The NT/2K event logs are not flat text files. Each log entry is essentially a database record with various fields. To avoid using up event log space with repetitious text, each event record can contain both (a) plain text fields *intended* to be specific to that occurrence[*], and (b) a link to a single static string "resource" in an .exe/.dll file for text common to all occurrences of this event. The event viewer is reporting that the (b) link is broken. In the past, I've most often seen this when the log was being viewed on a machine that did not have the application that generated the event installed locally.
[*] A common newbie Windows programming error is to abuse the text fields by repeating endless reams of text, and not use the link. The event log files get HUGE when that happens. David Gillett > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] Behalf Of David > Washington > Sent: November 25, 2003 12:38 > To: [EMAIL PROTECTED] > Subject: Re: [FW-1] NT event error messages > > > Kingsley, > > Unfortunately I can't help with this one, only to say that > I'm seeing the > same on my Win2k management server with NG AI. Let me know > how you get on. > > Dave > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] Behalf > Of Kingsley > Chu > Sent: 25 November 2003 03:48 > To: [EMAIL PROTECTED] > Subject: [FW-1] NT event error messages > > > Hi all, > > I found that afer NG-AI installation, it had many following > error in Win2k's > application viewer: > ************************************************************** > ************** > *************** > The description for Event ID (2) in Source (Firewall-1) > cannot be found. > The local computer may not have the necessary registry information or > message DLL files to display messages from a remote computer. > The following > information is part of the event: Logging in >>>>. > ************************************************************** > ************** > *************** > > My question: > 1. What problem will cause this error? > 2. Because this messages will caused that the Win2k system to > take another > normal event, I don't want to take this error messages. Is > there a way to > get rid of this error? > > Many thanks, > Kingsley > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
