Excessive name conflicts (451) for Bonjour in event logs
I have a few hundred PC laptops using iTunes, Bonjour, and AirPlay. Teachers are using iPads and AirPlay to project to pc Laptop and projector. The AirPlay works most of the time and stays active on the pc, but cannot be found by iPads after it is idle for a while. I am getting many errors indicating Excessive Name Conflicts (451) in the event logs. The exact message on one laptop is:
Excessive name conflicts (451) for HS2105._airplay._tcp.local. (SRV); rate limiting in effect
HS2105 is the workstation name. The laptop and iPad are on the same VLAN and multicasting is enabled on WAPs. I think Bonjour is the problem. Any ideas?
I'm seeing multiple errors from Bonjour, also, on both my Win 7 and XP laptops.
They are different from the ones you posted:
492: ERROR: read_msg errno 10054 (An existing connection was forcibly closed by the remote host.)
The number in front cycles through different values: 520,576, 240, 536, 236, 560, 492, 516, 568. Always a burst of ten of them with different numbers.
Similar Messages
-
Hi,
I have iTunes running on two seperate Windows 7 laptops and am unable to share between these. I am also seeing multiple error messages per second in the event viewer from Bonjour services.
mDNSCoreReceiveResponse: Received from 192.168.1.130:50894 22 26AD664146XXXXXX.touch-able.tcp.local. SRV 0 0 3689 Colorado.local.
mDNSCoreReceiveResponse: ProbeCount 2; will rename 18 26AD664146XXXXXX.touch-able.tcp.local. SRV 0 0 3689 Utah.local.
Excessive name conflicts (32) for 26AD664146XXXXXX.touch-able.tcp.local. (SRV); rate limiting in effect
I have the latest version of iTunes and Bonjour installed.
Has anyone seen this or know how to resolve it ? I am also unable to get
iPhone Remote working with both iTunes libraries at the same time.
I have checked the Library Persistent ID on both itunes installs (.itl and .xml)
and these are different.
Thanks
JohnI'm seeing multiple errors from Bonjour, also, on both my Win 7 and XP laptops.
They are different from the ones you posted:
492: ERROR: read_msg errno 10054 (An existing connection was forcibly closed by the remote host.)
The number in front cycles through different values: 520,576, 240, 536, 236, 560, 492, 516, 568. Always a burst of ten of them with different numbers. -
Print document's name in Event Log ID #307 on Server 2012
Creating a new printer server using Windows Server 2012. Everything is working out fine so far, however I just ran into one problem that didn't happen in our Server 2008R2 print server.
When looking at print jobs that have completed under: event logs --> Microsoft --> Windows --> PrintService --Operational, I have noticed that Event ID 307 is not displaying the printed document's name in Server 2012 (it did for Server 2008R2).
In Server 2012, the document name simply displays as "Print Document" instead of displaying the document's name.
Anyone have any ideas on how to get the document's name to properly display in the event logs?
Thanks for any help.Hi Alan,
I have configured a Server 2012 R2 standard as print server to manage printers and Monitor the print usage of users, however I am not getting the Print logs (Event Log ID 307) in the default event logs directory on the print Server.
I perform some search and come to know that it’s a known problem in Server 2012 and there is Hotfix available. I installed the Hotfix mentioned here
http://support2.microsoft.com/kb/2938013/en-us , but still logs are not getting generated.
I also made the below setting for the logs.
Creating Registry entry
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows NT\Printers] "ShowJobTitleInEventLogs"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers] "ShowJobTitleInEventLogs"=dword:00000001
The policy name: Computer Configuration \ Administrative Templates \ Printers
Allow job name in event logs
Keep printed Docs setting is also enabled on all the printers installed on Print Server.
Noting seems to be working here or am i doing something wrong here.
Regards
Mukesh -
Thinking about using the Windows Event Logs as my main log store - looking for pros and cons
I have been writing some larger scripts that write to physical log files. Until today I have avoided trying to use the Windows Event logs, but, am beginning to rethink this and wondered if anyone has done this, and, what the strengths and weaknesses
of this logging approach has been. If I do it, I will probably write a function that accepts pipelined input and simply pass output to the log. I wanted to get a feel for what I would be getting into before I started writing things up since this
will probably take a little bit of work to get set up to run properly.At my company we use the Windows event log for many of our batch process logging for several reasons:
Unlike logging to a central database, the Windows event log is always available. I've seen poorly thought out logging solution which log to a database and if the database happens to be unavailable the batch process would fail.
Monitoring tool such as SCOM already have Windows event log watchers so adding alerts to take action based on message written to the Windows event log is easy
Built-in support for writing Windows event log entries in the Powershell V2 write-eventlog cmdlet, a simple CLR can created in SQL Server or even command-line eventcreate.exe
Easy to create a custom event log so you don't have to use the default application log in Windows 2008 and higher.
Most shrink-wrap S/W already use the event log
Issues I've seen:
Windows 2008 with UAC on requires "registering" i.e. creating a new event log source with UAC. This can be done one time manually. Unfortunately there isn't a way to automate UAC--pure GUI. The Powershell command would be "New-EventLog -LogName Application
-Source mysource" if you're using the Application log and must be run as administrator.
Errant process writes many entries to the event log. Depending on the volume like for example writing stack dumps this can performance problems. I think I recall an issue an Windows 2003 or Windows 2008 with UAC off if you're creating a new
event log source each time (which you shouldn't) then these results in many registry entries which can cause problems.
I don't think the issues outweigh the benefits--just something to be aware of. -
LYNC 2013 Event Logging Parameters for LYNC server logs
Hi,
We have LYNC server 2013 enterprise voice. We have third party Monitoring server to monitor the event logging.
