Content Conversion working fine in NFS, It is showing errors in SFTP

Hi All,
My scenario is Proxy to SFTP.
I did the content conversion in receiver side , It is working fine in NFS, But it is showing errors in SFTP,
I am getting below error.
Failed to process message content. Reason: Exception in XML Parser (format problem?):'java.lang.Exception: Message processing failed in XML parser: 'Conversion configuration error: Unknown structure '' found in document', probably configuration error in file adapter (XML parser error)' (Software version: 3.0.4)
This is my content conversion below
RecordSetStructure       :OrderHeader,OrderHeaderNote,OrderLine,OrderLineNote
OrderHeader.fieldFixedLengths
4,10,30,24,8,8,10,35,35,35,35,35,3,10,2,10,35,35,35,35,35,3,10,2,1,20,12,20,16,10,20,1,8,30
Header.endSeparator
'nl'
HeaderNote.fieldFixedLengths
4,5,85
HeaderNote.endSeparator
'nl'
Line.fieldFixedLengths
4,6,8,3,4,35,15,13,12,1,8,8,20,30,20,35,35,35,35,35,3,10,2,5,10,10,24,13,10,5,2
Line.endSeparator
'nl'
LineNote.fieldFixedLengths
4,5,85
LineNote.endSeparator
'nl'
This my structure below:
Record
---Header
   ---a
   ---b
   ---c
---HeaderNote
   ---d
   ---e
   ---f
---Line
   ---g
   ---h
   ---i
---LineNote
   ---j
   ---k
   ---l
For that structure I am using the content conversion above It is working fine in NFS, But it is showing errors in SFTP .
I am using Date function also in the mapping(FYI)
Can you please provide me the solution.
Please let me know for any other information.
Thanks & Regards,
Satish

Hi Satish,
1. Check the sequence of the module
2. Recordset structure should contain the occurances as well, i.e: OrderHeader,1,OrderHeaderNote,1,OrderLine,*,OrderLineNote,*
3. Try to follow the below link which describes the content conversion for both simple and complex structure:
http://help.sap.com/saphelp_nw04/helpdata/en/24/4cad3baabd4737bab64d0201bc0c6c/content.htm
A.B

Similar Messages

Workbook works fine in discoverer plus but shows error in discoverer viewer

Hi,
I have some issues with the parameter of a report.
one of the parameters is
mgr_id (eg: 1,2,3) -- from database table.
manager names are not available in the database but they are known to users like
1 - david
2 - alan chris
3 - peter
so the requirement is
(i) the input parameter wud be entered as 1 or 2 or 3 or null ( or in multiple combination or all).
But the report shud have parameters in the header of the report.
for eg: if the input parameter is mgr_id = '1' then the report shud have manager name: 'david' in the header.
if the input is mgr_id = '1',' 2', '3' then on the report header, it shud display as manager name: 'david','alan chris','peter'
(ii) the default value of mgr_id shud be 'ALL'. if the user enters mgr_id as 'ALL' then it shud take all the values of mgr_id and pull all the values of mgr_id (like 1,2,3)
and the report header shud display as department name: 'ALL'
i have developed a custom query where i used,
select dept_id, decode(mgr.mgr_id,'1','david','2','alan chris','3','peter') as mgr_name, ..... etc.
in discoverer admin,
I have created LOVs (item classes) for mgr_name.
after that going to properties of mgr_name, i have selected mgr_id as indexed item.
and in the report i have created parameter dept based on mgr_name and selected the option -- allow to select both indexes and values.
and in the default value i mentioned 'ALL'.
after that i changed the condition as
((mgr_name = :manager name) OR (mgr_name LIKE DECODE(:manager name,'ALL','%')))
and in the header, i used &department name --- then it displays correctly.
but the problem is ---
the report works fine in plus. the problem is only when parameter value is 'ALL'
when i run the report from discoverer viewer for the very first time (after logging in), the report works fine with correct data.
but when i run the same report second time with parameter value 'ALL', it gives an error ---
Invalid value "''" for parameter "department name"
i dont understand, why it works for first time and doesn't afterwards. If i logout and login again, it works fine in viewer.
am i doing anything wrong in conditions or declaring the parameters?
I came to know that, the very first time, when we enter 'ALL' it is taking '%' but when we run for the second time, it is taking NULL. since NULL isn't there in mgr_id or mgr_name, it is throwing that error.
How do i fix this error?
Thanks

Hi Puppethead,
I have tried with your suggestions.
the following condition -- did not work
( (mgr_name = :manager name)
OR (mgr_name LIKE DECODE(:manager name, 'ALL', '%', NULL)))
but for the other condition ---
( (mgr_name = :manager name)
OR (mgr_name LIKE DECODE(nvl(:manager name, 'ALL'), 'ALL', '%', NULL)))
is wrong because, :manager name cud be null, when it is null, it takes 'ALL' i.e. '%' which shud not be the case.
if the user enters null, it has to display records with null only but with the above condition it takes '%'
The main issue which i dont understand is, the report works fine for the first time. for the second time, the report takes null values . why is it taking null values for the second time.
Thanks

Hi I am using an iphone 4 and its was working fine. Presently its giving browsing error. Whenever I am trying to browse internet by using safari or any other browser it retruns with "server not responding" Can somebody give me a solution for this ?

