Explanation of "Status Buffer Overflow" Error

ID: Q193839


The information in this article applies to:


SUMMARY

Certain conditions, which can report a network error to the event log, are caused by a non-destructive SMB message also known a "Status Message." Most commonly the error reported in the event log is network error event 2012.


MORE INFORMATION

This condition can be caused by a STATUS_BUFFER_OVERFLOW SMB error. The STATUS_BUFFER_OVERFLOW error is normal when reading from named pipes. This occurs when a client has a read request and the requested information exceeds the clients current read buffer size as the client advertised it during the initial read request. The client requests a read of x bytes. The server responds and may set status to STATUS_BUFFER_OVERFLOW to inform the client that there is more data in its buffer than it could put in the packet.

It is a nondestructive event that should not cause any lost of functionally. It is important to verify that the STATUS_BUFFER_OVERFLOW error is seen in the packet capture because event 2012 can be caused by other destructive events, which may impact the network.

Additional query words: STATUS_BUFFER_OVERFLOW 2012 network


Keywords          : 
Version           : WinNT:4.0
Platform          : winnt 
Issue type        : kbinfo 

Last Reviewed: February 18, 1999