Do we have default event logging parameters for LYNC Server logs in LYNC 2013?
Thanks
jitenderThere's really just the default level of logging for Lync Server Event Logs. For individual call troubleshooting you might use the debug logger, and for longer term troubleshooting you'd deploy the Lync Monitoring role. The monitoring role, service
status, and performance monitor counters are what you really want to be monitoring if you're watching your Enterprise Voice deployment.
If I understand the question, there isn't a way to turn up the amount of logs generated in the Lync event logs or change parameters around this.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications -
Script to Export Pervious Day Events Logs to CSV
HI,
I am trying to export all the previous day's application event logs to a CSV file. I found the following script on net. But for this script to work I need to enter in the Event ID's I wont to export. Does anyone have any idea how I can change thsi script
to export all event ID's or have another script that can?
'Description : This script queries the event log for...whatever you want it to! Just set the event 'log name and event ID's!
'Initialization Section
Option Explicit
Const ForReading = 1
Const ForWriting = 2
Const ForAppending = 8
Dim objDictionary, objFSO, wshShell, wshNetwork
Dim scriptBaseName, scriptPath, scriptLogPath
Dim ipAddress, macAddress, item, messageType, message
On Error Resume Next
Set objDictionary = NewDictionary
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set wshShell = CreateObject("Wscript.Shell")
Set wshNetwork = CreateObject("Wscript.Network")
scriptBaseName = objFSO.GetBaseName(Wscript.ScriptFullName)
scriptPath = objFSO.GetFile(Wscript.ScriptFullName).ParentFolder.Path
scriptLogPath = scriptPath & "\" & IsoDateString(Now)
If Err.Number <> 0 Then
Wscript.Quit
End If
On Error Goto 0
'Main Processing Section
On Error Resume Next
PromptScriptStart
ProcessScript
If Err.Number <> 0 Then
MsgBox BuildError("Processing Script"), vbCritical, scriptBaseName
Wscript.Quit
End If
PromptScriptEnd
On Error Goto 0
'Functions Processing Section
'Name : ProcessScript -> Primary Function that controls all other script processing.
'Parameters : None ->
'Return : None ->
Function ProcessScript
Dim hostName, logName, startDateTime, endDateTime
Dim events, eventNumbers, i
hostName = wshNetwork.ComputerName
logName = "application"
eventNumbers = Array("1001","1")
startDateTime = DateAdd("n", -21600, Now)
'Query the event log for the eventID's within the specified event log name and date range.
If Not QueryEventLog(events, hostName, logName, eventNumbers, startDateTime) Then
Exit Function
End If
'Log the scripts results to the scripts
For i = 0 To UBound(events)
LogMessage events(i)
Next
End Function
'Name : QueryEventLog -> Primary Function that controls all other script processing.
'Parameters : results -> Input/Output : Variable assigned to an array of results from querying the event log.
' : hostName -> String containing the hostName of the system to query the event log on.
' : logName -> String containing the name of the Event Log to query on the system.
' : eventNumbers -> Array containing the EventID's (eventCode) to search for within the event log.
' : startDateTime -> Date\Time containing the date to finish searching at.
' : minutes -> Integer containing the number of minutes to subtract from the startDate to begin the search.
'Return : QueryEventLog -> Returns True if the event log was successfully queried otherwise returns False.
Function QueryEventLog(results, hostName, logName, eventNumbers, startDateTime)
Dim wmiDateTime, wmi, query, eventItems, eventItem
Dim timeWritten, eventDate, eventTime, description
Dim eventsDict, eventInfo, errorCount, i
QueryEventLog = False
errorCount = 0
If Not IsArray(eventNumbers) Then
eventNumbers = Array(eventNumbers)
End If
'Construct part of the WMI Query to account for searching multiple eventID's
query = "Select * from Win32_NTLogEvent Where Logfile = " & SQ(logName) & " And (EventCode = "
For i = 0 To UBound(eventNumbers)
query = query & SQ(eventNumbers(i)) & " Or EventCode = "
Next
On Error Resume Next
Set eventsDict = NewDictionary
If Err.Number <> 0 Then
LogError "Creating Dictionary Object"
Exit Function
End If
Set wmi = GetObject("winmgmts:{impersonationLevel=impersonate,(Security)}!\\" & hostName & "\root\cimv2")
If Err.Number <> 0 Then
LogError "Creating WMI Object to connect to " & DQ(hostName)
Exit Function
End If
'Create the "SWbemDateTime" Object for converting WMI Date formats. Supported in Windows Server 2003 & Windows XP.
Set wmiDateTime = CreateObject("WbemScripting.SWbemDateTime")
If Err.Number <> 0 Then
LogError "Creating " & DQ("WbemScripting.SWbemDateTime") & " object"
Exit Function
End If
'Build the WQL query and execute it.
wmiDateTime.SetVarDate startDateTime, True
query = Left(query, InStrRev(query, "'")) & ") And (TimeWritten >= " & SQ(wmiDateTime.Value) & ")"
Set eventItems = wmi.ExecQuery(query)
If Err.Number <> 0 Then
LogError "Executing WMI Query " & DQ(query)
Exit Function
End If
'Convert the property values of Each event found to a comma seperated string and add it to the dictionary.
