Event ID: 6004

08-27-2007, 07:48 PM

I have a customer that has a Windows 2003 Std. server that is throwing Event
ID: 6004 - Source: EventLog. I've done a bit of trolling the Internet and MS
Newsgroups and only found the hoarde of references to a problem with McAfee
Anti-virus v.8.0. The customer system has never had McAfee installed and is
using Symanted A/V 10.1.5000.5 . Just for grins had the customer check for
the Registry Key cited in the fix for McAfee with no joy.... There's no real
impact to the server, just entries in the Server Log that they want to get
rid of. The errors were present before SP1 was installed. Updated to SP2 to
see if they went away...

Key software being run on client server:
- Windows 2003 Std. SP2
- Citrix Presentation Server 4.5 (Hotfix rollup package 01 installed)
- Citrix Access Gateway Enterprise Edition
- Crystal Reports9
- MS Access 2000 SR-1
- Quickbooks Ent. 7.0
- Symantec A/V 10.1.5000.5
- Symantec BE Remote Agent v.11.0.6235
- UPHClean 1.6.30

Event is listed below. Anybody got any ideas on this?? (sound of head
banging on wall...)

Event Type: Error
Event Source: EventLog
Event Category: None
Event ID: 6004
Date: 8/15/2007
Time: 3:38:51 AM
User: N/A
Computer: TERM2
Description:
A driver packet received from the I/O subsystem was invalid. The data is the
packet.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0c 00 e0 00 0e 00 00 00 ..Ã*.....
0008: a5 ea b1 b4 17 df c7 01 Â¥ÃªÂ±Â´.ÃŸÃ‡.
0010: 40 00 00 00 00 00 00 00 @.......
0018: 00 00 00 00 04 00 4e 00 ......N.
0020: 00 00 00 00 cb 0b 00 80 ....Ã‹..Â¬
0028: 00 00 00 00 10 00 00 c0 .......Ã€
0030: 00 00 00 00 00 00 00 00 ........
0038: 00 00 00 00 00 00 00 00 ........
0040: 4d 00 52 00 78 00 53 00 M.R.x.S.
0048: 6d 00 62 00 00 00 5c 00 m.b...\.
0050: 44 00 65 00 76 00 69 00 D.e.v.i.
0058: 63 00 65 00 5c 00 4c 00 c.e.\.L.
0060: 61 00 6e 00 6d 00 61 00 a.n.m.a.
0068: 6e 00 52 00 65 00 64 00 n.R.e.d.
0070: 69 00 72 00 65 00 63 00 i.r.e.c.
0078: 74 00 6f 00 72 00 00 00 t.o.r...
0080: 57 00 50 00 33 00 42 00 W.P.3.B.
0088: 00 00 4e 00 65 00 74 00 ..N.e.t.
0090: 42 00 54 00 5f 00 54 00 B.T._.T.
0098: 63 00 70 00 69 00 70 00 c.p.i.p.
00a0: 5f 00 7b 00 35 00 37 00 _.{.5.7.
00a8: 30 00 43 00 33 00 42 00 0.C.3.B.
00b0: 45 00 44 00 2d 00 44 00 E.D.-.D.
00b8: 46 00 37 00 36 00 2d 00 F.7.6.-.
00c0: 34 00 35 00 37 00 33 00 4.5.7.3.
00c8: 2d 00 39 00 43 00 38 00 -.9.C.8.
00d0: 34 00 2d 00 45 00 32 00 4.-.E.2.
00d8: 43 00 39 00 41 00 00 00 C.9.A...

Thanks,
Scooter

08-27-2007, 08:05 PM

Hello ScooterX,

In some artilces i read that wrong settings on the network card could produce
this error.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

