Event ID: 6004

I have a customer that has a Windows 2003 Std. server that is throwing Event
ID: 6004 - Source: EventLog. I've done a bit of trolling the Internet and MS
Newsgroups and only found the hoarde of references to a problem with McAfee
Anti-virus v.8.0. The customer system has never had McAfee installed and is
using Symanted A/V 10.1.5000.5 . Just for grins had the customer check for
the Registry Key cited in the fix for McAfee with no joy.... There's no real
impact to the server, just entries in the Server Log that they want to get
rid of. The errors were present before SP1 was installed. Updated to SP2 to
see if they went away...

Key software being run on client server:
- Windows 2003 Std. SP2
- Citrix Presentation Server 4.5 (Hotfix rollup package 01 installed)
- Citrix Access Gateway Enterprise Edition
- Crystal Reports9
- MS Access 2000 SR-1
- Quickbooks Ent. 7.0
- Symantec A/V 10.1.5000.5
- Symantec BE Remote Agent v.11.0.6235
- UPHClean 1.6.30

Event is listed below. Anybody got any ideas on this?? (sound of head
banging on wall...)

Event Type: Error
Event Source: EventLog
Event Category: None
Event ID: 6004
Date: 8/15/2007
Time: 3:38:51 AM
User: N/A
Computer: TERM2
Description:
A driver packet received from the I/O subsystem was invalid. The data is the
packet.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 0c 00 e0 00 0e 00 00 00 ..Ã*.....
0008: a5 ea b1 b4 17 df c7 01 ¥ê±´.ßÇ.
0010: 40 00 00 00 00 00 00 00 @.......
0018: 00 00 00 00 04 00 4e 00 ......N.
0020: 00 00 00 00 cb 0b 00 80 ....Ë..¬
0028: 00 00 00 00 10 00 00 c0 .......À
0030: 00 00 00 00 00 00 00 00 ........
0038: 00 00 00 00 00 00 00 00 ........
0040: 4d 00 52 00 78 00 53 00 M.R.x.S.
0048: 6d 00 62 00 00 00 5c 00 m.b...\.
0050: 44 00 65 00 76 00 69 00 D.e.v.i.
0058: 63 00 65 00 5c 00 4c 00 c.e.\.L.
0060: 61 00 6e 00 6d 00 61 00 a.n.m.a.
0068: 6e 00 52 00 65 00 64 00 n.R.e.d.
0070: 69 00 72 00 65 00 63 00 i.r.e.c.
0078: 74 00 6f 00 72 00 00 00 t.o.r...
0080: 57 00 50 00 33 00 42 00 W.P.3.B.
0088: 00 00 4e 00 65 00 74 00 ..N.e.t.
0090: 42 00 54 00 5f 00 54 00 B.T._.T.
0098: 63 00 70 00 69 00 70 00 c.p.i.p.
00a0: 5f 00 7b 00 35 00 37 00 _.{.5.7.
00a8: 30 00 43 00 33 00 42 00 0.C.3.B.
00b0: 45 00 44 00 2d 00 44 00 E.D.-.D.
00b8: 46 00 37 00 36 00 2d 00 F.7.6.-.
00c0: 34 00 35 00 37 00 33 00 4.5.7.3.
00c8: 2d 00 39 00 43 00 38 00 -.9.C.8.
00d0: 34 00 2d 00 45 00 32 00 4.-.E.2.
00d8: 43 00 39 00 41 00 00 00 C.9.A...


Thanks,
Scooter


ScooterX

Hello ScooterX,

In some artilces i read that wrong settings on the network card could produce
this error.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

> I have a customer that has a Windows 2003 Std. server that is throwing
> Event ID: 6004 - Source: EventLog. I've done a bit of trolling the
> Internet and MS Newsgroups and only found the hoarde of references to
> a problem with McAfee Anti-virus v.8.0. The customer system has never
> had McAfee installed and is using Symanted A/V 10.1.5000.5 . Just for
> grins had the customer check for the Registry Key cited in the fix for
> McAfee with no joy.... There's no real impact to the server, just
> entries in the Server Log that they want to get rid of. The errors
> were present before SP1 was installed. Updated to SP2 to see if they
> went away...
>
> Key software being run on client server:
> - Windows 2003 Std. SP2
> - Citrix Presentation Server 4.5 (Hotfix rollup package 01 installed)
> - Citrix Access Gateway Enterprise Edition
> - Crystal Reports9
> - MS Access 2000 SR-1
> - Quickbooks Ent. 7.0
> - Symantec A/V 10.1.5000.5
> - Symantec BE Remote Agent v.11.0.6235
> - UPHClean 1.6.30
> Event is listed below. Anybody got any ideas on this?? (sound of head
> banging on wall...)
>
> Event Type: Error
> Event Source: EventLog
> Event Category: None
> Event ID: 6004
> Date: 8/15/2007
> Time: 3:38:51 AM
> User: N/A
> Computer: TERM2
> Description:
> A driver packet received from the I/O subsystem was invalid. The data
> is the
> packet.
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 0c 00 e0 00 0e 00 00 00 ..à.....
> 0008: a5 ea b1 b4 17 df c7 01 ¥ê±´.ßÇ.
> 0010: 40 00 00 00 00 00 00 00 @.......
> 0018: 00 00 00 00 04 00 4e 00 ......N.
> 0020: 00 00 00 00 cb 0b 00 80 ....Ë..¬
> 0028: 00 00 00 00 10 00 00 c0 .......À
> 0030: 00 00 00 00 00 00 00 00 ........
> 0038: 00 00 00 00 00 00 00 00 ........
> 0040: 4d 00 52 00 78 00 53 00 M.R.x.S.
> 0048: 6d 00 62 00 00 00 5c 00 m.b...\.
> 0050: 44 00 65 00 76 00 69 00 D.e.v.i.
> 0058: 63 00 65 00 5c 00 4c 00 c.e.\.L.
> 0060: 61 00 6e 00 6d 00 61 00 a.n.m.a.
> 0068: 6e 00 52 00 65 00 64 00 n.R.e.d.
> 0070: 69 00 72 00 65 00 63 00 i.r.e.c.
> 0078: 74 00 6f 00 72 00 00 00 t.o.r...
> 0080: 57 00 50 00 33 00 42 00 W.P.3.B.
> 0088: 00 00 4e 00 65 00 74 00 ..N.e.t.
> 0090: 42 00 54 00 5f 00 54 00 B.T._.T.
> 0098: 63 00 70 00 69 00 70 00 c.p.i.p.
> 00a0: 5f 00 7b 00 35 00 37 00 _.{.5.7.
> 00a8: 30 00 43 00 33 00 42 00 0.C.3.B.
> 00b0: 45 00 44 00 2d 00 44 00 E.D.-.D.
> 00b8: 46 00 37 00 36 00 2d 00 F.7.6.-.
> 00c0: 34 00 35 00 37 00 33 00 4.5.7.3.
> 00c8: 2d 00 39 00 43 00 38 00 -.9.C.8.
> 00d0: 34 00 2d 00 45 00 32 00 4.-.E.2.
> 00d8: 43 00 39 00 41 00 00 00 C.9.A...
> Thanks,
> Scooter