For Each eventItem In eventItems
Do
timeWritten = ""
eventDate = ""
eventTime = ""
eventInfo = ""
timeWritten = ConvertWMIDateTime(eventItem.TimeWritten)
eventDate = FormatDateTime(timeWritten, vbShortDate)
eventTime = FormatDateTime(timeWritten, vbLongTime)
eventInfo = eventDate &
eventInfo = eventInfo & eventTime & ","
eventInfo = eventInfo & eventItem.SourceName & ","
eventInfo = eventInfo & eventItem.Type & ","
eventInfo = eventInfo & eventItem.Category & ","
eventInfo = eventInfo & eventItem.EventCode & ","
eventInfo = eventInfo & eventItem.User & ","
eventInfo = eventInfo & eventItem.ComputerName & ","
description = eventItem.Message
'Ensure the event description is not blank.
If IsNull(description) Then
description = "The event description cannot be found."
End If
description = Replace(description, vbCrLf, " ")
eventInfo = eventInfo & description
'Check if any errors occurred enumerating the event Information
If Err.Number <> 0 Then
LogError "Enumerating Event Properties from the " & DQ(logName) & " event log on " & DQ(hostName)
errorCount = errorCount + 1
Err.Clear
Exit Do
End If
'Remove all Tabs and spaces.
eventInfo = Trim(Replace(eventInfo, vbTab, " "))
Do While InStr(1, eventInfo, " ", vbTextCompare) <> 0
eventInfo = Replace(eventInfo, " ", " ")
Loop
'Add the Event Information to the Dictionary object if it doesn't exist.
If Not eventsDict.Exists(eventInfo) Then
eventsDict(eventsDict.Count) = eventInfo
End If
Loop Until True
Next
On Error Goto 0
If errorCount <> 0 Then
Exit Function
End If
results = eventsDict.Items
QueryEventLog = True
End Function
'Name : ConvertWMIDateTime -> Converts a WMI Date Time String into a String that can be formatted as a valid Date Time.
'Parameters : wmiDateTimeString -> String containing a WMI Date Time String.
'Return : ConvertWMIDateTime -> Returns a valid Date Time String otherwise returns a Blank String.
Function ConvertWMIDateTime(wmiDateTimeString)
Dim integerValues, i
'Ensure the wmiDateTimeString contains a "+" or "-" character. If it doesn't it is not a valid WMI date time so exit.
If InStr(1, wmiDateTimeString, "+", vbTextCompare) = 0 And _
InStr(1, wmiDateTimeString, "-", vbTextCompare) = 0 Then
ConvertWMIDateTime = ""
Exit Function
End If
'Replace any "." or "+" or "-" characters in the wmiDateTimeString and check each character is a valid integer.
integerValues = Replace(Replace(Replace(wmiDateTimeString, ".", ""), "+", ""), "-", "")
For i = 1 To Len(integerValues)
If Not IsNumeric(Mid(integerValues, i, 1)) Then
ConvertWMIDateTime = ""
Exit Function
End If
Next
'Convert the WMI Date Time string to a String that can be formatted as a valid Date Time value.
ConvertWMIDateTime = CDate(Mid(wmiDateTimeString, 5, 2) & "/" & _
Mid(wmiDateTimeString, 7, 2) & "/" & Left(wmiDateTimeString,
4) & " " & _
Mid(wmiDateTimeString, 9, 2) & ":" & _
Mid(wmiDateTimeString, 11, 2) & ":" & _
Mid(wmiDateTimeString, 13, 2))
End Function
'Name : NewDictionary -> Creates a new dictionary object.
'Parameters : None ->
'Return : NewDictionary -> Returns a dictionary object.
Function NewDictionary
Dim dict
Set dict = CreateObject("scripting.Dictionary")
dict.CompareMode = vbTextCompare
Set NewDictionary = dict
End Function
'Name : SQ -> Places single quotes around a string
'Parameters : stringValue -> String containing the value to place single quotes around
'Return : SQ -> Returns a single quoted string
Function SQ(ByVal stringValue)
If VarType(stringValue) = vbString Then
SQ = "'" & stringValue & "'"
End If
End Function
'Name : DQ -> Place double quotes around a string and replace double quotes
' : -> within the string with pairs of double quotes.
'Parameters : stringValue -> String value to be double quoted
'Return : DQ -> Double quoted string.
Function DQ (ByVal stringValue)
If stringValue <> "" Then
DQ = """" & Replace (stringValue, """", """""") & """"
Else
DQ = """"""
End If
End Function
'Name : IsoDateTimeString -> Generate an ISO date and time string from a date/time value.
'Parameters : dateValue -> Input date/time value.
'Return : IsoDateTimeString -> Date and time parts of the input value in "yyyy-mm-dd hh:mm:ss" format.
Function IsoDateTimeString(dateValue)
IsoDateTimeString = IsoDateString (dateValue) & " " & IsoTimeString (dateValue)
End Function
'Name : IsoDateString -> Generate an ISO date string from a date/time value.
'Parameters : dateValue -> Input date/time value.
'Return : IsoDateString -> Date part of the input value in "yyyy-mm-dd" format.
Function IsoDateString(dateValue)
If IsDate(dateValue) Then
IsoDateString = Right ("000" & Year (dateValue), 4) & "-" & _
Right ( "0" & Month (dateValue), 2) & "-" & _
Right ( "0" & Day (dateValue), 2)
Else
IsoDateString = "0000-00-00"
End If
End Function
'Name : IsoTimeString -> Generate an ISO time string from a date/time value.
'Parameters : dateValue -> Input date/time value.
'Return : IsoTimeString -> Time part of the input value in "hh:mm:ss" format.
Function IsoTimeString(dateValue)
If IsDate(dateValue) Then
IsoTimeString = Right ("0" & Hour (dateValue), 2) & ":" & _
Right ("0" & Minute (dateValue), 2) & ":" & _
Right ("0" & Second (dateValue), 2)
Else
IsoTimeString = "00:00:00"
End If
End Function
'Name : LogMessage -> Writes a message to a log file.
