W510 - Event ID 5060

One of our staff is having trouble with their new W510 laptop, connecting to a specific wireless network. (Other users are able to connect to the same network without issue.) Looking through the event log, I see an informational event logged around that time, with ID 5060. The description of the event just says "...description for event id 5060 from source NetwNs64 cannot be found. ..." Searching online for that Event ID, I come up with something related to IIS, but that doesn't make sense on a (nearly) new windows 7 based lapotp. Here's what I got in the event details, though it's not much to go on --
- System - Provider
[ Name] NETwNs64
- EventID 5060
[ Qualifiers] 24576
Level 4 Task 0 Keywords 0x80000000000000 - TimeCreated
[ SystemTime] 2010-11-13T15:22:02.705894900Z
EventRecordID 10764 Channel System Computer XXXXXXXXX Security - EventData \Device\NDMP8 Intel(R) Centrino(R) Ultimate-N 6300 AGN 000008000200380000000000C4130060000000000000000000000000000000000000000000000000484D414341100000
Has anyone else seen this event logged? Does anyone know more detail about what's causing this and if it could be related to the user's wifi connectivity issues?

Swhitcher, NetwNs64.sys is Intel's WiFi driver. The best info I'm able to find is:
http://support.microsoft.com/kb/977519
Description of security events in Windows 7 and in Windows Server 2008 R2
Subcategory: System Integrity
ID
5060 Verification operation failed.
Which is right next to a bunch of cryptographic error messages. Bad password? Did you verify that the user was using the correct password? Also, go into Access Connections, click Details, and make sure the user is trying to connect to the access point you think they're trying to connect to. Preferably, do this at exactly the same physical location as another user who IS able to connect (but have that user disconnect immediately before you try to connect using the problem machine, to eliminate any contention for the access point, and to make sure a connection slot is available for that access point).
Good luck!

Similar Messages

Cisco CME and Calls through SIP provider

Hello, friends.
There are Cisco (C2801-ADVENTERPRISEK9_IVS-M), Version 15.1 (4) M7.
Telephones connected to SCCP, registered SIP from the provider.
When I try to call to test number 4444 through sip in debug I see:
*Feb 10 01:51:25.317: //53363/2739DFE79696/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP XXXXXXXXXXX:5060;branch=z9hG4bK100D02077;rport=5060
From: "TEST" <sip:[email protected]>;tag=131CC60C-1D40
To: <sip:[email protected]>;tag=b638310eda6e4a73cf10b7fe3c94c572.bef7
Call-ID: [email protected]
CSeq: 101 INVITE
Proxy-Authenticate: Digest realm="sip.zadarma.com", nonce="Uvf1OFL39Awnou/oMiaFQrf9jyybhFmf", qop="auth"
Server: kamailio (4.0.3 (x86_64/linux))
Content-Length: 0
*Feb 10 01:51:25.325: //53363/2739DFE79696/SIP/Msg/ccsipDisplayMsg:
Sent:
ACK sip:[email protected]:5060 SIP/2.0
Via: SIP/2.0/UDP XXXXXXXXXX:5060;branch=z9hG4bK100D02077
From: "TEST" <sip:[email protected]>;tag=131CC60C-1D40
To: <sip:[email protected]>;tag=b638310eda6e4a73cf10b7fe3c94c572.bef7
Date: Sun, 09 Feb 2014 21:51:25 GMT
Call-ID: [email protected]
Max-Forwards: 70
CSeq: 101 ACK
Allow-Events: telephone-event
Content-Length: 0
Cisco при этом зарегана у провайдера SIP
DC#show sip-ua register status
Line peer expires(sec) registered P-Associ-URI
Configuration:
voice service voip
ip address trusted list
ipv4 178.16.26.122 255.255.255.255
ipv4 144.76.42.108 255.255.255.255
ipv4 176.9.145.115 255.255.255.255
ipv4 5.9.108.25 255.255.255.255
ipv4 78.46.95.118 255.255.255.255
ipv4 89.249.23.194 255.255.255.255
ipv4 178.16.26.124 255.255.255.255
ipv4 176.9.85.133 255.255.255.255
ipv4 46.4.53.86 255.255.255.255
ipv4 5.9.84.165 255.255.255.255
ipv4 78.16.26.122 255.255.255.255
ipv4 77.235.62.222 255.255.255.255
allow-connections h323 to h323
allow-connections h323 to sip
allow-connections sip to h323
allow-connections sip to sip
sip
registrar server
voice class codec 1
codec preference 1 g711ulaw
codec preference 2 g729r8
codec preference 3 g711alaw
voice register global
max-dn 10
max-pool 10
voice register dn 1
number 150
voice register dn 2
number 151
voice translation-rule 9
rule 1 /^95/ //
voice translation-rule 1020
rule 1 /^.$/ /40232/
voice translation-profile outgoing
translate calling 1020
translate called 9
mgcp fax t38 ecm
mgcp profile default
dial-peer voice 2 voip
translation-profile outgoing outgoing
destination-pattern 95....
session protocol sipv2
session target sip-server
voice-class codec 1
no voice-class sip outbound-proxy
voice-class sip bind control source-interface FastEthernet0/0
voice-class sip bind media source-interface FastEthernet0/0
dtmf-relay rtp-nte
no vad
sip-ua
credentials username 40232 password 7 XXXXXXXXXX realm sip.zadarma.com
authentication username 40232 password 7 XXXXXXXXXXXX realm sip.zadarma.com
registrar dns:sip.zadarma.com:5060 expires 3600
sip-server dns:sip.zadarma.com:5060
connection-reuse
host-registrar
DC#show sip-ua register status
Line                             peer       expires(sec) registered P-Associ-URI
================================ ========== ============ ========== ============
150                              40001      12           no
40232                            -1         550          yes
SIP provider says cisco trying to call with the internal call number, and it is necessary in order that have an SIP provider:
Wrong Remote-Party-ID: "Vankuver" <sip:61@<my ip>>;party=calling;
Should be so sip:40232@<my ip>
Please help me!

