Microsoft-Pef-WFP-MessageProvider
19 events across 1 channel
| Event ID | Title | Channel |
|---|---|---|
| 2000 | The generic ETW message fragment that ORT can reassemble. | Diagnostic |
| 10001 | Driver Load | Diagnostic |
| 10002 | Driver Unload | Diagnostic |
| 10003 | Callout Register | Diagnostic |
| 10004 | Callout Unregister | Diagnostic |
| 10005 | Callout Notify Filter Add | Diagnostic |
| 10006 | Callout Notify Filter Delete | Diagnostic |
| 20001 | An error was encountered while loading the driver. | Diagnostic |
| 20002 | An error was encountered while unloading the driver. | Diagnostic |
| 20003 | An error was encountered while registering a callout. | Diagnostic |
| 20004 | An error was encountered while unregistering a callout. | Diagnostic |
| 20005 | An error was encountered in a classify function. | Diagnostic |
| 60011 | The Transport Layer Message for IPv4. | Diagnostic |
| 60012 | The Transport Layer Message for IPv4. | Diagnostic |
| 60021 | The Transport Layer Message for IPv6. | Diagnostic |
| 60022 | The Transport Layer Message for IPv6. | Diagnostic |
| 60031 | The ALE Layer Message for IPv4. | Diagnostic |
| 60041 | The Transport Layer Message for IPv6. | Diagnostic |
| 60050 | A packet has been discarded. | Diagnostic |
Event ID 2000 — The generic ETW message fragment that ORT can reassemble.
Event ID 10001 — Driver Load
Event ID 10002 — Driver Unload
Event ID 10003 — Callout Register
Event ID 10004 — Callout Unregister
Event ID 10005 — Callout Notify Filter Add
Event ID 10006 — Callout Notify Filter Delete
Event ID 20001 — An error was encountered while loading the driver.
Event ID 20002 — An error was encountered while unloading the driver.
Event ID 20003 — An error was encountered while registering a callout.
Event ID 20004 — An error was encountered while unregistering a callout.
Event ID 20005 — An error was encountered in a classify function.
Event ID 60011 — The Transport Layer Message for IPv4.
Description
The Transport Layer Message for IPv4. The Transport header is in the MessageFrame.
Message #
Fields #
| Name | Description |
|---|---|
SourceAddress UInt32 | — |
DestinationAddress UInt32 | — |
Protocol UInt8 | — Known values
|
ByteLength UInt16 | — |
MessageFrame Binary | — |
Event ID 60012 — The Transport Layer Message for IPv4.
Description
The Transport Layer Message for IPv4. The Transport header is in the MessageFrame.
Message #
Fields #
| Name | Description |
|---|---|
SourceAddress UInt32 | — |
DestinationAddress UInt32 | — |
Protocol UInt8 | — Known values
|
FlowHandle UInt64 | — |
ByteLength UInt16 | — |
MessageFrame Binary | — |
Event ID 60021 — The Transport Layer Message for IPv6.
Description
The Transport Layer Message for IPv6. The Transport header is in the MessageFrame.
Message #
Fields #
| Name | Description |
|---|---|
SourceAddress Binary | — |
DestinationAddress Binary | — |
Protocol UInt8 | — Known values
|
ByteLength UInt16 | — |
MessageFrame Binary | — |
Event ID 60022 — The Transport Layer Message for IPv6.
Description
The Transport Layer Message for IPv6. The Transport header is in the MessageFrame.
Message #
Fields #
| Name | Description |
|---|---|
SourceAddress Binary | — |
DestinationAddress Binary | — |
Protocol UInt8 | — Known values
|
FlowHandle UInt64 | — |
ByteLength UInt16 | — |
MessageFrame Binary | — |
Event ID 60031 — The ALE Layer Message for IPv4.
Description
The ALE Layer Message for IPv4.
Message #
Fields #
| Name | Description |
|---|---|
SourceAddress UInt32 | — |
DestinationAddress UInt32 | — |
SourcePort UInt16 | — |
DestinationPort UInt16 | — |
Luid UInt64 | — |
Direction UInt8 | — Known values
|
Protocol UInt8 | — Known values
|
FlowHandle UInt64 | — |
ProcessId UInt64 | — |
ByteLength UInt16 | — |
ProcessPath Binary | — |
Event ID 60041 — The Transport Layer Message for IPv6.
Description
The Transport Layer Message for IPv6.
Message #
Fields #
| Name | Description |
|---|---|
SourceAddress Binary | — |
DestinationAddress Binary | — |
SourcePort UInt16 | — |
DestinationPort UInt16 | — |
Luid UInt64 | — |
Direction UInt8 | — Known values
|
Protocol UInt8 | — Known values
|
FlowHandle UInt64 | — |
ProcessId UInt64 | — |
ByteLength UInt16 | — |
ProcessPath Binary | — |