Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 1000 Source: Dhcp

Source
Level
Description
Your computer has lost the lease to its IP address <IP address> on the Network Card with network address <MAC address>.
Comments
 
See the following Q articles for information on how to troubleshoot this problem: ME325919, ME255836, ME244268, and ME173396.
I know for a fact that this problem it`s caused by using a second NIC to access broadband Internet. And it is caused by the server is trying to use the dynamically assigned IP address provided by the ISP for services like DNS. After the ISP refreshes or alters the provided IP the Internet dies a swift death and DNS no longer functions. You get this error message in Event viewer after also having event id 1003 "Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address (<MAC address). The following error occured: The semaphore timeout period has expired.". Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. You then get 8033 "the browser has forced an election on the network..." and no Internet from either Workstation or Server.

A temporary solution is to either disable and then re-enable the Local Connection for the 2nd NIC card and/or renew the IP address using the IPCONFIG /RENEW command in command prompt.
Various newsgroup comments about this problem:
- "Some possibilities: 1. The computer went into Suspend, Standby, or Hibernate during the
period of inactivity, and the network connection didn't wake up properly. 2. The system turned off the NIC to save power. Disabling and then enabling the network connection should get it
working again."
- "If you have it installed, ZoneAlarm firewall may cause this. See Zone Labs Networking FAQ"
This error occurs with my VDSL Internet access. If your computer is set to go into standby/sleep mode with broadband access running in the background and you wake your system up after an extended period of time your computer will try to obtain a new network address from a dhcp server (run by your ISP). The "Lease" on your previous Dhcp network address expired due to inactivity during your computer's sleep mode. I belive this condition is normal and only work-around I have found is to not let your computer system not go into sleep/standby mode.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...