Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a

237 events across 1 channel

Event ID	Title	Channel
10	[TL_%!	Operational
11	[TL_%!	Operational
12	[TL_%!	Operational
13	[TL_%!	Operational
14	[TL_%!	Operational
15	[TL_%!	Operational
16	[TL_%!	Operational
17	[TL_%!	Operational
18	[TL_%!	Operational
19	[TL_%!	Operational
20	[TL_%!	Operational
21	[TL_%!	Operational
22	[TL_%!	Operational
23	[TL_%!	Operational
24	[TL_%!	Operational
25	[TL_%!	Operational
26	[TL_%!	Operational
27	[TL_%!	Operational
28	[TL_%!	Operational
29	[TL_%!	Operational
30	[TL_%!	Operational
31	[TL_%!	Operational
32	[TL_%!	Operational
33	[TL_%!	Operational
34	[TL_%!	Operational
35	[TL_%!	Operational
36	[TL_%!	Operational
37	[TL_%!	Operational
38	[TL_%!	Operational
39	[TL_%!	Operational
40	[TL_%!	Operational
41	[TL_%!	Operational
42	[TL_%!	Operational
43	[TL_%!	Operational
44	[TL_%!	Operational
45	[TL_%!	Operational
46	[TL_%!	Operational
47	[TL_%!	Operational
48	[TL_%!	Operational
49	[TL_%!	Operational
50	[TL_%!	Operational
51	[TL_%!	Operational
52	[TL_%!	Operational
53	[TL_%!	Operational
54	[TL_%!	Operational
55	[TL_%!	Operational
56	[TL_%!	Operational
57	[TL_%!	Operational
58	[TL_%!	Operational
59	[TL_%!	Operational
60	[TL_%!	Operational
61	[TL_%!	Operational
62	[TL_%!	Operational
63	[TL_%!	Operational
64	[TL_%!	Operational
65	[TL_%!	Operational
66	[TL_%!	Operational
67	[TL_%!	Operational
68	[TL_%!	Operational
69	[TL_%!	Operational
70	[TL_%!	Operational
71	[TL_%!	Operational
72	[TL_%!	Operational
73	[TL_%!	Operational
74	[TL_%!	Operational
75	[TL_%!	Operational
76	[TL_%!	Operational
77	[TL_%!	Operational
78	[TL_%!	Operational
79	[TL_%!	Operational
80	[TL_%!	Operational
81	[TL_%!	Operational
82	[TL_%!	Operational
83	[TL_%!	Operational
84	[TL_%!	Operational
85	[TL_%!	Operational
86	[TL_%!	Operational
87	[TL_%!	Operational
88	[TL_%!	Operational
89	[TL_%!	Operational
90	[TL_%!	Operational
91	[TL_%!	Operational
92	[TL_%!	Operational
93	[TL_%!	Operational
94	[TL_%!	Operational
95	[TL_%!	Operational
96	[TL_%!	Operational
97	[TL_%!	Operational
98	[TL_%!	Operational
99	[TL_%!	Operational
100	[TL_%!	Operational
101	[TL_%!	Operational
102	[TL_%!	Operational
103	[TL_%!	Operational
104	[TL_%!	Operational
105	[TL_%!	Operational
106	[TL_%!	Operational
107	[TL_%!	Operational
108	[TL_%!	Operational
109	[TL_%!	Operational
110	[TL_%!	Operational
111	[TL_%!	Operational
112	[TL_%!	Operational
113	[TL_%!	Operational
114	[TL_%!	Operational
115	[TL_%!	Operational
116	[TL_%!	Operational
117	[TL_%!	Operational
118	[TL_%!	Operational
119	[TL_%!	Operational
120	[TL_%!	Operational
121	[TL_%!	Operational
122	[TL_%!	Operational
123	[TL_%!	Operational
124	[TL_%!	Operational
125	[TL_%!	Operational
126	[TL_%!	Operational
127	[TL_%!	Operational
128	[TL_%!	Operational
129	[TL_%!	Operational
130	[TL_%!	Operational
131	[TL_%!	Operational
132	[TL_%!	Operational
133	[TL_%!	Operational
134	[TL_%!	Operational
135	[TL_%!	Operational
136	[TL_%!	Operational
137	[TL_%!	Operational
138	[TL_%!	Operational
139	[TL_%!	Operational
140	[TL_%!	Operational
141	[TL_%!	Operational
142	[TL_%!	Operational
143	[TL_%!	Operational
144	[TL_%!	Operational
145	[TL_%!	Operational
146	[TL_%!	Operational
147	[TL_%!	Operational
148	[TL_%!	Operational
149	[TL_%!	Operational
150	[TL_%!	Operational
151	[TL_%!	Operational
152	[TL_%!	Operational
153	[TL_%!	Operational
154	[TL_%!	Operational
155	[TL_%!	Operational
156	[TL_%!	Operational
157	[TL_%!	Operational
158	[TL_%!	Operational
159	[TL_%!	Operational
160	[TL_%!	Operational
161	[TL_%!	Operational
162	[TL_%!	Operational
163	[TL_%!	Operational
164	[TL_%!	Operational
165	[TL_%!	Operational
166	[TL_%!	Operational
167	[TL_%!	Operational
168	[TL_%!	Operational
169	[TL_%!	Operational
170	[TL_%!	Operational
171	[TL_%!	Operational
172	[TL_%!	Operational
173	[TL_%!	Operational
174	[TL_%!	Operational
175	[TL_%!	Operational
176	[TL_%!	Operational
177	[TL_%!	Operational
178	[TL_%!	Operational
179	[TL_%!	Operational
180	[TL_%!	Operational
181	[TL_%!	Operational
182	[TL_%!	Operational
183	[TL_%!	Operational
184	[TL_%!	Operational
185	[TL_%!	Operational
186	[TL_%!	Operational
187	[TL_%!	Operational
188	[TL_%!	Operational
189	[TL_%!	Operational
190	[TL_%!	Operational
191	[TL_%!	Operational
192	[TL_%!	Operational
193	[TL_%!	Operational
194	[TL_%!	Operational
195	[TL_%!	Operational
196	[TL_%!	Operational
197	[TL_%!	Operational
198	[TL_%!	Operational
199	[TL_%!	Operational
200	[TL_%!	Operational
201	[TL_%!	Operational
202	[TL_%!	Operational
203	[TL_%!	Operational
204	[TL_%!	Operational
205	[TL_%!	Operational
206	[TL_%!	Operational
207	[TL_%!	Operational
208	[TL_%!	Operational
209	[TL_%!	Operational
210	[TL_%!	Operational
211	[TL_%!	Operational
212	[TL_%!	Operational
213	[TL_%!	Operational
214	[TL_%!	Operational
215	[TL_%!	Operational
216	[TL_%!	Operational
217	[TL_%!	Operational
218	[TL_%!	Operational
219	[TL_%!	Operational
220	[TL_%!	Operational
221	[TL_%!	Operational
222	[TL_%!	Operational
223	[TL_%!	Operational
224	[TL_%!	Operational
225	[TL_%!	Operational
226	[TL_%!	Operational
227	[TL_%!	Operational
228	[TL_%!	Operational
229	[TL_%!	Operational
230	[TL_%!	Operational
231	[TL_%!	Operational
232	[TL_%!	Operational
233	[TL_%!	Operational
234	[TL_%!	Operational
235	[TL_%!	Operational
236	[TL_%!	Operational
237	[TL_%!	Operational
238	[TL_%!	Operational
239	[TL_%!	Operational
240	[TL_%!	Operational
241	[TL_%!	Operational
242	[TL_%!	Operational
243	[TL_%!	Operational
244	[TL_%!	Operational
245	[TL_%!	Operational
246	[TL_%!	Operational

