Microsoft-Windows-Deduplication-Change
76 events across 1 channel
Event ID 16384 — Create chunk container.
Event ID 16385 — Create chunk container completed CompletionStatus.
Event ID 16386 — Copy chunk container.
Event ID 16387 — Copy chunk container completed CompletionStatus.
Event ID 16388 — Delete chunk container.
Event ID 16389 — Delete chunk container completed CompletionStatus.
Event ID 16390 — Rename chunk container.
Event ID 16391 — Rename chunk container completed CompletionStatus.
Event ID 16392 — Flush chunk container.
Event ID 16393 — Flush chunk container completed CompletionStatus.
Event ID 16394 — Rollback chunk container.
Event ID 16395 — Rollback chunk container completed CompletionStatus.
Event ID 16396 — Mark chunk container.
Event ID 16397 — Mark chunk container read-only completed CompletionStatus.
Event ID 16398 — Write chunk container.
Description
Write chunk container (ChunkStoreType - ContainerId.Generation.ccc) redirection table at offset ContainerOffset (Entries: StartIndex StartIndex, Count EntryCount).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
ContainerOffset UInt32 | — |
StartIndex UInt32 | — |
EntryCount UInt32 | — |
Entries Int32 | — |
Event ID 16399 — Write chunk container redirection table completed CompletionStatus.
Event ID 16400 — Write chunk container.
Description
Write chunk container ( - ..ccc) header at offset (Header: USN , VDL , #Chunk , NextLocalId , Flags , LastAppendTime , BackupRedirectionTableOfset , LastReconciliationLocalId ).
Message #
Fields #
| Name | Description |
|---|---|
Signature UInt32 | — |
MajorVersion UInt8 | — |
MinorVersion UInt8 | — |
VersionChecksum UInt16 | — |
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
ContainerOffset UInt32 | — |
UpdateSequenceNumber UInt64 | — |
ValidDataLength UInt32 | — |
ChunkCount UInt32 | — |
NextLocalId UInt32 | — |
Flags UInt32 | — |
LastAppendTime UInt64 | — |
BackupRedirectionTableOffset UInt32 | — |
LastReconciliationLocalId UInt32 | — |
Checksum UInt64 | — |
Event ID 16401 — Write chunk container header completed CompletionStatus.
Event ID 16402 — Insert data chunk header to chunk container.
Description
Insert data chunk header to chunk container (ChunkStoreType - ContainerId.Generation.ccc) at offset WriteOffset (Chunk: IsBatched IsBatched IsCorupted IsCorrupted, DataSize DataSize).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
WriteOffset UInt64 | — |
IsBatched Boolean | — |
IsCorrupted Boolean | — |
DataSize UInt32 | — |
Header UInt32 | — |
Event ID 16403 — Insert data chunk header completed CompletionStatus.
Event ID 16404 — Insert data chunk body to chunk container.
Description
Insert data chunk body to chunk container (ChunkStoreType - ContainerId.Generation.ccc) at offset WriteOffset (Chunk: IsBatched IsBatched IsCorrupted IsCorrupted, DataSize DataSize).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
WriteOffset UInt64 | — |
IsBatched Boolean | — |
IsCorrupted Boolean | — |
DataSize UInt32 | — |
Event ID 16405 — Insert data chunk body completed CompletionStatus with ChunkId ChunkId.
Event ID 16408 — Write delete log.
Event ID 16409 — Write delete log header completed CompletionStatus.
Event ID 16410 — Append delete log.
Description
Append delete log (ChunkStoreType - ContainerId.LogNumber.delete.log) entries at offset FileExtension (Entries: StartIndex DeleteLogOffset, Count StartIndex).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
LogNumber UInt32 | — |
FileExtension UnicodeString | — |
DeleteLogOffset UInt32 | — |
StartIndex UInt32 | — |
EntryCount UInt32 | — |
Entries UInt32 | — |
Event ID 16411 — Append delete log entries completed CompletionStatus.
Event ID 16412 — Delete delete log.
Event ID 16413 — Delete delete log completed CompletionStatus.