Hi I am using an iphone 4 and its was working fine. Presently its giving browsing error. Whenever I am trying to browse internet by using safari or any other browser it retruns with an error message "server not responding" Even the same thing is happening with youtube also. The worst part is am able to check my mails, able to chat and so on... only thing not able to browse through the browser. I have tried restore option also. This is happening with both Wlan and Data con. too
Please help...

I do not really know much about this kind of problem, but i may be your internet connection.
If you are on your own #G network then:
Go to Settings > then enable "Airplane Mode". Count to 10 and then disable it.
Then wait patiently until you get a good connection and then try again.
If you are on a nearby Wi-Fi connection then:
Go to Settings > Wi-Fi > then disable then enable after counting to 10. Make sure that you are connected and then try again.
If all else fails, then you need to contact your provider for assistance.
Sprint:888-211-4727
AT&T:?
Verizon:?

Query working fine in 9i but throwing an error in Oracle 10g

Hi All,
I am having a query which contains large number of When clauses inside a case statement.
The Same SQL is working fine in 9i, but not working in 10G.
If we try to remove one of the When clause in the query, its working fine else it is giving the error ORA-00939 Too many arguments for functions.
Can any one tell me the solution for this and what is the maximum number of when clauses allowed inside case statemen in oracle 10g.
Thanks in advance
Regards
Karthik

it should not have worked in 9iR2... it is correct according to the doc to return an error message when using more than 255 expressions...
SQL> select version from v$instance;
VERSION
9.2.0.7.0
SQL> select case 1
2 when 2 then 3
3 when 4 then 5
4 when 6 then 7
5 when 8 then 9
6 when 10 then 11
7 when 12 then 13
8 when 14 then 15
9 when 16 then 17
10 when 18 then 19
11 when 20 then 21
12 when 22 then 23
13 when 24 then 25
14 when 26 then 27
15 when 28 then 29
16 when 30 then 31
17 when 32 then 33
18 when 34 then 35
19 when 36 then 37
20 when 38 then 39
21 when 40 then 41
22 when 42 then 43
23 when 44 then 45
24 when 46 then 47
25 when 48 then 49
26 when 50 then 51
27 when 52 then 53
28 when 54 then 55
29 when 56 then 57
30 when 58 then 59
31 when 60 then 61
32 when 62 then 63
33 when 64 then 65
34 when 66 then 67
35 when 68 then 69
36 when 70 then 71
37 when 72 then 73
38 when 74 then 75
39 when 76 then 77
40 when 78 then 79
41 when 80 then 81
42 when 82 then 83
43 when 84 then 85
44 when 86 then 87
45 when 88 then 89
46 when 90 then 91
47 when 92 then 93
48 when 94 then 95
49 when 96 then 97
50 when 98 then 99
51 when 100 then 101
52 when 102 then 103
53 when 104 then 105
54 when 106 then 107
55 when 108 then 109
56 when 110 then 111
57 when 112 then 113
58 when 114 then 115
59 when 116 then 117
60 when 118 then 119
61 when 120 then 121
62 when 122 then 123
63 when 124 then 125
64 when 126 then 127
65 when 128 then 129
66 when 130 then 131
67 when 132 then 133
68 when 134 then 135
69 when 136 then 137
70 when 138 then 139
71 when 140 then 141
72 when 142 then 143
73 when 144 then 145
74 when 146 then 147
75 when 148 then 149
76 when 150 then 151
77 when 152 then 153
78 when 154 then 155
79 when 156 then 157
80 when 158 then 159
81 when 160 then 161
82 when 162 then 163
83 when 164 then 165
84 when 166 then 167
85 when 168 then 169
86 when 170 then 171
87 when 172 then 173
88 when 174 then 175
89 when 176 then 177
90 when 178 then 179
91 when 180 then 181
92 when 182 then 183
93 when 184 then 185
94 when 186 then 187
95 when 188 then 189
96 when 190 then 191
97 when 192 then 193
98 when 194 then 195
99 when 196 then 197
100 when 198 then 199
101 when 200 then 201
102 when 202 then 203
103 when 204 then 205
104 when 206 then 207
105 when 208 then 209
106 when 210 then 211
107 when 212 then 213
108 when 214 then 215
109 when 216 then 217
110 when 218 then 219
111 when 220 then 221
112 when 222 then 223
113 when 224 then 225
114 when 226 then 227
115 when 228 then 229
116 when 230 then 231
117 when 232 then 233
118 when 234 then 235
119 when 236 then 237
120 when 238 then 239
121 when 240 then 241
122 when 242 then 243
123 when 244 then 245
124 when 246 then 247
125 when 248 then 249
126 when 250 then 251
127 when 252 then 253
128 when 254 then 255
129 when 256 then 257
130 end x from dual;
X
SQL> select version from v$instance;
VERSION
10.2.0.2.0
SQL> select case 1
2 when 2 then 3
3 when 4 then 5
4 when 6 then 7
5 when 8 then 9
6 when 10 then 11
7 when 12 then 13
8 when 14 then 15
9 when 16 then 17
10 when 18 then 19
11 when 20 then 21
12 when 22 then 23
13 when 24 then 25
14 when 26 then 27
15 when 28 then 29
16 when 30 then 31
17 when 32 then 33
18 when 34 then 35
19 when 36 then 37
20 when 38 then 39
21 when 40 then 41
22 when 42 then 43
23 when 44 then 45
24 when 46 then 47
25 when 48 then 49
26 when 50 then 51
27 when 52 then 53
28 when 54 then 55
29 when 56 then 57
30 when 58 then 59
31 when 60 then 61
32 when 62 then 63
33 when 64 then 65
34 when 66 then 67
35 when 68 then 69
36 when 70 then 71
37 when 72 then 73
38 when 74 then 75
39 when 76 then 77
40 when 78 then 79
41 when 80 then 81
42 when 82 then 83
43 when 84 then 85
44 when 86 then 87
45 when 88 then 89
46 when 90 then 91
47 when 92 then 93
48 when 94 then 95
49 when 96 then 97
50 when 98 then 99
51 when 100 then 101
52 when 102 then 103
53 when 104 then 105
54 when 106 then 107
55 when 108 then 109
56 when 110 then 111
57 when 112 then 113
58 when 114 then 115
59 when 116 then 117
60 when 118 then 119
61 when 120 then 121
62 when 122 then 123
63 when 124 then 125
64 when 126 then 127
65 when 128 then 129
66 when 130 then 131
67 when 132 then 133
68 when 134 then 135
69 when 136 then 137
70 when 138 then 139
71 when 140 then 141
72 when 142 then 143
73 when 144 then 145
74 when 146 then 147
75 when 148 then 149
76 when 150 then 151
77 when 152 then 153
78 when 154 then 155
79 when 156 then 157
80 when 158 then 159
81 when 160 then 161
82 when 162 then 163
83 when 164 then 165
84 when 166 then 167
85 when 168 then 169
86 when 170 then 171
87 when 172 then 173
88 when 174 then 175
89 when 176 then 177
90 when 178 then 179
91 when 180 then 181
92 when 182 then 183
93 when 184 then 185
94 when 186 then 187
95 when 188 then 189
96 when 190 then 191
97 when 192 then 193
98 when 194 then 195
99 when 196 then 197
100 when 198 then 199
101 when 200 then 201
102 when 202 then 203
103 when 204 then 205
104 when 206 then 207
105 when 208 then 209
106 when 210 then 211
107 when 212 then 213
108 when 214 then 215
109 when 216 then 217
110 when 218 then 219
111 when 220 then 221
112 when 222 then 223
113 when 224 then 225
114 when 226 then 227
115 when 228 then 229
116 when 230 then 231
117 when 232 then 233
118 when 234 then 235
119 when 236 then 237
120 when 238 then 239
121 when 240 then 241
122 when 242 then 243
123 when 244 then 245
124 when 246 then 247
125 when 248 then 249
126 when 250 then 251
127 when 252 then 253
128 when 254 then 255
129 when 256 then 257
130 end x from dual;
when 16 then 17
ERROR at line 9:
ORA-00939: too many arguments for function
SQL> del 129
SQL> /
X
----------

