Microsoft-Windows-FailoverClustering-NetFt
354 events across 2 channels
Event ID 0 —
Description
[AdpCreateAdapter] Invalid Adapter Type.
Event ID 0 — [AdpCreateAdapter] Invalid Adapter Type
Description
[AdpCreateAdapter] Invalid Adapter Type.
Message #
Event ID 1 —
Description
[AdpCreateAdapter] Invalid Adapter Object size.
Event ID 1 — [AdpCreateAdapter] Invalid Adapter Object size
Description
[AdpCreateAdapter] Invalid Adapter Object size.
Message #
Event ID 2 —
Description
[AdpCreateAdapter] AdpInsertAdapterTable failed.
Event ID 2 — [AdpCreateAdapter] AdpInsertAdapterTable failed
Description
[AdpCreateAdapter] AdpInsertAdapterTable failed.
Message #
Event ID 3 —
Description
[AdpCreateAdapter] AdapterInitialize failed.
Event ID 3 — [AdpCreateAdapter] AdapterInitialize failed
Description
[AdpCreateAdapter] AdapterInitialize failed.
Message #
Event ID 4 —
Description
[AdpCreateAdapter] NetftAcquireIoRemoveLock failed.
Event ID 4 — [AdpCreateAdapter] NetftAcquireIoRemoveLock failed
Description
[AdpCreateAdapter] NetftAcquireIoRemoveLock failed.
Message #
Event ID 5 —
Description
[AdpCreateAdapter] Failed to allocate memory.
Event ID 5 — [AdpCreateAdapter] Failed to allocate memory
Description
[AdpCreateAdapter] Failed to allocate memory.
Message #
Event ID 6 —
Description
Created Adapter of type adapter.
Fields #
| Name | Description |
|---|---|
Type HexInt32 | — |
Context HexInt64 | — |
Event ID 6 — Created Adapter of type Type adapter Context.
Event ID 7 —
Description
Deleted Adapter of type adapter.
Fields #
| Name | Description |
|---|---|
Type HexInt32 | — |
Context HexInt64 | — |
Event ID 7 — Deleted Adapter of type Type adapter Context.
Event ID 8 —
Description
Monitor ( - ) being marked for special HB.
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 8 — Monitor Context (LocalAddress - RemoteAddress) being marked for special HB.
Event ID 9 —
Description
Device is processing Irp ().
Fields #
| Name | Description |
|---|---|
DeviceContext HexInt64 | — |
IrpContext HexInt64 | — |
MajorFunctionCode HexInt32 | — |
Event ID 9 — Device DeviceContext is processing Irp IrpContext (MajorFunctionCode).
Event ID 10 —
Description
Device is failed Irp () with.
Fields #
| Name | Description |
|---|---|
DeviceContext HexInt64 | — |
IrpContext HexInt64 | — |
MajorFunctionCode HexInt32 | — |
ErrorCode HexInt32 | — |
Event ID 10 — Device DeviceContext is failed Irp IrpContext (MajorFunctionCode) with ErrorCode.
Event ID 11 —
Description
Created device object (handle ) with.
Fields #
| Name | Description |
|---|---|
DeviceContext HexInt64 | — |
Handle HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 11 — Created device object DeviceContext (handle Handle) with Status.
Description
Created device object DeviceContext (handle Handle) with Status.
Message #
Fields #
| Name | Description |
|---|---|
DeviceContext HexInt64 | — |
Handle HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 12 —
Description
Deleted device object (handle ).
Fields #
| Name | Description |
|---|---|
DeviceContext HexInt64 | — |
Handle HexInt64 | — |
Event ID 12 — Deleted device object DeviceContext (handle Handle).
Event ID 13 —
Description
Event \KernelObjects\Cluster.Service.Running.Event still exists. Trying to open existing event.
Event ID 13 — Event \KernelObjects\Cluster.
Description
Event \KernelObjects\Cluster.Service.Running.Event still exists. Trying to open existing event.
Message #
Event ID 14 —
Description
Failed to create \KernelObjects\Cluster.Service.Running.Event.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 14 — Failed to create \KernelObjects\Cluster.
Description
Failed to create \KernelObjects\Cluster.Service.Running.Event. Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 15 —
Description
[ProcessNotifyRoutine] : Cluster service PID is terminating. Setting event.
Fields #
| Name | Description |
|---|---|
ProcessId HexInt64 | — |
Event ID 15 — [ProcessNotifyRoutine] : Cluster service PID ProcessId is terminating.
Event ID 16 —
Description
Failed to open a tunnel adapter bound to address with error.
Fields #
| Name | Description |
|---|---|
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 16 — Failed to open a tunnel adapter bound to address LocalAddress with error Status.
Description
Failed to open a tunnel adapter bound to address LocalAddress with error Status.
Message #
Fields #
| Name | Description |
|---|---|
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 17 —
Description
Failed to allocate memory while creating a tunnel record. Error =.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 17 — Failed to allocate memory while creating a tunnel record.
Description
Failed to allocate memory while creating a tunnel record. Error = Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 18 —
Description
[NetftDispatchAddRoute] Route already exists.
Event ID 18 — [NetftDispatchAddRoute] Route already exists
Description
[NetftDispatchAddRoute] Route already exists.
Message #
Event ID 19 —
Description
[NetftDispatchAddRoute] ExtensionSize calculation returned status.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 19 — [NetftDispatchAddRoute] ExtensionSize calculation returned status Status.
Description
[NetftDispatchAddRoute] ExtensionSize calculation returned status Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 20 —
Description
[RegisterClusterService] : Cluster service is already registered. Cluster service PID . Current process PID .
Fields #
| Name | Description |
|---|---|
NewProcessId HexInt64 | — |
CurProcessId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 20 — [RegisterClusterService] : Cluster service is already registered.
Description
[RegisterClusterService] : Cluster service is already registered. Cluster service PID NewProcessId. Current process PID CurProcessId. Status.
Message #
Fields #
| Name | Description |
|---|---|
NewProcessId HexInt64 | — |
CurProcessId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 21 —
Description
[RegisterClusterService] : Cluster service PID is . Resetting event.
Fields #
| Name | Description |
|---|---|
ProcessId HexInt64 | — |
Event ID 21 — [RegisterClusterService] : Cluster service PID is ProcessId.
Event ID 22 —
Description
[NetftSweepRdbWorkerRoutine] : Routes associated with context will be deleted when the wait completes.
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
Event ID 22 — [NetftSweepRdbWorkerRoutine] : Routes associated with context Context will be deleted when the wait completes.
Event ID 23 —
Description
[NetftSweepRdbWorkerRoutine] : Route cleanup timer fired.
Event ID 23 — [NetftSweepRdbWorkerRoutine] : Route cleanup timer fired
Description
[NetftSweepRdbWorkerRoutine] : Route cleanup timer fired.
Message #
Event ID 24 —
Description
[NetftSweepRdbWorkerRoutine] : Route cleanup event signaled.
Event ID 24 — [NetftSweepRdbWorkerRoutine] : Route cleanup event signaled
Description
[NetftSweepRdbWorkerRoutine] : Route cleanup event signaled.
Message #
Event ID 25 —
Description
[ClusterServicePreTerminate] : Cluster service PID is %p is about to go down.
