TCP/IP Services Faulting - Loss of Connectivity David 01.07.2007 07:10:00 I'm seeing an error which leads to a total loss of local and remote connectivity the only cure for which appears to be a restart. This is a high load production server and any down time is critical. Event Type: Error Event Source: Application Error Event Category: None Event ID: 1001 Date: 01/07/2007 Time: 07:01:21 User: N/A Computer: SERVER Description: Fault bucket 156882893. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 42 75 63 6b 65 74 3a 20 Bucket: 0008: 31 35 36 38 38 32 38 39 15688289 0010: 33 0d 0a 3.. followed by Event Type: Information Event Source: Application Error Event Category: (100) Event ID: 1004 Date: 01/07/2007 Time: 07:01:23 User: N/A Computer: SERVER Description: Reporting queued error: faulting application tcpsvcs.exe, version 5.2.3790.0, faulting module unknown, version 0.0.0.0, fault address 0x00000103. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 41 70 70 6c 69 63 61 74 Applicat 0008: 69 6f 6e 20 46 61 69 6c ion Fail 0010: 75 72 65 20 20 74 63 70 ure tcp 0018: 73 76 63 73 2e 65 78 65 svcs.exe 0020: 20 35 2e 32 2e 33 37 39 5.2.379 0028: 30 2e 30 20 69 6e 20 75 0.0 in u 0030: 6e 6b 6e 6f 77 6e 20 30 nknown 0 0038: 2e 30 2e 30 2e 30 20 61 .0.0.0 a 0040: 74 20 6f 66 66 73 65 74 t offset 0048: 20 30 30 30 30 30 31 30 0000010 0050: 33 3 I've renamed the Type 1 Fonts registry key to [Type 1 Fonts] in accordance with KB article kb914048 but the value is set to default. Any assistance gratefully received. -- David [ at ] Solsletta

Re: TCP/IP Services Faulting - Loss of Connectivity "Claus" <cjobes[ at ]nova-tech.org> 01.07.2007 12:56:55 You don't give us much info about your server. Which flavor are you running? How is it set up (1 or 2 NICs)? If you have installed Windows2003 SP2, make sure you have the latest drivers for your NICs installed -- Claus "David" <David[ at ]discussions.microsoft.com> wrote in message news:4A74D590-C773-4286-B448-A38744CD3A60[ at ]microsoft.com... [Quoted Text] > I'm seeing an error which leads to a total loss of local and remote > connectivity the only cure for which appears to be a restart. This is a > high > load production server and any down time is critical. > > Event Type: Error > Event Source: Application Error > Event Category: None > Event ID: 1001 > Date: 01/07/2007 > Time: 07:01:21 > User: N/A > Computer: SERVER > Description: > Fault bucket 156882893. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 42 75 63 6b 65 74 3a 20 Bucket: > 0008: 31 35 36 38 38 32 38 39 15688289 > 0010: 33 0d 0a 3.. > > followed by > Event Type: Information > Event Source: Application Error > Event Category: (100) > Event ID: 1004 > Date: 01/07/2007 > Time: 07:01:23 > User: N/A > Computer: SERVER > Description: > Reporting queued error: faulting application tcpsvcs.exe, version > 5.2.3790.0, faulting module unknown, version 0.0.0.0, fault address > 0x00000103. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 41 70 70 6c 69 63 61 74 Applicat > 0008: 69 6f 6e 20 46 61 69 6c ion Fail > 0010: 75 72 65 20 20 74 63 70 ure tcp > 0018: 73 76 63 73 2e 65 78 65 svcs.exe > 0020: 20 35 2e 32 2e 33 37 39 5.2.379 > 0028: 30 2e 30 20 69 6e 20 75 0.0 in u > 0030: 6e 6b 6e 6f 77 6e 20 30 nknown 0 > 0038: 2e 30 2e 30 2e 30 20 61 .0.0.0 a > 0040: 74 20 6f 66 66 73 65 74 t offset > 0048: 20 30 30 30 30 30 31 30 0000010 > 0050: 33 3 > > I've renamed the Type 1 Fonts registry key to [Type 1 Fonts] in accordance > with KB article kb914048 but the value is set to default. > > Any assistance gratefully received. > -- > David [ at ] Solsletta

