Event ID: 36887  " the following fatal alert was recieved :40" filling up system.log

The error is written to the event log by isass.exe

The error  is written to the event log about 25 times each second......!!!!!!!!

The error starts when Visual Studio 2013 is started, and stops when that is closed again.

It takes about an hour and it is the only event in the system log (82.000 of them).

I googled for solutions, found some things about removing cipher keys from the registry as a workaround, but that did not work.

Now I don't really see any problems when I use the PC (lots of development mostly). But if the error is written so many times it must somehow impact performance. Any hint on how to trace the problem appreciated.

Thanks

  Ben



  • Edited by Ben Geerdes Sunday, March 01, 2015 12:33 PM
March 1st, 2015 12:26pm

Hi Ben Geerdes,

"The error starts when Visual Studio 2013 is started, and stops when that is closed again"
Have you tried to repair the Visual Studio 2013 to have a check ?
a.Start, click Control Panel, and then click Programs.
b.Click Programs and Features and then select the Visual Studio 2008 <edition> you installed.
c.Click Uninstall/Change
d.In the setup wizard, select Repair or Reinstall and then click Next

Since it hasn`t resulted in any problems to use the PC and we are worried about that the continuous logs will impact performance .If it is possible ,we can  currently disabled the schannel logging by setting EventLogging=0, under HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL(Please backup the registry keys before you made modifications to them)

Here are two links for reference of this issue :
How to enable Schannel event logging in IIS
http://support.microsoft.com/kb/260729

SSL/TLS Alert Protocol & the Alert Codes
http://blogs.msdn.com/b/kaushal/archive/2012/10/06/ssl-tls-alert-protocol-amp-the-alert-codes.aspx

Best regards


Free Windows Admin Tool Kit Click here and download it now
March 3rd, 2015 7:13am

Thanks MeipoXu, sure I can disable the logging , but still the process with errors will continue. My feeling is that it has something to do with an ADD-IN, for example I have Telerik and Xamarin. I just wish the log would give me some more details about what/who it is trying to handshake with. Any sysinternals tool that could help me here?

If nothing else, I will try a repair and disable the SCHANNEL logging.

Thanks

  Ben

March 3rd, 2015 8:36am

Hi Ben Greerdes,

" My feeling is that it has something to do with an ADD-IN, for example I have Telerik and Xamarin"

We can try to open the Visual Studio without add-ins to have a troubleshoot.

To do this: keep pressing "Shift" while loading the Visual Studio or run devenv /SafeMode

Best regards

Free Windows Admin Tool Kit Click here and download it now
March 3rd, 2015 9:03am

It was Xamarin
March 17th, 2015 7:59pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics