Not work "NT Event Log" tests

Viran1 · Post by **Viran1** » Mon Dec 19, 2005 3:44 am

OS: Windows 2003 Enterprise Server SP1
HM ver. 5.66

Tests "NT Event Log" always report on any logs status "ok" or "Unknown" and error - "Access violation at address 7C840C72 in module 'ntdll.dll'. Read of address 00000032"

Best regards
Andrey

KS-Soft · Post by **KS-Soft** » Mon Dec 19, 2005 3:48 pm

I cannot reproduce such problem. And we cannot track error by address, it appears in system DLL.
I assume HostMonitor shows error message when it detects "bad" event? What kind of event you are monitoring? Probably error happens when HostMonitor requests 3rd party DLL in order to retrieve event description.

Regards
Alex

Viran1 · Post by **Viran1** » Tue Dec 20, 2005 3:27 pm

KS-Soft wrote:I cannot reproduce such problem. And we cannot track error by address, it appears in system DLL.
I assume HostMonitor shows error message when it detects "bad" event? What kind of event you are monitoring? Probably error happens when HostMonitor requests 3rd party DLL in order to retrieve event description.

Regards
Alex

Yes, exception appears on status "Bad".
The test checks standard log "Security" on events "Failure Audit".

KS-Soft · Post by **KS-Soft** » Tue Dec 20, 2005 6:30 pm

Cannot reproduce the problem using Windows 2003 SP1+Security updates, have checked "Security" log on events "Failure Audit".
Could you send HML file with tests to us (support@ks-soft.net)?

Regards
Alex

Yoorix · Post by **Yoorix** » Mon Jan 09, 2006 7:33 am

to viran1:

Do you check event log on local computer or on remote host?