Microsoft KB Archive/291395

= An Event ID 30020 Is Logged Every Thirty Seconds =

Article ID: 291395

Article Last Modified on 3/1/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server

-



This article was previously published under Q291395



SYMPTOMS
If Windows 2000 Server is running the Routing and Remote Access service and the server is configured for Routing Information Protocol (RIP), you may receive the following error message in the System event log:

Event ID: 30020

Source: Iprip2

Type: Error

Description: Ipripv2 was unable to receive an incoming message on the local interface with IP address x.x.x.x. The data is in the error code. 0000: 00002746



CAUSE
This behavior can occur if Windows 2000 Server that runs the Routing and Remote Access service receives either an Internet Control Message Protocol (ICMP) destination unreachable or an ICMP port unreachable message after the server has sent a RIP broadcast message. This behavior can be caused by an incorrectly configured network device or by an unreachable network device.



RESOLUTION
To work around this behavior, examine the ICMP message and locate the Internet Protocol (IP) address of the network device that is causing this error, and then correct any misconfigurations on that device.



STATUS
This behavior is by design.



MORE INFORMATION
In the error code of the event ID you may see the error code 0x2764, which is 10054 decimal. This error code is reported from the Winsock layer if it receives an ICMP message after it has sent a User Datagram Protocol (UDP) datagram. For additional information about a Winsock error, click the article number below to view the article in the Microsoft Knowledge Base:

263823 WinSock Recvfrom Now Returns Wsaeconnreset Instead of Blocking or Timing Out

This error is logged every 30 seconds because the default value for a RIP broadcast in Windows 2000 Server that runs the Routing and Remote Access service is 30 seconds.

To determine which IP node is reporting the error, you must make a network trace. For additional information about how to capture a network trace, click the article number below to view the article in the Microsoft Knowledge Base:

148942 How to Capture Network Traffic with Network Monitor

Once you have the trace, locate an ICMP destination unreachable packet. Open the first packet. In the Hex pane, you can observe the IP and RIP headers that give information about the IP address of the router or the node from where the packet is coming.

Additional query words: ripv2

Keywords: kbfaq kbnofix kbprb KB291395

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.