HT1454 I have a speaker with I phone 30 pin dock, it use to work fine but i am not getting error saying accessory not supported,how i can determine what could be the problem

I have a speaker with I phone 30 pin dock, it use to work fine but i am not getting error saying accessory not supported,how i can determine what could be the problem
i am getting the same error with my rf transmitter that i use in my car

- Inspect the dock connector on the iPod for bent or missing contacts, foreign material, corroded contacts, broken, missing or cracked plastic.
- Did this start happening after an iOS update? Sometimes an iOS update will break compatibility.
Sometimes this works:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.

I bought Apple TV3 , it was working fine until today and stopped showing the status light. Please help.

I bought Apple TV3 , it was working fine until today and stopped showing the status light. Please help.

try another cable it's a std cable that most consumer electronic use
if that does not help then I would try to connect it by a microUSB cable to see if I could restore the firmware from a computer running itunes
if that does not help then I would say that the appletv have died

Hi Forum, can u please help? iRecently bought a mac pro & my garageband 11 was working fine but now it's showing a question mark in the dock but it won't open. I think it may have been accidentally trashed. I've searched the trash & spotlighted. What now?

Hi Forum, can u please help? iRecently bought a macbook pro and garageband 11 was working fine but now it's showing a question mark in the dock and it won't open. I think it may have been accidentally trashed. I've searched the trash and spotlighted but don't know what to do next. Any ideas? Thanks.

How did you install GarageBand on your Mac? Did it come preinstalled with the other iLife applications?
If your MacOS supports the AppStore, you should be able to redownload GarageBand from the AppStore, see this support Article: OS X: About OS X Recovery on how to download again:
Double-click the App Store icon in the dock.
Enter your Apple ID and password.
Click Purchases.
If you haven't previously accepted your bundled iLife applications within the Mac App Store, you should see your iLife applications appear in the Accept portion of the screen. Click Accept.
You may be asked for your Apple ID and password once again. Your iLife applications now move to the Purchased section. These applications are part of the software that came with your Lion based computer. Your account will not be charged for them. Click Install to complete installation of your applications.
Regards
Léonie

Camera Raw in CS4. I have applied the Camera Raw 5.7 update to my CS4 Photoshop. It works fine in Photoshop, but only shows the NEF icon from my DS3 files in Bridge. Any ideas would be gratefully received. Many thanks.

