Parsing error IIS logs + cisco mars

Hello everyone. Have a problem configuring event logging from IIS server to MARS. All the configuration was done with the help of the cisco's guide:
http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/device/configuration/guide/cfgWebSv.html#wp1055969
Epilog from Snare was installed and configured. It collects events from log files of IIS normally as I can see it from the "latest events" screen in Epilog.
After checking this server's response in MARS I found out that MARS gets the events, but they are not recognized. The event type of messages is "Unknown Device Event Type" and the text of raw messages looks like this:
"Parsing error or event type unknown: <13>Apr 16 08:31:10 krr-sps50.europe.mittalco.com IISWebLog[0]:2013-04-16 05:30:58 139.53.2.30 POST /_vti_bin/webs.asmx - 443 EUROPE\aasoroka 10.21.29.85 Microsoft+Office/12.0+(Windows+NT+6.1;+Microsoft+Office+Excel+12.0.6662;+Pro) 200 0 0 15"
Can anyone help me with my problem, cause I don't have no more ideas what can be wrong. Thanks.

Hello Folks,
The error msg occurs when a Cisco device receives a Radius VSA that is not cisco. VSA 311 belongs to Microsoft so it might be that you are indeed not using a Cisco radius VSA. The error is not harmful.
https://technet.microsoft.com/en-us/library/cc958030.aspx
RADIUS: Attribute length = 12 (0xC)
RADIUS: Vendor ID = 311 (0x137)<<<<<<<<<<<<<<<<<<<
RADIUS: Vendor string = _
The way to stop seeing the error messages depend on the Cisco device in which you are seeing it, in nexus it is "Logging level user 2".
I hope it helps.

Similar Messages

XML Error [4]: parse error in all the IP Phones

Hi All,
While clicking on the Global Directory we are getting "XML Error [4]: Parse error " on the Cisco IP phone display,Global directory is pointed to the external server located in Same location .The issue started one week back .
I have attached the Wireshork output of the Phone ..
Regards,
Nishad KI

Great catch Aaron
To aid with your trouble shooting an example of one of the requests that is failing is:
http://10.106.32.64/CiscoIPServices/multidirectory/multidirectory.asp?id=4&action=list&l=a&f=a
From the URL a first name of 'a' and a last name of 'a' was entered, did something change recently that would affect this custom service?
I would assume this directory service queries LDAP/AD, you might want to check the user account it uses is still valid and have a look at the windows event logs on 10.106.32.64 for any hints.
Note: A restart of IIS on the directory application server might help to resolve this
Thanks
Stephen

Mars 6.1.2 custom parser error

Hello!
I have Cisco MARS 55 v. 6.1.2 (3466) 39.
I'm trying to import custom parser fo Radware. I've already done it with older version of MARS (6.0.X) and everything was ok.
But now I've getting "error processing package improt".
What can be the reason for this error?
Nick.

I've trying to ipmport others custom pasers from this forum, getting
the same problem.

An error occures during discovery checkpoint in Cisco MARS

Hello,
I am trying to add checkpoint firewall NGX R65 to Cisco MARS. Certificate was pulled successfully from checkpoint. But discovery doesn't work
When I start "Discovery" I get the message - "Error occured while discovering device". When I am choosing "View error" I see the message - "There is no Error Log for this Device".
As I understand this issue doesn't mean ok with discovery.
Could you tell me what can I see if discovery will be ok?
Is it obligatory to add route info?
Is it obligatory to add snmp?
Which is checkpoint OPSEC should I use for R65? Are NG AI or NG FP3 or NGX?
I use NGX.
I would be gratefully if you help me.
Thank you in advance

As long as you just need to collect/analyse logs from your FW you don't have to "Discover" the device. Just click 'Next' and 'Submit' to add device.

500 Errors in IIS Logs Preventing DB Connections - See Errors

Issue: A handful of users connecting to our database via IIS web page are saying they are getting "page cannot be dispalyed" error message as soon as they try to access the web page and make the initial database connection. I am seeing a significant number of 500 errors in the IIS logs. We turned tracing on for more details and came across th following two errors:
The first error -
Module Name : IIS Web Core
HTTPStatus : 500
HTTPReason : Internal Server Error
HTTPSubStatus: 0
ErrorCode : 2147943395
ErrorCode : The I/O operation has been aborted because of either a thread exit or an applicaiton request.
The second error -
ErrorCode : 2147943629
ErrorCode : An operation was attempted on a nonexistent network connection.
Specs: IIS 7 Windows 2008 64 Bit .NET 3.5 Service Pack 1 OO4O Connection version 10.2 Oracle 11G DB
Historically when seeing 500 errors in the logs it indicated a database issue - that was pretty obvious once we researched it further. These errors aren't quite as "clear cut". Any suggestions?

