DNS Issue

[Guillaume Genest]

I got this event at about each hour on my master DNS
Server.
------
Event ID 9999, Sourcer = DNS, Type=Warning
"The DNS server has encountered numerous run-time events.
These are usually caused by the reception of bad or
unexpected packets, or from problems with or excessive
replication traffic. The data is the number of supressed
events encountered in the Last 15 minute interval"

Data= 14
------

My Isa Server is monitoring the DNS Server status and it
send me some time warning telling that the DNS Server is
not responding, but when i check everything is fine.

My Domino server sometimes stop sending mail to internet,
i restart the router and then all is ok. So i think it may
be link to DNS issue and may be to this event.

anyone can give me a clue?

thanks!

 

[Kevin D. Goodknecht Sr. [MVP]]

In

I got this event at about each hour on my master DNS
Server.
------
Event ID 9999, Sourcer = DNS, Type=Warning
"The DNS server has encountered numerous run-time events.
These are usually caused by the reception of bad or
unexpected packets, or from problems with or excessive
replication traffic. The data is the number of supressed
events encountered in the Last 15 minute interval"

Data= 14
------

My Isa Server is monitoring the DNS Server status and it
send me some time warning telling that the DNS Server is
not responding, but when i check everything is fine.

My Domino server sometimes stop sending mail to internet,
i restart the router and then all is ok. So i think it may
be link to DNS issue and may be to this event.

anyone can give me a clue?

thanks!

What are the events that precede this one?

 

[Frances [MSFT]]

Hello Guillaume,

Good to hear from you.

According to your post, I understand that you have event 9999 on your DNS
server. DNS 9999 errors usually indicate Event Log suppression for another
DNS error message. Event 9999 indicates the number of the events DNS
blocked from being logged in Event Viewer, and then the logging of those
events starts again.

So I need more information to make sure what the main cause is. Please
download MPSRPT DirSvc.exe and MPSRPT DirSvc readme.txt from the link
below. Run it in the problematic win2k DNS server.
Then send the result to (e-mail address removed) for further research.

Microsoft Product Support's Reporting Tools
http://www.microsoft.com/downloads/details.aspx?FamilyID=cebf3c7c-7ca5-408f-
88b7-f9c79b7306c0&DisplayLang=en

In addition, please give me some background information about your domain.
Is the DNS server also a DC in the win2k domain?

I am looking forward to your reply.

Best regards,

Frances He


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Frances [MSFT]]

Hi Guillaume,

We wanted to see how it is going on your side. Please keep us posted on
your progress and let us know if you have any additional questions or
concerns.

We are looking forward to your response.

Have a great day!

Best regards,

Frances He


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Guest]

Hi Frances,

Hope you don't mind if I jump in here. I have the same problem. Is there a
way to override the suppression of the events? Maybe a registry key or
something? I don’t have any problems but would like to see the events that
generate the errors or warnings in the event log. I already turned on
Diagnostic logging, but nothing strange has turned up. I do however replicate
103 DNS zones to a Unix DNS, and that may create a large number of events.

Thanks,
Hans

 

[Kevin D. Goodknecht Sr. [MVP]]

In

Hi Frances,

Hope you don't mind if I jump in here. I have the same
problem. Is there a way to override the suppression of
the events? Maybe a registry key or something? I don't
have any problems but would like to see the events that
generate the errors or warnings in the event log. I
already turned on Diagnostic logging, but nothing strange
has turned up. I do however replicate 103 DNS zones to a
Unix DNS, and that may create a large number of events.

It is the zone transfers causing this event, in an AD environment with DDNS
enabled there is a lot of incremental zone transfers. The only way I've
found of stopping this is to turn off dynamic updates on the zone. That may
not be such a good idea, I kind of look at it like this, if you're getting
the events, DDNS and zone transfers are working.
With 103 zones being trasferred, I can see where that migh do this, too.

Just to add, the diagnostic logging can put a lot of extra load on the DNS
service. And has been known to cause 7050 events itself

 

[Guest]

Thanks for your help. I'll just leave it as is.

Hans