'Parameters : logPath -> String containing the full folder path and file name of the Log file without with file extension.
' : message -> String containing the message to include in the log message.
'Return : None ->
Function LogMessage(message)
If Not LogToCentralFile(scriptLogPath & ".csv", IsoDateTimeString(Now) & "," & message) Then
Exit Function
End If
End Function
'Name : LogError -> Writes an error message to a log file.
'Parameters : logPath -> String containing the full folder path and file name of the Log file without with file extension.
' : message -> String containing a description of the event that caused the error to occur.
'Return : None ->
Function LogError(message)
If Not LogToCentralFile(scriptLogPath & ".err", IsoDateTimeString(Now) & "," & BuildError(message)) Then
Exit Function
End If
End Function
'Name : BuildError -> Builds a string of information relating to the error object.
'Parameters: message -> String containnig the message that relates to the process that caused the error.
'Return : BuildError -> Returns a string relating to error object.
Function BuildError(message)
BuildError = "Error " & Err.Number & " (Hex " & Hex(Err.Number) & ") " & message & ". " & Err.Description
End Function
'Name : LogToCentralFile -> Attempts to Appends information to a central file.
'Parameters : logSpec -> Folder path, file name and extension of the central log file to append to.
' : message -> String to include in the central log file
'Return : LogToCentralFile -> Returns True if Successfull otherwise False.
Function LogToCentralFile(logSpec, message)
Dim attempts, objLogFile
LogToCentralFile = False
'Attempt to append to the central log file up to 10 times, as it may be locked by some other system.
attempts = 0
Do
On Error Resume Next
Set objLogFile = objFSO.OpenTextFile(logSpec, ForAppending, True)
If Err.Number = 0 Then
objLogFile.WriteLine message
objLogFile.Close
LogToCentralFile = True
Exit Function
End If
On Error Goto 0
Randomize
Wscript.sleep 1000 + Rnd * 100
attempts = attempts + 1
Loop Until attempts >= 10
End Function
'Name : PromptScriptStart -> Prompt when script starts.
'Parameters : None
'Return : None
Function PromptScriptStart
MsgBox "Now processing the " & DQ(Wscript.ScriptName) & " script.", vbInformation, scriptBaseName
End Function
'Name : PromptScriptEnd -> Prompt when script has completed.
'Parameters : None
'Return : None
Function PromptScriptEnd
MsgBox "The " & DQ(Wscript.ScriptName) & " script has completed successfully.", vbInformation, scriptBaseName
End Function
ThanksHere is a script that will copy the previous days events and save them to "C:\". The file name be yesterdays date ex "04-18-2010-Events.csv"
Const strComputer = "."
Dim objFSO, objWMIService, colEvents, objEvent, outFile
Dim dtmStartDate, dtmEndDate, DateToCheck, fileDate
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set dtmStartDate = CreateObject("WbemScripting.SWbemDateTime")
Set dtmEndDate = CreateObject("WbemScripting.SWbemDateTime")
'change the date form "/" to "-" so it can be used in the file name
fileDate = Replace(Date - 1,"/","-")
Set outFile = objFSO.CreateTextFile("C:\" & fileDate & "-Events.csv",True)
DateToCheck = Date - 1
dtmEndDate.SetVarDate Date, True
dtmStartDate.SetVarDate DateToCheck, True
Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set colEvents = objWMIService.ExecQuery _
("Select * from Win32_NTLogEvent Where TimeWritten >= '" _
& dtmStartDate & "' and TimeWritten < '" & dtmEndDate & "'")
For each objEvent in colEvents
outFile.WriteLine String(100,"-")
outFile.WriteLine "Category = " & objEvent.Category
outFile.WriteLine "ComputerName = " & objEvent.ComputerName
outFile.WriteLine "EventCode = " & objEvent.EventCode
outFile.WriteLine "Message = " & objEvent.Message
outFile.WriteLine "RecordNumber = " & objEvent.RecordNumber
outFile.WriteLine "SourceName = " & objEvent.SourceName
outFile.WriteLine "TimeWritten = " & objEvent.TimeWritten
outFile.WriteLine "Type = " & objEvent.Type
outFile.WriteLine "User = " & objEvent.User
outFile.WriteLine String(100,"-")
Next
outFile.Close
MsgBox "Finished!"
v/r LikeToCode....Mark the best replies as answers. -
New Event Log Errors L355-S7902
These two are recurring daily and showing up in Event Viewer>Windows>Diagnostic Performance>Operational. I have noticed that shutdown is too long so I have copied the errors.