Yes, I behind nat.
*Feb 10 18:11:53.425: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
INVITE sip:[email protected] SIP/2.0
Via: SIP/2.0/TCP 192.168.11.14:42294;branch=z9hG4bK-d8754z-e645887cf7416a27-1---d8754z-;rport
Max-Forwards: 70
Contact:
To: "954444"
From: "150";tag=7b409f06
Call-ID: ZjUzNjkwMWMyZDAyYmY1OWU2NjgzYzQwZjYyZWM5ZGU.
CSeq: 1 INVITE
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, SUBSCRIBE, INFO
Content-Type: application/sdp
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 314
v=0
o=- 2 2 IN IP4 192.168.11.14
s=CounterPath X-Lite 3.0
c=IN IP4 192.168.11.14
t=0 0
m=audio 5724 RTP/AVP 107 0 8 101
a=alt:1 2 : gNONJ/Dj BaLJhmb/ 10.200.16.55 5724
a=alt:2 1 : DQ3e8qud c1qVrWui 192.168.11.14 5724
a=fmtp:101 0-15
a=rtpmap:107 BV32/16000
a=rtpmap:101 telephone-event/8000
a=sendrecv
*Feb 10 18:11:53.477: //54341/204C30429C0D/SIP/Msg/ccsipDisplayMsg:
Sent:
INVITE sip:[email protected]:5060 SIP/2.0
Via: SIP/2.0/UDP 92.63.108.115:5060;branch=z9hG4bK1038E7FF
From: "" >;tag=169E6BC4-1E16
To: [email protected]>
Date: Mon, 10 Feb 2014 14:11:53 GMT
Call-ID: [email protected]
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE: 1800
Cisco-Guid: 0541864002-2442400227-2618163141-2285537806
User-Agent: Cisco-SIPGateway/IOS-12.x
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 101 INVITE
Timestamp: 1392041513
Contact: outside ip cisco cme:5060>
Expires: 180
Allow-Events: telephone-event
Max-Forwards: 69
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 262
v=0
o=CiscoSystemsSIP-GW-UserAgent 8076 2450 IN IP4 92.63.108.115
s=SIP Call
c=IN IP4 92.63.108.115
t=0 0
m=audio 18534 RTP/AVP 0 8 101
c=IN IP4 92.63.108.115
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
*Feb 10 18:11:53.481: //54340/204C30429C0D/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 100 Trying
Via: SIP/2.0/TCP 192.168.11.14:42294;branch=z9hG4bK-d8754z-e645887cf7416a27-1---d8754z-;rport
From: "150";tag=7b409f06
To: "954444"
Date: Mon, 10 Feb 2014 14:11:53 GMT
Call-ID: ZjUzNjkwMWMyZDAyYmY1OWU2NjgzYzQwZjYyZWM5ZGU.
CSeq: 1 INVITE
Allow-Events: telephone-event
Server: Cisco-SIPGateway/IOS-12.x
Content-Length: 0
*Feb 10 18:11:53.625: //54341/204C30429C0D/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 407 Proxy Authentication Required
Via: SIP/2.0/UDP outside ip cisco cme:5060;branch=z9hG4bK1038E7FF;rport=5060
From: "" ;tag=169E6BC4-1E16
To: [email protected]>;tag=9fedfddccf3bcc4a1975d2cdb2a664b8.7066
Call-ID: [email protected]
CSeq: 101 INVITE
Proxy-Authenticate: Digest realm="sip.zadarma.com", nonce="Uvja/1L42dNbKQpCc2GzgagslkjyE1Pn", qop="auth"
Server: kamailio (4.0.3 (x86_64/linux))
Content-Length: 0
*Feb 10 18:11:53.633: //54341/204C30429C0D/SIP/Msg/ccsipDisplayMsg:
Sent:
ACK sip:[email protected]:5060 SIP/2.0
Via: SIP/2.0/UDPoutside ip cisco cme:5060;branch=z9hG4bK1038E7FF
From: "150" [email protected]>;tag=169E6BC4-1E16
To: [email protected]>;tag=9fedfddccf3bcc4a1975d2cdb2a664b8.7066
Date: Mon, 10 Feb 2014 14:11:53 GMT
Call-ID: [email protected]
Max-Forwards: 70
CSeq: 101 ACK
Allow-Events: telephone-event
Content-Length: 0
*Feb 10 18:11:53.637: //54341/204C30429C0D/SIP/Msg/ccsipDisplayMsg:
Sent:
INVITE sip:[email protected]:5060 SIP/2.0
Via: SIP/2.0/UDPoutside ip cisco cme:5060;branch=z9hG4bK1038F25FC
From: "" ;tag=169E6BC4-1E16
To: [email protected]>
Date: Mon, 10 Feb 2014 14:11:53 GMT
Call-ID: [email protected]
Supported: 100rel,timer,resource-priority,replaces,sdp-anat
Min-SE: 1800
Cisco-Guid: 0541864002-2442400227-2618163141-2285537806
User-Agent: Cisco-SIPGateway/IOS-12.x
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
CSeq: 102 INVITE