Re: TCP/IP Services Faulting - Loss of Connectivity David 01.07.2007 20:26:31 Claus Thanks for the prompt response. It's a Win2003SBS R1 with two NICs and the latest drivers are installed. This is a recent error that I've now seen on three of SBS Servers I look after but on this one it has become critical generally requring a restart. The others with less users (under 25) normally recover. When logging on the the console and error message reporting that TCP/IP Service have stopped is displayed and an error report is generated and sent. Hope this helps. -- David [ at ] Solsletta "Claus" wrote: [Quoted Text] > You don't give us much info about your server. Which flavor are you running? > How is it set up (1 or 2 NICs)? > > If you have installed Windows2003 SP2, make sure you have the latest drivers > for your NICs installed > > -- > Claus > "David" <David[ at ]discussions.microsoft.com> wrote in message > news:4A74D590-C773-4286-B448-A38744CD3A60[ at ]microsoft.com... > > I'm seeing an error which leads to a total loss of local and remote > > connectivity the only cure for which appears to be a restart. This is a > > high > > load production server and any down time is critical. > > > > Event Type: Error > > Event Source: Application Error > > Event Category: None > > Event ID: 1001 > > Date: 01/07/2007 > > Time: 07:01:21 > > User: N/A > > Computer: SERVER > > Description: > > Fault bucket 156882893. > > > > For more information, see Help and Support Center at > > http://go.microsoft.com/fwlink/events.asp. > > Data: > > 0000: 42 75 63 6b 65 74 3a 20 Bucket: > > 0008: 31 35 36 38 38 32 38 39 15688289 > > 0010: 33 0d 0a 3.. > > > > followed by > > Event Type: Information > > Event Source: Application Error > > Event Category: (100) > > Event ID: 1004 > > Date: 01/07/2007 > > Time: 07:01:23 > > User: N/A > > Computer: SERVER > > Description: > > Reporting queued error: faulting application tcpsvcs.exe, version > > 5.2.3790.0, faulting module unknown, version 0.0.0.0, fault address > > 0x00000103. > > > > For more information, see Help and Support Center at > > http://go.microsoft.com/fwlink/events.asp. > > Data: > > 0000: 41 70 70 6c 69 63 61 74 Applicat > > 0008: 69 6f 6e 20 46 61 69 6c ion Fail > > 0010: 75 72 65 20 20 74 63 70 ure tcp > > 0018: 73 76 63 73 2e 65 78 65 svcs.exe > > 0020: 20 35 2e 32 2e 33 37 39 5.2.379 > > 0028: 30 2e 30 20 69 6e 20 75 0.0 in u > > 0030: 6e 6b 6e 6f 77 6e 20 30 nknown 0 > > 0038: 2e 30 2e 30 2e 30 20 61 .0.0.0 a > > 0040: 74 20 6f 66 66 73 65 74 t offset > > 0048: 20 30 30 30 30 30 31 30 0000010 > > 0050: 33 3 > > > > I've renamed the Type 1 Fonts registry key to [Type 1 Fonts] in accordance > > with KB article kb914048 but the value is set to default. > > > > Any assistance gratefully received. > > -- > > David [ at ] Solsletta > > >