Fields #
| Name | Description |
|---|---|
ProcessId HexInt64 | — |
Event ID 25 — [ClusterServicePreTerminate] : Cluster service PID is %p is about to go down.
Event ID 26 —
Description
[ClusterServicePreTerminate]: Deleting routes associated with calling context.
Event ID 26 — [ClusterServicePreTerminate]: Deleting routes associated with calling context.
Description
[ClusterServicePreTerminate]: Deleting routes associated with calling context.
Message #
Event ID 27 —
Description
[ClusterServicePreTerminate]: Couldn't schedule route cleanup. Deleting routes.
Event ID 27 — [ClusterServicePreTerminate]: Couldn't schedule route cleanup.
Description
[ClusterServicePreTerminate]: Couldn't schedule route cleanup. Deleting routes.
Message #
Event ID 28 —
Description
[WerCaptureLiveKernelDumpAddSecondaryData] : Adding resource type to secondary data ; Status.
Fields #
| Name | Description |
|---|---|
GUID GUID | — |
ReportType UnicodeString | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 28 — [WerCaptureLiveKernelDumpAddSecondaryData] : Adding resource type to secondary data GUID ReportType; Status Status.
Description
[WerCaptureLiveKernelDumpAddSecondaryData] : Adding resource type to secondary data GUID ReportType; Status Status.
Message #
Fields #
| Name | Description |
|---|---|
GUID GUID | — |
ReportType UnicodeString | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 29 —
Description
[WerCaptureLiveKernelDumpAddSecondaryData] : Secondary data ; Size 0x; Status.
Fields #
| Name | Description |
|---|---|
GUID GUID | — |
Size HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 29 — [WerCaptureLiveKernelDumpAddSecondaryData] : Secondary data GUID; Size 0xSize; Status Status.
Description
[WerCaptureLiveKernelDumpAddSecondaryData] : Secondary data GUID; Size 0xSize; Status Status.
Message #
Fields #
| Name | Description |
|---|---|
GUID GUID | — |
Size HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 30 —
Description
[WerCaptureLiveKernelDump] : Live dump collection is disabled. Current policy.
Fields #
| Name | Description |
|---|---|
LiveDumpPolicy HexInt64 | — |
Event ID 30 — [WerCaptureLiveKernelDump] : Live dump collection is disabled.
Event ID 31 —
Description
[WerCaptureLiveKernelDump] : Live dump collection is throttled.
Event ID 31 — [WerCaptureLiveKernelDump] : Live dump collection is throttled.
Description
[WerCaptureLiveKernelDump] : Live dump collection is throttled.
Message #
Event ID 32 —
Description
[WerCaptureLiveKernelDump] Threshold time is not met. Threshold value , Threshold time , Current time , Remaining x 100ns.
Fields #
| Name | Description |
|---|---|
ThresholdTime HexInt64 | — |
Threshold HexInt64 | — |
CurrentTime HexInt64 | — |
TimeDeltaRemaining HexInt64 | — |
Event ID 32 — [WerCaptureLiveKernelDump] Threshold time is not met.
Description
[WerCaptureLiveKernelDump] Threshold time is not met. Threshold value ThresholdTime, Threshold time Threshold, Current time CurrentTime, Remaining TimeDeltaRemaining x 100ns.
Message #
Fields #
| Name | Description |
|---|---|
ThresholdTime HexInt64 | — |
Threshold HexInt64 | — |
CurrentTime HexInt64 | — |
TimeDeltaRemaining HexInt64 | — |
Event ID 33 —
Description
[NetftDispatchSetLiveDumpPolicy] : Live dump policy =.
Fields #
| Name | Description |
|---|---|
LiveDumpPolicy HexInt64 | — |
Event ID 33 — [NetftDispatchSetLiveDumpPolicy] : Live dump policy = LiveDumpPolicy.
Event ID 34 —
Description
[NetftDispatchSetOperationalVersion] : Operational Version =.
Fields #
| Name | Description |
|---|---|
Version HexInt32 | — |
Event ID 34 — [NetftDispatchSetOperationalVersion] : Operational Version = Version.
Event ID 35 —
Description
[NetftIssueEvent] Failed to allocate entry for event.
Fields #
| Name | Description |
|---|---|
EventType HexInt32 | — |
Event ID 35 — [NetftIssueEvent] Failed to allocate entry for EventType event.
Event ID 36 —
Description
[NetftIssueEvent] Invalid event type specified ( event).
Fields #
| Name | Description |
|---|---|
EventType HexInt32 | — |
Event ID 36 — [NetftIssueEvent] Invalid event type specified (EventType event).
Event ID 37 —
Description
Starvation threshold reached. Wait for event delivery terminated.
Event ID 37 — Starvation threshold reached.
Description
Starvation threshold reached. Wait for event delivery terminated.
Message #
Event ID 38 —
Description
Pending event IRP is being cancelled.
Fields #
| Name | Description |
|---|---|
IrpContext HexInt64 | — |
Event ID 38 — Pending event IRP IrpContext is being cancelled.
Event ID 39 —
Description
-----------------------------+ LOG BEGIN +-----------------------------.
Event ID 39 — -----------------------------+ LOG BEGIN +-----------------------------
Description
-----------------------------+ LOG BEGIN +-----------------------------.
Message #
Event ID 40 —
Description
Driver %p is loading, registry path %S.
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
RegPath UnicodeString | — |
Event ID 40 — Driver %p is loading, registry path %S.
Event ID 41 —
Description
Driver %p failed to register with ETW (status %x).
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 41 — Driver %p failed to register with ETW (status %x).
Description
Driver %p failed to register with ETW (status %x).
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 42 —
Description
Driver %p failed initialization with %x.
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 42 — Driver %p failed initialization with %x
Description
Driver %p failed initialization with %x.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 43 —
Description
Miniport adapter failed to query permanent data link address.
Fields #
| Name | Description |
|---|---|
AdapterContext HexInt64 | — |
Event ID 43 — Miniport adapter AdapterContext failed to query permanent data link address.
Event ID 44 —
Description
MaInitializeAdapter: Creating MiniportCounterSet instance 'Instance' result Status.
Fields #
| Name | Description |
|---|---|
Instance UnicodeString | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 44 — MaInitializeAdapter: Creating MiniportCounterSet instance 'Instance' result Status.
Description
MaInitializeAdapter: Creating MiniportCounterSet instance 'Instance' result Status.
Message #
Fields #
| Name | Description |
|---|---|
Instance UnicodeString | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 45 —
Description
[DROP] MaSendPackets - Tcb creation failed, adapter .
Fields #
| Name | Description |
|---|---|
AdapterContext HexInt64 | — |
Event ID 45 — [DROP] MaSendPackets - Tcb creation failed, adapter AdapterContext.
Event ID 46 —
Description
[DROP] MaSendPackets - Adapter is not active.
Fields #
| Name | Description |
|---|---|
AdapterContext HexInt64 | — |
Event ID 46 — [DROP] MaSendPackets - Adapter AdapterContext is not active.
Event ID 47 —
Description
NetBufferList with NetBuffers completed send with error .
Fields #
| Name | Description |
|---|---|
NBLContext HexInt64 | — |
NLBCount HexInt32 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 47 — NetBufferList NBLContext with NLBCount NetBuffers completed send with error Status.
