Solved

Event Log Full with odd message

Posted on 2003-12-10
6
1,155 Views
Last Modified: 2012-05-04
The system portion of the event log is completely full with the following event:

Event Type:      Warning
Event Source:      LPDSVC
Event Category:      None
Event ID:      4007
Date:            12/7/2003
Time:            6:40:28 PM
User:            N/A
Computer:      SERVER
Description:
Illegal format used for commands received from 192.168.2.3 : service refused.

I'm stumped.  Any ideas?
0
Comment
Question by:timabe
  • 3
  • 2
6 Comments
 
LVL 24

Expert Comment

by:shivsa
ID: 9914105
0
 
LVL 18

Expert Comment

by:chicagoan
ID: 9914460
sounds like  a printer on 192.168.2.3 has a job(s) spooled that's not using the proper LPR format.

clean the spooler out
@echo off
net stop spooler
del %windir%\system32\spool\*.spl /Q
del %windir%\system32\spool\*.shd /Q
net start spooler

and check the printer settings
0
 

Author Comment

by:timabe
ID: 9916600
192.168.2.3 is one of our XP workstations.  I checked for .spl and .shd files and there were none.  The only printer this workstation has installed is on an external print server (192.168.2.200).  I think you are close, but I'm still getting the error.  Any other ideas?
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 18

Accepted Solution

by:
chicagoan earned 250 total points
ID: 9916817
LPDSVC is the Line Printer Daemon Service.
It's is the server side of TCP/IP printing for UNIX clients.
This message is stating that a job was received on port 515 and the commands contained in the print job are not understood.

did you check the server for a spooled job(s)
could another machine have had 192.169.2.3 at one time?
is there a reason you're running this service? (If not, stop it and disable it)
0
 
LVL 18

Expert Comment

by:chicagoan
ID: 9934830
WHat did you find out?
0
 

Author Comment

by:timabe
ID: 9935324
The TCP/IP printing service was running for no reason.  I stopped the service, and the error messages stopped.  Thanks for the help!
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
RDP Sonicwall 8 66
What's the problem with my DSL? 4 55
New VoIP phone system - what networking changes should be made 4 91
nexus filter logs 3 20
Let’s list some of the technologies that enable smooth teleworking. 
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now