Microsoft-Windows-Base-Filtering-Engine-Resource-Flows

4 events across 1 channel

Event IDTitleChannel
2002New Resource FlowOperational
2003Resource Flow ClosedOperational
2004New Resource FlowOperational
2005Resource Flow ClosedOperational

Event ID 2002 — New Resource Flow

Provider
Microsoft-Windows-Base-Filtering-Engine-Resource-Flows
Channel
Operational

Message

New Resource Flow

Fields

NameDescription
ConnectionUsedId
Protocol
RemoteIPAddress
LocalIPAddress
RemotePort
LocalPort
StartTime

Event ID 2003 — Resource Flow Closed

Provider
Microsoft-Windows-Base-Filtering-Engine-Resource-Flows
Channel
Operational

Message

Resource Flow Closed

Fields

NameDescription
ConnectionUsedId
Protocol
RemoteIPAddress
LocalIPAddress
RemotePort
LocalPort
StartTime
CloseTime

Event ID 2004 — New Resource Flow

Provider
Microsoft-Windows-Base-Filtering-Engine-Resource-Flows
Channel
Operational

Message

New Resource Flow

Fields

NameDescription
ConnectionUsedId
Protocol
RemoteIPAddress
LocalIPAddress
RemotePort
LocalPort
StartTime

Event ID 2005 — Resource Flow Closed

Provider
Microsoft-Windows-Base-Filtering-Engine-Resource-Flows
Channel
Operational

Message

Resource Flow Closed

Fields

NameDescription
ConnectionUsedId
Protocol
RemoteIPAddress
LocalIPAddress
RemotePort
LocalPort
StartTime
CloseTime