#define EVENT_SRV_OUT_OF_WORK_ITEM_DOS 0x800007EBL
MessageId: EVENT_SRV_OUT_OF_WORK_ITEM_DOS MessageText: The server has detected a potential Denial-of-Service attack caused by consuming all the work-items. Some connections were disconnected to protect against this. If this is not the case, please raise the MaxWorkItems for the server or disable DoS detection. This event will not be logged again for 24 hours.
Lanman Server Events (2000 - 2999) 2000-2499 are generated by the server driver (kernel mode) 2500-2999 are generated by the server service (user mode) Server driver events, issued from kernel mode. Values are 32 bit values laid out as follows: 3 3 2 2 2 2 2 2 2 2 2 2 1 1 1 1 1 1 1 1 1 1 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 +---+-+-+-----------------------+-------------------------------+ |Sev|C|R| Facility | Code | +---+-+-+-----------------------+-------------------------------+ where Sev - is the severity code 00 - Success 01 - Informational 10 - Warning 11 - Error C - is the Customer code flag R - is a reserved bit Facility - is the facility code Code - is the facility's status code