Unfortunatelly you are right. The real questions here are:
1. why does OEM silently "hate" the "magic" word "localhost", and what is it that makes difference between "localhost.localdomain" and "hostlocal.domainlocal" (or anything else)? They are just words consisting of letters. Furthermore, the "localhost" is traditional linux hostname for local machines with no network, only loopback interface, and Oracle should respect this fact
2. what does OEM's silent "animosity" towards the word "localhost" has to do with a perl script error like this: "ERROR: Max Count Value not set properly in file /usr/oracle/product/11.1.0/db_1/sysman/config/esa/database.properties line no. 44"?
3. why is such OEM's behaviour not documented in the installation manual? Why is there even no warning during OEM configuration, either with dbca or manually?
Therefore I consider this OEM's behaviour being a bug par excellence. Changing the name of host to something different than "localhost" is just a weird workaround. Let me remind you that Oracle is a multi-billion dollar company with more than $22 billion total revenues, and it cannot play the games with its customers ignoring such a thing.
NJ

Parser Error Message: It is an error to use a section registered as allowDefinition='MachineToApplication' beyond application level. This error can be caused by a virtual directory not being configured as an application in IIS.

I've copied a .NET application from an older 2008 server running IIS 7.0.600.16386 to a newer 2008 R2 server running 7.5.7600.16385. The .NET framework version is 4.0.30319. I've setup an application pool and copied the wwwroot directory.
I've checked for nested web.config files and I've been reading a lot about converting the site to an application. The older server running the application is still up and running and the configurations look identical. If I convert the site to an
application the icon changes and doesn't look like it does on the old server. I'm new and still learning the basics of programming and publishing applications. Can someone point me in the right direction? I've been on google for a few days
to no avail. Thanks.
Description:
An error occurred during the processing of a configuration file required to
service this request. Please review the specific error details below and modify
your configuration file appropriately.
Parser Error Message: It
is an error to use a section registered as
allowDefinition='MachineToApplication' beyond application level. This error can
be caused by a virtual directory not being configured as an application in IIS.
Line 20:       <add path="Telerik.Web.UI.DialogHandler.aspx" type="Telerik.Web.UI.DialogHandler" verb="*" validate="false" />
Line 21:     </httpHandlers>
Line 22:     <authentication mode="Forms">
Line 23:       <forms cookieless="UseCookies" loginUrl="~/AccessDenied.aspx" protection="All" name="TVHRFORMAUTH" timeout="180" slidingExpiration="true" />
Line 24:     </authentication>

Hi,
I agree with Tim that we can ask for better help in the following IIS forum.
IIS.NET forum
http://forums.iis.net/
Best regards,
Frank Shen

Plist parsing error when trying to log into iTunes Store

Can't log into App Store on my iPhone 5S, when trying to access my account on my MacBook I get "plist parsing error". Pls help.

Apple’s having trouble with the iTunes Store servers right now. Wait for them to resolve the issue.
(123891)

Can't log in to Apple store; 'plist parsing error' after STATUS_CODE_ERROR

Two week old 15" MacBook Pro. I had two updates this morning, xCode command line tools and iMovie.
The xCode command line tools installed and restarted the laptop.
After that, I couldn't log in to the Apple Store to install iMovie; I got a STATUS_CODE_ERROR in the lower left hand of the login dialog.
I quit the App Store app, then restarted it, and tried to install iMovie again.
I still couldn't log in to the Apple Store to install iMovie; I got a plist parsing error in the lower left hand of the login dialog.
There is an Apple Support Communities string for STATUS_CODE_ERROR that has 1800+ entries, seems to be global.

same,same
..all of mine- mac book, tablet and macbook pro didn´t connect to i-tunes, app store and so on. >status code error
May be it depends on selling to much things in too short time; new products!?
cloud connecting was possible!

