Event ID: 5149

The DoS attack has subsided and normal processing is being resumed.

The DoS attack has subsided and normal processing is being resumed.

Network Information:
    Type:       %1
    Packets Discarded:          %2

In most circumstances, this event occurs very rarely. It is designed to be generated when an ICMP DoS attack ended.

Microsoft Documentation

Event ID - 5149


  C:\> AuditPol.exe /get  /subcategory:"Other Object Access Events"

Object Access

LEFT/RIGHT arrow keys for navigation