Event ID 16414 — Rename delete log.
Event ID 16415 — Rename delete log completed CompletionStatus.
Event ID 16416 — Write chunk container bitmap (ChunkStoreType - FileName) for chunk container.
Description
Write chunk container bitmap (ChunkStoreType - FileName) for chunk container (ChunkStoreType - ContainerId.Generation) (Bitmap: BitLength BitLength, StartIndex StartIndex, Count EntryCount).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
FileName UnicodeString | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
BitLength UInt32 | — |
StartIndex UInt32 | — |
EntryCount UInt32 | — |
Entries Binary | — |
Event ID 16417 — Write chunk container bitmap completed CompletionStatus.
Event ID 16418 — Delete chunk container bitmap (ChunkStoreType - FileName) for chunk container.
Event ID 16419 — Delete chunk container bitmap completed CompletionStatus.
Event ID 16420 — Write merge log.
Event ID 16421 — Write merge log header completed CompletionStatus.
Event ID 16422 — Insert hotspot chunk header to chunk container.
Description
Insert hotspot chunk header to chunk container (ChunkStoreType - ContainerId.Generation.ccc) at offset WriteOffset (Chunk: IsBatched IsBatched IsCorrupted IsCorrupted, DataSize DataSize).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
WriteOffset UInt64 | — |
IsBatched Boolean | — |
IsCorrupted Boolean | — |
DataSize UInt32 | — |
Header UInt32 | — |
Event ID 16423 — Insert hotspot chunk header completed CompletionStatus.
Event ID 16424 — Insert hotspot chunk body to chunk container.
Description
Insert hotspot chunk body to chunk container (ChunkStoreType - ContainerId.Generation.ccc) at offset WriteOffset (Chunk: IsBatched IsBatched IsCorrupted IsCorrupted, DataSize DataSize).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
WriteOffset UInt64 | — |
IsBatched Boolean | — |
IsCorrupted Boolean | — |
DataSize UInt32 | — |
Event ID 16425 — Insert hotspot chunk body completed CompletionStatus with ChunkId ChunkId.
Event ID 16426 — Insert stream map chunk header to chunk container.
Description
Insert stream map chunk header to chunk container (ChunkStoreType - ContainerId.Generation.ccc) at offset WriteOffset (Chunk: IsBatched IsBatched IsCorrupted IsCorrupted, DataSize DataSize).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
WriteOffset UInt64 | — |
IsBatched Boolean | — |
IsCorrupted Boolean | — |
DataSize UInt32 | — |
Header UInt32 | — |
Event ID 16427 — Insert stream map chunk header completed CompletionStatus.
Event ID 16428 — Insert stream map chunk body to chunk container.
Description
Insert stream map chunk body to chunk container (ChunkStoreType - ContainerId.Generation.ccc) at offset WriteOffset (Chunk: IsBatched IsBatched IsCorrupted IsCorrupted, DataSize DataSize) (Entries: StartIndex StartIndex, Count EntryCount).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
WriteOffset UInt64 | — |
IsBatched Boolean | — |
IsCorrupted Boolean | — |
DataSize UInt32 | — |
StartIndex UInt32 | — |
EntryCount UInt32 | — |
Entries UInt64 | — |
Event ID 16429 — Insert stream map chunk body completed CompletionStatus with ChunkId ChunkId.
Event ID 16430 — Append merge log.
Description
Append merge log (ChunkStoreType - ContainerId.LogNumber.merge.log) entries at offset MergeLogOffset (Entries: StartIndex StartIndex, Count EntryCount).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
LogNumber UInt32 | — |
MergeLogOffset UInt32 | — |
StartIndex UInt32 | — |
EntryCount UInt32 | — |
Entries Int32 | — |
Event ID 16431 — Append merge log entries completed CompletionStatus.
Event ID 16432 — Delete merge log.
Event ID 16433 — Delete merge log completed CompletionStatus.
Event ID 16434 — Flush merge log.
Event ID 16435 — Flush merge log completed CompletionStatus.