Log Name: Microsoft-Windows-Diagnostics-Performance/Operational
Source: Microsoft-Windows-Diagnostics-Performance
Date: 8/11/2010 7:01:45 AM
Event ID: 203
Task Category: Shutdown Performance Monitoring
Level: Error
Keywords: Event Log
User: LOCAL SERVICE
Computer: Laptop
Description:
This service caused a delay in the system shutdown process:
File Name : RasMan
Friendly Name : Remote Access Connection Manager
Version : 6.0.6000.16386 (vista_rtm.061101-2205)
Total Time : 16925ms
Degradation Time : 16570ms
Incident Time (UTC) : 8/10/2010 7:44:55 PM
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Diagnostics-Performance" Guid="{cfc18ec0-96b1-4eba-961b-622caee05b0a}" />
<EventID>203</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>4007</Task>
<Opcode>41</Opcode>
<Keywords>0x8000000000010000</Keywords>
<TimeCreated SystemTime="2010-08-11T12:01:45.242Z" />
<EventRecordID>3327</EventRecordID>
<Correlation ActivityID="{00000000-9B8C-0001-2EDB-D6AD4C39CB01}" />
<Execution ProcessID="2008" ThreadID="2144" />
<Channel>Microsoft-Windows-Diagnostics-Performance/Operational</Channel>
<Computer>Laptop</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="StartTime">2010-08-10T19:44:55.195Z</Data>
<Data Name="NameLength">7</Data>
<Data Name="Name">RasMan</Data>
<Data Name="FriendlyNameLength">33</Data>
<Data Name="FriendlyName">Remote Access Connection Manager</Data>
<Data Name="VersionLength">39</Data>
<Data Name="Version">6.0.6000.16386 (vista_rtm.061101-2205)</Data>
<Data Name="TotalTime">16925</Data>
<Data Name="DegradationTime">16570</Data>
<Data Name="PathLength">32</Data>
<Data Name="Path">C:\Windows\System32\rasmans.dll</Data>
<Data Name="ProductNameLength">37</Data>
<Data Name="ProductName">Microsoft® Windows® Operating System</Data>
<Data Name="CompanyNameLength">22</Data>
<Data Name="CompanyName">Microsoft Corporation</Data>
</EventData>
</Event>
Log Name: Microsoft-Windows-Diagnostics-Performance/Operational
Source: Microsoft-Windows-Diagnostics-Performance
Date: 8/9/2010 5:06:37 PM
Event ID: 351
Task Category: Standby Performance Monitoring
Level: Error
Keywords: Event Log
User: LOCAL SERVICE
Computer: Laptop
Description:
This driver responded slower than expected to the resume request while servicing this device:
Driver File Name : \Driver\usbehci
Driver Friendly Name : EHCI eUSB Miniport Driver
Driver Version : 6.0.6001.18000 (longhorn_rtm.080118-1840)
Driver Total Time : 271ms
Driver Degradation Time : 95ms
Incident Time (UTC) : 8/9/2010 10:11:50 PM
Device Name : PCI\VEN_8086&DEV_293C&SUBSYS_FF661179&REV_03\3&21436425&0&D7
Device Friendly Name : Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293C
Device Total Time : 281ms
Device Degradation Time : 95ms
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Diagnostics-Performance" Guid="{cfc18ec0-96b1-4eba-961b-622caee05b0a}" />
<EventID>351</EventID>
<Version>1</Version>
<Level>2</Level>
<Task>4003</Task>
<Opcode>35</Opcode>
<Keywords>0x8000000000010000</Keywords>
<TimeCreated SystemTime="2010-08-09T22:06:37.507Z" />
<EventRecordID>3311</EventRecordID>
<Correlation ActivityID="{00000000-06C8-0000-2E38-015FCA37CB01}" />
<Execution ProcessID="236" ThreadID="996" />
<Channel>Microsoft-Windows-Diagnostics-Performance/Operational</Channel>
<Computer>Laptop</Computer>
<Security UserID="S-1-5-19" />
</System>
<EventData>
<Data Name="StartTime">2010-08-09T22:11:50.769Z</Data>
<Data Name="NameLength">16</Data>
<Data Name="Name">\Driver\usbehci</Data>
<Data Name="FriendlyNameLength">26</Data>
<Data Name="FriendlyName">EHCI eUSB Miniport Driver</Data>
<Data Name="VersionLength">42</Data>
<Data Name="Version">6.0.6001.18000 (longhorn_rtm.080118-1840)</Data>
<Data Name="TotalTime">271</Data>
<Data Name="DegradationTime">95</Data>
<Data Name="PathLength">40</Data>
<Data Name="Path">C:\Windows\system32\DRIVERS\usbehci.sys</Data>
<Data Name="ProductNameLength">37</Data>
<Data Name="ProductName">Microsoft® Windows® Operating System</Data>
<Data Name="CompanyNameLength">22</Data>
<Data Name="CompanyName">Microsoft Corporation</Data>
<Data Name="DeviceNameLength">61</Data>
<Data Name="DeviceName">PCI\VEN_8086&DEV_293C&SUBSYS_FF661179&REV_03\3&21436425&0&D7</Data>
<Data Name="DeviceFriendlyNameLength">58</Data>
<Data Name="DeviceFriendlyName">Intel(R) ICH9 Family USB2 Enhanced Host Controller - 293C</Data>
<Data Name="DeviceTotalTime">281</Data>
<Data Name="DeviceDegradationTime">95</Data>
</EventData>
</Event>
Hope I sent the right info this time.
Donna in ARSatellite L355-S7902
Donna, I wouldn't worry that Rasman (the Remote Access Connection Manager service) takes 17 seconds to shut down. And certainly the 0.095 seconds taken by the Usbehci.sys driver is inconsequential.
My Event Viewer is filled with stuff like this. Most users don't know to look here. Best to ignore it.
Pay more attention to what's in the Application and System logs under Windows Logs.
Hope I sent the right info this time.
In the future, leave out the stuff beginning with the line..
Event Xml:
-Jerry -
Hello,
The event log seems to be overwritten after a certain period of time... I have no vent in the event log > System before the 10/13/2014 even I have 4/7/2014 for the Application event log
1. How to have automatic backups?
2. anyway to retrieve the old logs?
3. How to expand the event log size?
Thanks,
Dom
System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity ManagerHi,
In addition, you can check the policy settings for Application event log in Group Policy Management Editor in the path below:
Computer Configuration\Administrative Templates\Windows Components\Event Log Service\Application
Best regards,
Susie -
ILOM and ipmitool event log differences
When I use ipmitool to get entries for the System Event Log, it returns "SEL has no entries".
If I run 'show /SP/logs/event/list' from the ILOM, it shows thousands of entries.