Event ID 10 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(342) %!FUNC!:Forcing small completion stack size of %2!d! instead of %3!d!

Fields

Name	Description
`FUNC`	—
`A10_stackSize`	—
`A11_oldStackSize`	—

Event ID 11 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1378) %!FUNC!:Extending completion stack from %2!d! to %3!d! (irpCtrl=%4!p!)

Fields

Name	Description
`FUNC`	—
`A10_IrpCtrlCompletionStackLength`	—
`A11_newStackSize`	—
`A12_IrpCtrl`	—

Event ID 12 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1461) %!FUNC!:CN Insert Active (extend) IrpCtrl=%2!p! CompNode=%3!p!, [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_newCNodeIrpCtrl`	—
`A11_newCNode`	—
`A12_newCNodeDataSnapshotMajorFunction`	—

Event ID 13 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1476) %!FUNC!:CN Insert Waiting (extend)  IrpCtrl=%2!p! CompNode=%3!p!, [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_newCNodeIrpCtrl`	—
`A11_newCNode`	—
`A12_newCNodeDataSnapshotMajorFunction`	—

Event ID 14 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1502) %!FUNC!:While extending, hit non-tracked completion node, IrpCtrl=%2!p! [%3!d!,%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_IrpCtrl`	—
`A11_CHARnewCNodeDataSnapshotMajorFunction`	—
`A12_CHARnewCNodeDataSnapshotMinorFunction`	—

Event ID 15 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1524) %!FUNC!:Extending an already extended stack

Fields

Name	Description
`FUNC`	—

Event ID 16 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1850) %!FUNC!:Allocated type %2!d! IrpCtrl (%3!p!) for thread (%4!p!)

