Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 9316 Source: MSExchangeMTA

An RPC communications error occurred. No data was sent over the RPC connection. Locality table (LTAB) index: 94. Windows NT error: <error code>. The MTA will attempt to recover the RPC connection. [BASE IL KERNEL 64 520] (12)
See the links below for information about various error codes.
As per Microsoft: "When a message is sent from one Microsoft Exchange Server system to another using remote call procedure (RPC), the message might get stuck in the message transfer agent (MTA) queue. There was a failure when the local MTA initiated an RPCSend call to the remote MTA". See MSEX2K3DB for more details.
There was a failure when the local MTA initiated an RPC Send call to the remote MTA. It could be that when a message was sent from one Microsoft Exchange Server system to another via RPC, the message got stuck in the message transfer agent (MTA) queue.

Verify that the remote procedure call (RPC) service is running. Check network connectivity. If the error persists, stop and restart the message transfer agent service. If the error still persists, restart Microsoft Exchange Server. If necessary, use Network Monitor to capture network traces, then view these traces from Network Monitor for any network issue.

Error: 5 - access denied - A failure with the credentials provided at the time the MTA attempts to bind: check the permissions and account being used by the service. This issue can occur if there is a problem with the Exchange Server 5.5 service account or password that was specified when the Exchange 2000 server was installed in the Exchange Server 5.5 site and signifies that there is a security problem between the two servers. See ME217142, ME253307, ME257679, ME274770, ME279030, ME307459, ME323733 and ME327004.

Error code 14: This issue can occur if your computer does not have enough available Random Access Memory (RAM). See ME275468

Error code 1722: "Similar to Event ID 9318 Source MSExchangeMTA Type Warning. Occurs when Exchange server is unable to locate another Exchange server on the network. I have received both 9318 and 9322 when one of the servers is offline or when using dual-homed Exchange servers and Netbios over TCP/IP. Problem on dual-homed exchange servers resolved by adding specific interfaces to be used by each server to each Exchange server''s HOST and LMHOST file." See ME266312, ME303156, ME191594, ME279537. Sometimes this is caused by improperly configured DNS. Use nslookup to verify that you can resolve the host by fully qualified domain name (FQDN).

Error 1726: The remote procedure call failed.RPC_S_CALL_FAILED

Error 1753: This problem is also usually DNS, but on the bind back. Verify that the host reporting this problem is able to resolve the remote host by FQDN.
See ME247782, ME282115 and ME307459.

Error 1783: "Bad Stub Data" - This Problem occurs when the number of messages in the outbound DRAS connector's Queue exceeds the DRAS connector's configured threshold. By default, the Threshold value is set to 50. When the queue exceeds this threshold, an Additional association is generated. However, the sending MTA passes an Invalid context handle to the receiving MTA, which terminates the Connection because the handle is invalid.

Error 1818 = The remote procedure call was cancelled. RPC_S_CALL_CANCELLED

Error 9260: "This may be because the Exchange Server computer's connection to the network infrastructure has changed". See ME225206

Error 20437 no info
Error 20594 no info
Error: 27516 - no info
Error 34375 no info

See also the "MTA Troubleshooting Guide" link.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.