[Snort-users] invalid event id, eventlog, win32

Michael Steele michaels at ...9077...
Mon Feb 9 08:58:03 EST 2004

Grab the latest BETA version of Snort on CodeCrafters or on our site, this
will fix that problem.

Kindest regards, 

The WINSNORT.com Management Team
Pick up your FREE Windows or UNIX Snort installation guides       
mailto:support at ...9077...
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org

> -----Original Message-----
> From: snort-users-admin at lists.sourceforge.net [mailto:snort-users-
> admin at lists.sourceforge.net] On Behalf Of Daniel Guido
> Sent: Friday, February 06, 2004 11:28 PM
> To: snort-users at lists.sourceforge.net
> Subject: [Snort-users] invalid event id, eventlog, win32
> snort under these conditions:
> windows xp
> snort 2.1.0
> 'snort /SERVICE /INSTALL -de -X -b -l C:\snort\log -c
> C:\snort\etc\snort.conf'
> 'output alert_syslog: LOG_AUTH LOG_ALERT'
> gives me this output in the eventlog:
> The description for Event ID ( 1 ) in Source ( snort ) cannot be found.
> The local computer may not have the necessary registry information or
> message DLL files to display messages from a remote computer. You may be
> able to use the /AUXSOURCE= flag to retrieve this description; see Help
> and Support for details. The following information is part of the event:
> [1:1852:3] WEB-MISC robots.txt access [Classification: access to a
> potentially vulnerable web application] [Priority: 2]: {TCP}
> x.x.x.x:57793 -> x.x.x.x:80.
> i searched google for some answers but only found a few of the same
> questions.  I had 2.0.4 running fine before this.  Does anyone know what
> this means?
> Dan Guido
> -------------------------------------------------------
> The SF.Net email is sponsored by EclipseCon 2004
> Premiere Conference on Open Tools Development and Integration
> See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
> http://www.eclipsecon.org/osdn
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

More information about the Snort-users mailing list