> I have a customer that has a Windows 2003 Std. server that is throwing
> Event ID: 6004 - Source: EventLog. I've done a bit of trolling the
> Internet and MS Newsgroups and only found the hoarde of references to
> a problem with McAfee Anti-virus v.8.0. The customer system has never
> had McAfee installed and is using Symanted A/V 10.1.5000.5 . Just for
> grins had the customer check for the Registry Key cited in the fix for
> McAfee with no joy.... There's no real impact to the server, just
> entries in the Server Log that they want to get rid of. The errors
> were present before SP1 was installed. Updated to SP2 to see if they
> went away...
>
> Key software being run on client server:
> - Windows 2003 Std. SP2
> - Citrix Presentation Server 4.5 (Hotfix rollup package 01 installed)
> - Citrix Access Gateway Enterprise Edition
> - Crystal Reports9
> - MS Access 2000 SR-1
> - Quickbooks Ent. 7.0
> - Symantec A/V 10.1.5000.5
> - Symantec BE Remote Agent v.11.0.6235
> - UPHClean 1.6.30
> Event is listed below. Anybody got any ideas on this?? (sound of head
> banging on wall...)
>
> Event Type: Error
> Event Source: EventLog
> Event Category: None
> Event ID: 6004
> Date: 8/15/2007
> Time: 3:38:51 AM
> User: N/A
> Computer: TERM2
> Description:
> A driver packet received from the I/O subsystem was invalid. The data
> is the
> packet.
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 0c 00 e0 00 0e 00 00 00 ..à.....
> 0008: a5 ea b1 b4 17 df c7 01 ¥ê±´.ßÇ.
> 0010: 40 00 00 00 00 00 00 00 @.......
> 0018: 00 00 00 00 04 00 4e 00 ......N.
> 0020: 00 00 00 00 cb 0b 00 80 ....Ë..¬
> 0028: 00 00 00 00 10 00 00 c0 .......À
> 0030: 00 00 00 00 00 00 00 00 ........
> 0038: 00 00 00 00 00 00 00 00 ........
> 0040: 4d 00 52 00 78 00 53 00 M.R.x.S.
> 0048: 6d 00 62 00 00 00 5c 00 m.b...\.
> 0050: 44 00 65 00 76 00 69 00 D.e.v.i.
> 0058: 63 00 65 00 5c 00 4c 00 c.e.\.L.
> 0060: 61 00 6e 00 6d 00 61 00 a.n.m.a.
> 0068: 6e 00 52 00 65 00 64 00 n.R.e.d.
> 0070: 69 00 72 00 65 00 63 00 i.r.e.c.
> 0078: 74 00 6f 00 72 00 00 00 t.o.r...
> 0080: 57 00 50 00 33 00 42 00 W.P.3.B.
> 0088: 00 00 4e 00 65 00 74 00 ..N.e.t.
> 0090: 42 00 54 00 5f 00 54 00 B.T._.T.
> 0098: 63 00 70 00 69 00 70 00 c.p.i.p.
> 00a0: 5f 00 7b 00 35 00 37 00 _.{.5.7.
> 00a8: 30 00 43 00 33 00 42 00 0.C.3.B.
> 00b0: 45 00 44 00 2d 00 44 00 E.D.-.D.
> 00b8: 46 00 37 00 36 00 2d 00 F.7.6.-.
> 00c0: 34 00 35 00 37 00 33 00 4.5.7.3.
> 00c8: 2d 00 39 00 43 00 38 00 -.9.C.8.
> 00d0: 34 00 2d 00 45 00 32 00 4.-.E.2.
> 00d8: 43 00 39 00 41 00 00 00 C.9.A...
> Thanks,
> Scooter

08-27-2007, 08:22 PM

True... forgot to mention that there is another older MSKB regarding: Invalid
LAA in NIC Configuration. Unfortunately, that has been covered as well.
We've even gone as far as deleting the NIC and scrubbing the registry for the
NIC drivers and resetting the IP stack, still no joy...

Scooter

"Meinolf Weber" wrote:

