Registrations are now open. Join us today!
There is still a lot of work to do on the wiki yet! More information about editing can be found here.
Already have an account?

Microsoft KB Archive/172802

From BetaArchive Wiki
Knowledge Base

Article ID: 172802

Article Last Modified on 7/13/2004


  • Microsoft SNA Server 3.0
  • Microsoft SNA Server 2.11 Service Pack 1
  • Microsoft SNA Server 2.11 Service Pack 2
  • Microsoft SNA Server 3.0 Service Pack 4
  • Microsoft SNA Server 4.0

This article was previously published under Q172802


The SNA Server service (Snaservr.exe) fails unexpectedly with an access violation; the following appears in the event log:

   Event ID: 624
   Source:   SNA Server
   Description: Creating dump file C:\SNA\Traces\Snadump.log for

<Ntroot>\Drwtsn32.log will include the following failure information:

   Application exception occurred:
      Application: exe\snaservr.DBG <process ID>
      When: <date and time>
      Exception number: c0000005 (access violation)

   [data omitted]

   State Dump for Thread Id <thread>

   EAX=00000000  EBX=00000000  ECX=00cc6360  EDX=000c0001  ESI=000d0019
   EDI=00cc6360  EIP=003a5200  ESP=002bfec8  EBP=000000ff  EFL=00000297
   CS=001b  DS=0023  ES=0023  SS=0023  FS=0038  GS=0000

   function: s1pcrefm

   fault -> 0x003a5200  0fbf4806         movsx    ecx,word ptr [eax+06]

   Stack back trace:

   FramePtr  RetAddr   Param1   Param2   Param3   Function Name
   002bfed4  003b1323  00cc6360 00000019 0000000d SNASERVR!s1pcrefm+0x10
   002bff18  003b1087  00420002 00000004 0042f7d4 SNASERVR!s1puclos+0x293


A 3270 emulator is failing to send element data in an OPEN PLU response to the SNA Server. SNA Server is not expecting such an invalid message, which leads to an access violation.

NOTE: This problem is a symptom of a 3270 emulator logic error. It was not determined which 3270 emulator causes this problem, because this was only observed once at one customer site.


Microsoft has confirmed this to be a problem in SNA Server versions 2.11, 2.11 SP1, and 2.11 SP2. A supported fix is now available, but has not been fully regression-tested and should be applied only to systems experiencing this specific problem. Unless you are severely impacted by this specific problem, Microsoft recommends that you wait for the next Service Pack that contains this fix. Contact Microsoft Technical Support for more information.

Microsoft has confirmed this to be a problem in SNA Server versions 3.0, and 3.0 SP1. This problem was corrected in the latest SNA Server version 3.0 U.S. Service Pack. For information on obtaining this Service Pack, query on the following word in the Microsoft Knowledge Base (without the spaces):



With the fix applied, if the SNA Server receives an invalid OPEN PLU response (containing no element data), the message is ignored and the following error is logged to the Windows NT application event log:

   Event ID: 9
   Source:  SNA Server
   Description: (1117) Internal Message Sequence Error

   Invalid or unexpected message received by the SNA Server (node) from
   another SNA Server component (for example, the emulator or link service)

   X'1117'   Received an invalid message from a 3270 emulator

NOTE: There are various causes of the Event 9 error. To determine the cause of the error, capture an SNA Server DLC and 3270 message trace on the server.

Keywords: kbbug kbfix kbnetwork KB172802