What 'System Event Log' is the ipmitool doc talking about?My educated guess is that you have a policy setting (GPO) on your production network that is disabling that functionality, and nothing on your dev network that explicitly enables it. As a result, it works (by default), moving it to production turns it off,
and moving it back to dev does nothing, so it stays off, but I have no idea where such a setting would be.
I do know for certain, though, that it's not in any WSUS/WUA settings.
Another approach might be to do a registry dump of the SYSTEM hive before and after moving the machine to the production network, and then do a diff on the before and after dumps.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds. -
Hi everyone,
I have a very "interesting" que from my customer.
He is asking me how much disk space is needed for an event log. Just one event log. Because I told him that IPS itself has limited space for logs and to archive it, please use IME installed on a server.
Does anyone know how much disk space is taken up for a single event log? LOL
RegardsThere is no fixed size. Different types of events will contain more or less data. If you turn on packet captures, the size will be much larger as well.
- Bob -
System Log Event ID 4321 every 30 seconds, system name conflict for a name not in use
-- Symptom --
System event log shows an error with event ID 4321 every 30 seconds:
The name "pac-1 :2d" could not be registered on the interface with IP address 172.20.51.206. The computer with the IP address 172.20.21.2 did not allow the name to be claimed by this computer.
-- Environment --
OS: Windows 7 x64 Enterprise
Network: Enterprise domain
DHCP: Yes
WINS: via DHCP
-- Additional information --
This computer was set up from an image. The image was built with the system being named 'pac-1'. This system's name was changed to 'pac-11' before (or possibly shortly after) joining the domain and now has a completely different name, and there
is no system on the network with the name 'pac-1' (there are 'pac-3', and other numbers, but no 'pac-1')
I have renamed the system with no change to the frequency of the error, and I cannot find 'pac-1' in the registry anywhere except for strings located in HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LANDesk\Inventory\LogonHistory\Logons that list prior logons.
I've done my google research and have found great information for plenty of other people's situations, just not this one. Any helpful advice is welcome.
Thank you!c0lorless wrote:
-- Symptom --
System event log shows an error with event ID 4321 every 30 seconds:
The name "pac-1 :2d" could not be registered on the
interface with IP address 172.20.51.206. The computer with the IP
address 172.20.21.2 did not allow the name to be claimed by this
computer.
-- Environment -- OS: Windows 7 x64 Enterprise
Network: Enterprise domain
DHCP: Yes
WINS: via DHCP
-- Additional information -- This computer was set up from an image. The image was built with the
system being named 'pac-1'. This system's name was changed to
'pac-11' before (or possibly shortly after) joining the domain and
now has a completely different name, and there is no system on the
network with the name 'pac-1' (there are 'pac-3', and other numbers,
but no 'pac-1')
I have renamed the system with no change to the frequency of the
error, and I cannot find 'pac-1' in the registry anywhere except for
strings located in
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LANDesk\Inventory\LogonHistory
\Logons that list prior logons.
I've done my google research and have found great information for
plenty of other people's situations, just not this one. Any helpful
advice is welcome.
Thank you!
I'd check my WINS server's registration entries, if they contain an
entry with that NETBIOS name. If the machine with the ip-address
172.20.21.2 is not your WINS server you need to check, what services
etc. are running on that machine. Also look if the domain/workgroup
name, which is used by this machine is correct and identical to all
other machines.
Wolfgang -
KB fix for print document name in event logs on Server 2012 and Server 2012R2
It appears as though the requested corrections to the documentation where never honored
Note After you apply the hotfix or update, you can show the printed document name in the event by enabling a specific Group Policy.
The policy name:
Computer Configuration \ Administrative Templates \ Printers
Allow job name in event logs
The Windows 8 / Server 2012 fix is:
Event ID 307 does not show the printed document name in Windows
http://support.microsoft.com/kb/2938013/en-us
2012R2 is in the April Roll up.
Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 Update: April 2014
http://support.microsoft.com/kb/2919355/en-us
Alan Morris Windows Printing TeamIn my simple test, I see that the Group-Policy does exist on 2012R2 but not for 2012.
I isolated the registry changes so I can update a 2012 only system... that text is below.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows NT\Printers]
"ShowJobTitleInEventLogs"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers]
"ShowJobTitleInEventLogs"=dword:00000001
I hope this helps others out since it took sometime to narrow this down. Thank you. -
I have received a naming conflict when starting up App Server 7.
I am using the Sun Studio Enterprise.
The abstract schema name for the entity bean is Billercenter and everywhere else that the bean is referenced is billerCenter.
I am thinking that the server is complaining about the name not matching in the application module, but it won't let me change out the name. The following error is from the server.log. Anyone know what the fix is?
[12/May/2004:16:59:13] SEVERE ( 4516): EJB5090: Exception in creating EJB container [javax.naming.NameAlreadyBoundException [Root exception is org.omg.CosNaming.NamingContextPackage.AlreadyBound: IDL:omg.org/CosNaming/NamingContext/AlreadyBound:1.0]]
[12/May/2004:16:59:13] SEVERE ( 4516): appId=billerCenter_EJBModule moduleName=billerCenter_EJBModule ejbName=billerCenter
[12/May/2004:16:59:13] SEVERE ( 4516): LDR5012: Jndi name conflict found in [billerCenter_EJBModule]. Jndi name [ejb/Billercenter] for bean [billerCenter] is already in use.