Description
NetBufferList NBLContext with NLBCount NetBuffers completed send with error Status.
Message #
Fields #
| Name | Description |
|---|---|
NBLContext HexInt64 | — |
NLBCount HexInt32 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 48 —
Description
MaStatus: Miniport adapter signals connect.
Fields #
| Name | Description |
|---|---|
AdapterContext HexInt64 | — |
Event ID 48 — MaStatus: Miniport adapter AdapterContext signals connect.
Event ID 49 —
Description
MaStatus: Miniport adapter signals disconnect.
Fields #
| Name | Description |
|---|---|
AdapterContext HexInt64 | — |
Event ID 49 — MaStatus: Miniport adapter AdapterContext signals disconnect.
Event ID 50 —
Description
[DROP] MaReceivePacket - Adapter %p is not active.
Fields #
| Name | Description |
|---|---|
AdapterContext HexInt64 | — |
Event ID 50 — [DROP] MaReceivePacket - Adapter %p is not active
Event ID 51 —
Description
Received a split packet of size , split at byte .
Fields #
| Name | Description |
|---|---|
Size HexInt64 | — |
Offset HexInt64 | — |
Event ID 51 — Received a split packet of size Size, split at byte Offset.
Event ID 52 —
Description
Generated data link address .
Fields #
| Name | Description |
|---|---|
Layer2Address UnicodeString | — |
Event ID 52 — Generated data link address Layer2Address.
Event ID 53 —
Description
Searching for registered data link address at interface index , type , oper status , address .
Fields #
| Name | Description |
|---|---|
InterfaceIndex HexInt32 | — |
InterfaceType HexInt32 | — |
InterfaceStatus HexInt32 | — |
Layer2Address UnicodeString | — |
Event ID 53 — Searching for registered data link address at interface index InterfaceIndex, type InterfaceType, oper status InterfaceStatus, address Layer2Address.
Event ID 54 —
Description
Using registered data link address .
Fields #
| Name | Description |
|---|---|
Instance UnicodeString | — |
Event ID 54 — Using registered data link address Instance.
Event ID 55 —
Description
Found data link address collision with physical address on interface index , address .
Fields #
| Name | Description |
|---|---|
InterfaceIndex HexInt32 | — |
Layer2Address UnicodeString | — |
Event ID 55 — Found data link address collision with physical address on interface index InterfaceIndex, address Layer2Address.
Event ID 56 —
Description
Found data link address collision with permanentphysical address on interface index , address .
Fields #
| Name | Description |
|---|---|
InterfaceIndex HexInt32 | — |
Layer2Address UnicodeString | — |
Event ID 56 — Found data link address collision with permanentphysical address on interface index InterfaceIndex, address Layer2Address.
Event ID 57 —
Description
Successfully generated data link address .
Fields #
| Name | Description |
|---|---|
Layer2Address UnicodeString | — |
Event ID 57 — Successfully generated data link address Layer2Address.
Event ID 58 —
Description
[DROP] MaBuildTcbChain - Send from to failed RdbLookupActiveRoute.
Fields #
| Name | Description |
|---|---|
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 58 — [DROP] MaBuildTcbChain - Send from LocalAddress to RemoteAddress failed RdbLookupActiveRoute.
Event ID 59 —
Description
[DROP] MaBuildTcbChain - Send from to failed NetftParsePacket failed with.
Fields #
| Name | Description |
|---|---|
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 59 — [DROP] MaBuildTcbChain - Send from LocalAddress to RemoteAddress failed NetftParsePacket failed with RemoteAddressIPLength.
Description
[DROP] MaBuildTcbChain - Send from LocalAddress to RemoteAddress failed NetftParsePacket failed with RemoteAddressIPLength.
Message #
Fields #
| Name | Description |
|---|---|
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 60 —
Description
Initializing NDIS miniport.
Fields #
| Name | Description |
|---|---|
AdapterHandle HexInt64 | — |
Event ID 60 — Initializing NDIS miniport AdapterHandle.
Event ID 61 —
Description
Initialized NDIS miniport . (miniport adapter: ).
Fields #
| Name | Description |
|---|---|
AdapterHandle HexInt64 | — |
AdapterContext HexInt64 | — |
Event ID 61 — Initialized NDIS miniport AdapterHandle.
Event ID 62 —
Description
Initialize NDIS miniport failed with.
Fields #
| Name | Description |
|---|---|
AdapterHandle HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 62 — Initialize NDIS miniport AdapterHandle failed with Status.
Description
Initialize NDIS miniport AdapterHandle failed with Status.
Message #
Fields #
| Name | Description |
|---|---|
AdapterHandle HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 63 —
Description
Miniport adapter halted.
Fields #
| Name | Description |
|---|---|
AdapterContext HexInt64 | — |
Event ID 63 — Miniport adapter AdapterContext halted.
Event ID 64 —
Description
NDIS attempted to cancel send operation.
Event ID 64 — NDIS attempted to cancel send operation.
Description
NDIS attempted to cancel send operation.
Message #
Event ID 65 —
Description
Driver unloaded.
Fields #
| Name | Description |
|---|---|
DriverContext HexInt64 | — |
Event ID 65 — Driver DriverContext unloaded.
Event ID 66 —
Description
Interface was inserted into the system.
Fields #
| Name | Description |
|---|---|
NetbiosName UnicodeString | — |
Event ID 66 — Interface NetbiosName was inserted into the system.
Event ID 67 —
Description
Interface was removed from the system.
Fields #
| Name | Description |
|---|---|
NetbiosName UnicodeString | — |
Event ID 67 — Interface NetbiosName was removed from the system.
Event ID 68 —
Description
nconsistent route count. ContextRouteCount , Actual route count .
Fields #
| Name | Description |
|---|---|
ExpectedCount HexInt64 | — |
ActualCount HexInt64 | — |
Event ID 68 — nconsistent route count.
Event ID 69 —
Description
[RmInitializeAdapter] no valid configuration. Status.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 69 — [RmInitializeAdapter] no valid configuration.
Description
[RmInitializeAdapter] no valid configuration. Status Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 70 —
Description
[RmInitializeAdapter] Heartbeat parameters are not valid. Status.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 70 — [RmInitializeAdapter] Heartbeat parameters are not valid.
Description
[RmInitializeAdapter] Heartbeat parameters are not valid. Status Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 71 —
Description
[RmInitializeAdapter] RmCreateSecurityContext failed. Status.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 71 — [RmInitializeAdapter] RmCreateSecurityContext failed.
Description
[RmInitializeAdapter] RmCreateSecurityContext failed. Status Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 72 —
Description
[RmInitializeAdapter] TotalMessage Size is too large.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 72 — [RmInitializeAdapter] TotalMessage Size is too large Status.
Description
[RmInitializeAdapter] TotalMessage Size is too large Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 73 —
Description
[RmInitializeAdapter] NdisAllocateMemoryWithTag failed with.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 73 — [RmInitializeAdapter] NdisAllocateMemoryWithTag failed with Status.
Description
[RmInitializeAdapter] NdisAllocateMemoryWithTag failed with Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 74 —
Description
[RmInitializeAdapter] NdisAllocateNetBufferListPool failed with.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 74 — [RmInitializeAdapter] NdisAllocateNetBufferListPool failed with Status.