SSL VPN Problem - ACL Parse Error

Hi there.
Testing some features in Cisco ASA SSL VPN(Clientless).
But when i connect to the portal, trying to login i get the following error, anybody seen this before?
It works if i ADD a ACL to the DAP, but dosn't if there is only a WEBACL applied??
It also works if i remove my "check" in "ssl-client" box in the global_policy (Group Policy).
6|Mar 20 2014|16:45:09|716002|||||Group <global_policy> User <[email protected]> IP <X.X.X.X> WebVPN session terminated: ACL Parse Error.
7|Mar 20 2014|16:45:09|720041|||||(VPN-Primary) Sending Delete WebVPN Session message user [email protected], IP X.X.X.X to standby unit
4|Mar 20 2014|16:45:09|716046|||||Group <global_policy> User <[email protected]> IP <X.X.X.X> User ACL <testcustomer_attribute> from AAA dosn't exist on the device, terminating connection.
7|Mar 20 2014|16:45:09|720041|||||(VPN-Primary) Sending Create ACL List message rule DAP-web-user-E4EAC90F, line 1 to standby unit
7|Mar 20 2014|16:45:09|720041|||||(VPN-Primary) Sending Create ACL Info message DAP-web-user-E4EAC90F to standby unit
6|Mar 20 2014|16:45:09|734001|||||DAP: User [email protected], Addr X.X.X.X, Connection Clientless: The following DAP records were selected for this connection: testcustomer_common_dap
7|Mar 20 2014|16:45:09|734003|||||DAP: User [email protected], Addr X.X.X.X: Session Attribute aaa.cisco.tunnelgroup = common_tunnelgroup
7|Mar 20 2014|16:45:09|734003|||||DAP: User [email protected], Addr X.X.X.X: Session Attribute aaa.cisco.username2 =
7|Mar 20 2014|16:45:09|734003|||||DAP: User [email protected], Addr X.X.X.X: Session Attribute aaa.cisco.username1 = [email protected]
7|Mar 20 2014|16:45:09|734003|||||DAP: User [email protected], Addr X.X.X.X: Session Attribute aaa.cisco.username = [email protected]
7|Mar 20 2014|16:45:09|734003|||||DAP: User [email protected], Addr X.X.X.X: Session Attribute aaa.cisco.grouppolicy = global_policy
7|Mar 20 2014|16:45:09|734003|||||DAP: User [email protected], Addr X.X.X.X: Session Attribute aaa.radius["11"]["1"] = testcustomer_attribute
6|Mar 20 2014|16:45:09|113008|||||AAA transaction status ACCEPT : user = [email protected]
6|Mar 20 2014|16:45:09|113009|||||AAA retrieved default group policy (global_policy) for user = [email protected]
6|Mar 20 2014|16:45:09|113004|||||AAA user authentication Successful : server = X.X.X.X : user = [email protected]

If you have implemented SSLVPN i18n then I think you are hitting bug.

