Home
  •  

SNA Server - 1 - A remote node generated an SNA protocol violation on an SNA network

Microsoft.HostIntegrationServer.2013.SNAServer_WarningEvent_1 (Rule)

Captures warning events and generates a warning alert

Knowledge Base article:

Summary

A remote node generated an SNA protocol violation on an SNA network.

Causes

The remote system may have a configuration or internal logic error. The subcode included in the event provides more specific causes:

X'1120' The node received an SNA message that contains only a Transmission Header (TH).  No request header or request unit is present.

X'1121' The node received an SNA message with a TH that was not valid.

X'1122' Segmentation error: the first segment of a received SNA message did not contain a Request Header (RH).

X'1131' The node received a Network Control request.  This is a request category that is not valid; Network Control requests are not supported.

X'1134' The node received an SNA message containing an unsupported Session Control request.

X'1135' The node received an SNA message containing an unsupported Session Control response.

X'1175' The node received an SNA message containing an unsupported Change Number of Sessions (CNOS) request.

X'1185' The node received an SNA message containing an unsupported network management request or subvector.

X'118D' The node received an SNA message containing an error in BIND request unit from partner LU.

X'11D0' The node received an error in an LU 6.2 SNA request message from a partner LU.  A SEND indication (CD) was expected but not received by the node.

X'11D1' The node received an error in an LU 6.2 SNA error data GDS variable from a partner LU.

X'11D2' The node received an error in an LU 6.2 SNA message from a partner LU (unexpected reporting of mapping error).

X'11D3' The node received an error in an LU 6.2 message from a partner LU (a return code that is not valid was generated from an FMH-7).

Resolutions

Provide network support personnel with the event log file(s) related to SNA, SNA trace file(s), and the number and description of the displayed subcode. For information about SNA log and trace files, see the "Microsoft Host Integration Server Online Books."

Element properties:

TargetMicrosoft.HostIntegrationServer.2013.SNAGateway
CategoryEventCollection
EnabledFalse
Event_ID1
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
SNA Server Alert for Event 1
Server: {0}
Event ID: {1}
Event Description: {2}
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="Microsoft.HostIntegrationServer.2013.SNAServer_WarningEvent_1" Enabled="false" Target="Microsoft.HostIntegrationServer.2013.SNAGateway" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">Channel</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">Application</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">1</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>MatchesRegularExpression</Operator>

              <Pattern>^(SNA.Server|SNA.Server02|SNA.Server03|SNA.Server04)$</Pattern>

            </RegExExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

    <WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertMessageId>$MPElement[Name="AlertMessageID3f7ff566d2c24fcf81225def5f3cea36"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/LoggingComputer$</AlertParameter1>

        <AlertParameter2>$Data/EventDisplayNumber$</AlertParameter2>

        <AlertParameter3>$Data/EventDescription$</AlertParameter3>

      </AlertParameters>

    </WriteAction>

  </WriteActions>

</Rule>