[12/May/2004:16:59:13] SEVERE ( 4516): LDR5013: Naming exception while creating EJB container:
javax.naming.NameAlreadyBoundException. Root exception is org.omg.CosNaming.NamingContextPackage.AlreadyBound: IDL:omg.org/CosNaming/NamingContext/AlreadyBound:1.0
at org.omg.CosNaming.NamingContextPackage.AlreadyBoundHelper.read(AlreadyBoundHelper.java:60)
at org.omg.CosNaming._NamingContextExtStub.bind(_NamingContextExtStub.java:222)
at com.sun.jndi.cosnaming.CNCtx.callBindOrRebind(CNCtx.java:552)
at com.sun.jndi.cosnaming.CNCtx.bind(CNCtx.java:588)
at javax.naming.InitialContext.bind(InitialContext.java:359)
at com.sun.enterprise.naming.NamingManagerImpl.publishObject(NamingManagerImpl.java:204)
at com.sun.enterprise.naming.NamingManagerImpl.publishObject(NamingManagerImpl.java:168)
at com.sun.ejb.containers.BaseContainer.initializeHome(BaseContainer.java:409)
at com.sun.ejb.containers.EntityContainer.initializeHome(EntityContainer.java:355)
at com.sun.ejb.containers.ContainerFactoryImpl.createContainer(ContainerFactoryImpl.java:230)
at com.iplanet.ias.server.AbstractLoader.loadEjbs(AbstractLoader.java:345)
at com.iplanet.ias.server.EJBModuleLoader.load(EJBModuleLoader.java:79)
at com.iplanet.ias.server.StandAloneEJBModulesManager.moduleDeployed(StandAloneEJBModulesManager.java:194)
at com.iplanet.ias.server.StandAloneEJBModulesManager.moduleDeployed(StandAloneEJBModulesManager.java:166)
at com.iplanet.ias.server.StandAloneEJBModulesManager.moduleDeployed(StandAloneEJBModulesManager.java:297)
at com.iplanet.ias.admin.event.AdminEventMulticaster.invokeModuleDeployEventListener(AdminEventMulticaster.java:464)
at com.iplanet.ias.admin.event.AdminEventMulticaster.handleModuleDeployEvent(AdminEventMulticaster.java:451)
at com.iplanet.ias.admin.event.AdminEventMulticaster.processEvent(AdminEventMulticaster.java:294)
at com.iplanet.ias.admin.event.AdminEventMulticaster.multicastEvent(AdminEventMulticaster.java:99)
at com.iplanet.ias.admin.server.core.channel.AdminChannelServer.sendNotification(AdminChannelServer.java:84)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:261)
at sun.rmi.transport.Transport$1.run(Transport.java:148)
at java.security.AccessController.doPrivileged(Native Method)
at sun.rmi.transport.Transport.serviceCall(Transport.java:144)
at sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:460)
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:701)
at java.lang.Thread.run(Thread.java:536)
[12/May/2004:16:59:13] WARNING ( 4516): CORE5020: Error while loading ejb module
[12/May/2004:16:59:13] WARNING ( 4516): ADM5603:Event listener error [Error while loading EJB module [billerCenter_EJBModule]. Please refer to the server log for more details. ]12/May/2004:16:59:13] SEVERE ( 4516): LDR5012: Jndi name conflict found in [billerCenter_EJBModule]. Jndi name [ejb/Billercenter] for bean [billerCenter] is already in use.
If you look at your deployment descriptor which should be ejb-jar.xml you s hould have more than 1 jndi entries which are identical for more than 1 ejbs .. -
Help! NameAlreadyBound Exception, JNDI name conflict
Hi, I am using EJB 3.0 and I really have no idea on using JNDI. I read several queries and answers on this problem but I dont know how to solve it. When i go to ejb-jar.xml, I see very little information. Please help! Urgently needed. Any ideas will do, thanks!
EJB5090: Exception in creating EJB container [javax.naming.NameAlreadyBoundException: Use rebind to override]
appId=ESCM moduleName=ESCM-ejb_jar ejbName=SystemfunctionBean
LDR5012: Jndi name conflict found in [ESCM]. Jndi name [AHL.SystemfunctionRemote] for bean [SystemfunctionBean] is already in use.
LDR5013: Naming exception while creating EJB container:
javax.naming.NameAlreadyBoundException: Use rebind to override
at com.sun.enterprise.naming.TransientContext.doBindOrRebind(TransientContext.java:279)
at com.sun.enterprise.naming.TransientContext.bind(TransientContext.java:219)
at com.sun.enterprise.naming.SerialContextProviderImpl.bind(SerialContextProviderImpl.java:98)
at com.sun.enterprise.naming.LocalSerialContextProviderImpl.bind(LocalSerialContextProviderImpl.java:77)
at com.sun.enterprise.naming.SerialContext.bind(SerialContext.java:372)
at com.sun.enterprise.naming.SerialContext.bind(SerialContext.java:387)
at javax.naming.InitialContext.bind(InitialContext.java:363)
at com.sun.enterprise.naming.NamingManagerImpl.publishObject(NamingManagerImpl.java:215)
at com.sun.enterprise.naming.NamingManagerImpl.publishObject(NamingManagerImpl.java:168)
at com.sun.ejb.containers.BaseContainer.initializeHome(BaseContainer.java:948)
at com.sun.ejb.containers.StatelessSessionContainer.initializeHome(StatelessSessionContainer.java:220)
at com.sun.ejb.containers.ContainerFactoryImpl.createContainer(ContainerFactoryImpl.java:671)
at com.sun.enterprise.server.AbstractLoader.loadEjbs(AbstractLoader.java:490)
at com.sun.enterprise.server.ApplicationLoader.load(ApplicationLoader.java:184)
at com.sun.enterprise.server.TomcatApplicationLoader.load(TomcatApplicationLoader.java:113)
at com.sun.enterprise.server.ApplicationManager.applicationDeployed(ApplicationManager.java:322)
at com.sun.enterprise.server.ApplicationManager.applicationDeployed(ApplicationManager.java:216)
at com.sun.enterprise.server.ApplicationManager.applicationDeployed(ApplicationManager.java:189)
at com.sun.enterprise.server.ApplicationManager.applicationEnabled(ApplicationManager.java:754)
