Solved

Event Log Full with odd message

Posted on 2003-12-10
6
1,160 Views
Last Modified: 2012-05-04
The system portion of the event log is completely full with the following event:

Event Type:      Warning
Event Source:      LPDSVC
Event Category:      None
Event ID:      4007
Date:            12/7/2003
Time:            6:40:28 PM
User:            N/A
Computer:      SERVER
Description:
Illegal format used for commands received from 192.168.2.3 : service refused.

I'm stumped.  Any ideas?
0
Comment
Question by:timabe
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 24

Expert Comment

by:shivsa
ID: 9914105
0
 
LVL 18

Expert Comment

by:chicagoan
ID: 9914460
sounds like  a printer on 192.168.2.3 has a job(s) spooled that's not using the proper LPR format.

clean the spooler out
@echo off
net stop spooler
del %windir%\system32\spool\*.spl /Q
del %windir%\system32\spool\*.shd /Q
net start spooler

and check the printer settings
0
 

Author Comment

by:timabe
ID: 9916600
192.168.2.3 is one of our XP workstations.  I checked for .spl and .shd files and there were none.  The only printer this workstation has installed is on an external print server (192.168.2.200).  I think you are close, but I'm still getting the error.  Any other ideas?
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
LVL 18

Accepted Solution

by:
chicagoan earned 250 total points
ID: 9916817
LPDSVC is the Line Printer Daemon Service.
It's is the server side of TCP/IP printing for UNIX clients.
This message is stating that a job was received on port 515 and the commands contained in the print job are not understood.

did you check the server for a spooled job(s)
could another machine have had 192.169.2.3 at one time?
is there a reason you're running this service? (If not, stop it and disable it)
0
 
LVL 18

Expert Comment

by:chicagoan
ID: 9934830
WHat did you find out?
0
 

Author Comment

by:timabe
ID: 9935324
The TCP/IP printing service was running for no reason.  I stopped the service, and the error messages stopped.  Thanks for the help!
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Websites pages will not open in any browser 7 58
hsrp tracking 2 64
Apple tv and connecting to wifi 7 56
Linksys EA8500 3 19
Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question