Timestamp: 1392041513
Contact: :5060>
Expires: 180
Allow-Events: telephone-event
Proxy-Authorization: Digest username="40232",realm="sip.zadarma.com",uri="sip:[email protected]:5060",response="df38cd7f4af8e4a808fbbfdf5a7dd6a1",nonce="Uvja/1L42dNbKQpCc2GzgagslkjyE1Pn",cnonce="E701683F",qop=auth,algorithm=md5,nc=00000001
Max-Forwards: 69
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 262
v=0
o=CiscoSystemsSIP-GW-UserAgent 8076 2450 IN IP4 92.63.108.115
s=SIP Call
c=IN IP4 92.63.108.115
t=0 0
m=audio 18534 RTP/AVP 0 8 101
c=IN IP4 92.63.108.115
a=rtpmap:0 PCMU/8000
a=rtpmap:8 PCMA/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
*Feb 10 18:11:53.981: //54341/204C30429C0D/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 100 trying -- your call is important to us
Via: SIP/2.0/UDP 92.63.108.115:5060;branch=z9hG4bK1038F25FC;rport=5060
From: "" ;tag=169E6BC4-1E16
To: [email protected]>
Call-ID: [email protected]
CSeq: 102 INVITE
Server: kamailio (4.0.3 (x86_64/linux))
Content-Length: 0
*Feb 10 18:11:54.385: //54341/204C30429C0D/SIP/Msg/ccsipDisplayMsg:
Received:
SIP/2.0 200 OK
Via: SIP/2.0/UDP 92.63.X:5060;rport=5060;branch=z9hG4bK1038F25FC
Record-Route:
From: "k40232" ;tag=169E6BC4-1E16
To: [email protected]>;tag=as7e8de8e5
Call-ID: [email protected]
CSeq: 102 INVITE
Server: Zadarma Voip
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Contact:
Content-Type: application/sdp
Content-Length: 281
v=0
o=root 1942395501 1942395501 IN IP4 178.16.26.124
s=Asterisk PBX
c=IN IP4 178.16.26.124
t=0 0
m=audio 12164 RTP/AVP 8 0 101
a=rtpmap:8 PCMA/8000
a=rtpmap:0 PCMU/8000
a=rtpmap:101 telephone-event/8000
a=fmtp:101 0-16
a=silenceSupp:off - - - -
a=ptime:20
a=sendrecv
*Feb 10 18:11:54.409: //54341/204C30429C0D/SIP/Msg/ccsipDisplayMsg:
Sent:
ACK sip:[email protected]:5060 SIP/2.0
Via: SIP/2.0/UDP 92.63.xxxx.xxxx:5060;branch=z9hG4bK10390E63
From: "150" [email protected]>;tag=169E6BC4-1E16
To: [email protected]>;tag=as7e8de8e5
Date: Mon, 10 Feb 2014 14:11:53 GMT
Call-ID: [email protected]
Route:
Max-Forwards: 70
CSeq: 102 ACK
Proxy-Authorization: Digest username="40232",realm="sip.zadarma.com",uri="sip:[email protected]:5060",response="df38cd7f4af8e4a808fbbfdf5a7dd6a1",nonce="Uvja/1L42dNbKQpCc2GzgagslkjyE1Pn",cnonce="E701683F",qop=auth,algorithm=md5,nc=00000001
Allow-Events: telephone-event
Content-Length: 0
*Feb 10 18:11:54.429: //54340/204C30429C0D/SIP/Msg/ccsipDisplayMsg:
Sent:
SIP/2.0 200 OK
Via: SIP/2.0/TCP 192.168.11.14:42294;branch=z9hG4bK-d8754z-e645887cf7416a27-1---d8754z-;rport
From: "150";tag=7b409f06
To: "954444";tag=169E6F78-88E
Date: Mon, 10 Feb 2014 14:11:53 GMT
Call-ID: ZjUzNjkwMWMyZDAyYmY1OWU2NjgzYzQwZjYyZWM5ZGU.
CSeq: 1 INVITE
Allow: INVITE, OPTIONS, BYE, CANCEL, ACK, PRACK, UPDATE, REFER, SUBSCRIBE, NOTIFY, INFO, REGISTER
Allow-Events: telephone-event
Contact: :5060;transport=tcp>
Supported: replaces
Server: Cisco-SIPGateway/IOS-12.x
Supported: timer
Content-Type: application/sdp
Content-Disposition: session;handling=required
Content-Length: 193
v=0
o=CiscoSystemsSIP-GW-UserAgent 149 3396 IN IP4 92.63.108.115
s=SIP Call
c=IN IP4 92.63.108.115
t=0 0
m=audio 17190 RTP/AVP 8
c=IN IP4 92.63.108.115
a=rtpmap:8 PCMA/8000
a=ptime:20
*Feb 10 18:11:54.653: //-1/xxxxxxxxxxxx/SIP/Msg/ccsipDisplayMsg:
Received:
ACK sip:[email protected]:5060;transport=tcp SIP/2.0
Via: SIP/2.0/TCP 91.231.141.230:42294;branch=z9hG4bK-d8754z-95374017c126c928-1---d8754z-;rport
Max-Forwards: 70
Contact:
To: "954444";tag=169E6F78-88E
From: "150";tag=7b409f06
Call-ID: ZjUzNjkwMWMyZDAyYmY1OWU2NjgzYzQwZjYyZWM5ZGU.
CSeq: 1 ACK
User-Agent: X-Lite release 1104o stamp 56125
Content-Length: 0