Parser Error Message: Could not load file or assembly 'Oracle.DataAccess, V

I'm working on a 64 bit windows 7 ultimate system and I can't get the Oracle.DataAccess and Oracle.Web to load on the helloworld web page
See error below. At the very end i have the gacutil output. Also, the same dll's work on a 32 bit windows 7 system. I've also tried to load the beta version of the odac 64 bit
but it it gets a "java stopped working error"
Thanks in advance
WEB PAGE ERRORVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV
Server Error in '/test/helloworld' Application.
Configuration Error
Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.
Parser Error Message: Could not load file or assembly 'Oracle.DataAccess, Version=2.112.1.1, Culture=neutral, PublicKeyToken=89b483f429c47342' or one of its dependencies. The system cannot find the file specified.
Source Error:
Line 37:                     <add assembly="System.Xml.Linq, Version=3.5.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
Line 38:                     <add assembly="System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089"/>
Line 39:                     <add assembly="Oracle.DataAccess, Version=2.112.1.1, Culture=neutral, PublicKeyToken=89B483F429C47342"/>
Line 40:                     <add assembly="Oracle.Web, Version=2.112.1.1, Culture=neutral, PublicKeyToken=89B483F429C47342"/></assemblies>
Line 41:           </compilation>
Source File: C:\inetpub\wwwroot\test\helloworld\web.config Line: 39
Assembly Load Trace: The following information can be helpful to determine why the assembly 'Oracle.DataAccess, Version=2.112.1.1, Culture=neutral, PublicKeyToken=89b483f429c47342' could not be loaded.
=== Pre-bind state information ===
LOG: User = IIS APPPOOL\DefaultAppPool
LOG: DisplayName = Oracle.DataAccess, Version=2.112.1.1, Culture=neutral, PublicKeyToken=89b483f429c47342
(Fully-specified)
LOG: Appbase = file:///C:/inetpub/wwwroot/test/helloworld/
LOG: Initial PrivatePath = C:\inetpub\wwwroot\test\helloworld\bin
Calling assembly : (Unknown).
===
LOG: This bind starts in default load context.
LOG: Using application configuration file: C:\inetpub\wwwroot\test\helloworld\web.config
LOG: Using host configuration file: C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Aspnet.config
LOG: Using machine configuration file from C:\Windows\Microsoft.NET\Framework64\v2.0.50727\config\machine.config.
LOG: Post-policy reference: Oracle.DataAccess, Version=2.112.1.1, Culture=neutral, PublicKeyToken=89b483f429c47342
LOG: Attempting download of new URL file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/Temporary ASP.NET Files/test_helloworld/480589f5/895d06ab/Oracle.DataAccess.DLL.
LOG: Attempting download of new URL file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/Temporary ASP.NET Files/test_helloworld/480589f5/895d06ab/Oracle.DataAccess/Oracle.DataAccess.DLL.
LOG: Attempting download of new URL file:///C:/inetpub/wwwroot/test/helloworld/bin/Oracle.DataAccess.DLL.
LOG: Attempting download of new URL file:///C:/inetpub/wwwroot/test/helloworld/bin/Oracle.DataAccess/Oracle.DataAccess.DLL.
LOG: Attempting download of new URL file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/Temporary ASP.NET Files/test_helloworld/480589f5/895d06ab/Oracle.DataAccess.EXE.
LOG: Attempting download of new URL file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/Temporary ASP.NET Files/test_helloworld/480589f5/895d06ab/Oracle.DataAccess/Oracle.DataAccess.EXE.
LOG: Attempting download of new URL file:///C:/inetpub/wwwroot/test/helloworld/bin/Oracle.DataAccess.EXE.
LOG: Attempting download of new URL file:///C:/inetpub/wwwroot/test/helloworld/bin/Oracle.DataAccess/Oracle.DataAccess.EXE.
Version Information: Microsoft .NET Framework Version:2.0.50727.4927; ASP.NET Version:2.0.50727.4927
gacuil output
VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV
C:\Users\Administrator>C:\"Program Files"\"Microsoft SDKs"\Windows\v6.0A\Bin\x64
\gacutil.exe /l Oracle.DataAccess
Microsoft (R) .NET Global Assembly Cache Utility. Version 3.5.21022.8
Copyright (c) Microsoft Corporation. All rights reserved.
The Global Assembly Cache contains the following assemblies:
Oracle.DataAccess, Version=2.112.1.1, Culture=neutral, PublicKeyToken=89b483f4
29c47342, processorArchitecture=x86
Edited by: burk_s on Jun 6, 2010 2:42 PM

Hi Mubarak,
Please firstly make sure you installed SharePoint Foundation 2010 with SP2 in a Windows Server 2012 R2. Since only SP2 slipstream installations are supported on Windows Server 2012 R2
http://blogs.technet.com/b/stefan_gossner/archive/2014/05/03/sharepoint-2010-sp2-and-windows-server-2012-r2.aspx
http://blogs.technet.com/b/stefan_gossner/archive/2013/09/19/slipstream-version-of-sharepoint-foundation-2010-with-sp2-included.aspx
Regards,
Rebecca Tu
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Parse Error: Reason - Radius attribute not outbound

I am trying to add the RADIUS IETF Attribute - 'Login-LAT-Group' to a user using RDBMS sync but unable to do so.
I see the below error in the ACS logs -
Parse Error: Reason - Radius attribute not outbound
What am I missing ?

