What causes exchange event id's 2088, 2004. and 2015 to repeat their
self untill they completely fill the application log. The vent
descriptor in the back office resouce kit says these require no user
action. What is causing them to fill the log file?

---

Request for Question Clarification by alienintelligence-ga on 11 Aug 2002 15:57 PDT

Hi


These are the only mention from Microsoft's
site regarding the Event ID 2015
[ http://support.microsoft.com/default.aspx?scid=KB;EN-US;q247585& ]

Event ID 2004
[ http://www.microsoft.com/WINDOWS2000/techinfo/reskit/en/ProRK/prdl_pif_zshs.htm
]
[ http://groups.google.com/groups?sourceid=navclient&q=%22Event+ID+2004%22
]



But I found a couple newsgroup articles that addresses basically the
same
question:

Subject: Getting loads of event 2004, 2015 in my Application log 

[ http://groups.google.com/groups?q=%22Event+ID+2015%22&hl=en&lr=&ie=UTF-8&safe=off&selm=OR%24jKN8%23BHA.2524%40tkmsftngp05&rnum=1]
Event ID: 2015

0 messages are waiting to be transferred out to the Microsoft Exchange
MTA
(sent) from gateway
/o=istonish/ou=bc/cn=Configuration/cn=Connections/cn=Internet Mail
Connector
(BCEXC1).

Event ID: 2004
There are no messages ready to transfer out (send) for gateway
/o=istonish/ou=bc/cn=Configuration/cn=Connections/cn=Internet Mail
Connector
(BCEXC1). The transfer out thread is sleeping.




Subject: Event logging and SMTP 

[ http://groups.google.com/groups?q=%22Event+ID+2015%22&hl=en&lr=&ie=UTF-8&safe=off&selm=u0qi9odgbrd01b%40corp.supernews.com&rnum=2
]

Event ID 2004:  There are no messages ready to transfer out (send) for
gateway /o=FUTURES/ou=first administrative
group/cn=Configuration/cn=Connections/cn=SMTP
(FH-SERVER)/cn={596AEC51-DD26-4A1F-8F2E-03F6B1835641}. The transfer
out
thread is sleeping.

Event ID 2015:  0 messages are waiting to be transferred out to the
Microsoft Exchange MTA (sent) from gateway /o=FUTURES/ou=first
administrative group/cn=Configuration/cn=Connections/cn=SMTP
(FH-SERVER)/cn={596AEC51-DD26-4A1F-8F2E-03F6B1835641}.



I found those 2, but no 2088. Are you sure it wasn't 2008?

[ http://support.microsoft.com/default.aspx?scid=KB;EN-US;q106204& ]
 Event ID   : 2008
   Source     : Remote Access Server
   Description: The Remote Access Server is not configured to receive
   calls.
   
   

-AI

---

Clarification of Question by raznovin-ga on 11 Aug 2002 18:28 PDT

I am absolutely sure these are the exact event id's they can be found
on the back office resource kit 4.5, they say they require no action !
But the application log is being filled by them repeating there self
every 5000 ms until they fill the log. What is the cause of the
repetition.

---

Request for Question Clarification by alienintelligence-ga on 11 Aug 2002 18:33 PDT

Hi again raznovin...

Do you have a virus checker on 
this server? I have noticed a
recent resurgance in the KLEZ
virus.

-AI