I have installed Photoshop CS4 on a new PC as my other has all but died. I applied the Camera Raw 5.7 update for CS4 to take care of the NEF files from my Nikon D3S. This works fine when opening NEF file, but in Bridge it only shows the NEF icon.
If anyone has any ideas, I would be most grateful.

Purge the cache for the offending folder(s) through the Tools menu in Bridge.

OT: Site works fine on Win2K IIS5 - throws an error on Win2K3 IIS6

Hi,
I've had serious server trouble and have moved some sites to
a new Win2K3
server running IIS6.
Of the sites that have been moved (all of which were working
fine prior to
moving), one now gives me this error:
Active Server Pages error 'ASP 0116'
Missing close of script delimiter
/curve/curve_login.asp, line 5
The Script block lacks the close of script tag (%>).
I have not changed anything in the code. I have simply moved
the files to
the new server.
In testing, if I remove the block of ASP code that handles
the login (all
enclosed in <% %> tags) then the page loads. If I put
the code back ointo
the page, I get this error.
The code works fine and has done for a year without issue on
Win2K IIS5 - so
I have to think that this is an issue outside of the code,
but what?
I have very similar login code on other sites that I have
moved and thay are
not causing me issues
Any ideas or suggestions would be most appreciated as this
site has
basically been offline for a week now and I'm going insane!
Cheers,
Rob
http://robgt.com/ [Tutorials and
Extensions]

I'd have to see the code...
It would not be unusual for a new version of the ASP DLL to
be less
forgiving than an older version.
"RobGT" <[email protected]> wrote in
message
news:e982h6$d3s$[email protected]..
> Hi,
> I've had serious server trouble and have moved some
sites to a new Win2K3
> server running IIS6.
> Of the sites that have been moved (all of which were
working fine prior to
> moving), one now gives me this error:
>
> -------------------
> Active Server Pages error 'ASP 0116'
>
> Missing close of script delimiter
>
> /curve/curve_login.asp, line 5
>
> The Script block lacks the close of script tag (%>).
>
> -------------------
>
> I have not changed anything in the code. I have simply
moved the files to
> the new server.
> In testing, if I remove the block of ASP code that
handles the login (all
> enclosed in <% %> tags) then the page loads. If I
put the code back ointo
> the page, I get this error.
>
> The code works fine and has done for a year without
issue on Win2K IIS5 -
> so I have to think that this is an issue outside of the
code, but what?
>
> I have very similar login code on other sites that I
have moved and thay
> are not causing me issues
> Any ideas or suggestions would be most appreciated as
this site has
> basically been offline for a week now and I'm going
insane!
>
> Cheers,
> Rob
>
http://robgt.com/ [Tutorials and
Extensions]

Code working fine in Enterprise version giving syntax error in Rel 4.6C

Hello All,
<b>Consider the following piece of code.</b>
FORM fill_itabs TABLES   p_t_table
                                        p_t_table_dummy.
Internal table to be used for dynamic where condition
DATA: lt_wherecond TYPE STANDARD TABLE OF ty_wherecond,
Structure for dynamic where condition
            ls_wherecond TYPE ty_wherecond.
p_t_table_dummy[] = p_t_table[].
REFRESH lt_wherecond[].
CLEAR   ls_wherecond.
ls_wherecond-data = 'kunnr = p_t_table_dummy-kunnr'.
APPEND ls_wherecond TO lt_wherecond.
SELECT kunnr INTO TABLE gt_kunnr
      FROM kna1
      FOR ALL ENTRIES IN p_t_table_dummy
      WHERE (lt_wherecond).
ENDFORM.
This is working fine in Enterprise version, but when I am trying the same in Rel 4.6C, I am getting a syntax error at the Select statement which states,
"The WHERE condition does not refer to the FOR ALL ENTRIES table.-"
Could anyone please suggest how to avoid this error?
Regards
Indrajit

Hi Chemmam,
yes, that will be a version problem. The general rule says, always use the NWDS corresponding to your server, and the main reason are the differences within the webdynpro implementation.
So if you have a 6.40 with SP13 for example, use NWDS 2.0.13 as the base of your deployment.
Hope it helps
Detlev
PS: Please consider rewarding points for helpful answers on SDN. Thanks in advance! This also holds for: /thread/80658 [original link is broken]

Emails from computer to anyone with yahoo account have no content. works fine from iphone and i pad

Emails I send via Mail with my iMac show up with no content to anyone with a yahoo e mail account. If I send from my iPad or iPhone, they do show up. So it must be the computer. Suggestions?

Thank you Return, I had tried this earlier thinking it might have helped, but unfortunately it didn't resolve the problem, everything like before. Unlike others who reported problems with streaming which could be traced to poor signal strength, when I switched to Wifi, I had an excellent signal.
Oddly, when I switched on this morning with nothing changed from last night, the streaming worked perfectly in all scenarios (stream from internet, push from Airplay PC, push from Airplay IOS device, pull from ATV Home Sharing). Wary however due to my previous temporary improvements, I stopped a movie halfway in an ATV Home Sharing pull, to see if the same movie could be pushed from the same iTunes PC from which it had been pulled. No luck! And now also no streaming from Internet.
I really don't get it!
(Hmmm - for some reason this reply got marked as "This solved my question", when it didn't, I didn't say that it did, and I can't seem to change it.)

