SMS: Unable To Generate Traps For Dr. Watson Events

• Microsoft Systems Management Server version 1.2

SYMPTOMS

When you use the Systems Management Server SNMP Trap Translator to monitor Dr. Watson traps, the Windows NT Application Event Log may fill up with error message 3006 events. This causes the Windows NT Application Event Log to fill up and overwrite older data.

CAUSE

An application on the server stops responding, which causes a Dr. Watson message to be written to the event log. The data portion of this Dr. Watson Event Log message is very large. The SNMP Event Log Extension Agent (SNMPELEA) tries to read the message to determine whether the message is something that it should be trapping on. Because SNMPELEA does not provide a buffer large enough to hold the Dr. Watson Event Log message, it generates an error 3006.

STATUS

Microsoft has confirmed this to be a problem in Systems Management Server version 1.2.

A supported fix is now available, but has not been fully regression-tested and should be applied only to systems experiencing this specific problem. Unless you are severely impacted by this specific problem, Microsoft recommends that you wait for the next Service Pack that contains this fix. Contact Microsoft Technical Support for more information.