Windows 7 Event ID 1530 User Profile Service Issues

I have a new Lenovo Thinkpad W510 running W7 32-bit.
I get Event ID 1530 warnings at every shutdown. Twice I have not been able to boot into my user profile and I get a "Configuring your desktop" message and put into a termporary profile and Event Viewer shows Errors for Event ID's 1508, 1511, 1515 and 1502. In each of the two cases, when I rebooted, I was able to get into my regular user profile. However, I take this issue seriously and would like to resolve it.
First of Two Event ID: 1530 Warnings:
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
10 user registry handles leaked from \Registry\User\S-1-5-21-576122558-3429696690-2773284673-1004:
Process 6204 (\Device\HarddiskVolume2\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004
Process 6204 (\Device\HarddiskVolume2\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004
Process 1752 (\Device\HarddiskVolume2\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1352 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1752 (\Device\HarddiskVolume2\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004\Software\Policies
Process 1752 (\Device\HarddiskVolume2\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
Process 1752 (\Device\HarddiskVolume2\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004\Software
Process 1752 (\Device\HarddiskVolume2\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1752 (\Device\HarddiskVolume2\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 1352 (\Device\HarddiskVolume2\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Second of Two Event ID: 1530 Warnings:
Description:
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-576122558-3429696690-2773284673-1004_Classes:
Process 1752 (\Device\HarddiskVolume2\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-576122558-3429696690-2773284673-1004_CLASSES
I don't have any applications open at shutdown per Windows Explorer. tvt_reg_monitor_svc.exe is a Lenovo application for monitoring registry activities. I don't know if that application is involved with my problems, but am suspicious.
Any assistance would really be appreciated.

I have a solution. It's not pretty!
In the process I lost some user data (recent docs) + the ability to create recent docs... I ticked and unticked the relevant checkboxes, restarted, and the 'recent programs' list began to re-populate.
There are some people who are having issues with auto-reconnection failing - this is not for you.
This is for people that don't like to see information events arguably incorrectly
identified as warnings.
The fix?
Computer mgmt has the data collector sets (under performance).
Under Event Trace Sessions you'll find EventLog-System, containing all the event log 'system' sources (I think).
You won't have permission to change this as an admin. You need to be the sys. I achieved this by using the sticky keys event-handler to launch taskmgr (I was testing alternatives to diskpart scripts to load a VHD @ startup)
REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe" /v Debugger /t REG_SZ /d "c:\windows\taskmgr.exe"
running that at a cmd prompt will allow you to 5-tap shift to load taskmgr- as SYSTEM (god).
from here run compmgmt.msc, stop eventlogsys, remove the wlan-autoconfig source, et voile.

