On 11 Jul 2001, at 9:32, simon chan wrote:
> Hi list,
>
> I have lots of error like the one below,
>
> The description for Event ID ( 1 ) in Source ( FW1 ) cannot
> be found. The local computer may not have the necessary
> registry information or message DLL files to display
> messages from a remote computer. The following information
> is part of the event: \Device\FW1, , 64.4.56.7.
>
> Any ideas..
In an effort to conserve log space, most Windows applications do
not write long repetitious character strings to the log files.
Instead, they write a resource (=read-only data item from a "module"
(.exe, .dll, etc) file) identifier of a format string, and the field
values to fill into the format string. The repetitious text exists
only in a single place, outside the log file, but must be retrieved
by the log viewer in order to display the message in its full human-
readable form.
The event viewer is telling you that it cannot find the format
string ("description" of the event) using the resource ID that was
written to the log. It *is* showing you the field data to be filled
in, "\Devices\FW1" and "64.4.56.7".
This could be because the registry entry defining the "FW1" log
source is missing, or because the entry is present but the file it
points to is missing, or the file is there buyt contains no string
resource with this ID.
This message is typically seen when the software that created a log
entry has been uninstalled, or where the log entry came from some
other machine and the necessary module files are not installed on the
machine hosting the log.
David Gillett
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
