| Event Id | 207 |
| Source | TN3270 Server |
| Description | The TN3270E Server has closed the socket which listens for clients |
| Event Information | According To Microsoft: CAUSE When the TN3270 server calls the CloseSocket() function, the Windows NT TCP/IP address object connect handler address is set to NULL, which causes TCP/IP to send a TCP/IP Reset when clients attempt to connect to the TN3270 port number. When an SNA session becomes available, the TN3270 Server reopens the listen socket by calling the socket() function. This causes the Windows NT TCP/IP driver to create a duplicate address object with a valid connect handler address. However, connection requests are validated against the old TCP/IP address object, which still has a NULL connect handler. RESOLUTION To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the Microsoft Knowledge Base: 152734 (http://support.microsoft.com/kb/152734/EN-US/) How to Obtain the Latest Windows NT 4.0 Service Pack A hotfix for Windows NT 3.51 is available to correct this problem. |
| Reference Links | Event Id: 207 Event Source: TN3270 Server |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.