Description
[RmInitializeAdapter] NdisAllocateNetBufferListPool failed with Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 75 —
Description
[RmInitializeAdapter] AdpOpenTunnelAdapter returned.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 75 — [RmInitializeAdapter] AdpOpenTunnelAdapter returned Status.
Description
[RmInitializeAdapter] AdpOpenTunnelAdapter returned Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 76 —
Description
Monitor started HB from to with delay and threshold . [Min, Max] allowed delay = [, ] ticks (@ ticks per sec). CurrentProcessor=, DpcTargetProcessor=.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Delay HexInt32 | — |
Threshold HexInt32 | — |
MinTicks HexInt64 | — |
MaxTicks HexInt64 | — |
Tickrate HexInt64 | — |
CurrentCPU HexInt32 | — |
TargetCPU HexInt32 | — |
Event ID 76 — Monitor MonitorContext started HB from LocalAddress to RemoteAddress with delay Delay and threshold Threshold.
Description
Monitor MonitorContext started HB from LocalAddress to RemoteAddress with delay Delay and threshold Threshold. [Min, Max] allowed delay = [MinTicks, MaxTicks] ticks (@ Tickrate ticks per sec). CurrentProcessor=CurrentCPU, DpcTargetProcessor=TargetCPU.
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Delay HexInt32 | — |
Threshold HexInt32 | — |
MinTicks HexInt64 | — |
MaxTicks HexInt64 | — |
Tickrate HexInt64 | — |
CurrentCPU HexInt32 | — |
TargetCPU HexInt32 | — |
Event ID 77 —
Description
RmCreateCounterSet: Creating RouteMonitorCounterSet instance ' - ' result.
Fields #
| Name | Description |
|---|---|
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 77 — RmCreateCounterSet: Creating RouteMonitorCounterSet instance 'LocalAddress - RemoteAddress' result Status.
Description
RmCreateCounterSet: Creating RouteMonitorCounterSet instance 'LocalAddress - RemoteAddress' result Status.
Message #
Fields #
| Name | Description |
|---|---|
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 78 —
Description
Monitor forced the endpoint to be unreachable.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 78 — Monitor MonitorContext forced the endpoint RemoteAddress to be unreachable.
Event ID 79 —
Description
Monitor stopped HB to.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 79 — Monitor MonitorContext stopped HB to RemoteAddress.
Event ID 80 —
Description
Monitor ( - ) missed two-fifth consecutive HB response.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 80 — Monitor MonitorContext (LocalAddress - RemoteAddress) missed two-fifth consecutive HB response.
Event ID 81 —
Description
Monitor ( - ) reached HB threshold, remote endpoint is unreachable. Counter=, threshold=.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Counter HexInt32 | — |
Threshold HexInt32 | — |
Event ID 81 — Monitor MonitorContext (LocalAddress - RemoteAddress) reached HB threshold, remote endpoint RemoteAddress is unreachable.
Description
Monitor MonitorContext (LocalAddress - RemoteAddress) reached HB threshold, remote endpoint RemoteAddress is unreachable. Counter=Counter, threshold=Threshold.
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Counter HexInt32 | — |
Threshold HexInt32 | — |
Event ID 82 —
Description
Monitor ( - ) missed HB response, gap=.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
gap HexInt32 | — |
Event ID 82 — Monitor MonitorContext (LocalAddress - RemoteAddress) missed HB response, gap=gap.
Event ID 83 —
Description
Monitor routine RmHeartbeatTimerDpc took too long to complete. Start=, end=, diff=.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
StartTicks HexInt64 | — |
EndTicks HexInt64 | — |
TickDelta HexInt64 | — |
Event ID 83 — Monitor MonitorContext routine RmHeartbeatTimerDpc took too long to complete.
Event ID 84 —
Description
Monitor ( - ) sending RCP stop adapter request (sequence ).
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
NBLContext HexInt64 | — |
Sequence HexInt32 | — |
Event ID 84 — Monitor MonitorContext (LocalAddress - RemoteAddress) sending RCP stop adapter request NBLContext (sequence Sequence).
Description
Monitor MonitorContext (LocalAddress - RemoteAddress) sending RCP stop adapter request NBLContext (sequence Sequence).
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
NBLContext HexInt64 | — |
Sequence HexInt32 | — |
Event ID 85 —
Description
[DROP] RmSendPackets - Tcb Creation Failed for RmAdapter.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
Event ID 85 — [DROP] RmSendPackets - Tcb Creation Failed for RmAdapter MonitorContext.
Event ID 86 —
Description
[DROP] RmSendPackets - Could not find TunnelAdapter for RmAdapter.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
Event ID 86 — [DROP] RmSendPackets - Could not find TunnelAdapter for RmAdapter MonitorContext.
Event ID 87 —
Description
Monitor routine RmSendPackets took too long to complete. Start=, end=, diff=.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
StartTicks HexInt64 | — |
EndTicks HexInt64 | — |
TickDelta HexInt64 | — |
Event ID 87 — Monitor MonitorContext routine RmSendPackets took too long to complete.
Event ID 88 —
Description
Switched tunnel for this RMA from to.
Fields #
| Name | Description |
|---|---|
OldTunnelAddressIPLength UInt32 | — |
OldTunnelAddress Binary | — |
NewTunnelAddressIPLength UInt32 | — |
NewTunnelAddress Binary | — |
Event ID 88 — Switched tunnel for this RMA from OldTunnelAddress to NewTunnelAddress.
Event ID 89 —
Description
Monitor routine RmSendComplete took too long to complete. Start=, end=, diff=.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
StartTicks HexInt64 | — |
EndTicks HexInt64 | — |
TickDelta HexInt64 | — |
Event ID 89 — Monitor MonitorContext routine RmSendComplete took too long to complete.
Event ID 90 —
Description
[DROP] Monitor ( - ) Ignoring incomming heartbeat. Route blocked , SpecialHeartbeat .
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
RouteBlocked UnicodeString | — |
SpecialHBEnabled UnicodeString | — |
Event ID 90 — [DROP] Monitor MonitorContext (LocalAddress - RemoteAddress) Ignoring incomming heartbeat.
Description
[DROP] Monitor MonitorContext (LocalAddress - RemoteAddress) Ignoring incomming heartbeat. Route blocked RouteBlocked, SpecialHeartbeat SpecialHBEnabled.
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
RouteBlocked UnicodeString | — |
SpecialHBEnabled UnicodeString | — |
Event ID 91 —
Description
Monitor ( - ) received RCP request special (sequence ).
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
NBLContext HexInt64 | — |
Sequence HexInt32 | — |
Event ID 91 — Monitor MonitorContext (LocalAddress - RemoteAddress) received RCP request special NBLContext (sequence Sequence).
Description
Monitor MonitorContext (LocalAddress - RemoteAddress) received RCP request special NBLContext (sequence Sequence).
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
NBLContext HexInt64 | — |
Sequence HexInt32 | — |
Event ID 92 —
Description
Monitor ( - ) received RCP request adapter stopping (sequence ).
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
NBLContext HexInt64 | — |
Sequence HexInt32 | — |
Event ID 92 — Monitor MonitorContext (LocalAddress - RemoteAddress) received RCP request adapter stopping NBLContext (sequence Sequence).