Getting "IPSEC(epa_des_crypt): decrypted packet failed SA identity check" messages on packets from only one of two far-end sources sharing the same tunnel, the other source works fine. What exactly does this error mean?

One computer at COMPANY-A is attempting to communicate with two
computers located at COMPANY-B, via an IPsec tunnel between the
two companies.
All communications are via TCP protocol.
All devices present public IP addresses to one another, although they
may have RFC 1918 addresses on other interfaces, and NAT may be in use
on the COMPANY-B side. (NAT is not being used on the COMPANY-A side.)
The players:(Note: first three octets have been changed for security reasons)
COMPANY-A computer      1.2.3.161
COMPANY-A router        1.2.3.8 (also IPsec peer)
COMPANY-A has 1.2.3.0/24 with no subnetting.
COMPANY-B router        4.5.6.228 (also IPsec peer)
COMPANY-B computer #1   4.5.7.94 (this one has no issues)
COMPANY-B computer #2   4.5.7.29 (this one fails)
COMPANY-B has 4.5.6.0/23 subnetted in various ways.
COMPANY-B also has 9.10.11.0/24, but it is not involved in the issue.
What works:
The COMPANY-A computer 1.2.3.161 can communicate via the single IPsec
tunnel to COMPANY-B computer #1 4.5.7.94 without problems.
The "show crypto session detail" command shows Inbound/Outbound packets
flowing in the dec'ed and enc'ed positions.
What doesn't:
When the COMPANY-A computer 1.2.3.161 attempts to communicate
via the single IPsec tunnel with the COMPANY-B computer #2 4.5.7.29,
the COMPANY-A router eventually reports five of these messages:
Oct 9 15:24:54.327: IPSEC(epa_des_crypt): decrypted packet failed SA identity check
Oct 9 15:24:57.327: IPSEC(epa_des_crypt): decrypted packet failed SA identity check
Oct 9 15:25:03.327: IPSEC(epa_des_crypt): decrypted packet failed SA identity check
Oct 9 15:25:15.328: IPSEC(epa_des_crypt): decrypted packet failed SA identity check
Oct 9 15:25:39.329: IPSEC(epa_des_crypt): decrypted packet failed SA identity check
Oct 9 15:26:27.328: IPSEC(epa_des_crypt): decrypted packet failed SA identity check
and the "show crypto session detail" shows inbound packets being dropped.
The COMPANY-A computer that opens the TCP connection never gets past the
SYN_SENT phase of the TCP connection whan trying to communicate with the
COMPANY-B computer #2, and the repeated error messages are the retries of
the SYN packet.
On the COMPANY-A side, this IPsec configuration has been set up on a 3745,
a 3725, and some 76xx routers were tried, all with similar behavior,
with packets from one far-end computer passing fine, and packets from
another far-end computer in the same netblock passing through the same
IPsec tunnel failing with the "failed SA identity" error.
The COMPANY-A computer directs all packets headed to COMPANY-B via the
COMPANY-A router at 1.2.3.8 with this set of route settings:
netstat -r -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window irtt Iface
4.5.7.0         1.2.3.8         255.255.255.0   UG        0 0          0 eth3
1.2.3.8.0       0.0.0.0         255.255.255.0   U         0 0          0 eth3
10.1.0.0        0.0.0.0         255.255.240.0   U         0 0          0 eth0
169.254.0.0     0.0.0.0         255.255.0.0     U         0 0          0 eth3
10.0.0.0        10.1.1.1        255.0.0.0       UG        0 0          0 eth0
0.0.0.0         1.2.3.1         0.0.0.0         UG        0 0          0 eth3
The first route line shown is selected for access to both COMPANY-B computers.
The COMPANY-A router (IPsec tunnel endpoint, 1.2.3.8) has this
configuration:
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
lifetime 28800
crypto isakmp key XXXXXXXXXXXXXXXXXXXXXXX address 4.5.6.228
crypto ipsec security-association lifetime seconds 86400
crypto ipsec transform-set COMPANY-B01 esp-3des esp-sha-hmac
crypto map COMPANY-BMAP1 10 ipsec-isakmp
description COMPANY-B VPN
set peer 4.5.6.228
set transform-set COMPANY-B01
set pfs group2
match address 190
interface FastEthernet0/0
ip address 1.2.3.8 255.255.255.0
no ip redirects
ip virtual-reassembly
duplex auto
speed auto
no cdp enable
crypto map COMPANY-BMAP1
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 1.2.3.1
ip route 10.0.0.0 255.0.0.0 10.1.1.1
ip route 1.2.3.8.0 255.255.255.0 FastEthernet0/0
access-list 190 permit ip host 1.2.3.161 4.5.7.0 0.0.0.255
access-list 190 permit ip host 1.2.3.161 9.10.11.0 0.0.0.255
bridge 1 protocol ieee
One of the routers tried had this IOS/hardware configuration:
