We applied the fix and rebooted the server and got these three warnings
>> after the reboot. We haven't gotten any anymore Event ID: 5504 warnings
>> thus far after the reboot. Are these warnings anything that we should be
>> concerned about? Has any anyone else applied this hotfix and gotten
>> these warnings after they applied the fix. After the reboot, thsese are
>> the only three errors/warnings that showed up in Event Viewer (DNS
>> Server)
>>
>>
>>
>> Thanks,
>>
>>
>>
>> Dan
>>
>>
>> Event Type: Warning
>>
>> Event Source: DNS
>>
>> Event Category: None
>>
>> Event ID: 9999
>>
>> Date: 11/11/2004
>>
>> Time: 6:40:49 AM
>>
>> User: N/A
>>
>> Computer: CQL-GR-DC2
>>
>> Description:
>>
>> The DNS server has encountered numerous run-time events. These are
>> usually caused by the reception of bad or unexpected packets, or from
>> problems with or excessive replication traffic. The data is the number
>> of suppressed events encountered in the last 15 minute interval.
>>
>> Data:
>>
>> 0000: 8e 08 00 00 Z...
>>
>>
>>
>> Event Type: Warning
>>
>> Event Source: DNS
>>
>> Event Category: None
>>
>> Event ID: 9999
>>
>> Date: 11/11/2004
>>
>> Time: 6:24:49 AM
>>
>> User: N/A
>>
>> Computer: CQL-GR-DC2
>>
>> Description:
>>
>> The DNS server has encountered numerous run-time events. These are
>> usually caused by the reception of bad or unexpected packets, or from
>> problems with or excessive replication traffic. The data is the number
>> of suppressed events encountered in the last 15 minute interval.
>>
>> Data:
>>
>> 0000: 04 0d 00 00 ....
>>
>>
>>
>> Event Type: Warning
>>
>> Event Source: DNS
>>
>> Event Category: None
>>
>> Event ID: 3000
>>
>> Date: 11/11/2004
>>
>> Time: 6:09:07 AM
>>
>> User: N/A
>>
>> Computer: CQL-GR-DC2
>>
>> Description:
>>
>> The DNS server is logging numerous run-time events. For information
>> about these events, see previous DNS Server event log entries. To
>> prevent the DNS Server from clogging server logs, further logging of this
>> event and other events with higher Event IDs will now be suppressed.
>>
>>
>>
>>
>>
>> "Dan Moynihan" <dan.moynihan@cqlcorp.com> wrote in message
>> news:%23%23ldKYqxEHA.3624@TK2MSFTNGP09.phx.gbl...
>>> Mark,
>>>
>>> I'll give Microsoft a call tomorrow and take it from there. I'll
>>> respond to this post again when I've applied the hotfix. I hope this
>>> works.
>>>
>>>
>>>
>>> Thanks,
>>>
>>>
>>>
>>> Dan
>>>
>>>
>>>
>>> "Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message
>>> news:%23JJR1EqxEHA.1564@TK2MSFTNGP09.phx.gbl...
>>>> Hi Dan
>>>>
>>>> This fix doesn't appear to be specifically for SP4. You can probably
>>>> give it a go. The normal method for obtaining a hotfix would be to
>>>> contact Microsoft and request it. Hotfixes are usually processed free
>>>> of charge.
>>>>
>>>> Kind regards
>>>> --
>>>> Mark Renoden [MSFT]
>>>> Windows Platform Support Team
>>>> Email: markreno@online.microsoft.com
>>>>
>>>> Please note you'll need to strip ".online" from my email address to
>>>> email me; I'll post a response back to the group.
>>>>
>>>> This posting is provided "AS IS" with no warranties, and confers no
>>>> rights.
>>>>
>>>> "Dan Moynihan" <dan.moynihan@cqlcorp.com> wrote in message
>>>> news:OnFduLoxEHA.3120@TK2MSFTNGP12.phx.gbl...
>>>>> Thanks for help on this problem. I checked to see if "secure the DNS
>>>>> cache against pollution" was checked and we do have it enabled.
>>>>> Yesterday we flushed the DNS cache and restarted DNS service on DC2
>>>>> only. I just check the logs in event viewer and we are still getting
>>>>> "invalid packets" event ID: 5504.
>>>>>
>>>>>
>>>>>
>>>>> I did check out that hot fix link but I thought it was fixed in SP4
>>>>> release? Is that correct? Also, when I click on that link to the hot
>>>>> fix I see no place to download the fix. Is their something I 'm
>>>>> supposed to do. Should I call Microsoft and request the hot fix?
>>>>>
>>>>>
>>>>>
>>>>> Thanks,
>>>>>
>>>>>
>>>>>
>>>>> Dan
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> "Ace Fekay [MVP]"
>>>>> <PleaseSubstituteMyActualFirstName&LastNameHere@hotmail.com> wrote in
>>>>> message news:OnhLfSfxEHA.3376@TK2MSFTNGP12.phx.gbl...
>>>>>> In news:%23AYP2rTxEHA.3624@TK2MSFTNGP09.phx.gbl,
>>>>>> Mark Renoden [MSFT] <markreno@online.microsoft.com> made a post then
>>>>>> I commented below
>>>>>>> Hi Ace
>>>>>>>
>>>>>>> Correct but worth a check.
>>>>>>>
>>>>>>> Cheers
>>>>>>>
>>>>>>
>>>>>> Cheers back!
>>>>>>
>>>>>> Ace
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

Relevant Pages

  • Re: Oops, heres the link - Re: Event ID: 5504
    ... well we applied the hotfix ... We haven't gotten any anymore Event ID: 5504 warnings thus far ... errors/warnings that showed up in Event Viewer (DNS Server) ... The DNS server has encountered numerous run-time events. ...
    (microsoft.public.windows.server.dns)
  • Re: Question regarding hotfix 905214
    ... Homework for another server job coming up. ... hotfix and SenderID filtering appears to be working fine. ... then 914103 is needed by Exchange for SenderID. ...
    (microsoft.public.windows.server.sbs)
  • Re: Event Warning 40961 LSASRV
    ... Also, the netlogon service is not running on either server, yet I'm still ... getting warnings about authentication failure to the providers nameserver. ... Also, after making the registry entry previously stated, DNS services were ...
    (microsoft.public.windows.server.networking)
  • Re: False Alert - AD database restored by unsupported procedure.
    ... DNS entries for this DC cannot be verified right now on DNS server ... the DNS and SPN warnings. ... Run dcdiag, netdiag and repadmin in verbose mode. ... And I alway restart the net logon service when I ...
    (microsoft.public.windows.server.active_directory)
  • Re: False Alert - AD database restored by unsupported procedure.
    ... the DNS and SPN warnings. ... If you don't have the support tools installed, install them from your server ... Run dcdiag, netdiag and repadmin in verbose mode. ... And I alway restart the net logon service when I ...
    (microsoft.public.windows.server.active_directory)