Description
Monitor MonitorContext (LocalAddress - RemoteAddress) received RCP request adapter stopping NBLContext (sequence Sequence).
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
NBLContext HexInt64 | — |
Sequence HexInt32 | — |
Event ID 93 —
Description
[DROP] Monitor ( - ) received unsupported RCP message (type ).
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
NBLContext HexInt64 | — |
MessageType HexInt32 | — |
Event ID 93 — [DROP] Monitor MonitorContext (LocalAddress - RemoteAddress) received unsupported RCP message NBLContext (type MessageType).
Description
[DROP] Monitor MonitorContext (LocalAddress - RemoteAddress) received unsupported RCP message NBLContext (type MessageType).
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
NBLContext HexInt64 | — |
MessageType HexInt32 | — |
Event ID 94 —
Description
[DROP] Monitor ( - ) RmParseRcpPacket failed message \n).
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
NBLContext HexInt64 | — |
Event ID 94 — [DROP] Monitor MonitorContext (LocalAddress - RemoteAddress) RmParseRcpPacket failed message NBLContext\n).
Event ID 95 —
Description
Monitor routine RmReceivePacket took too long to complete. Start=, end=, diff=.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
StartTicks HexInt64 | — |
EndTicks HexInt64 | — |
TickDelta HexInt64 | — |
Event ID 95 — Monitor MonitorContext routine RmReceivePacket took too long to complete.
Event ID 96 —
Description
Monitor adapter signals media connect.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
Event ID 96 — Monitor adapter MonitorContext signals media connect.
Event ID 97 —
Description
Monitor adapter signals media disconnect.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
Event ID 97 — Monitor adapter MonitorContext signals media disconnect.
Event ID 98 —
Description
Monitor was disconnected, remote endpoint is unreachable.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 98 — Monitor MonitorContext was disconnected, remote endpoint RemoteAddress is unreachable.
Event ID 99 —
Description
Monitor adapter signals status change .
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 99 — Monitor adapter MonitorContext signals status change Status.
Description
Monitor adapter MonitorContext signals status change Status.
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 100 —
Description
Monitor ( - ) failed to sign RCP message with.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 100 — Monitor MonitorContext (LocalAddress - RemoteAddress) failed to sign RCP message with Status.
Description
Monitor MonitorContext (LocalAddress - RemoteAddress) failed to sign RCP message with Status.
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 101 —
Description
Monitor detected that remote endpoint is reachable.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 101 — Monitor MonitorContext detected that remote endpoint RemoteAddress is reachable.
Event ID 102 —
Description
Monitor routine RmProcessRcpRequest took too long to complete. Start=, end=, diff=.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
StartTicks HexInt64 | — |
EndTicks HexInt64 | — |
TickDelta HexInt64 | — |
Event ID 102 — Monitor MonitorContext routine RmProcessRcpRequest took too long to complete.
Event ID 103 —
Description
Failed to invalidate ARP cache. Status.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 103 — Failed to invalidate ARP cache.
Description
Failed to invalidate ARP cache. Status Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 104 —
Description
Failed to invalidate neighbor cache. Status.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 104 — Failed to invalidate neighbor cache.
Description
Failed to invalidate neighbor cache. Status Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 105 —
Description
Failed to invalidate neighbor cache fault-tolerant adapter not found. Status.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 105 — Failed to invalidate neighbor cache fault-tolerant adapter not found.
Description
Failed to invalidate neighbor cache fault-tolerant adapter not found. Status Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 106 —
Description
Monitor routine RmpUpdateNeighborEntries took too long to complete. Start=, end=, diff=.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
StartTicks HexInt64 | — |
EndTicks HexInt64 | — |
TickDelta HexInt64 | — |
Event ID 106 — Monitor MonitorContext routine RmpUpdateNeighborEntries took too long to complete.
Event ID 107 —
Description
[RmStoreHeartbeatRecord] Monitor ( - ) MissedHBCount is already 0.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 107 — [RmStoreHeartbeatRecord] Monitor MonitorContext (LocalAddress - RemoteAddress) MissedHBCount is already 0.
Event ID 108 —
Description
[RmStoreHeartbeatRecord] Monitor ( - ) MissedHBCount = , Error =.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
MissedHBCount HexInt32 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 108 — [RmStoreHeartbeatRecord] Monitor MonitorContext (LocalAddress - RemoteAddress) MissedHBCount = MissedHBCount, Error = Status.
Description
[RmStoreHeartbeatRecord] Monitor MonitorContext (LocalAddress - RemoteAddress) MissedHBCount = MissedHBCount, Error = Status.
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
MissedHBCount HexInt32 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 109 —
Description
[RmHandleHeartbeatResponse] Monitor ( - ) MissedHBCount is already 0.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 109 — [RmHandleHeartbeatResponse] Monitor MonitorContext (LocalAddress - RemoteAddress) MissedHBCount is already 0.
Event ID 110 —
Description
Failed to allocate neighbor update work item.
Event ID 110 — Failed to allocate neighbor update work item
Description
Failed to allocate neighbor update work item.
Message #
Event ID 111 —
Description
Validation of RCP packet failed - Packet too small ( bytes). Sender: .
Fields #
| Name | Description |
|---|---|
DataLength UInt32 | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 111 — Validation of RCP packet failed - Packet too small (DataLength bytes).
Event ID 112 —
Description
Validation of RCP packet failed - Bad message type (). Sender: .
Fields #
| Name | Description |
|---|---|
Type UInt32 | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 112 — Validation of RCP packet failed - Bad message type (Type).
Event ID 113 —
Description
Validation of RCP packet failed - Bad version (). Sender: .
Fields #
| Name | Description |
|---|---|
Version UInt32 | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 113 — Validation of RCP packet failed - Bad version (Version).
Event ID 114 —
Description
Validation of RCP packet failed - Invalid reserved value (). Sender.
Fields #
| Name | Description |
|---|---|
Reserved UInt32 | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 114 — Validation of RCP packet failed - Invalid reserved value (Reserved).
Event ID 115 —
Description
Validation of RCP packet failed - Invalid extension header order (). Sender.
Fields #
| Name | Description |
|---|---|
NextHeader UInt32 | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 115 — Validation of RCP packet failed - Invalid extension header order (NextHeader).
Event ID 116 —
Description
Validation of RCP packet failed - Invalid IPv4 address pair. Sender.
Fields #
| Name | Description |
|---|---|
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 116 — Validation of RCP packet failed - Invalid IPv4 address pair.
Event ID 117 —
Description
Validation of RCP packet failed - Invalid IPv6 address pair. Sender.
Fields #
| Name | Description |
|---|---|
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 117 — Validation of RCP packet failed - Invalid IPv6 address pair.
Event ID 118 —
Description
Validation of RCP packet failed - Invalid address pair extension header. Sender.
Fields #
| Name | Description |
|---|---|
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 118 — Validation of RCP packet failed - Invalid address pair extension header.
Event ID 119 —
Description
Validation of RCP packet failed - Invalid signature buffer. Sender.
Fields #
| Name | Description |
|---|---|
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 119 — Validation of RCP packet failed - Invalid signature buffer.