Cisco IOS Software, 3700 Software (C3725-ADVIPSERVICESK9-M), Version 12.4(25c),
RELEASE SOFTWARE (fc2)
isco 3725 (R7000) processor (revision 0.1) with 115712K/15360K bytes of memory.
Processor board ID XXXXXXXXXXXXXXX
R7000 CPU at 240MHz, Implementation 39, Rev 3.3, 256KB L2 Cache
2 FastEthernet interfaces
4 ATM interfaces
DRAM configuration is 64 bits wide with parity disabled.
55K bytes of NVRAM.
31296K bytes of ATA System CompactFlash (Read/Write)
250368K bytes of ATA Slot0 CompactFlash (Read/Write)
Configuration register is 0x2102
#show crypto sess
Crypto session current status
Interface: FastEthernet0/0
Session status: UP-ACTIVE
Peer: 4.5.6.228 port 500
IKE SA: local 1.2.3.8/500 remote 4.5.6.228/500 Active
IPSEC FLOW: permit ip host 1.2.3.161 4.5.7.0/255.255.255.0
        Active SAs: 2, origin: crypto map
IPSEC FLOW: permit ip host 1.2.3.161 9.10.11.0/255.255.255.0
        Active SAs: 0, origin: crypto map
#show crypto sess det
Crypto session current status
Code: C - IKE Configuration mode, D - Dead Peer Detection
K - Keepalives, N - NAT-traversal, X - IKE Extended Authentication
Interface: FastEthernet0/0
Session status: UP-ACTIVE
Peer: 4.5.6.228 port 500 fvrf: (none) ivrf: (none)
      Phase1_id: 4.5.6.228
      Desc: (none)
IKE SA: local 1.2.3.8/500 remote 4.5.6.228/500 Active
          Capabilities:(none) connid:1 lifetime:06:26:27
IPSEC FLOW: permit ip host 1.2.3.161 4.5.7.0/255.255.255.0
        Active SAs: 2, origin: crypto map
        Inbound: #pkts dec'ed 651 drop 16 life (KB/Sec) 4496182/23178
        Outbound: #pkts enc'ed 574 drop 2 life (KB/Sec) 4496279/23178
IPSEC FLOW: permit ip host 1.2.3.161 9.10.11.0/255.255.255.0
        Active SAs: 0, origin: crypto map
        Inbound: #pkts dec'ed 0 drop 0 life (KB/Sec) 0/0
        Outbound: #pkts enc'ed 0 drop 0 life (KB/Sec) 0/0
The COMPANY-B device on their end of the IPsec VPN is a Juniper SSG1000
Version 6.1 (ScreenOS)
We only have a limited view into the Juniper device configuration.
What we were allowed to see was:
COMPANY-B-ROUTER(M)-> sh config | incl COMPANY-A
set address "Untrust" "oss-COMPANY-A-1.2.3.161" 1.2.3.161 255.255.255.255
set ike gateway "COMPANY-A-1-GW" address 1.2.3.8 Main outgoing-interface "ethernet2/1" preshare xxxxxxxxxxxxxxxxxxxxxx proposal "pre-g2-3des-sha"
set vpn "COMPANY-A-1-IKE" gateway "COMPANY-A-1-GW" no-replay tunnel idletime 0 proposal "g2-esp-3des-sha-28800"
set policy id 2539 from "Untrust" to "Trust" "oss-COMPANY-A-1.2.3.161" "9.10.11.0-24" "ANY" tunnel vpn "COMPANY-A-1-IKE" id 0x309a pair-policy 2500
set policy id 2500 from "Trust" to "Untrust" "9.10.11.0-24" "oss-COMPANY-A-1.2.3.161" "ANY" tunnel vpn "COMPANY-A-1-IKE" id 0x309a pair-policy 2539
set policy id 2541 from "Trust" to "Untrust" "4.5.7.0-24" "oss-COMPANY-A-1.2.3.161" "ANY" tunnel vpn "COMPANY-A-1-IKE" id 0x309b pair-policy 2540
set policy id 2540 from "Untrust" to "Trust" "oss-COMPANY-A-1.2.3.161" "4.5.7.0-24" "ANY" tunnel vpn "COMPANY-A-1-IKE" id 0x309b pair-policy 2541
COMPANY-B-ROUTER(M)->
I suspect that this curious issue is due to a configuration setting on the
Juniper device, but neither party has seen this error before. COMPANY-B
operates thousands of IPsec VPNs and they report that this is a new error
for them too. The behavior that allows traffic from one IP address to
work and traffic from another to end up getting this error is also unique.
As only the Cisco side emits any error message at all, this is the only
clue we have as to what is going on, even if this isn't actually an IOS
problem.
What we are looking for is a description of exactly what the Cisco
IOS error message:
IPSEC(epa_des_crypt): decrypted packet failed SA identity check
is complaining about, and if there are any known causes of the behavior
described that occur when running IPsec between Cisco IOS and a Juniper
SSG device. Google reports many other incidents of the same error
message (but not the "I like that IP address but hate this one" behavior),
and not just with a Juniper device on the COMPANY-B end, but for those cases,
not one was found where the solution was described.
It is hoped that with a better explanation of the error message
and any known issues with Juniper configuration settings causing
this error, we can have COMPANY-B make adjustments to their device.
Or, if there is a setting change needed on the COMPANY-A router,
that can also be implemented.
Thanks in advance for your time in reading this, and any ideas.

