Microsoft-Pef-WFP-MessageProvider
19 events across 1 channel
| Event ID | Title | Channel |
|---|---|---|
| 2000 | The generic ETW message fragment that ORT can reassemble. | Diagnostic |
| 10001 | Driver Load | Diagnostic |
| 10002 | Driver Unload | Diagnostic |
| 10003 | Callout Register | Diagnostic |
| 10004 | Callout Unregister | Diagnostic |
| 10005 | Callout Notify Filter Add | Diagnostic |
| 10006 | Callout Notify Filter Delete | Diagnostic |
| 20001 | An error was encountered while loading the driver. | Diagnostic |
| 20002 | An error was encountered while unloading the driver. | Diagnostic |
| 20003 | An error was encountered while registering a callout. | Diagnostic |
| 20004 | An error was encountered while unregistering a callout. | Diagnostic |
| 20005 | An error was encountered in a classify function. | Diagnostic |
| 60011 | The Transport Layer Message for IPv4. | Diagnostic |
| 60012 | The Transport Layer Message for IPv4. | Diagnostic |
| 60021 | The Transport Layer Message for IPv6. | Diagnostic |
| 60022 | The Transport Layer Message for IPv6. | Diagnostic |
| 60031 | The ALE Layer Message for IPv4. | Diagnostic |
| 60041 | The Transport Layer Message for IPv6. | Diagnostic |
| 60050 | A packet has been discarded. | Diagnostic |
Event ID 2000 — The generic ETW message fragment that ORT can reassemble.
Message
Fields
| Name | Description |
|---|---|
FragmentEventId | — |
GroupId | — |
ByteLength | — |
Payload | — |
Event ID 10001 — Driver Load
Message
Fields
| Name | Description |
|---|---|
DriverName | — |
MajorVersion | — |
MinorVersion | — |
Event ID 10002 — Driver Unload
Message
Fields
| Name | Description |
|---|---|
DriverName | — |
MajorVersion | — |
MinorVersion | — |
Event ID 10003 — Callout Register
Message
Fields
| Name | Description |
|---|---|
Callout | — |
Event ID 10004 — Callout Unregister
Message
Fields
| Name | Description |
|---|---|
Callout | — |
Event ID 10005 — Callout Notify Filter Add
Message
Fields
| Name | Description |
|---|---|
FilterId | — |
Callout | — |
FilterWeight | — |
Event ID 10006 — Callout Notify Filter Delete
Message
Fields
| Name | Description |
|---|---|
FilterId | — |
Callout | — |
FilterWeight | — |
Event ID 20001 — An error was encountered while loading the driver.
Message
Fields
| Name | Description |
|---|---|
ErrorMessage | — |
NTSTATUS | — |
Event ID 20002 — An error was encountered while unloading the driver.
Message
Fields
| Name | Description |
|---|---|
ErrorMessage | — |
NTSTATUS | — |
Event ID 20003 — An error was encountered while registering a callout.
Message
Fields
| Name | Description |
|---|---|
Callout | — |
ErrorMessage | — |
NTSTATUS | — |
Event ID 20004 — An error was encountered while unregistering a callout.
Message
Fields
| Name | Description |
|---|---|
Callout | — |
ErrorMessage | — |
NTSTATUS | — |
Event ID 20005 — An error was encountered in a classify function.
Message
Fields
| Name | Description |
|---|---|
Callout | — |
ErrorMessage | — |
NTSTATUS | — |
Event ID 60011 — The Transport Layer Message for IPv4.
Message
Fields
| Name | Description |
|---|---|
SourceAddress | — |
DestinationAddress | — |
Protocol | — |
ByteLength | — |
MessageFrame | — |
Event ID 60012 — The Transport Layer Message for IPv4.
Message
Fields
| Name | Description |
|---|---|
SourceAddress | — |
DestinationAddress | — |
Protocol | — |
FlowHandle | — |
ByteLength | — |
MessageFrame | — |
Event ID 60021 — The Transport Layer Message for IPv6.
Message
Fields
| Name | Description |
|---|---|
SourceAddress | — |
DestinationAddress | — |
Protocol | — |
ByteLength | — |
MessageFrame | — |
Event ID 60022 — The Transport Layer Message for IPv6.
Message
Fields
| Name | Description |
|---|---|
SourceAddress | — |
DestinationAddress | — |
Protocol | — |
FlowHandle | — |
ByteLength | — |
MessageFrame | — |
Event ID 60031 — The ALE Layer Message for IPv4.
Message
Fields
| Name | Description |
|---|---|
SourceAddress | — |
DestinationAddress | — |
SourcePort | — |
DestinationPort | — |
Luid | — |
Direction | — |
Protocol | — |
FlowHandle | — |
ProcessId | — |
ByteLength | — |
ProcessPath | — |
Event ID 60041 — The Transport Layer Message for IPv6.
Message
Fields
| Name | Description |
|---|---|
SourceAddress | — |
DestinationAddress | — |
SourcePort | — |
DestinationPort | — |
Luid | — |
Direction | — |
Protocol | — |
FlowHandle | — |
ProcessId | — |
ByteLength | — |
ProcessPath | — |
Event ID 60050 — A packet has been discarded.
Message
Fields
| Name | Description |
|---|---|
DiscardModule | — |
DiscardReason | — |
DiscardFilterID | — |