Event ID 120 —
Description
Validation of RCP packet failed - Invalid signature extension header. Sender.
Fields #
| Name | Description |
|---|---|
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 120 — Validation of RCP packet failed - Invalid signature extension header.
Event ID 121 —
Description
Validation of RCP packet failed - Monitor failed to verify signature (). Sender.
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 121 — Validation of RCP packet failed - Monitor MonitorContext failed to verify signature (Status).
Description
Validation of RCP packet failed - Monitor MonitorContext failed to verify signature (Status). Sender: RemoteAddress.
Message #
Fields #
| Name | Description |
|---|---|
MonitorContext HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 122 —
Description
Validation of RCP packet failed - Missing signature extension header. Sender.
Fields #
| Name | Description |
|---|---|
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 122 — Validation of RCP packet failed - Missing signature extension header.
Event ID 123 —
Description
Validation of RCP packet failed - Route monitor ( - ) FT IPs ( - ) not found.
Fields #
| Name | Description |
|---|---|
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
DestinationAddressIPLength UInt32 | — |
DestinationAddress Binary | — |
SourceAddressIPLength UInt32 | — |
SourceAddress Binary | — |
Event ID 123 — Validation of RCP packet failed - Route monitor (LocalAddress - RemoteAddress) FT IPs (DestinationAddress - SourceAddress) not found.
Description
Validation of RCP packet failed - Route monitor (LocalAddress - RemoteAddress) FT IPs (DestinationAddress - SourceAddress) not found.
Message #
Fields #
| Name | Description |
|---|---|
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
DestinationAddressIPLength UInt32 | — |
DestinationAddress Binary | — |
SourceAddressIPLength UInt32 | — |
SourceAddress Binary | — |
Event ID 124 —
Description
Validation of RCP packet failed - Invalid RCP header. Sender: .
Fields #
| Name | Description |
|---|---|
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 124 — Validation of RCP packet failed - Invalid RCP header.
Event ID 125 —
Description
Error in RmParseRcpPacketForLRR, could not retrieve packet in contiguous buffer bytes.
Fields #
| Name | Description |
|---|---|
DataLength UInt32 | — |
Event ID 125 — Error in RmParseRcpPacketForLRR, could not retrieve packet in contiguous buffer DataLength bytes.
Event ID 126 —
Description
Reference process object (ID 0x, handle 0x) by handle failed with .
Fields #
| Name | Description |
|---|---|
ProcessID HexInt64 | — |
Handle HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 126 — Reference process object (ID 0xProcessID, handle 0xHandle) by handle failed with Status.
Description
Reference process object (ID 0xProcessID, handle 0xHandle) by handle failed with Status.
Message #
Fields #
| Name | Description |
|---|---|
ProcessID HexInt64 | — |
Handle HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 127 —
Description
Open client process (ID 0x) failed with .
Fields #
| Name | Description |
|---|---|
ProcessID HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 127 — Open client process (ID 0xProcessID) failed with Status.
Description
Open client process (ID 0xProcessID) failed with Status.
Message #
Fields #
| Name | Description |
|---|---|
ProcessID HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 128 —
Description
Close client process (handle 0x) failed with .
Fields #
| Name | Description |
|---|---|
Handle HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 128 — Close client process (handle 0xHandle) failed with Status.
Description
Close client process (handle 0xHandle) failed with Status.
Message #
Fields #
| Name | Description |
|---|---|
Handle HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 129 —
Description
TaInitializeAdapter: Creating TunnelCounterSet instance 'EndpointAddress' result Status.
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 129 — TaInitializeAdapter: Creating TunnelCounterSet instance 'EndpointAddress' result Status.
Description
TaInitializeAdapter: Creating TunnelCounterSet instance 'EndpointAddress' result Status.
Message #
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 130 —
Description
TaDeInitializeAdapter: Releasing Endpoint TunnelCounterSet instance 'EndpointAddress'.
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Event ID 130 — TaDeInitializeAdapter: Releasing Endpoint TunnelCounterSet instance 'EndpointAddress'.
Event ID 131 —
Description
[DROP] TaSendTcb - Adapter not ready to send to.
Fields #
| Name | Description |
|---|---|
Adapter HexInt64 | — |
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Event ID 131 — [DROP] TaSendTcb - Adapter Adapter not ready to send to EndpointAddress.
Event ID 132 —
Description
[DROP] TaReceivePacket - Receive from to failed TaFilterPacket.
Fields #
| Name | Description |
|---|---|
LocalAddressIPLength UInt32 | — |
LocalAddress Binary | — |
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 132 — [DROP] TaReceivePacket - Receive from LocalAddress to RemoteAddress failed TaFilterPacket.
Event ID 133 —
Description
Tunnel adapter signals media connect. \n.
Fields #
| Name | Description |
|---|---|
Adapter HexInt64 | — |
Event ID 133 — Tunnel adapter Adapter signals media connect.
Event ID 134 —
Description
Tunnel adapter signals media disconnect.\n.
Fields #
| Name | Description |
|---|---|
Adapter HexInt64 | — |
Event ID 134 — Tunnel adapter Adapter signals media disconnect.
Event ID 135 —
Description
Tunnel adapter signals status change .\n.
Fields #
| Name | Description |
|---|---|
Adapter HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 135 — Tunnel adapter Adapter signals status change Status.
Description
Tunnel adapter Adapter signals status change Status.\n.
Message #
Fields #
| Name | Description |
|---|---|
Adapter HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 136 —
Description
[DROP] Dropping received RCP messages from .
Fields #
| Name | Description |
|---|---|
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 136 — [DROP] Dropping received RCP messages from RemoteAddress.
Event ID 137 —
Description
[DROP] Dropping received RCP messages from invalid port number.
Fields #
| Name | Description |
|---|---|
RemoteAddressIPLength UInt32 | — |
RemoteAddress Binary | — |
Event ID 137 — [DROP] Dropping received RCP messages from RemoteAddress invalid port number.
Event ID 138 —
Description
[DROP] TaFilterPacket Invalid Ethernet Header.
Event ID 138 — [DROP] TaFilterPacket Invalid Ethernet Header
Description
[DROP] TaFilterPacket Invalid Ethernet Header.
Message #
Event ID 139 —
Description
[DROP] TaFilterPacket NetftInitializeDataBuffer failed.
Event ID 139 — [DROP] TaFilterPacket NetftInitializeDataBuffer failed
Description
[DROP] TaFilterPacket NetftInitializeDataBuffer failed.
Message #
Event ID 140 —
Description
The client process (ID 0x) was terminated. Watchdog source .
Fields #
| Name | Description |
|---|---|
ProcessId HexInt64 | — |
WatchdogSource HexInt32 | — |
Event ID 140 — The client process (ID 0xProcessId) was terminated.
Event ID 141 —
Description
Watchdog timer timed out for the client process (ID 0x). The system will be halted. Watchdog source .
Fields #
| Name | Description |
|---|---|
ProcessId HexInt64 | — |
WatchdogSource HexInt32 | — |
Event ID 141 — Watchdog timer timed out for the client process (ID 0xProcessId).
Event ID 142 —
Description
Watchdog timer timed out for the client process (ID 0x). Looking for kd to allow debugging. Watchdog source .