Fields

Name	Description
`FUNC`	—
`A10_OpType`	—
`A11_irpCtrl`	—
`A12_FrameReserveIrpCtrlsStaticOwningThreadOpType`	—

Event ID 17 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1909) %!FUNC!:Freeing type %2!d! IrpCtrl (%3!p!) for thread (%4!p!)

Fields

Name	Description
`FUNC`	—
`A10_OpType`	—
`A11_IrpCtrl`	—
`A12_FrameReserveIrpCtrlsStaticOwningThreadOpType`	—

Event ID 18 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(2053) %!FUNC!:Allocated BackPocket IrpCtrl-1: (%2!p!) for thread (%3!p!), count=%4!d! index=%5!d!

Fields

Name	Description
`FUNC`	—
`A10_irpCtrl`	—
`A11_th`	—
`A12_FrameReserveIrpCtrlsEntriesiCount`	—
`A13_i`	—

Event ID 19 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(2125) %!FUNC!:Allocated BackPocket IrpCtrl-2: (%2!p!) for thread (%3!p!), count=%4!d! index=%5!d!

Fields

Name	Description
`FUNC`	—
`A10_irpCtrl`	—
`A11_th`	—
`A12_FrameReserveIrpCtrlsEntriesiCount`	—
`A13_i`	—

Event ID 20 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(2222) %!FUNC!:Freeing BackPocket IrpCtrl (%2!p!) for thread (%3!p!), count=%4!d! index=%5!d!

Fields

Name	Description
`FUNC`	—
`A10_IrpCtrl`	—
`A11_IrpCtrlDataThread`	—
`A12_FrameReserveIrpCtrlsEntriesiCount`	—
`A13_i`	—

Event ID 21 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AttachDetachSup.c(1211) %!FUNC!:Already attached to FS  :   DO=%2!p! Vol=%3!p! "%4!S!" (%5!S!)

Fields

Name	Description
`FUNC`	—
`A10_FsControlDeviceObject`	—
`A11_NULL`	—
`A12_ControlDeviceName`	—
`A13_GET_DEVICE_TYPE_NAMEFsControlDeviceObjectDeviceType`	—

Event ID 22 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AttachDetachSup.c(1848) %!FUNC!:Error creating control device object, status=%2

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 23 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AttachDetachSup.c(1986) %!FUNC!:Error creating volume device object, status=%2

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 24 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AttachDetachSup.c(2022) %!FUNC!:Error initializing Volume structure, status=%2

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 25 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AttachDetachSup.c(2175) %!FUNC!:Attaching to file system   DO=%2!p! Vol=%3!p! "%4!S!" (%5!S!)

Fields

Name	Description
`FUNC`	—
`A10_NewDeviceObject`	—
`A11_NULL`	—
`A12__cdoDevExtControlDeviceName`	—
`A13_GET_DEVICE_TYPE_NAMENewDeviceObjectDeviceType`	—

Event ID 26 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AttachDetachSup.c(2218) %!FUNC!:Attaching to volume        DO=%2!p! Vol=%3!p! "%4!S!" (%5!S!)          AttachedToDO=%6!p!

Fields

Name	Description
`FUNC`	—
`A10_NewDeviceObject`	—
`A11_volume`	—
`A12__volumeDeviceName`	—
`A13_GET_DEVICE_TYPE_NAMENewDeviceObjectDeviceType`	—
`A14_DeviceObjectToAttachTo`	—

Event ID 27 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AttachDetachSup.c(2318) %!FUNC!:Detaching from filesystem  DO=%2!p! Vol=%3!p! "%4!S!" (%5!S!) Notify=%6!x!

