On Fri, Apr 29, 2005 at 09:02:42AM -0400, Brian Hoban wrote: > Apr 26 16:14:01 grcad000dc security[failure] 680 NT AUTHORITY\SYSTEM Logon > attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0 Logon account:mslager > Source Workstation:CINCO155n Error Code:0xC000006A > > Everything looks just peachy. However when I see the alert come over into the > events, it gets truncated. This is my output from the JFFNMS events: > > 680 nt authority\system logon attempt by: m) > > Anyone know why it's doing that?
Someone had an almost identical problem to this and it was a small bug in JFFNMS. It appears to be interpreting something rather than just copying verbatim. Perhaps David Lima can help http://thread.gmane.org/gmane.network.jffnms.user/2930 It could be the field size is not big enough, or something else. - Craig -- Craig Small GnuPG:1C1B D893 1418 2AF4 45EE 95CB C76C E5AC 12CA DFA5 Eye-Net Consulting http://www.enc.com.au/ MIEE Debian developer csmall at : enc.com.au ieee.org debian.org ------------------------------------------------------- This SF.Net email is sponsored by: NEC IT Guy Games. Get your fingers limbered up and give it your best shot. 4 great events, 4 opportunities to win big! Highest score wins.NEC IT Guy Games. Play to win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=20 _______________________________________________ jffnms-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/jffnms-users
