Windows Event ID Error

["Lentz, Jim" <JLentz () ci santa-ana ca us>]

I have upgraded a Windows installation to version 2801 and now receive
the following for all alerts in the Event Log.

The description for Event ID ( 1 ) in Source ( snort ) cannot be found.
The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be
able to use the /AUXSOURCE= flag to retrieve this description; see Help
and Support for details. The following information is part of the event:
[1:1710:7] WEB-CGI bbs_forum.cgi access [Classification: access to a
potentially vulnerable web application] [Priority: 2]: {TCP}
216.35.7.116:36178 -> 192.168.1.201:80.

I have checked the registry and all the settings are correct.  I have
searched far and wide and have not found a solution to this problem only
others with the same issues.  I send the Event Log data via syslog to a
MARS and it will not accept these errors.  Any suggestions would be
appreciated.

Jim Lentz
jlentz () santa-ana org
714-647-6909

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users