Solved

Event Log Full with odd message

Posted on 2003-12-10
6
1,158 Views
Last Modified: 2012-05-04
The system portion of the event log is completely full with the following event:

Event Type:      Warning
Event Source:      LPDSVC
Event Category:      None
Event ID:      4007
Date:            12/7/2003
Time:            6:40:28 PM
User:            N/A
Computer:      SERVER
Description:
Illegal format used for commands received from 192.168.2.3 : service refused.

I'm stumped.  Any ideas?
0
Comment
Question by:timabe
  • 3
  • 2
6 Comments
 
LVL 24

Expert Comment

by:shivsa
ID: 9914105
0
 
LVL 18

Expert Comment

by:chicagoan
ID: 9914460
sounds like  a printer on 192.168.2.3 has a job(s) spooled that's not using the proper LPR format.

clean the spooler out
@echo off
net stop spooler
del %windir%\system32\spool\*.spl /Q
del %windir%\system32\spool\*.shd /Q
net start spooler

and check the printer settings
0
 

Author Comment

by:timabe
ID: 9916600
192.168.2.3 is one of our XP workstations.  I checked for .spl and .shd files and there were none.  The only printer this workstation has installed is on an external print server (192.168.2.200).  I think you are close, but I'm still getting the error.  Any other ideas?
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 18

Accepted Solution

by:
chicagoan earned 250 total points
ID: 9916817
LPDSVC is the Line Printer Daemon Service.
It's is the server side of TCP/IP printing for UNIX clients.
This message is stating that a job was received on port 515 and the commands contained in the print job are not understood.

did you check the server for a spooled job(s)
could another machine have had 192.169.2.3 at one time?
is there a reason you're running this service? (If not, stop it and disable it)
0
 
LVL 18

Expert Comment

by:chicagoan
ID: 9934830
WHat did you find out?
0
 

Author Comment

by:timabe
ID: 9935324
The TCP/IP printing service was running for no reason.  I stopped the service, and the error messages stopped.  Thanks for the help!
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco switch suggestion 5 65
E-mail delayed during DNS server reboot 8 52
Manage ASA using outside IP 14 62
FreeRADIUS vs Windows NPS (server 2016) 2 129
Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question