Error Id 5504
Contents |
Microsoft Tech Companion App Microsoft Technical Communities Microsoft Virtual Academy Script Center Server and Tools Blogs TechNet Blogs TechNet Flash Newsletter TechNet Gallery TechNet Library TechNet Magazine TechNet Subscriptions TechNet Video event id ( 5504 ) in source ( microsoft-windows-dns-server-service ) cannot be found TechNet Wiki Windows Sysinternals Virtual Labs Solutions Networking Cloud and Datacenter Security Virtualization
The Dns Server Encountered An Invalid Domain Name In A Packet From The Packet Will Be Rejected
Downloads Updates Service Packs Security Bulletins Windows Update Trials Windows Server 2012 R2 System Center 2012 R2 Microsoft SQL Server dns event id 5501 2014 SP1 Windows 8.1 Enterprise See all trials » Related Sites Microsoft Download Center TechNet Evaluation Center Drivers Windows Sysinternals TechNet Gallery Training Training Expert-led, virtual classes Training Catalog Class Locator Microsoft event id 5504 server 2003 Virtual Academy Free Windows Server 2012 courses Free Windows 8 courses SQL Server training Microsoft Official Courses On-Demand Certifications Certification overview MCSA: Windows 10 Windows Server Certification (MCSE) Private Cloud Certification (MCSE) SQL Server Certification (MCSE) Other resources TechNet Events Second shot for certification Born To Learn blog Find technical communities in your area Support Support options For business For developers For IT professionals For
Kb 198410
technical support Support offerings More support Microsoft Premier Online TechNet Forums MSDN Forums Security Bulletins & Advisories Not an IT pro? Microsoft Customer Support Microsoft Community Forums United States (English) Sign in Home Windows Server 2012 R2 Windows Server 2008 R2 Library Forums We’re sorry. The content you requested has been removed. You’ll be auto redirected in 1 second. DNS Infrastructure DNS Server DNS Server Message Processing DNS Server Message Processing Event ID 5504 Event ID 5504 Event ID 5504 Event ID 5500 Event ID 5501 Event ID 5502 Event ID 5504 Event ID 5505 Event ID 5506 Event ID 5507 Event ID 5508 Event ID 5509 Event ID 5510 Event ID 5511 Event ID 7050 Event ID 7051 Event ID 7052 Event ID 7053 Event ID 7054 Event ID 7055 Event ID 7056 Event ID 7062 Event ID 7500 TOC Collapse the table of content Expand the table of content This documentation is archived and is not being maintained. This documentation is archived and is not being maintained. Event ID 5504 — DNS Server Message Processing Updated: November 25, 2009Applies To: Windows Server 2008 R2 These events represent problems processing data re
Add-on Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. TheEventId.Net for Splunk Add-onassumes thatSplunkis collecting information from Windows servers secure cache against pollution and workstation via the Splunk Universal Forwarder. read more... Event ID: 5504 Source: online-metrix.net malware DNS Source: DNS Type: Warning Description:DNS Server encountered invalid domain name in packet from
Dns Server Forwarders
is only available to subscribers. An example of English, please! Concepts to understand: What is the role of a DNS server? Comments: EventID.Net This problem may occur because Windows Server 2003 does not support DNAME https://technet.microsoft.com/en-us/library/ee783577(v=ws.10).aspx resource records as specified in Request for Comments (RFC) 2672. See ME920162 for a hotfix applicable to Microsoft Windows Server 2003. See MSW2KDB for additional information about this event. x 69 Anonymous We use our ISP's DNS server as forwarders. I called them and got the address of a different server from the current one we were using and changed my forwarder address to that one. We have not had this http://www.eventid.net/display-eventid-5504-source-DNS-eventno-642-phase-1.htm event ID since. x 72 Ulysses DiGennaro I have come across this event at two clients and I have resolved the problem using the same technique. The issue shows itself very similar to Tracy Willingham's comment, a DNS Event 5504 every 10-20 minutes, however all DNS settings were ok, with no forwarding, and clearing the DNS cache did not help. For client ABC's issue, I used a packet sniffer to see what was "invalid" in the DNS packet replies. It showed that the packets were caused by ABC's Exchange 2003 server sending "postmaster@abc.com - mail non-deliverable" notifications to spoofed email addresses/domains. The postmaster emails would not time-out from the Exchange queues - so, every 15 minutes it would resend the notifications and receive the invalid packet (with the spoofed address/domain) in reply. To resolve the problem, I went into each queue containing a postmaster message to a spoofed address and I deleted it (without NDR) and cleared the DNS cache. If you should continue to receive the event, use a packet sniffer (I used Ethereal) to see which other domain names are being queried and delete the respective queued postmaster message(s). x 75 Tracy Willingham I was getting this event several times every 10-20 minutes for about 2 weeks. The IP add
