Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.
The MTA has issued an RPC Cancel call for thread 25, Locality Table Index: 195, Time (ms): 1301560, Cancel result: 0 [SANFRANCISCO MtaSend ncacn_ip_tcp:220.127.116.11 BASE IL] (14)
|English: Request a translation of the event description in plain English.|
|Concepts to understand:|
What is the role of the Exchange MTA Service?
See ME247782 for information about this event.
As per Microsoft: "The Windows NT RPC component on the receiving computer puts the association in the wrong address space. Therefore, when the next bind arrives on the correct address, it cannot find the association and sends a Bind NAK. To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition". See ME181721 for more details.
As per Microsoft, this event can be one of the effects of network connectivity problems between Exchange sites (especially after changes in network hardware). See ME189494 and ME225206 for details.
|Private comment: Subscribers only. See example of private comment|
|Links: ME181721, ME189494, ME225206, ME247782|
|Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...|
Send comments or solutions
- Notify me when updated