> Hello ScooterX,
>
> In some artilces i read that wrong settings on the network card could produce
> this error.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
>
> > I have a customer that has a Windows 2003 Std. server that is throwing
> > Event ID: 6004 - Source: EventLog. I've done a bit of trolling the
> > Internet and MS Newsgroups and only found the hoarde of references to
> > a problem with McAfee Anti-virus v.8.0. The customer system has never
> > had McAfee installed and is using Symanted A/V 10.1.5000.5 . Just for
> > grins had the customer check for the Registry Key cited in the fix for
> > McAfee with no joy.... There's no real impact to the server, just
> > entries in the Server Log that they want to get rid of. The errors
> > were present before SP1 was installed. Updated to SP2 to see if they
> > went away...
> >
> > Key software being run on client server:
> > - Windows 2003 Std. SP2
> > - Citrix Presentation Server 4.5 (Hotfix rollup package 01 installed)
> > - Citrix Access Gateway Enterprise Edition
> > - Crystal Reports9
> > - MS Access 2000 SR-1
> > - Quickbooks Ent. 7.0
> > - Symantec A/V 10.1.5000.5
> > - Symantec BE Remote Agent v.11.0.6235
> > - UPHClean 1.6.30
> > Event is listed below. Anybody got any ideas on this?? (sound of head
> > banging on wall...)
> >
> > Event Type: Error
> > Event Source: EventLog
> > Event Category: None
> > Event ID: 6004
> > Date: 8/15/2007
> > Time: 3:38:51 AM
> > User: N/A
> > Computer: TERM2
> > Description:
> > A driver packet received from the I/O subsystem was invalid. The data
> > is the
> > packet.
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> > Data:
> > 0000: 0c 00 e0 00 0e 00 00 00 ..Ã*.....
> > 0008: a5 ea b1 b4 17 df c7 01 Â¥ÃªÂ±Â´.ÃŸÃ‡.
> > 0010: 40 00 00 00 00 00 00 00 @.......
> > 0018: 00 00 00 00 04 00 4e 00 ......N.
> > 0020: 00 00 00 00 cb 0b 00 80 ....Ã‹..Â¬
> > 0028: 00 00 00 00 10 00 00 c0 .......Ã€
> > 0030: 00 00 00 00 00 00 00 00 ........
> > 0038: 00 00 00 00 00 00 00 00 ........
> > 0040: 4d 00 52 00 78 00 53 00 M.R.x.S.
> > 0048: 6d 00 62 00 00 00 5c 00 m.b...\.
> > 0050: 44 00 65 00 76 00 69 00 D.e.v.i.
> > 0058: 63 00 65 00 5c 00 4c 00 c.e.\.L.
> > 0060: 61 00 6e 00 6d 00 61 00 a.n.m.a.
> > 0068: 6e 00 52 00 65 00 64 00 n.R.e.d.
> > 0070: 69 00 72 00 65 00 63 00 i.r.e.c.
> > 0078: 74 00 6f 00 72 00 00 00 t.o.r...
> > 0080: 57 00 50 00 33 00 42 00 W.P.3.B.
> > 0088: 00 00 4e 00 65 00 74 00 ..N.e.t.
> > 0090: 42 00 54 00 5f 00 54 00 B.T._.T.
> > 0098: 63 00 70 00 69 00 70 00 c.p.i.p.
> > 00a0: 5f 00 7b 00 35 00 37 00 _.{.5.7.
> > 00a8: 30 00 43 00 33 00 42 00 0.C.3.B.
> > 00b0: 45 00 44 00 2d 00 44 00 E.D.-.D.
> > 00b8: 46 00 37 00 36 00 2d 00 F.7.6.-.
> > 00c0: 34 00 35 00 37 00 33 00 4.5.7.3.
> > 00c8: 2d 00 39 00 43 00 38 00 -.9.C.8.
> > 00d0: 34 00 2d 00 45 00 32 00 4.-.E.2.
> > 00d8: 43 00 39 00 41 00 00 00 C.9.A...
> > Thanks,
> > Scooter
>
>
>

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Event ID: 6004 - DNS Networking issues...	BProc_Lizard	Windows Networking	4	03-10-2009 06:40 PM
LSASRV Event 40960 and Failure Audit Event 673 since Feb 2007	Drew Govnyak	Windows Networking	1	07-25-2007 05:34 AM
Need help resolving Event ID 1054 errors appearing in event log every 5 mins!	thelotus99@gmail.com	Windows Networking	2	07-16-2007 02:30 PM
Only 'guest' user on Dynamode BR-6004 W-G1	Phil Turner	Wireless Internet	0	06-11-2007 08:04 PM
Event ID1058 & Event ID1030 errors in the application log!!!	Herm	Windows Networking	2	01-07-2005 07:35 AM