Fields

Name	Description
`FUNC`	—
`A10_DeviceObject`	—
`A11_NULL`	—
`A12__cdoDevExtControlDeviceName`	—
`A13_GET_DEVICE_TYPE_NAMEDeviceObjectDeviceType`	—
`A14_NotifyFlags`	—

Event ID 28 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AttachDetachSup.c(2341) %!FUNC!:Detaching from volume      DO=%2!p! Vol=%3!p! "%4!S!" (%5!S!) Notify=%6!x! AttachedToDO=%7!p!

Fields

Name	Description
`FUNC`	—
`A10_DeviceObject`	—
`A11_volume`	—
`A12__volumeDeviceName`	—
`A13_GET_DEVICE_TYPE_NAMEDeviceObjectDeviceType`	—
`A14_NotifyFlags`	—
`A15_devExtHeaderAttachedToDeviceObject`	—

Event ID 29 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AttachDetachSup.c(2439) %!FUNC!:Name caching ENABLED on "%2"

Fields

Name	Description
`FUNC`	—
`A10__VolumeDeviceName`	—

Event ID 30 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] AttachDetachSup.c(2449) %!FUNC!:Name caching DISABLED on "%2"

Fields

Name	Description
`FUNC`	—
`A10__VolumeDeviceName`	—

Event ID 31 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CallbackSup.c(378) %!FUNC!:Buffer Swap Detected:      oldB=%2!p! oldMdl=%3!p! newB=%4!p! newMdl=%5!p!

Fields

Name	Description
`FUNC`	—
`A10_origBufferPtr`	—
`A11_origMdlAddressPtrorigMdlAddressPtrNULL`	—
`A12_newBufferPtr`	—
`A13_newMdlAddressPtrnewMdlAddressPtrNULL`	—

Event ID 32 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CallbackSup.c(707) %!FUNC!:MiniFilter returned Post-Op failure: Irp %2!p!, MajorFunction %3!S!, Instance %4!p!, Altitude %5!S!, Filter %6!p! FilterName %7!S!, InitiatingInstance %8!p!, FileObject %9!p!, FsContext %10!p!, Status %11!S!, Previous Status %12!S!

Fields

Name	Description
`FUNC`	—
`A10_eventIrpPtr`	—
`A11_eventMajorFunction`	—
`A12_CallbackNodeInstance`	—
`A13__CallbackNodeInstanceAltitude`	—
`A14_CallbackNodeInstanceFilter`	—
`A15__CallbackNodeInstanceFilterName`	—
`A16_IrpCtrlInitiatingInstance`	—
`A17_eventFileObject`	—
`A18_eventFsContext`	—
`A19_status`	—
`A20_IrpCtrlTraceStatus`	—

Event ID 33 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CallbackSup.c(734) %!FUNC!:MiniFilter returned Post-Op failure: Irp %2!p!, MajorFunction %3!S!, Instance %4!p!, Altitude %5!S!, Filter %6!p! FilterName %7!S!, InitiatingInstance %8!p!, FileObject %9!p!, FsContext %10!p!, Status %11!S!, Previous Status %12!S!

Fields

Name	Description
`FUNC`	—
`A10_eventIrpPtr`	—
`A11_eventMajorFunction`	—
`A12_CallbackNodeInstance`	—
`A13__CallbackNodeInstanceAltitude`	—
`A14_CallbackNodeInstanceFilter`	—
`A15__CallbackNodeInstanceFilterName`	—
`A16_IrpCtrlInitiatingInstance`	—
`A17_eventFileObject`	—
`A18_eventFsContext`	—
`A19_status`	—
`A20_IrpCtrlTraceStatus`	—

Event ID 34 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CallbackSup.c(771) %!FUNC!:MiniFilter completed Pre-Operation: Irp %2!p!, MajorFunction %3!S!, Instance %4!p!, Altitude %5!S!, Filter %6!p! FilterName %7!S!, InitiatingInstance %8!p!, FileObject %9!p!, FsContext %10!p!, Status %11!S!

Fields

Name	Description
`FUNC`	—
`A10_eventIrpPtr`	—
`A11_eventMajorFunction`	—
`A12_CallbackNodeInstance`	—
`A13__CallbackNodeInstanceAltitude`	—
`A14_CallbackNodeInstanceFilter`	—
`A15__CallbackNodeInstanceFilterName`	—
`A16_IrpCtrlInitiatingInstance`	—
`A17_eventFileObject`	—
`A18_eventFsContext`	—
`A19_status`	—

Event ID 35 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CallbackSup.c(796) %!FUNC!:MiniFilter completed Pre-Operation: Irp %2!p!, MajorFunction %3!S!, Instance %4!p!, Altitude %5!S!, Filter %6!p! FilterName %7!S!, InitiatingInstance %8!p!, FileObject %9!p!, FsContext %10!p!, Status %11!S!