SPA 504 sends Notify Event: Conference without contact header

Hi,
I am using SPA 504G in which i have enabled Notify Conference. SPA registered with broadsoft.
Now when i make conference by hitting conf softkey with one active call & one held call present, SPA 504G sends Notify with Event: Conference but without contact header. Broadsoft rensponce with "400 Contact issue".
When SPA 504g registerd with Freeswitch it responce with "481 Subscription does not exists".
pls suggest what should i do to make conference works in this scenerio?
Thanks.

Just for completeness - I tried to replay such scenario and I discovered that loop doesn't occur when the NOTIFY is rejected by "489 Bad event" response from PBX (it's more appropriate response for unknown events, of course, device should not flood network in any case). And/or "expires=0" in original NOTIFICATION may affect it.
Dan
<<<
SIP/2.0 484 Address incomplete
From: "6018" ;tag=8773d4554ea7044fo0
To: ;tag=as13c4f5f8
Call-ID: [email protected]
CSeq: 102 INVITE
Server: Asterisk PBX 1.8.20.1
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Reason: Q.850;cause=28
>>>
NOTIFY sip:A.B.250.1:5060 SIP/2.0
From: "6018" ;tag=d0e0a73c447c60bco0
To:
Call-ID: [email protected]
CSeq: 8816 NOTIFY
Max-Forwards: 70
Event: reserve-trunk;call-id=[email protected];expires=0
User-Agent: Cisco/SPA112-1.3.1(003)
Content-Length: 0
<<<
SIP/2.0 489 Bad event
From: "6018" ;tag=d0e0a73c447c60bco0
To: ;tag=as1965bbda
Call-ID: [email protected]
CSeq: 8816 NOTIFY
Server: Asterisk PBX 1.8.20.1
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Content-Length: 0

SPA122 SIP484 response causes excessive NOTIFY event: reserve-trunk

I've noticed when the SPA122 dials a call and receives a SIP 484 "Address Incomplete" response from the call agent, the call agent plays an announcement "call cannot be completed as dialed" and then the SPA plays what sounds like a dial-tone. It's actually playing the "Prompt tone" instead of a re-order or busy signal type of tone. During the "prompt tone" the SPA is sending out extremely excessive "NOTIFY event: reserve-trunk" messages to the call agent. Within 5 seconds it had send 25x NOTIFY messages and received 25x 404 not found messages. I have never seen the event "reserve-trunk" nor has google....
I have observed this issue under the newest firmware version 1.3.1-003 and the old 1.2.1-004 release. It sure sounds like this mass amount of NOTIFY messages sent out could've added to the catatonic-ness of v1.2.1-004.
Here's the part of the call flow where I observed the behavior:
21:46:19.871105 - From Metaswitch Call Agent
<---------------------------------------------
SIP/2.0 484 Address Incomplete
Call-ID: xxxx-xxxxxxx10.11.15.24
CSeq: 102 INVITE
From: "xxxxxxxxxx" <sip:xxxxxxxxxx@callagent.
voice.com>;tag=xxxxxxxxxxxxxx
To: <sip:[email protected]>
;tag=sip+xxxxxxxxxxxxxxx
Via: SIP/2.0/UDP 10.11.15.24:5060;
received=10.11.15.24;branch=xxxxxxxxxxxx
Content-Length: 0
Supported: resource-priority
Contact: <sip:10.1.81.180:5060>
Server: DC-SIP/2.0
Organization: MetaSwitch
21:46:19.925989 - From SPA122
--------------------------------------------->
ACK sip:xxxxxxxxxx@callagent.
voice.com:5060 SIP/2.0
Via: SIP/2.0/UDP 10.11.15.24:5060;branch=xxxxx
From: "xxxxxxxxxx" <sip:xxxxxxxxxx@callagent.
voice.com>;tag=xxxxxxxxxx
To: <sip:xxxxxxxxxx@callagent.
voice.com>;tag=sip+xxxxxxxxxxxxx
Call-ID: [email protected]
CSeq: 102 ACK
Max-Forwards: 70
Authorization: Digest username="xxxxxxxxxx",re
alm="callagent.voice.com",nonce="xxxxxxxxxxxx
",uri="sip:[email protected]
:5060",algorithm=MD5,response="xxxxxxxxxxxx
",qop=auth,nc=xxxxxx,cnonce="xxxxxxx"
Contact: "xxxxxxxxxx" <sip:[email protected]
:5060;ref=xxxxxxxxxx>
User-Agent: Cisco/SPA122-1.3.1(003)
Content-Length: 0
21:46:20.225619 - From SPA122
--------------------------------------------->
NOTIFY sip:callagent.voice.com:5060
SIP/2.0
Via: SIP/2.0/UDP 10.11.15.24:5060;branch=xxxxxx
From: "xxxxxxxxxx" <sip:xxxxxxxxxx@callagent.
voice.com>;tag=xxxxxxxxxxxx
To: <sip:callagent.voice.com>
Call-ID: [email protected]
CSeq: 20699 NOTIFY
Max-Forwards: 70
Event: reserve-trunk;call-id=xxxxxxxxxxxxxxxxx
@10.11.15.24;expires=10
User-Agent: Cisco/SPA122-1.3.1(003)
Content-Length: 0
21:46:20.227915 - From Metaswitch Call Agent
<---------------------------------------------
SIP/2.0 404 Not Found
Call-ID: [email protected]
CSeq: 20699 NOTIFY
From: "xxxxxxxxxx" <sip:xxxxxxxxxx@callagent.
voice.com>;tag=xxxxxxxxxxxx
To: <sip:callagent.voice.com>;tag=sip
+1+xxxxxxxxxxxxxx
Via: SIP/2.0/UDP 10.11.15.24:5060;received=10.11.
15.24;branch=xxxxxxxxxxxxxxxxx
Content-Length: 0
Server: DC-SIP/2.0
Organization: MetaSwitch
Has anyone else noticed this? I see this as an issue because it plays the wrong tone and it sends a mass amount of messages to the Call Agent that don't really apply to anything. Why are tnese being sent at all? What does "reserve-trunk" really do? Maybe it was meant for UC540 or CME??
I have a TAC case open for this issue.
Message was edited by: George Spanos