Refer " outbound radius attributes"
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/3.3/user/guide/ad.html

Error message help: webauthRedirect Parse Error

I'm seeing these messages show up in the Message Log over and over. I can't find much info on them.
*webauthRedirect: Mar 05 13:30:53.756: %EMWEB-3-PARSE_ERROR: webauth_redirect.c:954 parse error after reading. bytes parsed = 0 and bytes read = 128
*webauthRedirect: Mar 05 13:30:53.756: %EMWEB-3-PARSE_ERROR: webauth_redirect.c:954 parse error after reading. bytes parsed = 0 and bytes read = 58
*webauthRedirect: Mar 05 13:30:53.756: %LOG-3-Q_IND: webauth_redirect.c:954 parse error after reading. bytes parsed = 0 and bytes read = 128[...It occurred 3 times.!]
*webauthRedirect: Mar 05 13:30:53.734: %EMWEB-3-PARSE_ERROR: webauth_redirect.c:954 parse error after reading. bytes parsed = 0 and bytes read = 128
*webauthRedirect: Mar 05 13:30:53.733: %EMWEB-3-REQUEST_IS_NOT_GET_ERROR: webauth_redirect.c:1029 Invalid request not GET on client socket 75
*webauthRedirect: Mar 05 13:30:53.725: %EMWEB-3-PARSE_ERROR: webauth_redirect.c:954 parse error after reading. bytes parsed = 0 and bytes read = 58
Its not causing any problems that I can see. The web authorization for our guest network is still working fine.
My WLC is a 5508 running 7.2.103.0.

Hi, I have same messages if using CWA with ISE Guest portal. Also working fine for Windows7, but I have problem with iPhone/iPad - only blank white screen www.apple.com. Is this bug related to my problem?
Ladislav

Parsing vsa:not a cisco vendor id:311 – radius

Hi,
We are getting "parsing vsa:not a cisco vendor id:311 – radius" error logs from Nexus. What is the impact of this log?

Hello Folks,
The error msg occurs when a Cisco device receives a Radius VSA that is not cisco. VSA 311 belongs to Microsoft so it might be that you are indeed not using a Cisco radius VSA. The error is not harmful.
https://technet.microsoft.com/en-us/library/cc958030.aspx
RADIUS: Attribute length = 12 (0xC)
RADIUS: Vendor ID = 311 (0x137)<<<<<<<<<<<<<<<<<<<
RADIUS: Vendor string = _
The way to stop seeing the error messages depend on the Cisco device in which you are seeing it, in nexus it is "Logging level user 2".
I hope it helps.

Facing Parse Errors after upgrading database from 10g to 11g

Hi,
We are facing parse errors in the SQL's after upgrading database from 10g to 11g.
Kindly look into below parse errors.
********************************** Parse Error *****************************************************
Tue Aug 13 14:13:08 2013
kksSetBindType 16173533-2: parse err=1446 hd=3c73061fb8 flg=100476 cisid=173 sid=173 ciuid=173 uid=173
PARSE ERROR: ospid=15598, error=1446 for statement:
SELECT ROWID,ORGANIZATION_CODE,PADDED_CONCATENATED_SEGMENTS,PRIMARY_UOM_CODE,REVISION,SUBINVENTORY_CODE,TOTAL_QOH,NET,RSV,ATP,ORGANIZATION_NAME,ITEM_DESCRIPTION,INVENTORY_ITEM_ID,ORGANIZATION_ID,LOCATOR_ID,LOCATOR_TYPE,ITEM_LOCATOR_CONTROL,ITEM_LOT_CONTROL,ITEM_SERIAL_CONTROL FROM MTL_ONHAND_LOCATOR_V WHERE (INVENTORY_ITEM_ID=:1) and (ORGANIZATION_ID=:2) order by ORGANIZATION_CODE,SUBINVENTORY_CODE,REVISION, organization_code, padded_concatenated_segments
Tue Aug 13 14:13:10 2013
kksfbc 16173533: parse err=942 hd=3c387c4028 flg=20 cisid=3266 sid=3266 ciuid=3266 uid=3266
PARSE ERROR: ospid=29813, error=942 for statement:
Select feature from toad.toad_restrictions where user_name=USER or user_name in ( select ROLE from sys.session_roles)
kksfbc 16173533: parse err=942 hd=3c97d83648 flg=20 cisid=3266 sid=3266 ciuid=3266 uid=3266
PARSE ERROR: ospid=29813, error=942 for statement:
SELECT password
FROM SYS.USER$
WHERE 0=1
kksfbc 16173533: parse err=6550 hd=35185e4278 flg=20 cisid=3266 sid=3266 ciuid=3266 uid=3266
----- PL/SQL Stack -----
----- PL/SQL Call Stack -----
object      line object
handle    number name
319e277050        30 anonymous block
319e277050        57 anonymous block
PARSE ERROR: ospid=29813, error=6550 for statement:
BEGIN sys.dbms_profiler."146775420110782746251362632012"; END;
kksfbc 16173533: parse err=942 hd=3c142d8600 flg=20 cisid=3266 sid=3266 ciuid=3266 uid=3266
----- PL/SQL Stack -----
----- PL/SQL Call Stack -----
object      line object
handle    number name
319e277050        67 anonymous block
PARSE ERROR: ospid=29813, error=942 for statement:
SELECT 1 FROM plsql_profiler_data WHERE 0 = 1
Please help.
Regards
Suresh