at com.sun.enterprise.admin.event.AdminEventMulticaster.invokeApplicationDeployEventListener(AdminEventMulticaster.java:914)
at com.sun.enterprise.admin.event.AdminEventMulticaster.handleApplicationDeployEvent(AdminEventMulticaster.java:892)
at com.sun.enterprise.admin.event.AdminEventMulticaster.processEvent(AdminEventMulticaster.java:445)
at com.sun.enterprise.admin.event.AdminEventMulticaster.multicastEvent(AdminEventMulticaster.java:160)
at com.sun.enterprise.admin.server.core.AdminNotificationHelper.sendNotification(AdminNotificationHelper.java:128)
at com.sun.enterprise.admin.server.core.ConfigInterceptor.postInvoke(ConfigInterceptor.java:109)
at com.sun.enterprise.admin.util.proxy.ProxyClass.invoke(ProxyClass.java:97)
at $Proxy1.invoke(Unknown Source)
at com.sun.enterprise.admin.server.core.jmx.SunoneInterceptor.invoke(SunoneInterceptor.java:297)
at com.sun.enterprise.admin.jmx.remote.server.callers.InvokeCaller.call(InvokeCaller.java:56)
at com.sun.enterprise.admin.jmx.remote.server.MBeanServerRequestHandler.handle(MBeanServerRequestHandler.java:142)
at com.sun.enterprise.admin.jmx.remote.server.servlet.RemoteJmxConnectorServlet.processRequest(RemoteJmxConnectorServlet.java:109)
at com.sun.enterprise.admin.jmx.remote.server.servlet.RemoteJmxConnectorServlet.doPost(RemoteJmxConnectorServlet.java:180)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilterChain.java:397)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:184)
at org.netbeans.modules.web.monitor.server.MonitorFilter.doFilter(MonitorFilter.java:174)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:216)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:184)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:276)
at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:240)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:179)
at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:73)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:182)
at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
at com.sun.enterprise.web.VirtualServerPipeline.invoke(VirtualServerPipeline.java:120)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:137)
at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:239)
at com.sun.enterprise.web.connector.grizzly.ProcessorTask.invokeAdapter(ProcessorTask.java:667)
at com.sun.enterprise.web.connector.grizzly.ProcessorTask.processNonBlocked(ProcessorTask.java:574)
at com.sun.enterprise.web.connector.grizzly.ProcessorTask.process(ProcessorTask.java:844)
at com.sun.enterprise.web.connector.grizzly.ReadTask.executeProcessorTask(ReadTask.java:287)
at com.sun.enterprise.web.connector.grizzly.ReadTask.doTask(ReadTask.java:212)
at com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:252)
at com.sun.enterprise.web.connector.grizzly.WorkerThread.run(WorkerThread.java:75)
CORE5021: Application NOT loaded: [ESCM]12/May/2004:16:59:13] SEVERE ( 4516): LDR5012: Jndi name conflict found in [billerCenter_EJBModule]. Jndi name [ejb/Billercenter] for bean [billerCenter] is already in use.
If you look at your deployment descriptor which should be ejb-jar.xml you s hould have more than 1 jndi entries which are identical for more than 1 ejbs .. -
How to create custom infotype for training and event management
hai freinds can any one tell me how to create custom infotype for training and event managment with following fields
PS No PA0000-> PERNR
Name - PA0001 -> ENAME
IS PS.No. PA0001-> PS no. of Immediate Superior
IS name PA0001 -> ENAME
thanx in advance
afzalHi,
Your question is not clear for me. Since it is a TEM infotype, it could be a PD infotype.
If you wish to create a PD infotype, use transaction PPCI to create the infotype.
But before that you need to create a structure HRInnnn (where nnnn is the infotype number) with all the fields relevant for the infotype.
If you wish to create a PA infotype, use transaction PM01 to create the infotype.
But before that you may be required to create a strcuture PSnnnn (where nnnn is the infotype number) with all the fields relevant for the infotype.
Regards,
Srini
Maybe you are looking for
-
Can't Boot up with 9.2 cd, Can't select 9.2.2 as start up disc.
Needed to use classic app and needed to start computer up usint 9.2.2 (classic). Tried to select it as the start disc under system preference (under 10.4.6). Even though 9.2.2 is on the drive, it doesn't show up when looking in the start up preferenc
-
Delete purchase requisition with item category Subcontracting
Hi all, I need to delete a purchase requisition with item category = L (subcontracting). I am using already BAPI_REQUISITION_DELETE to delete other purchase requisitions but for the subcontracting it doest not work. In fact in the BAPI code you can s
-
Java Version 6 Update 24 Update Problem. Please help!
I am using Google Chrome, running on Windows 7 Home Premium, and have tried to update my Java to the latest version (V6.24), but no matter how many times I download the file, it does not update! The file will download, but when trying to run and inst
-
FOR UPDATE causing query to take very long to execute.. What can we do ??
SELECT cell_data FROM csv_workfile WHERE cell_row = p_r AND cell_column = p_c FOR UPDATE; this is our query. it take very long to execute. wat can we do to get it working properly. this is real real urgent . Ragards
-
Oracle database software on Intel based Solaris
Hi all, Any idea regarding Oracle 8i/9i software on Intel based Solaris. Can I use Oracle 8i Sparc Software for Intel based Solaris? Thanks