True... forgot to mention that there is another older MSKB regarding: Invalid
LAA in NIC Configuration. Unfortunately, that has been covered as well.
We've even gone as far as deleting the NIC and scrubbing the registry for the
NIC drivers and resetting the IP stack, still no joy...

Scooter

"Meinolf Weber" wrote:

> Hello ScooterX,
>
> In some artilces i read that wrong settings on the network card could produce
> this error.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
>
> > I have a customer that has a Windows 2003 Std. server that is throwing
> > Event ID: 6004 - Source: EventLog. I've done a bit of trolling the
> > Internet and MS Newsgroups and only found the hoarde of references to
> > a problem with McAfee Anti-virus v.8.0. The customer system has never
> > had McAfee installed and is using Symanted A/V 10.1.5000.5 . Just for
> > grins had the customer check for the Registry Key cited in the fix for
> > McAfee with no joy.... There's no real impact to the server, just
> > entries in the Server Log that they want to get rid of. The errors
> > were present before SP1 was installed. Updated to SP2 to see if they
> > went away...
> >
> > Key software being run on client server:
> > - Windows 2003 Std. SP2
> > - Citrix Presentation Server 4.5 (Hotfix rollup package 01 installed)
> > - Citrix Access Gateway Enterprise Edition
> > - Crystal Reports9
> > - MS Access 2000 SR-1
> > - Quickbooks Ent. 7.0
> > - Symantec A/V 10.1.5000.5
> > - Symantec BE Remote Agent v.11.0.6235
> > - UPHClean 1.6.30
> > Event is listed below. Anybody got any ideas on this?? (sound of head
> > banging on wall...)
> >
> > Event Type: Error
> > Event Source: EventLog
> > Event Category: None
> > Event ID: 6004
> > Date: 8/15/2007
> > Time: 3:38:51 AM
> > User: N/A
> > Computer: TERM2
> > Description:
> > A driver packet received from the I/O subsystem was invalid. The data
> > is the
> > packet.
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> > Data:
> > 0000: 0c 00 e0 00 0e 00 00 00 ..Ã*.....
> > 0008: a5 ea b1 b4 17 df c7 01 ¥ê±´.ßÇ.
> > 0010: 40 00 00 00 00 00 00 00 @.......
> > 0018: 00 00 00 00 04 00 4e 00 ......N.
> > 0020: 00 00 00 00 cb 0b 00 80 ....Ë..¬
> > 0028: 00 00 00 00 10 00 00 c0 .......À
> > 0030: 00 00 00 00 00 00 00 00 ........
> > 0038: 00 00 00 00 00 00 00 00 ........
> > 0040: 4d 00 52 00 78 00 53 00 M.R.x.S.
> > 0048: 6d 00 62 00 00 00 5c 00 m.b...\.
> > 0050: 44 00 65 00 76 00 69 00 D.e.v.i.
> > 0058: 63 00 65 00 5c 00 4c 00 c.e.\.L.
> > 0060: 61 00 6e 00 6d 00 61 00 a.n.m.a.
> > 0068: 6e 00 52 00 65 00 64 00 n.R.e.d.
> > 0070: 69 00 72 00 65 00 63 00 i.r.e.c.
> > 0078: 74 00 6f 00 72 00 00 00 t.o.r...
> > 0080: 57 00 50 00 33 00 42 00 W.P.3.B.
> > 0088: 00 00 4e 00 65 00 74 00 ..N.e.t.
> > 0090: 42 00 54 00 5f 00 54 00 B.T._.T.
> > 0098: 63 00 70 00 69 00 70 00 c.p.i.p.
> > 00a0: 5f 00 7b 00 35 00 37 00 _.{.5.7.
> > 00a8: 30 00 43 00 33 00 42 00 0.C.3.B.
> > 00b0: 45 00 44 00 2d 00 44 00 E.D.-.D.
> > 00b8: 46 00 37 00 36 00 2d 00 F.7.6.-.
> > 00c0: 34 00 35 00 37 00 33 00 4.5.7.3.
> > 00c8: 2d 00 39 00 43 00 38 00 -.9.C.8.
> > 00d0: 34 00 2d 00 45 00 32 00 4.-.E.2.
> > 00d8: 43 00 39 00 41 00 00 00 C.9.A...
> > Thanks,
> > Scooter
>
>
>