Hi Suresh,
Apologies for misunderstanding..
Tue Aug 13 14:13:08 2013
kksSetBindType 16173533-2: parse err=1446 hd=3c73061fb8 flg=100476 cisid=173 sid=173 ciuid=173 uid=173
PARSE ERROR: ospid=15598, error=1446 for statement:
SELECT ROWID,ORGANIZATION_CODE,PADDED_CONCATENATED_SEGMENTS,PRIMARY_UOM_CODE,REVISION,SUBINVENTORY_CODE,TOTAL_QOH,NET,RSV,ATP,ORGANIZATION_NAME,ITEM_DESCRIPTION,INVENTORY_ITEM_ID,ORGANIZATION_ID,LOCATOR_ID,LOCATOR_TYPE,ITEM_LOCATOR_CONTROL,ITEM_LOT_CONTROL,ITEM_SERIAL_CONTROL FROM MTL_ONHAND_LOCATOR_V WHERE (INVENTORY_ITEM_ID=:1) and (ORGANIZATION_ID=:2) order by ORGANIZATION_CODE,SUBINVENTORY_CODE,REVISION, organization_code, padded_concatenated_segments
Assuming you see the above error message in the alert log file, which was your original post, follow the below steps:
1 Get the 'ospid' value from the error
2. Issue the below command:
SQL> select request_id,ORACLE_PROCESS_ID
2 from fnd_concurrent_requests
3 where request_id = 15598;
3. After obtaining the request_id
4, Query it from the front-end using SYSADMIN responsibility
Hopefully this should get you the respective concurrent report/program.
Thanks &
Best Regards,

CMD=Ping&log query is taking long time-taken when checked in IIS logs.... Exchange 2010 SP3..

Query regarding the ActiveSync and parameter time-taken from ActiveSync IIS logs.
Here what I see for from the logs.
[email protected] 45.101.90.185 Apple-iPad2C3/1202.410 200 0 0 1501129
443 [email protected] 45.101.90.185 Apple-iPad2C3/1202.410 200
0 0 22105
443 [email protected] 45.101.90.185 Apple-iPad2C3/1202.410 200
0 0 452
443 [email protected] 45.101.90.185 Apple-iPad2C3/1202.410 200
0 0 936
443 [email protected] 45.101.90.185 Apple-iPad2C3/1202.410 200
0 0 656238
In the above log, highlighted are the time-taken and I just want to check what is the ideal time-taken value, some value above should be causing some problem, like the one of the top 1501129 ?
?AND I see its for POST event and CMD=Ping&log query.......
We have Mobile Iron in the environment and we are seeing few timeout errors on MobileIron server and for users intermittently. They usually see below error... However we don't see any end users issues, but just want to get rid of below error. MobileIron guys
are pointing it to time-taken value which is high intermittently.
IOException connection to server [email protected] -- java.io.IOException:
awaitUninterruptibly was stopped by timeout
@BALA

Hi,
To understand more about the issue, I’d like to confirm the following information:
1. What’s your Exchange 2010 version?
http://support.microsoft.com/kb/2536517/en-us
2. Do you install other software, like SQL, on the same Exchange Server?
3. Change another admin account to access EMS.
Thanks,
Angela Shi
TechNet Community Support

Parsing error IIS logs + cisco mars

Similar Messages

Maybe you are looking for