Fields #
| Name | Description |
|---|---|
ProcessId HexInt64 | — |
WatchdogSource HexInt32 | — |
Event ID 142 — Watchdog timer timed out for the client process (ID 0xProcessId).
Event ID 143 —
Description
Tunnel adapter bound to.
Fields #
| Name | Description |
|---|---|
EndpointContext HexInt64 | — |
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Event ID 143 — Tunnel adapter EndpointContext bound to EndpointAddress.
Event ID 144 —
Description
Tunnel adapter failed to create socket (status ).
Fields #
| Name | Description |
|---|---|
EndpointContext HexInt64 | — |
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 144 — Tunnel adapter EndpointContext failed to create socket EndpointAddress (status Status).
Description
Tunnel adapter EndpointContext failed to create socket EndpointAddress (status Status).
Message #
Fields #
| Name | Description |
|---|---|
EndpointContext HexInt64 | — |
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 145 —
Description
NetftEndpointCreateCounterSet: Creating WskCounterSet instance 'EndpointAddress' result Status.
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 145 — NetftEndpointCreateCounterSet: Creating WskCounterSet instance 'EndpointAddress' result Status.
Description
NetftEndpointCreateCounterSet: Creating WskCounterSet instance 'EndpointAddress' result Status.
Message #
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 146 —
Description
[DROP] NetftSendDatagram - IoAllocateIrp failed when trying to send to.
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Event ID 146 — [DROP] NetftSendDatagram - IoAllocateIrp failed when trying to send to EndpointAddress.
Event ID 147 —
Description
[DROP] NetftSendDatagram - NdisAllocateFromNPagedLookasideList failed when trying to send to.
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Event ID 147 — [DROP] NetftSendDatagram - NdisAllocateFromNPagedLookasideList failed when trying to send to EndpointAddress.
Event ID 148 —
Description
[DROP] NetftReceiveDatagramHandler - AdpReferenceAdapterSafe failed (tunnel adapter ).
Fields #
| Name | Description |
|---|---|
EndpointContext HexInt64 | — |
Event ID 148 — [DROP] NetftReceiveDatagramHandler - AdpReferenceAdapterSafe failed (tunnel adapter EndpointContext).
Event ID 149 —
Description
[DROP] NetftReceiveDatagramHandler - Tunnel adapter is stopping.
Fields #
| Name | Description |
|---|---|
EndpointContext HexInt64 | — |
Event ID 149 — [DROP] NetftReceiveDatagramHandler - Tunnel adapter EndpointContext is stopping.
Event ID 150 —
Description
[DROP] NetftReceiveDatagramHandler - Tunnel adapter is not active.
Fields #
| Name | Description |
|---|---|
EndpointContext HexInt64 | — |
Event ID 150 — [DROP] NetftReceiveDatagramHandler - Tunnel adapter EndpointContext is not active.
Event ID 151 —
Description
[DROP] Underlying socket terminated by WSK provider (tunnel adapter ).
Fields #
| Name | Description |
|---|---|
EndpointContext HexInt64 | — |
Event ID 151 — [DROP] Underlying socket terminated by WSK provider (tunnel adapter EndpointContext).
Event ID 152 —
Description
[DROP] Tunnel adapter failed to build datagram descriptor list.
Fields #
| Name | Description |
|---|---|
EndpointContext HexInt64 | — |
Event ID 152 — [DROP] Tunnel adapter EndpointContext failed to build datagram descriptor list.
Event ID 153 —
Description
Tunnel adapter unbound from with .
Fields #
| Name | Description |
|---|---|
EndpointContext HexInt64 | — |
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 153 — Tunnel adapter EndpointContext unbound from EndpointAddress with Status.
Description
Tunnel adapter EndpointContext unbound from EndpointAddress with Status.
Message #
Fields #
| Name | Description |
|---|---|
EndpointContext HexInt64 | — |
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 154 —
Description
Tunnel adapter failed to allocate NBL.
Event ID 154 — Tunnel adapter failed to allocate NBL.
Description
Tunnel adapter failed to allocate NBL.
Message #
Event ID 155 —
Description
[NetftQueryIfIndexByDataLinkddress] : NetftEnumerateInterfaces returned status.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 155 — [NetftQueryIfIndexByDataLinkddress] : NetftEnumerateInterfaces returned status Status.
Description
[NetftQueryIfIndexByDataLinkddress] : NetftEnumerateInterfaces returned status Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 156 —
Description
[NetftIsFaultTolerantIpAddress] : AdpOpenMiniportAdapter returned status.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 156 — [NetftIsFaultTolerantIpAddress] : AdpOpenMiniportAdapter returned status Status.
Description
[NetftIsFaultTolerantIpAddress] : AdpOpenMiniportAdapter returned status Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 157 —
Description
[NetftIsFaultTolerantIpAddress] : NetftQueryIfIndexByIpAddress returned status.
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 157 — [NetftIsFaultTolerantIpAddress] : NetftQueryIfIndexByIpAddress returned status Status.
Description
[NetftIsFaultTolerantIpAddress] : NetftQueryIfIndexByIpAddress returned status Status.
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 158 —
Description
Insert into interface completed with.
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
InterfaceId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 158 — Insert EndpointAddress into interface InterfaceId completed with Status.
Description
Insert EndpointAddress into interface InterfaceId completed with Status.
Message #
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
InterfaceId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 159 —
Description
Insert into interface completed with.
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
InterfaceId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 159 — Insert EndpointAddress into interface InterfaceId completed with Status.
Description
Insert EndpointAddress into interface InterfaceId completed with Status.
Message #
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
InterfaceId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 160 —
Description
Remove from interface completed with.
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
InterfaceId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 160 — Remove EndpointAddress from interface InterfaceId completed with Status.
Description
Remove EndpointAddress from interface InterfaceId completed with Status.
Message #
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
InterfaceId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 161 —
Description
Remove from interface completed with.
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
InterfaceId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 161 — Remove EndpointAddress from interface InterfaceId completed with Status.
Description
Remove EndpointAddress from interface InterfaceId completed with Status.
Message #
Fields #
| Name | Description |
|---|---|
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
InterfaceId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 162 —
Description
Failed to register address change handler with IPv4/802 provider ().
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 162 — Failed to register address change handler with IPv4/802 provider (Status).
Description
Failed to register address change handler with IPv4/802 provider (Status).
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 163 —
Description
Failed to register address change handler with IPv6/802 provider ().
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 163 — Failed to register address change handler with IPv6/802 provider (Status).
Description
Failed to register address change handler with IPv6/802 provider (Status).
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 164 —
Description
Failed to register media sense handler with NDIS provider ().
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 164 — Failed to register media sense handler with NDIS provider (Status).
Description
Failed to register media sense handler with NDIS provider (Status).
Message #
Fields #
| Name | Description |
|---|---|
Status HexInt32 | — NTSTATUS reference |
Event ID 165 —
Description
PnP signals address change ().
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
NotificationType HexInt32 | — |
Event ID 165 — PnP signals Context address change (NotificationType).
Event ID 166 —
Description
Interface signals address IP DAD State change to.
Fields #
| Name | Description |
|---|---|
InterfaceId HexInt64 | — |
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
IpDadState HexInt32 | — |
Event ID 166 — Interface InterfaceId signals address EndpointAddress IP DAD State change to IpDadState.