Start here for a quick overview of the site Help Center Detailed answers to any questions you might have Meta Discuss the workings and policies of this site About Us Learn more about Stack Overflow the company Business Learn more about hiring developers or posting http://serverfault.com/questions/144824/windows-ad-dns-event-id-5504 ads with us Server Fault Questions Tags Users Badges Unanswered Ask Question _ Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute: Sign up Here's how it works: Anybody can ask http://www.techrepublic.com/forums/discussions/dns-error-event-id-5504/ a question Anybody can answer The best answers are voted up and rise to the top Windows AD DNS: Event ID 5504 up vote 1 down vote favorite Two of my AD controllers (both running DNS service) appear to be having event id a similar issue. Both are throwing lots of events in the DNS events that look like this: Event Type: Information Event Source: DNS Event Category: None Event ID: 5504 Date: 5/24/2010 Time: 11:51:38 AM User: N/A Computer: ALPHA Description: The DNS server encountered an invalid domain name in a packet from 76.74.137.6. The packet will be rejected. The event data contains the DNS packet. That will come with the same event, same time, with a packet from 76.74.137.7 as well. I know this error id 5504 is "Information" not an error, but since it is new and different it bothers me (yes, I fear unexplained change!) Both machines are running Windows 2003 R2 SP2. The DNS servers are not exposed to the internet. Both DNS servers are configured to use OpenDNS for Forwarders. For both servers, this started about a week ago. Any thoughts on: 1) should I be concerned? 2) how can I stop/fix this? To keep it interesting, I have a 3rd AD / DNS box. Same domain, different Active Directory site. Same forwarders, yet doesn't have this issue. [Update] On a whim, I changed the forwarders on one of the DNS servers to use Google's public DNS (8.8.8.8 and 8.8.4.4) instead of OpenDNS. Didn't change anything, so I think I can eliminate the forwarders as the cause. windows windows-server-2003 domain-name-system active-directory share|improve this question edited May 25 '10 at 13:32 asked May 24 '10 at 18:47 Chris_K 2,61433042 Do any of your machines connect over a VPN to your network? –Chris S May 24 '10 at 19:38 @Chris - Our employees all have the ability to connect over a VPN to our network (using windows native client and a win2k3 RAS server). –Chris_K May 24 '10 at 20:04 add a comment| 3 Answers 3 active oldest votes up vote 0 down vote Check this link out...go to (4) under 'Troubleshooting common DNS issues'. share|improve this answer answered May 24 '10 at 19:02 Saif Khan 1,04221424
United States Australia United Kingdom Japan Newsletters Forums Resource Library Tech Pro Free Trial Membership Membership My Profile People Subscriptions My stuff Preferences Send a message Log Out TechRepublic Search GO Topics: CXO Cloud Big Data Security Innovation Software Data Centers Networking Startups Tech & Work All Topics Sections: Photos Videos All Writers Newsletters Forums Resource Library Tech Pro Free Trial Editions: US United States Australia United Kingdom Japan Membership Membership My Profile People Subscriptions My stuff Preferences Send a message Log Out TechRepublic | Forums | Windows Windows Register Now or Log In to post Welcome back, My Profile Log Out Recent Activity FAQs Guidelines General discussion 0 Votes Locked DNS Error - event ID 5504 By zevalete · 13 years ago DNS Errors I'm getting the following DNS error in the event viewer of my DNS server often enough for the error to be suppressed. Can't seem to find anything on Microsoft's Website that gives a solution.... Is there something I can do to stop this? 5504 (Warning) DNS_EVENT_INVALID_PACKET_DOMAIN_NAME DNS Server encountered invalid domain name in packet from %1. Packet is rejected. Thanks Share Flag This conversation is currently closed to new comments. 3 total posts (Page 1 of 1) + Follow this Discussion · | Thread display: Collapse - | Expand + All Comments Collapse - DNS Error - event ID 5504 by tduval · 13 years ago In reply to DNS Error - event ID 5504 DNS service hanging...Look at :http://support.microsoft.com/default.aspx?scid=kb;en-us;314803** remove spaces from url ** 0Votes Share Flag Collapse - DNS Error - event ID 5504 by zevalete · 13 years ago In reply to DNS Error - event ID 5504 Poster rated this answer 0Votes Share Flag Collapse - DNS Error - event ID 5504 by saihib · 13 years ago In reply to DNS Error - event ID 5504 As the message is suggesting, the DNS server has received an invalid domain name. By invalid it means that it contains invalid characters. MS DNS only supports 0-9, a-z, A-Z, . (dot), and - (hyphen) as part of a domain name. Some other DNS servers may no