One of the components of Network Address Translation (NAT) protocol encountered an error in socket operation.
The most common reasons for this warning are:
The connection has been dropped, because of a network failure or because the system on the other end went down without notice.
The network subsystem has failed.
The Windows Socket Implementation was unable to allocate the needed resources for its internal operation.
Sample Event#1: The DHCP allocator encountered a network error while attempting to detectexisting DHCP servers on the network of the interface with IP address %1.The data is the error code.
Sample Event#2: The DHCP allocator encountered a network error while attempting toreceive messages on the interface with IP address %1.The data is the error code.
Sample Event#3: The DNS proxy agent encountered a network error while attempting toreceive messages on the interface with IP address %1.The data is the error code.
Sample Event#4: The DNS proxy agent encountered a network error while attemptingto forward a response to a client from a name-resolution serveron the interface with IP address %1.The data is the error code.
Sample Event#5: The DNS proxy agent encountered a network error while attemptingto forward a query from the client %1 to the server %2on the interface with IP address %3.The data is the error code.
If the server is low on memory, take appropriate action to increase the available memory. See Help and Support Center for information on low memory.
Stop and restart the Routing and Remote Access service.
If the problem persists, restart the server.
Microsoft Corporation, all rights reserved
Target | AP.Remote.Access.Class.VPNServer |
Category | EventCollection |
Enabled | True |
Alert Generate | False |
Remotable | True |
Event Log | System |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
WriteToDB | WriteAction | Microsoft.SystemCenter.CollectEvent | Default |
<Rule ID="Socket_operation_failure_2_1_Rule" Enabled="true" Target="AP.Remote.Access.Class.VPNServer" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^(30006|30011|31003|31005|31006)$</Pattern>
</RegExExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>SharedAccess_NAT|ipnathlp</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SystemCenter!Microsoft.SystemCenter.CollectEvent"/>
</WriteActions>
</Rule>