Event ID 167 —
Description
Interface signals address IP DAD State change to.
Fields #
| Name | Description |
|---|---|
InterfaceId HexInt64 | — |
EndpointAddressIPLength UInt32 | — |
EndpointAddress Binary | — |
IpDadState HexInt32 | — |
Event ID 167 — Interface InterfaceId signals address EndpointAddress IP DAD State change to IpDadState.
Event ID 168 —
Description
PnP signals interface operational status change ().
Fields #
| Name | Description |
|---|---|
NotificationType HexInt32 | — |
Event ID 168 — PnP signals interface operational status change (NotificationType).
Event ID 169 —
Description
Interface signals operational status.
Fields #
| Name | Description |
|---|---|
InterfaceId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 169 — Interface InterfaceId signals operational status Status.
Description
Interface InterfaceId signals operational status Status.
Message #
Fields #
| Name | Description |
|---|---|
InterfaceId HexInt64 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 4096 — Driver loaded.
Event ID 8192 — Watchdog Started.
Description
Watchdog Started. Instance: Context; Image Name: ProcessName; PID: PID; Action: Action; Source: Source; Counter: Counter; Missing Heartbeats Limit: Period.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
PID HexInt64 | — |
ProcessImageNameLength UInt16 | — |
ProcessName UnicodeString | — |
Action UInt32 | — |
Source UInt32 | — |
Period UInt32 | — |
Counter UInt32 | — |
Event ID 12288 — Watchdog Stopped.
Description
Watchdog Stopped. Instance: Context; Image Name: ProcessName; PID: PID; Action: Action; Source: Source; Counter: Counter; Missing Heartbeats Limit: Period.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
PID HexInt64 | — |
ProcessImageNameLength UInt16 | — |
ProcessName UnicodeString | — |
Action UInt32 | — |
Source UInt32 | — |
Period UInt32 | — |
Counter UInt32 | — |
Event ID 16384 — Watchdog Heartbeat Missed.
Description
Watchdog Heartbeat Missed. Instance: Context; Image Name: ProcessName; PID: PID; Action: Action; Source: Source; Counter: Counter; Missing Heartbeats Limit: Period.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
PID HexInt64 | — |
ProcessImageNameLength UInt16 | — |
ProcessName UnicodeString | — |
Action UInt32 | — |
Source UInt32 | — |
Period UInt32 | — |
Counter UInt32 | — |
Event ID 20480 — Watchdog Fired.
Description
Watchdog Fired. Instance: Context; Image Name: ProcessName; PID: PID; Action: Action; Source: Source; Counter: Counter; Missing Heartbeats Limit: Period.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
PID HexInt64 | — |
ProcessImageNameLength UInt16 | — |
ProcessName UnicodeString | — |
Action UInt32 | — |
Source UInt32 | — |
Period UInt32 | — |
Counter UInt32 | — |
Event ID 24576 — Watchdog Updated.
Description
Watchdog Updated. Instance: Context; Image Name: ProcessName; PID: PID; Action: Action; Source: Source; Counter: Counter; Missing Heartbeats Limit: Period.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
PID HexInt64 | — |
ProcessImageNameLength UInt16 | — |
ProcessName UnicodeString | — |
Action UInt32 | — |
Source UInt32 | — |
Period UInt32 | — |
Counter UInt32 | — |
Event ID 28672 — Watchdog Orphaned.
Description
Watchdog Orphaned. Instance: Context; Image Name: ProcessName; PID: PID; Action: Action; Source: Source; Counter: Counter; Missing Heartbeats Limit: Period.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
PID HexInt64 | — |
ProcessImageNameLength UInt16 | — |
ProcessName UnicodeString | — |
Action UInt32 | — |
Source UInt32 | — |
Period UInt32 | — |
Counter UInt32 | — |
Event ID 32768 — Watchdog Orphaned.
Description
Watchdog Orphaned. Process termination completed. Instance: Context; Image Name: ProcessName; PID: PID; Action: Action; Source: Source; Counter: Counter; Missing Heartbeats Limit: Period.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
PID HexInt64 | — |
ProcessImageNameLength UInt16 | — |
ProcessName UnicodeString | — |
Action UInt32 | — |
Source UInt32 | — |
Period UInt32 | — |
Counter UInt32 | — |
Event ID 36864 — Route added from SourceIP to DestinationIP for context Context, ContextRouteCount: ContextRouteCount.
Description
Route added from SourceIP to DestinationIP for context Context, ContextRouteCount: ContextRouteCount. Source: Source.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
SourceIPLength UInt32 | — |
DestinationIPLength UInt32 | — |
SourceIP Binary | — |
DestinationIP Binary | — |
ContextRouteCount UInt32 | — |
Source UInt32 | — |
Event ID 40960 — Route from SourceIP to DestinationIP deleted for context Context, ContextRouteCount: ContextRouteCount.
Description
Route from SourceIP to DestinationIP deleted for context Context, ContextRouteCount: ContextRouteCount. Source: Source.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
SourceIPLength UInt32 | — |
DestinationIPLength UInt32 | — |
SourceIP Binary | — |
DestinationIP Binary | — |
ContextRouteCount UInt32 | — |
Source UInt32 | — |
Event ID 45056 — Route cleanup scheduled for context Context, ContextRouteCount: ContextRouteCount, Source: Source.
Event ID 49152 — Livedump started.
Description
Livedump started. : Report type: ReportType; Bugcheck code: BugcheckCode; Parameter1: Parameter1; Parameter2: Parameter2; Parameter3: Parameter3; Parameter4: Parameter4; Flags: Flags.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
ReportType UnicodeString | — |
BugcheckCode HexInt64 | — |
Parameter1 HexInt64 | — |
Parameter2 HexInt64 | — |
Parameter3 HexInt64 | — |
Parameter4 HexInt64 | — |
Flags HexInt32 | — |
Event ID 53248 — Livedump Completed.
Description
Livedump Completed. : Report type: ReportType; Bugcheck code: BugcheckCode; Parameter1: Parameter1; Parameter2: Parameter2; Parameter3: Parameter3; Parameter4: Parameter4; Flags: Flags Status: Status.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
ReportType UnicodeString | — |
BugcheckCode HexInt64 | — |
Parameter1 HexInt64 | — |
Parameter2 HexInt64 | — |
Parameter3 HexInt64 | — |
Parameter4 HexInt64 | — |
Flags HexInt32 | — |
Status HexInt32 | — NTSTATUS reference |
Event ID 57344 — DPC Skew detected for Monitor Context.
Description
DPC Skew detected for Monitor Context. DPC routine fired in DelayTicks ticks (@ TickRate ticks per sec), but was scheduled scheduled for ScheduledTimeMilliseconds msecs, with tolerance range [min, max] = [MinimumToleranceTicks, MaximumToleranceTicks] ticks, current tick count CurrentTickCount.
Message #
Fields #
| Name | Description |
|---|---|
Context HexInt64 | — |
DelayTicks HexInt64 | — |
TickRate HexInt64 | — |
ScheduledTimeMilliseconds UInt32 | — |
MinimumToleranceTicks HexInt64 | — |
MaximumToleranceTicks HexInt64 | — |
CurrentTickCount HexInt64 | — |