Re: TCP/IP Services Faulting - Loss of Connectivity David 01.07.2007 20:46:03 Sorry - meant to mention all the SPs and updates are applied. -- David [ at ] Solsletta "Claus" wrote: [Quoted Text] > You don't give us much info about your server. Which flavor are you running? > How is it set up (1 or 2 NICs)? > > If you have installed Windows2003 SP2, make sure you have the latest drivers > for your NICs installed > > -- > Claus > "David" <David[ at ]discussions.microsoft.com> wrote in message > news:4A74D590-C773-4286-B448-A38744CD3A60[ at ]microsoft.com... > > I'm seeing an error which leads to a total loss of local and remote > > connectivity the only cure for which appears to be a restart. This is a > > high > > load production server and any down time is critical. > > > > Event Type: Error > > Event Source: Application Error > > Event Category: None > > Event ID: 1001 > > Date: 01/07/2007 > > Time: 07:01:21 > > User: N/A > > Computer: SERVER > > Description: > > Fault bucket 156882893. > > > > For more information, see Help and Support Center at > > http://go.microsoft.com/fwlink/events.asp. > > Data: > > 0000: 42 75 63 6b 65 74 3a 20 Bucket: > > 0008: 31 35 36 38 38 32 38 39 15688289 > > 0010: 33 0d 0a 3.. > > > > followed by > > Event Type: Information > > Event Source: Application Error > > Event Category: (100) > > Event ID: 1004 > > Date: 01/07/2007 > > Time: 07:01:23 > > User: N/A > > Computer: SERVER > > Description: > > Reporting queued error: faulting application tcpsvcs.exe, version > > 5.2.3790.0, faulting module unknown, version 0.0.0.0, fault address > > 0x00000103. > > > > For more information, see Help and Support Center at > > http://go.microsoft.com/fwlink/events.asp. > > Data: > > 0000: 41 70 70 6c 69 63 61 74 Applicat > > 0008: 69 6f 6e 20 46 61 69 6c ion Fail > > 0010: 75 72 65 20 20 74 63 70 ure tcp > > 0018: 73 76 63 73 2e 65 78 65 svcs.exe > > 0020: 20 35 2e 32 2e 33 37 39 5.2.379 > > 0028: 30 2e 30 20 69 6e 20 75 0.0 in u > > 0030: 6e 6b 6e 6f 77 6e 20 30 nknown 0 > > 0038: 2e 30 2e 30 2e 30 20 61 .0.0.0 a > > 0040: 74 20 6f 66 66 73 65 74 t offset > > 0048: 20 30 30 30 30 30 31 30 0000010 > > 0050: 33 3 > > > > I've renamed the Type 1 Fonts registry key to [Type 1 Fonts] in accordance > > with KB article kb914048 but the value is set to default. > > > > Any assistance gratefully received. > > -- > > David [ at ] Solsletta > > >

Re: TCP/IP Services Faulting - Loss of Connectivity "Claus" <cjobes[ at ]nova-tech.org> 01.07.2007 20:56:10 David, I have not seen this one nor can I find any reference. Given that you see this on 3 SBS boxes I would look at what common third party software is installed on them. I would also look at hardware similarities, especially NIC cards. -- Claus "David" <David[ at ]discussions.microsoft.com> wrote in message news:FBA720E3-2125-4B18-B1E0-DD795A731AD4[ at ]microsoft.com... [Quoted Text] > Claus > > Thanks for the prompt response. It's a Win2003SBS R1 with two NICs and > the > latest drivers are installed. This is a recent error that I've now seen > on > three of SBS Servers I look after but on this one it has become critical > generally requring a restart. The others with less users (under 25) > normally > recover. When logging on the the console and error message reporting that > TCP/IP Service have stopped is displayed and an error report is generated > and > sent. > > Hope this helps. > -- > David [ at ] Solsletta > > > "Claus" wrote: > >> You don't give us much info about your server. Which flavor are you >> running? >> How is it set up (1 or 2 NICs)? >> >> If you have installed Windows2003 SP2, make sure you have the latest >> drivers >> for your NICs installed >> >> -- >> Claus >> "David" <David[ at ]discussions.microsoft.com> wrote in message >> news:4A74D590-C773-4286-B448-A38744CD3A60[ at ]microsoft.com... >> > I'm seeing an error which leads to a total loss of local and remote >> > connectivity