Hello Harish,
It is believed that:
COMPANY-B computer #1   4.5.7.94 (this one has no issues)
COMPANY-B computer #2   4.5.7.29 (this one fails)
both have at least two network interfaces, one with a public IP address
(which we are supposedly conversing with) and one with a RFC 1918 type
address.   COMPANY-B is reluctant to disclose details of their network or
servers setup, so this is not 100% certain.
Because of that uncertainty, it occurred to me that perhaps COMPANY-B
computer #2 might be incorrectly routing via the RFC 1918 interface.
In theory, such packets should have been blocked by the access-list on both
COMPANY-A router, and should not have even made it into the IPsec VPN
if the Juniper access settings work as it appears they should. So I turned up
debugging on COMPANY-A router so that I could see the encrypted and
decrypted packet hex dumps.
I then hand-disassembled the decoded ACK packet IP header received just
prior to the "decrypted packet failed SA check" error being emitted and
found the expected source and destination IP addresses (4.5.7.29 and 1.2.3.161),
in the unecapsulated packet. I also found the expected port numbers of the TCP
conversation that was trying to be established in the TCP header. So, it
looks like COMPANY-B computer #2 is emitting the packets out the right
interface.
The IP packet header of the encrypted packet showed the IP addresses of the
two routers at each terminus of the IPsec VPN, but since I don't know what triggers
the "SA check" error message or what it is complaining about, I don't know what
other clues to look for in the packet dumps.
As to your second question, "can you check whether both encapsulation and
decapsulation happening in 'show crypto ipsec sa'",   the enc'ed/dec'ed
counters were both going up by the correct quantities. When communicating
with the uncooperative COMPANY-B computer #2, you would also see the
received Drop increment for each packet decrypted. When communicating
with the working COMPANY-B computer #1, the Drop counters would not
increment, and the enc'ed/dec'ed would both increment.
#show crypto sess det
Crypto session current status
Code: C - IKE Configuration mode, D - Dead Peer Detection
K - Keepalives, N - NAT-traversal, X - IKE Extended Authentication
Interface: FastEthernet0/0
Session status: UP-ACTIVE
Peer: 4.5.6.228 port 500 fvrf: (none) ivrf: (none)
      Phase1_id: 4.5.6.228
      Desc: (none)
IKE SA: local 1.2.3.8/500 remote 4.5.6.228/500 Active
          Capabilities:(none) connid:1 lifetime:07:59:54
IPSEC FLOW: permit ip host 1.2.3.161 4.5.7.0/255.255.255.0
        Active SAs: 2, origin: crypto map
        Inbound: #pkts dec'ed 376 drop 5 life (KB/Sec) 4458308/28784
        Outbound: #pkts enc'ed 401 drop 3 life (KB/Sec) 4458308/28784
Attempt a TCP communication to COMPANY-B computer #2...
show crypto sess det
Crypto session current status
Code: C - IKE Configuration mode, D - Dead Peer Detection
K - Keepalives, N - NAT-traversal, X - IKE Extended Authentication
Interface: FastEthernet0/0
Session status: UP-ACTIVE
Peer: 4.5.6.228 port 500 fvrf: (none) ivrf: (none)
      Phase1_id: 4.5.6.228
      Desc: (none)
IKE SA: local 1.2.3.8/500 remote 4.5.6.228/500 Active
          Capabilities:(none) connid:1 lifetime:07:59:23
IPSEC FLOW: permit ip host 1.2.3.161 4.5.7.0/255.255.255.0
        Active SAs: 2, origin: crypto map
        Inbound: #pkts dec'ed 376 drop 6 life (KB/Sec) 4458307/28753
        Outbound: #pkts enc'ed 402 drop 3 life (KB/Sec) 4458307/28753
Note Inbound "drop" changed from 5 to 6. (I didn't let it sit for all
the retries.)
#show crypto ipsec sa
interface: FastEthernet0/0
    Crypto map tag: COMPANY-BMAP1, local addr 1.2.3.8
   protected vrf: (none)
   local ident (addr/mask/prot/port): (1.2.3.161/255.255.255.255/0/0)
   remote ident (addr/mask/prot/port): (4.5.7.0/255.255.255.0/0/0)
   current_peer 4.5.6.228 port 500
     PERMIT, flags={origin_is_acl,}
    #pkts encaps: 402, #pkts encrypt: 402, #pkts digest: 402
    #pkts decaps: 376, #pkts decrypt: 376, #pkts verify: 376
    #pkts compressed: 0, #pkts decompressed: 0
    #pkts not compressed: 0, #pkts compr. failed: 0
    #pkts not decompressed: 0, #pkts decompress failed: 0
    #send errors 3, #recv errors 6
     local crypto endpt.: 1.2.3.8, remote crypto endpt.: 4.5.6.228
     path mtu 1500, ip mtu 1500, ip mtu idb FastEthernet0/0
     current outbound spi: 0xDF2CC59C(3744253340)
inbound esp sas:
      spi: 0xD9D2EBBB(3654478779)
        transform: esp-3des esp-sha-hmac ,
        in use settings ={Tunnel, }
        conn id: 2004, flow_id: SW:4, crypto map: COMPANY-BMAP1
        sa timing: remaining key lifetime (k/sec): (4458307/28600)
        IV size: 8 bytes
        replay detection support: Y
        Status: ACTIVE
     inbound ah sas:
     inbound pcp sas:
     outbound esp sas:
      spi: 0xDF2CC59C(3744253340)
        transform: esp-3des esp-sha-hmac ,
        in use settings ={Tunnel, }
        conn id: 2003, flow_id: SW:3, crypto map: COMPANY-BMAP1
        sa timing: remaining key lifetime (k/sec): (4458307/28600)
        IV size: 8 bytes
        replay detection support: Y
        Status: ACTIVE
     outbound ah sas:
     outbound pcp sas:
The "send" errors appear to be related to the tunnel reverting to a
DOWN state after periods of inactivity, and you appear to get one
each time the tunnel has to be re-negotiated and returned to
an ACTIVE state. There is no relationship between Send errors
incrementing and working/non-working TCP conversations to the
two COMPANY-B servers.
Thanks for pondering this very odd behavior.

