analyze Eventvwr

  • Thread starter Thread starter Mistake
  • Start date Start date
M

Mistake

Guest
hello all,

in eventwr sometimes we have
Data: 0000: 0000007a
microsoft says:

The data section of the events may contain important information for
troubleshooting. Change the view of the data section of the event from bytes
to words. Investigate the status code in the data words of the events. The
error code gives an additional hint for the reason why the event has been
logged.

At a command prompt, type Net Helpmsg ErrorNumber to obtain an explanation
of that error.

NET HELPMSG 0000007a cannot work

How to interpret this?
 
Re: analyze Eventvwr

Hello Mistake,

If you post the complete error from event viewer would be nice. So we can
have a look on this.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> hello all,
>
> in eventwr sometimes we have
> Data: 0000: 0000007a
> microsoft says:
> The data section of the events may contain important information for
> troubleshooting. Change the view of the data section of the event from
> bytes to words. Investigate the status code in the data words of the
> events. The error code gives an additional hint for the reason why the
> event has been logged.
>
> At a command prompt, type Net Helpmsg ErrorNumber to obtain an
> explanation of that error.
>
> NET HELPMSG 0000007a cannot work
>
> How to interpret this?
>
 
Re: analyze Eventvwr

hello, thank u

Event ID: 8032
Source: Browser
Type: Error
Description: The Browser service has failed to retrieve the backup list too
many times on transport \Device\Protocol_NetworkAdaptor. The backup browser
is stopping.
Data Words:
Data: 0000: 0000007a

just want to understand how to analyze the Data Words.

Thank u
 
Re: analyze Eventvwr

thank u but like I said above, Microsoft through their tutorial says :

The data section of the events may contain important information for
troubleshooting. Change the view of the data section of the event from bytes
to words. Investigate the status code in the data words of the events. The
error code gives an additional hint for the reason why the event has been
logged.

At a command prompt, type Net Helpmsg ErrorNumber to obtain an explanation
of that error.

and my Data is : 0000: 0000007a

so my question is how to use Net Helpmsg ErrorNumber with data word?

thank u

"Meinolf Weber" wrote:

> Hello Mistake,
>
> See here:
> http://support.microsoft.com/kb/135404
>
> Is the machine multihomed?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > 8032
> >
>
>
>
 
Re: analyze Eventvwr

In news:268F1302-3175-4BF0-8C37-9159A5C01FFB@microsoft.com,
Mistake <Mistake@discussions.microsoft.com> typed:
> thank u but like I said above, Microsoft through their tutorial says :
>
> The data section of the events may contain important information for
> troubleshooting. Change the view of the data section of the event
> from bytes to words. Investigate the status code in the data words of
> the events. The error code gives an additional hint for the reason
> why the event has been logged.
>
> At a command prompt, type Net Helpmsg ErrorNumber to obtain an
> explanation of that error.
>
> and my Data is : 0000: 0000007a
>
> so my question is how to use Net Helpmsg ErrorNumber with data word?
>
> thank u
>

Also, looking at the event viewer in Word view will shed some light, and
what it simply does is look at the data, which is in Hexadecimal, and give
you the decimal/character view. However when you get something like "Data:
0000: 0000007a", there is NO character equivalent other than looking up what
Hex 7a is equal to, which in this case wouldn't help in determining the
error.

In most cases we do not look at that part of the Event log message anyway,
rather look at the specific Event ID# and Source name. Meinolf provided a
link that directly explains the error. Main cause of this is a multihomed
machine, especially if it is a Browse Master, such as on a domain
controller. Multihomed domain controllers can cause numerous other issues as
well.

You can also lookup errors such as this at eventid.net. Here is what I
found, which the article Meinolf posted explains anyway, however sometimes
you can get a better perspective from contributors at eventid.net:

EventID 8032, Source = Browser:
http://eventid.net/display.asp?eventid=8032&eventno=118&source=BROWSER&phase=1

So coming back to the original question, is this machine multihomed?
Also, is it a domain controller?

--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Infinite Diversities in Infinite Combinations




The
 
Back
Top