Just for completeness - I tried to replay such scenario and I discovered that loop doesn't occur when the NOTIFY is rejected by "489 Bad event" response from PBX (it's more appropriate response for unknown events, of course, device should not flood network in any case). And/or "expires=0" in original NOTIFICATION may affect it.
Dan
<<<
SIP/2.0 484 Address incomplete
From: "6018" ;tag=8773d4554ea7044fo0
To: ;tag=as13c4f5f8
Call-ID: [email protected]
CSeq: 102 INVITE
Server: Asterisk PBX 1.8.20.1
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Reason: Q.850;cause=28
>>>
NOTIFY sip:A.B.250.1:5060 SIP/2.0
From: "6018" ;tag=d0e0a73c447c60bco0
To:
Call-ID: [email protected]
CSeq: 8816 NOTIFY
Max-Forwards: 70
Event: reserve-trunk;call-id=[email protected];expires=0
User-Agent: Cisco/SPA112-1.3.1(003)
Content-Length: 0
<<<
SIP/2.0 489 Bad event
From: "6018" ;tag=d0e0a73c447c60bco0
To: ;tag=as1965bbda
Call-ID: [email protected]
CSeq: 8816 NOTIFY
Server: Asterisk PBX 1.8.20.1
Allow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, SUBSCRIBE, NOTIFY, INFO, PUBLISH
Supported: replaces, timer
Content-Length: 0

Issue with W510 hardlocking frequently

I recently purchased a W510 for mobile performing, and now I'm running into a real issue; the machine will hard lock itself at random, every 5min-1hour. Sometimes I have to pull the battery just to get a restart. I've turned off all the Lenovo services in an attempt to fix it, checked the event log; I can't find anything at all to explain it. I use a cooling pad and I don't even do anything too intensive.
I looked around on the forums but can't find a number to call; just the "certified support people", but some posts talk about people sending their laptops back to Lenovo. I'm confused here! How do I get this problem fixed? Do I open a ticket with Lenovo somehow or just take it to a repair shop? I don't want to be paying a dime for this >< Very frustrated with this!
Thanks in advance.

From my safety and warranty guide; www.lenovo.com/support/phone.

Customize hookflash event body

I'm trying to integrate the ATA's hookflash via SIP INFO with our Broadsoft platform but I'm running into an issue.
Broadsoft requires two things of the INFO message
1) Content type to be "application/broadsoft"
2) Event (body) to read "event hookflash"
I have been able to customize the content type via the "Hook flash MIME type" parameter (under the voice -> sip tab) but cannot see a way to modify the event body itself. It currently sends "signal=hf".
Is there a way to modify this behavior so that I can send something besides "signal=hf" in the event body?
Thanks
-Adam
Below is an example of the INFO message:
INFO sip:[email protected]52:5060;transport=udp SIP/2.0
Via: SIP/2.0/UDP 192.168.1.53:5060;branch=z9hG4bK-927d442a
From: "2001 User" <sip:[email protected]>;tag=6b39d0aa55093223o0
To: <sip:[email protected]>;tag=174806386-1375398561300
Call-ID: [email protected]
CSeq: 102 INFO
Max-Forwards: 70
User-Agent: Cisco/SPA112-1.3.2(014)
Content-Length: 11
Content-Type: application/broadsoft
Signal=hf

FYI - I'm in touch with Cisco and have verified that what I want cannot currently be done. I am in the process of working with them on a feature request.