Event ID 16436 — Update file list entries (Remove: Update_file_list_entries_Remove, Add: Add).
Event ID 16437 — Update file list entries completed CompletionStatus.
Event ID 16438 — Set dedup reparse point on FilePath (FileId FileId) (ReparsePoint: SizeBackedByChunkStore SizeBackedByChunkStore, StreamMapInfoSize StreamMapInfoSize, StreamMapInfo StreamMapInfo).
Description
Set dedup reparse point on FilePath (FileId FileId) (ReparsePoint: SizeBackedByChunkStore SizeBackedByChunkStore, StreamMapInfoSize StreamMapInfoSize, StreamMapInfo StreamMapInfo).
Message #
Fields #
| Name | Description |
|---|---|
FileId UInt64 | — |
FilePath UnicodeString | — |
SizeBackedByChunkStore UInt64 | — |
StreamMapInfoSize UInt16 | — |
StreamMapInfo Binary | — |
Event ID 16439 — Set dedup reparse point completed CompletionStatus (ReparsePointSet).
Event ID 16440 — Set dedup zero data on FilePath (FileId FileId).
Event ID 16441 — Set dedup zero data completed CompletionStatus.
Event ID 16442 — Flush reparse point files
Description
Flush reparse point files.
Message #
Event ID 16443 — Flush reparse point files completed CompletionStatus.
Event ID 16444 — Set sparse on file id FileId.
Event ID 16445 — Set sparse completed CompletionStatus.
Event ID 16446 — FSCTL_SET_ZERO_DATA on file id FileId at offset Offset and BeyondFinalZero BeyondFinalZero.
Event ID 16447 — FSCTL_SET_ZERO_DATA completed CompletionStatus.
Event ID 16448 — Rename chunk container bitmap (ChunkStoreType - FileName) for chunk container.
Event ID 16449 — Rename chunk container bitmap completed CompletionStatus.
Event ID 16450 — Insert padding chunk header to chunk container.
Description
Insert padding chunk header to chunk container (ChunkStoreType - ContainerId.Generation.ccc) at offset WriteOffset (Chunk: IsBatched IsBatched IsCorupted IsCorrupted, DataSize DataSize).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
WriteOffset UInt64 | — |
IsBatched Boolean | — |
IsCorrupted Boolean | — |
DataSize UInt32 | — |
Header UInt32 | — |
Event ID 16451 — Insert padding chunk header completed CompletionStatus.
Event ID 16452 — Insert padding chunk body to chunk container.
Description
Insert padding chunk body to chunk container (ChunkStoreType - ContainerId.Generation.ccc) at offset WriteOffset (Chunk: IsBatched IsBatched IsCorrupted IsCorrupted, DataSize DataSize).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
WriteOffset UInt64 | — |
IsBatched Boolean | — |
IsCorrupted Boolean | — |
DataSize UInt32 | — |
Event ID 16453 — Insert padding chunk body completed CompletionStatus with ChunkId ChunkId.
Event ID 16454 — Insert batch of chunks to chunk container.
Description
Insert batch of chunks to chunk container (ChunkStoreType - ContainerId.Generation.ccc) at offset WriteOffset (BatchChunkCount BatchChunkCount, BatchDataSize BatchDataSize).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
WriteOffset UInt64 | — |
BatchChunkCount UInt32 | — |
BatchDataSize UInt32 | — |
Event ID 16455 — Insert batch of chunks completed CompletionStatus.
Event ID 16456 — Write chunk container directory (ChunkStoreType - FileName) for chunk container.
Description
Write chunk container directory (ChunkStoreType - FileName) for chunk container (ChunkStoreType - ContainerId.Generation) (Directory: EntryCount FileCopyLevel).
Message #
Fields #
| Name | Description |
|---|---|
ChunkStoreType UInt8 | — |
FileName UnicodeString | — |
ContainerId UInt32 | — |
Generation UInt32 | — |
FileCopyLevel UInt32 | — |
TotalEntryCount UInt32 | — |
StartIndex UInt32 | — |
EntryCount UInt32 | — |
Entries Int64 | — |