SourceFire AMP

[pauls7490]

Hi I have a question regarding Evenyt ID's in Sourcefire. One of the workstations got infected with the following virus and the quarantine says that it failed with the error code: 3221225524. Does anyone have a list of the error codes so that I can find out what had happened and why this virus was not stopped by AMP?

Thank you 

Paul Szymanski

W32.Generic.19e2.1201

Quarantine: Failed

2016-03-29 13:12:44 UTC

File Detection Connector Info Comments Error Details
	Error Code: 3221225524

[Solobone22]

Did you ever get a response on this?

[Jetsy Mathew]

Hello Team ,

The error code 3221225524 means as follows.

STATUS_OBJECT_NAME_NOT_FOUND

The possible reason for this can be the  File name had found because it could have moved or been removed .

Rate this post if this helps.

RegardS

Jetsy 

[Solobone22]

Is there a document that lists the various error codes with regards to AMP?  There is a document for example that shows the various Cisco syslog messages and provides a brief description.

[Jetsy Mathew]

Hello Solobone22 

We have internal document for the error codes for reference.

Regards

Jetsy 

[Solobone22]

Can we get a copy of this document?  At the very least having access to what the various codes mean would be useful.

[michaeldavis4]

It would help greatly to not have to locate a web page where someone has had to ask what each code means or have to ask for ourselves. We all know waiting on a substantive response from Cisco isn't something we like to endeavor. Why can't this be publicly available?

[tyler112185]

No we have never received a response for this.