Event 11, Communicator

Hi Team
I'm getting a warning (EVENT 11)in the event log frequently.
I have placed the General information of the event below.
A SIP request made by Communicator failed in an unexpected manner (status code 0). More information is contained in the following technical data:
RequestUri:   sip:[email protected];opaque=user:epid:Sg7DNDn2n1WZ8C0bO4zQLQAA;gruu
From:         sip:[email protected];tag=e9b71f3f89
To:           sip:[email protected];tag=8d968d818e
Call-ID:      82fe2c4de19b47ac83fa7605b4b2116b
Content-type: application/sdp;call-type=im
v=0
o=- 0 0 IN IP4 192.168.1.65
s=session
c=IN IP4 192.168.1.65
t=0 0
m=message 5060 sip null
a=accept-types:text/plain multipart/alternative image/gif text/rtf text/html application/x-ms-ink application/ms-imdn+xml text/x-msmsgsinvite
Response Data:
0 (null)
(null): 51004; reason="Action initiated by user";OriginalPresenceState="3000";CurrentPresenceState="3000";MeInsideUser="Yes";ConversationInitiatedBy="14";SourceNetwork="2";RemotePartyCanDoIM="Yes"
Resolution:
If this error continues to occur, please contact your network administrator. The network administrator can use a tool like winerror.exe from the Windows Resource Kit or lcserror.exe from the Office Communications Server Resource Kit in order to interpret any
error codes listed above.
Kind Regards,
Arun.

Please share the complete details of the event id 11
Do we have RCC configured for Lync 2010?
Does this happen for all user or just one user ?
Clean up the registry on the client and re-install Lync client and try ?
http://community.spiceworks.com/how_to/show/2763-resetting-lync-2010-client-preferences-to-defaults
PLEASE REMEMBER, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answered"

W510 lockup on startup

Frequently when I start my W510, the start up never gets past the ThinkPad screen that says press Thinkvantage button. This can happen with a cold start, restart or start from Hibernation.
I cannot say this for certain, but it appears to have something to do with having something plugged into the USB port. When working at my desk, I have a monitor and USB printer hooked up. The monitor has a KVM switch attached to switch the keyboard, mouse and monitor between 2 computers. If I unplug this and the printer then the computer will start. It also will start if I have these connected and press F1 to go through BIOS setting (I don't have to change any settings).
Has anyone else had this problem?

Jimbo wrote:
hahnebalboa wrote:
2. When I put the computer on hibernate or standby with an external monitor attached and then restart the computer on batteries without the external monitor attached, I get a totally blank screen once Windows starts... I cannot log on, change the display to internal screen or do anything.
That part is not at all surprising. That's like if you're happily walking down the sidewalk one moment, then with your next step you're suddenly about to walk off the edge of a cliff. You'll probably end up mangled at the bottom of the cliff after that.
That's what happens when you put the computer into a suspended state, then change certain equipment that's attached to it before waking it up. In that case, the system doesn't receive any of its normal hardware-generated interrupt events that occur when peripherals are plugged-in or unplugged while the computer is turned on. If you're very lucky, the computer will adapt. Otherwise, it'll be lying at the bottom of the cliff wiggling its legs, thinking it's still walking down the street.
The programmers would have had to specifically plan for such an occurrence, writing code to adapt to that. I'm a software developer, and given all the bugs surfacing in these computers nowadays, I wouldn't count on that. Try switching the display BEFORE putting the computer into any sort of suspended state, not WHILE it's suspended. Or instead just do a normal shutdown.
This falls under the category of practicing good juju. It doesn't matter if some other laptop, that you used to have, adapted to this situation. Juju is what matters. Practice good juju, or suffer.
I have no such problem with laptops from Dell or even older thinkpads. Normally when I and running with an external display I have the lid closed. If I hibernate and later open the lid to turn it on, it switches to the internal display, until I shut the lid.
There is no way out other than to connect to an external monitor. Even hard resetting the computer does not get it out of this state of looking for a non-existent external display. Clean design would return to the internal display if no external display is connected and the lid is open.
What is more annoying is that I often run both internal and external display when doing presentations. If I hibernate and restart with no external display I get nothing on the internal display.

W510: Sound Problem

I have weird problem with my w510. I am using Windows 7 64 bit.
The key on keyboard to mute/unmute is out of sync with OS icon i.e., when i unmute the sound from keyboard, the icon in windows taskbar turns to mute and when i mute the key from keyboard, it gets unmute on the OS.
Thats one problem. The second issue is that I don't hear any sound at all ... I just installed drivers from Lenovo sites and its still the same.
The Device Manager doesn't show any wrong installation.
Solved!
Go to Solution.