the only cure for which appears to be a restart. This is >> > a >> > high >> > load production server and any down time is critical. >> > >> > Event Type: Error >> > Event Source: Application Error >> > Event Category: None >> > Event ID: 1001 >> > Date: 01/07/2007 >> > Time: 07:01:21 >> > User: N/A >> > Computer: SERVER >> > Description: >> > Fault bucket 156882893. >> > >> > For more information, see Help and Support Center at >> > http://go.microsoft.com/fwlink/events.asp. >> > Data: >> > 0000: 42 75 63 6b 65 74 3a 20 Bucket: >> > 0008: 31 35 36 38 38 32 38 39 15688289 >> > 0010: 33 0d 0a 3.. >> > >> > followed by >> > Event Type: Information >> > Event Source: Application Error >> > Event Category: (100) >> > Event ID: 1004 >> > Date: 01/07/2007 >> > Time: 07:01:23 >> > User: N/A >> > Computer: SERVER >> > Description: >> > Reporting queued error: faulting application tcpsvcs.exe, version >> > 5.2.3790.0, faulting module unknown, version 0.0.0.0, fault address >> > 0x00000103. >> > >> > For more information, see Help and Support Center at >> > http://go.microsoft.com/fwlink/events.asp. >> > Data: >> > 0000: 41 70 70 6c 69 63 61 74 Applicat >> > 0008: 69 6f 6e 20 46 61 69 6c ion Fail >> > 0010: 75 72 65 20 20 74 63 70 ure tcp >> > 0018: 73 76 63 73 2e 65 78 65 svcs.exe >> > 0020: 20 35 2e 32 2e 33 37 39 5.2.379 >> > 0028: 30 2e 30 20 69 6e 20 75 0.0 in u >> > 0030: 6e 6b 6e 6f 77 6e 20 30 nknown 0 >> > 0038: 2e 30 2e 30 2e 30 20 61 .0.0.0 a >> > 0040: 74 20 6f 66 66 73 65 74 t offset >> > 0048: 20 30 30 30 30 30 31 30 0000010 >> > 0050: 33 3 >> > >> > I've renamed the Type 1 Fonts registry key to [Type 1 Fonts] in >> > accordance >> > with KB article kb914048 but the value is set to default. >> > >> > Any assistance gratefully received. >> > -- >> > David [ at ] Solsletta >> >> >>

Re: TCP/IP Services Faulting - Loss of Connectivity "Merv Porter [SBS-MVP]" <mwport[ at ]no_spam_hotmail.com> 02.07.2007 00:15:50 Own suggested KB 897655 in the thread below, but the OP didn't respond so I'm not sure if the KB article helped. The KB basically says to call for the hotfix or upgrade to Windows 2003 SP2. TCPSVCS.EXE Crashes Event ID 1000 http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/28b09cf9f818ec6e/3ddbb9e97ebaf23c?lnk=st&q=Reporting+queued+error%3A+faulting+application+tcpsvcs.exe&rnum=1&hl=en#3ddbb9e97ebaf23c -- Merv Porter [SBS-MVP] ============================ "David" <David[ at ]discussions.microsoft.com> wrote in message news:4A74D590-C773-4286-B448-A38744CD3A60[ at ]microsoft.com... [Quoted Text] > I'm seeing an error which leads to a total loss of local and remote > connectivity the only cure for which appears to be a restart. This is a > high > load production server and any down time is critical. > > Event Type: Error > Event Source: Application Error > Event Category: None > Event ID: 1001 > Date: 01/07/2007 > Time: 07:01:21 > User: N/A > Computer: SERVER > Description: > Fault bucket 156882893. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 42 75 63 6b 65 74 3a 20 Bucket: > 0008: 31 35 36 38 38 32 38 39 15688289 > 0010: 33 0d 0a 3.. > > followed by > Event Type: Information > Event Source: Application Error > Event Category: (100) > Event ID: 1004 > Date: 01/07/2007 > Time: 07:01:23 > User: N/A > Computer: SERVER > Description: > Reporting queued error: faulting application tcpsvcs.exe, version > 5.2.3790.0, faulting module unknown, version 0.0.0.0, fault address > 0x00000103. > > For more information, see Help and Support Center at > http://go.microsoft.com/fwlink/events.asp. > Data: > 0000: 41 70 70 6c 69 63 61 74 Applicat > 0008: 69 6f 6e 20 46 61 69 6c ion Fail > 0010: 75 72 65 20 20 74 63 70 ure tcp > 0018: 73 76 63 73 2e 65 78 65 svcs.exe > 0020: 20 35 2e 32 2e 33 37 39 5.2.379 > 0028: 30 2e 30 20 69 6e 20 75 0.0 in u > 0030: 6e 6b 6e 6f 77 6e 20 30 nknown 0 > 0038: 2e 30 2e 30 2e 30 20 61 .0.0.0 a > 0040: 74 20 6f 66 66 73 65 74 t offset > 0048: 20 30 30 30 30 30 31 30 0000010 > 0050: 33 3 > > I've renamed the Type 1 Fonts registry key to [Type 1 Fonts] in accordance > with KB article kb914048 but the value is set to default. > > Any assistance gratefully received. > -- > David [ at ] Solsletta

Re: TCP/IP Services Faulting - Loss of Connectivity David 02.07.2007 16:06:03 Merv Nice to meet you again. SP2 is installed and that seems to supersede the hotfix. -- David [ at ] Solsletta "Merv Porter [SBS-MVP]" wrote: [Quoted Text] > Own suggested KB 897655 in the thread below, but the OP didn't respond so > I'm not sure if the KB article helped. The KB basically says to call for > the hotfix or upgrade to Windows 2003 SP2. > > TCPSVCS.EXE Crashes Event ID 1000 > http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/28b09cf9f818ec6e/3ddbb9e97ebaf23c?lnk=st&q=Reporting+queued+error%3A+faulting+application+tcpsvcs.exe&rnum=1&hl=en#3ddbb9e97ebaf23c > > -- > Merv Porter [SBS-MVP] > ============================ > > "David" <David[ at ]discussions.microsoft.com> wrote in message > news:4A74D590-C773-4286-B448-A38744CD3A60[ at ]microsoft.com... > > I'm seeing an error which leads to a total loss of local and remote > > connectivity the only cure for which appears to be a restart. This is a > > high > > load production server and any down time is critical. > > > > Event Type: Error > > Event Source: Application Error > > Event Category: None > > Event ID: 1001 > > Date: 01/07/2007 > > Time: 07:01:21 > > User: N/A > > Computer: SERVER > > Description: > > Fault bucket 156882893. > > > > For more information, see Help and Support Center at > > http://go.microsoft.com/fwlink/events.asp. > > Data: > > 0000: 42 75 63 6b 65 74 3a 20 Bucket: > > 0008: 31 35 36 38 38 32 38 39 15688289 > > 0010: 33 0d 0a 3.. > > > > followed by > > Event Type: Information > > Event Source: Application Error > > Event Category: (100) > > Event ID: 1004 > > Date: 01/07/2007 > > Time: 07:01:23 > > User: N/A > > Computer: SERVER > > Description: > > Reporting queued error: faulting application tcpsvcs.exe, version > > 5.2.3790.0, faulting module unknown, version 0.0.0.0, fault address > > 0x00000103. > > > > For more information, see Help and Support Center at > > http://go.microsoft.com/fwlink/events.asp. > > Data: > > 0000: 41 70 70 6c 69 63 61 74 Applicat > > 0008: 69 6f 6e 20 46 61 69 6c ion Fail > > 0010: 75 72 65 20 20 74 63 70 ure tcp > > 0018: 73 76 63 73 2e 65 78 65 svcs.exe > > 0020: 20 35 2e 32 2e 33 37 39 5.2.379 > > 0028: 30 2e 30 20 69 6e 20 75 0.0 in u > > 0030: 6e 6b 6e 6f 77 6e 20 30 nknown 0 > > 0038: 2e 30 2e 30 2e 30 20 61 .0.0.0 a > > 0040: 74 20 6f 66 66 73 65 74 t offset > > 0048: 20 30 30 30 30 30 31 30 0000010 > > 0050: 33 3 > > > > I've renamed the Type 1 Fonts registry key to [Type 1 Fonts] in accordance > > with KB article kb914048 but the value is set to default. > > > > Any assistance gratefully received. > > -- > > David [ at ] Solsletta > > >