Works fine, but only the backlight shows up--help!

My ipod classic turns on, but it's just a white screen. I can still use it if I remember what order everything is in, and the sound is fine, but I can't see anything! I've tried resetting it and restarting it. Help!

Hi and welcome to Discussions,
such 'behaviour' usually is a hint that your Windows XP does not include the SP2 (Service Pack 2) or later, but is a SP1 or earlier.
Check the label of the CD for mentioning of SP2.
If SP1 you can use these instructions http://www.winsupersite.com/showcase/windowsxpsp2slipstream.asp to make yourself a XP SP2 Installation CD.
XP SP2 or later is a must for BootCamp to work.
Regards
Stefan

Crawl Works Fine. All Sites Scope shows 0

Hello,
We have recently built a 2010 SharePoint server. We have several sites containing shared documents. A Search Service Application has been created and a Content Source of all sites on the Local SharePoint server is being used. When
a Full Crawl is performed, it is successful and the URL log shows all of the shared documents. When I try to use the search.asmx API by sending an SQL style select to it, I either just get the Person entries or nothing if I specify the 'All Sites' scope.
After reading other posts, I have checked for errors in my logs, and ensured proper user permissions. Any ideas?
Thanks,
Warren

Hi,
According to your post, my understanding is that you could not get the result using search.asmx web service.
What SQL syntax were you use? For example, we can get the doc file in the
Lib1 libray as below.
<QueryText language="en-US" type="STRING">site:”http://sps/Lib1 doc”</QueryText>
I did a simple code demo using Windows Form Application follow
the MSDN article, it works like a charm, you can have a look at it.
private void queryButton_Click(object sender, EventArgs e)
try
// Instantiate the Web service.
QueryWebServiceProxy.QueryService queryService = new QueryWebServiceProxy.QueryService();
// Use the credentials of the user running the client application.
queryService.Credentials = System.Net.CredentialCache.DefaultCredentials;
//Execute the QueryEx method, returning the results to a DataSet
System.Data.DataSet queryResults = queryService.QueryEx(GetXMLString());
// Set the DataGridView data source to the first table in the DataSet oject, which contains the relevant results.
resultsGrid.DataSource = queryResults.Tables[0];
catch (Exception ex)
resultsLabel.Text = ex.ToString();
private string GetXMLString()
The proceeding six lines of code is actually one line of code.
It is separated into four lines here for readability.
You will need to remove the line breaks when you copy the code to your project.
StringBuilder xmlString = new StringBuilder(@"<QueryPacket xmlns='urn:Microsoft.Search.Query' Revision='1000'>
<Query domain='QDomain'>
<SupportedFormats>
<Format>urn:Microsoft.Search.Response.Document.Document</Format>
</SupportedFormats>
<Context>
<QueryText language='en-US' type='STRING'>");
xmlString.Append(queryTextBox.Text);
xmlString.Append("</QueryText></Context></Query></QueryPacket>");
return xmlString.ToString();
More reference:
http://www.dotnetmafia.com/blogs/dotnettipoftheday/archive/2008/07/17/how-to-query-search-using-the-web-service.aspx
http://sharepoint.stackexchange.com/questions/32709/how-to-use-the-search-asmx-service-to-search-a-particular-library
Thanks,
Jason
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected].
Jason Guo
TechNet Community Support

Argh! Updated ipod 4G software. Worked fine for a day now showing ZERO song

Updated my 4G 40gb iPod and for a day everything was fine. Now iTunes is telling me to restore iPod to factory settings and iPod itself shows 0 songs but still 8 GB left on ipod. What should I do? I had over 4,000 songs on there!

I'm also having problem in here after taking that new update 10.1. My 40 Gb's iPod 2.3 have asked many times to set it for factory settings. So I set it to factory settings and drive that latest updating to it. Then I try to correct it with Drive 10 hard drive program and checked one more time with Disk Utility, but it's still acting odd. In Preferences>Main menu there is such kind of a menu than importing photos. I think that haven't been there earlier and it should not be there, because it's not any Photo iPod. Why to import photos with using it when I can use it like a hard drive and keep thousands of photos there anyway.
There must be something odd in that latest update and I hope to find that earlier update somewhere. Do you happen to have it? If you do can you please send that to me. I have moved mine in trash. I also would be very thankful if someone do have better advises for what to do next.

Content Conversion working fine in NFS, It is showing errors in SFTP

Similar Messages

Maybe you are looking for