Solved

Event Log Full with odd message

Posted on 2003-12-10
6
1,156 Views
Last Modified: 2012-05-04
The system portion of the event log is completely full with the following event:

Event Type:      Warning
Event Source:      LPDSVC
Event Category:      None
Event ID:      4007
Date:            12/7/2003
Time:            6:40:28 PM
User:            N/A
Computer:      SERVER
Description:
Illegal format used for commands received from 192.168.2.3 : service refused.

I'm stumped.  Any ideas?
0
Comment
Question by:timabe
  • 3
  • 2
6 Comments
 
LVL 24

Expert Comment

by:shivsa
ID: 9914105
0
 
LVL 18

Expert Comment

by:chicagoan
ID: 9914460
sounds like  a printer on 192.168.2.3 has a job(s) spooled that's not using the proper LPR format.

clean the spooler out
@echo off
net stop spooler
del %windir%\system32\spool\*.spl /Q
del %windir%\system32\spool\*.shd /Q
net start spooler

and check the printer settings
0
 

Author Comment

by:timabe
ID: 9916600
192.168.2.3 is one of our XP workstations.  I checked for .spl and .shd files and there were none.  The only printer this workstation has installed is on an external print server (192.168.2.200).  I think you are close, but I'm still getting the error.  Any other ideas?
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 18

Accepted Solution

by:
chicagoan earned 250 total points
ID: 9916817
LPDSVC is the Line Printer Daemon Service.
It's is the server side of TCP/IP printing for UNIX clients.
This message is stating that a job was received on port 515 and the commands contained in the print job are not understood.

did you check the server for a spooled job(s)
could another machine have had 192.169.2.3 at one time?
is there a reason you're running this service? (If not, stop it and disable it)
0
 
LVL 18

Expert Comment

by:chicagoan
ID: 9934830
WHat did you find out?
0
 

Author Comment

by:timabe
ID: 9935324
The TCP/IP printing service was running for no reason.  I stopped the service, and the error messages stopped.  Thanks for the help!
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question