RE: Corrupted System Log Files on boot up

[Darrell Gorter[MSFT]]

Hello,
Can you try running your netcard at full duplex? and clear the event logs.
We have seen some issues with netcards running at half duplex and system
event log corruption.
Running the netcard at full duplex appears to resolve the issue.
Thanks,
Darrell Gorter[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
>Thread-Topic: Corrupted System Log Files on boot up
>thread-index: AcVnmUO9Aa1TDy6gS62ExYvZEj+euw==
>X-WBNR-Posting-Host: 12.160.78.122
>From: =?Utf-8?B?amFwc29u?= <jap...@discussions.microsoft.com>
>Subject: Corrupted System Log Files on boot up
>Date: Thu, 2 Jun 2005 10:34:01 -0700
>Lines: 20
>Message-ID: <6E2CE32C-D4B4-4C58...@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.setup
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.setup:7900
>X-Tomcat-NG: microsoft.public.windows.server.setup
>
>On Windows Server 2003 with SP1, the server has corrupted system log
files.
>
>Below are the steps I followed in correcting the problem.
>
>1. Disable the Event Viewer Service
>3. Restart the server
>4. Delete the C:\WINDOWS\system32\config\SysEvent.Evt file
>5. Re enable the event viewer service and see that the log files are
>no longer corrupt.
>6. I then restart or start every service on the server and the log files
>are still not corrupted.
>7. Restart the server and the log files are once again corrupted
>
>Is there anything I can check on or anything that might need to be cleaned
>out of the registry?
>The only non-Microsoft application loaded on the server was IBM's
Workplace
>Service Express version 2.0. This application is starting and stopping
>without corrupting the log files.
>
>
>

[Dave Patrick]

That's interesting. Why would the network interface have anything to do with
this issue?

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

[Darrell Gorter[MSFT]]

Hello Dave,
It has to do with an event message that is being sent to the event log by
the netcard driver, that is the same number as an event that can be
triggered by NTFS, so the data portion of the event message is not in the
format the system expects from the NTFS driver, so the event log gets
corrupted.
Thanks,
Darrell Gorter[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------

>From: "Dave Patrick" <ma...@Nospam.DSPatrick.com>
>References: <6E2CE32C-D4B4-4C58...@microsoft.com>
<e0mIW78Z...@TK2MSFTNGXA01.phx.gbl>
>Subject: Re: Corrupted System Log Files on boot up
>Date: Thu, 2 Jun 2005 18:09:03 -0600
>Lines: 75
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>Message-ID: <#HGr1B9Z...@TK2MSFTNGP14.phx.gbl>
>Newsgroups: microsoft.public.windows.server.setup
>NNTP-Posting-Host: 65.126.47.47
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.setup:7908
>X-Tomcat-NG: microsoft.public.windows.server.setup

[Dave Patrick]

Thanks Darrell. Did this come about with SP1? The reason I ask is this is
the third time I've come across this and it was always 2003 server with SP1

[Darrell Gorter[MSFT]]

Hello Dave,
Yes it is new for SP1. The only current workaround is to change the netcard
to run in full duplex mode.
Thanks,
Darrell Gorter[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------

>From: "Dave Patrick" <ma...@Nospam.DSPatrick.com>
>References: <6E2CE32C-D4B4-4C58...@microsoft.com>
<e0mIW78Z...@TK2MSFTNGXA01.phx.gbl>

<#HGr1B9Z...@TK2MSFTNGP14.phx.gbl>
<RuAFR89Z...@TK2MSFTNGXA01.phx.gbl>

>Subject: Re: Corrupted System Log Files on boot up

>Date: Thu, 2 Jun 2005 20:16:27 -0600
>Lines: 25

>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

>Message-ID: <uushCJ#ZFHA...@TK2MSFTNGP15.phx.gbl>
>Newsgroups: microsoft.public.windows.server.setup
>NNTP-Posting-Host: 65.126.47.47
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP15.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.setup:7910
>X-Tomcat-NG: microsoft.public.windows.server.setup

[Dave Patrick]

OK thanks. I pass the word along.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

""Darrell Gorter[MSFT]"" wrote:
| Hello Dave,

[japson]

Thanks a lot. That solved my problem.