An Event ID 30020 Is Logged Every Thirty Seconds (291395)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
This article was previously published under Q291395

SYMPTOMS

If Windows 2000 Server is running the Routing and Remote Access service and the server is configured for Routing Information Protocol (RIP), you may receive the following error message in the System event log:
Event ID: 30020
Source: Iprip2
Type: Error
Description: Ipripv2 was unable to receive an incoming message on the local interface with IP address x.x.x.x. The data is in the error code. 0000: 00002746

CAUSE

This behavior can occur if Windows 2000 Server that runs the Routing and Remote Access service receives either an Internet Control Message Protocol (ICMP) destination unreachable or an ICMP port unreachable message after the server has sent a RIP broadcast message. This behavior can be caused by an incorrectly configured network device or by an unreachable network device.

RESOLUTION

To work around this behavior, examine the ICMP message and locate the Internet Protocol (IP) address of the network device that is causing this error, and then correct any misconfigurations on that device.

STATUS

This behavior is by design.

MORE INFORMATION

In the error code of the event ID you may see the error code 0x2764, which is 10054 decimal. This error code is reported from the Winsock layer if it receives an ICMP message after it has sent a User Datagram Protocol (UDP) datagram. For additional information about a Winsock error, click the article number below to view the article in the Microsoft Knowledge Base:

263823 WinSock Recvfrom() Now Returns Wsaeconnreset Instead of Blocking or Timing Out

This error is logged every 30 seconds because the default value for a RIP broadcast in Windows 2000 Server that runs the Routing and Remote Access service is 30 seconds.

To determine which IP node is reporting the error, you must make a network trace. For additional information about how to capture a network trace, click the article number below to view the article in the Microsoft Knowledge Base:

148942 How to Capture Network Traffic with Network Monitor

Once you have the trace, locate an ICMP destination unreachable packet. Open the first packet. In the Hex pane, you can observe the IP and RIP headers that give information about the IP address of the router or the node from where the packet is coming.
Modification Type:MinorLast Reviewed:1/27/2006
Keywords:kbnofix kbprb KB291395
©2004 Microsoft Corporation. All rights reserved.