Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9277 Source: MSExchangeMTA

Source
Level
Description
The MTA has issued an RPC Cancel call for thread 25, Locality Table Index: 195, Time (ms): 1301560, Cancel result: 0 [SANFRANCISCO MtaSend ncacn_ip_tcp:199.150.56.3[1089] BASE IL] (14)
Comments
 
See ME247782 for information about this event.
As per Microsoft: "The Windows NT RPC component on the receiving computer puts the association in the wrong address space. Therefore, when the next bind arrives on the correct address, it cannot find the association and sends a Bind NAK. To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition". See ME181721 for more details.
As per Microsoft, this event can be one of the effects of network connectivity problems between Exchange sites (especially after changes in network hardware). See ME189494 and ME225206 for details.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...