_em_
Great recommendation and troubleshooting from Adam! (Thanks!)
The out of sync icon is odd indeed. Assuming the system is under warranty, I agree, service is probably the next course of action - do give support a call.
If the system were out of warranty and you were going to tackle this yourself, I would carefully remove the keyboard, palmrest and keyboard bezel. Follow the speaker wiring from where it plugs into the system board and check for any pinched spots on the wiring. Sometimes a wire might get mis-routed, either in manufacturing or during a prior service event and is pinched between the plastic covers and the roll cage. The speakers can then wind up being shorted out.
Mark
ThinkPads: S30, T43, X60t, X1, W700ds, IdeaPad Y710, IdeaCentre: A300, IdeaPad K1
Mark Hopkins
Program Manager, Lenovo Social Media (Services)
twitter @lenovoforums
English Community Deutsche Community Comunidad en Español Русскоязычное Сообщество

Training and Event Management - report on list of cancelled courses

Hi All,
Is there any standard report available to get the list of cancelled courses (be it business event grp , type or business event) Would appreciate your inputs on this.
Kind regards
Sathya

S_AHR_61016216 - Cancellations per Attendee , i think there is no standard report for cencelation of business events, type and group.
for cancellations per attendee reports is available in the system.
good luck
Devi

How can I see Calendar event END times at a glance?

How can I display my Calendar event titles exactly as I type them? I do not want Calendar to remove duration from the titles of my events. Otherwise I can't see event END times at a glance in month view; only start times. How can I "trick" Calendar to just show my titles as I type them - as I always could before I upgraded. I used to be able to enter "Seminar 9am-5:45" and it would appear that way regardless of how or what I chose to enter (or not enter) for duration.
I am running OSX 10.9.3.

It's a bit weird, but if you type in the time info TWICE into the event title then Calendar uses/deletes one of them to populate the event details and leaves the other.
Apple - Mac OS X - Feedback

Event List view in iCal?

I would love to have an Event List view in iCal like I do on the calendar on my iPhone. Is there such a thing? The particular reason for wanting it (this time) is that one of the calendars in the ON MY MAC list has a number in a oval to the right.
I believe this is trying to tell me that there is a new event that I need to do something about. Problem is, I don't know where to find it.

ecernek,
There is no event list option on iCal like the one on the iPhone.
That number means that you have an event invitation. Use iCal>View>Show Notifications to choose what to do with the notification.

Can I show a color bar instead of a color bullet in iCal Monthly view for all my events in all calendars?

In the Monthly view of iCal the only events that show a color bar in the event is the Birthday Calendar. All other events in all my other calendars only show a color bullet next to the event (unless I click on that event which then shows as a color bar). I would like to know if it is possible for all the calendar events to have a color bar in the monthly view instead of just that tiny color bullet.

Greetings Judith,
Before making any attempts at deleting calendar data, backup what you have just in case:
Click on each calendar on the left hand side of iCal one at a time highlighting it's name and then going to File Export > Export and saving the resulting calendar file to a logical location for safekeeping.
iCal has an automated function located in iCal > Preferences > Advanced > Delete events "X" days after they have passed. By typing in a value for days you can tell iCal to delete all events before that time frame.
Example:
Today is 4-16-2012.
If I wanted to delete all events prior to 1 year ago (4-16-2011) I would type in "365" for the number of days.
Once you type in the number of days you want kept in iCal, close the preferences and then quit iCal.
Re-open iCal and check to see if the events are gone. If not you may want to leave it open for several minutes and then quit again.
Once the events are removed go back to iCal > Preferences > Advanced > Delete events "X" days after they have passed and make sure the check mark is removed to prevent future deletion.
Hope that helps.

Can you show at a glance which event images are in albums?

Say I had an event containing multiple similar but different images, is there a way to show in the grid view for example which images have already been used in one or more albums?
Would be handy to be able to select a 'show list of albums containing this image'dialogue box. I guess you could hide images you've used but that wouldn't work automatically, nor would any other tagging/rating.
Another approach would be to make albums containing everything in a given event, then move the images out of that album once used, just seems fiddly to me.
AC

AC
Would be handy to be able to select a 'show list of albums containing this image'dialogue box.
Yes it would and many people have suggested tit. Add your voice to the chorus at iPhoto Menu -> Provide Apple Feedback.
A workaround - and it's no better - is to go to an album and select al, then give all those pics a keyword. Then in grid view you can see which pics have the keyword. (View -> Keywords)
Regards
TD

W510 - Event ID 5060

Similar Messages

Maybe you are looking for