| Event Id | 9999 |
| Source | DNS |
| Description | DNS Server has encounters numerous run-time events. These are usually caused by the reception of bad or unexpected packets, or from problems with or excessive replication traffic. The data is the number of suppressed events encountered in the last 15 minute interval. |
| Event Information | You could do one of the following 1. If a large number of suppressible events occur, the DNS Server will log event ID 5000 to indicate that suppression has begun, and will log event ID 9999 to indicate that event suppression has ended 2. Check C:\winnt\system32\etc\drivers\hosts for duplicates. Then check the zone file for duplicates. 3. Check your ethernet adapters for duplicate bindings (remember that one ethernet adapter can have multiple bindings). |
| Reference Links | DNS Events 5501, 5000, and 9999 Fill Up the Event Log |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.