Fields

Name	Description
`FUNC`	—
`A10_eventIrpPtr`	—
`A11_eventMajorFunction`	—
`A12_CallbackNodeInstance`	—
`A13__CallbackNodeInstanceAltitude`	—
`A14_CallbackNodeInstanceFilter`	—
`A15__CallbackNodeInstanceFilterName`	—
`A16_IrpCtrlInitiatingInstance`	—
`A17_eventFileObject`	—
`A18_eventFsContext`	—
`A19_status`	—

Event ID 36 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CallbackSup.c(842) %!FUNC!:File System returned an error: Irp %2!p!, MajorFunction %3!S!, InitiatingInstance %4!p!, FileObject %5!p!, FsContext %6!p!, Status %7!S!

Fields

Name	Description
`FUNC`	—
`A10_eventIrpPtr`	—
`A11_eventMajorFunction`	—
`A12_IrpCtrlInitiatingInstance`	—
`A13_eventFileObject`	—
`A14_eventFsContext`	—
`A15_status`	—

Event ID 37 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CallbackSup.c(861) %!FUNC!:File System returned an error: Irp %2!p!, MajorFunction %3!S!, InitiatingInstance %4!p!, FileObject %5!p!, FsContext %6!p!, Status %7!S!

Fields

Name	Description
`FUNC`	—
`A10_eventIrpPtr`	—
`A11_eventMajorFunction`	—
`A12_IrpCtrlInitiatingInstance`	—
`A13_eventFileObject`	—
`A14_eventFsContext`	—
`A15_status`	—

Event ID 38 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CallbackSup.c(1263) %!FUNC!:Hiding operation in FltpPerformPreCallbacks:  T=%2!p! FO=%3!p! Vol=%4!p! Major=%5!d! (%6!S!)

Fields

Name	Description
`FUNC`	—
`A10_KeGetCurrentThread`	—
`A11_irpCtrlFileObject`	—
`A12_volume`	—
`A13_CHARirpMajorId`	—
`A14_FltGetIrpNameirpMajorId`	—

Event ID 39 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CallbackSup.c(1895) %!FUNC!:Pending operation:         %2!x!, Irpctrl=%3!p!, callbackNode=%4!p! (%5!S!)

Fields

Name	Description
`FUNC`	—
`A10_irpMajorId`	—
`A11_irpCtrl`	—
`A12_callbackNode`	—
`A13_FlagOnirpCtrlFlagsIRPCTRFL_SYNCHRONIZESYNCNotSYNC`	—

Event ID 40 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(335) %!FUNC!:Freeing completion node tracking structure %2!p!

Fields

Name	Description
`FUNC`	—
`A10_TrackingCtrlPointerToFree`	—

Event ID 41 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(401) %!FUNC!:CN Not Tracking   IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_CompNodeIrpCtrl`	—
`A11_CompNode`	—
`A12_CHARCompNodeDataSnapshotMajorFunction`	—

Event ID 42 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(441) %!FUNC!:CN Insert Active  IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_CompNodeIrpCtrl`	—
`A11_CompNode`	—
`A12_CHARCompNodeDataSnapshotMajorFunction`	—

Event ID 43 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(481) %!FUNC!:CN Insert Waiting IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_irpCtrl`	—
`A11_CompNode`	—
`A12_CHARCompNodeDataSnapshotMajorFunction`	—

Event ID 44 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(507) %!FUNC!:Linking, swapped buffers, canceling IRP %2!d!,%3!d! (%4!S!)

Fields

Name	Description
`FUNC`	—
`A10_CHARirpCtrlDataIopbMajorFunction`	—
`A11_CHARirpCtrlDataIopbMinorFunction`	—
`A12_FltGetIrpNameirpCtrlDataIopbMajorFunction`	—

Event ID 45 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(515) %!FUNC!:Linking, swapped buffers, wait for non-IRP operation %2!d!,%3!d! (%4!S!)

Fields

Name	Description
`FUNC`	—
`A10_CHARirpCtrlDataIopbMajorFunction`	—
`A11_CHARirpCtrlDataIopbMinorFunction`	—
`A12_FltGetIrpNameirpCtrlDataIopbMajorFunction`	—

Event ID 46 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(549) %!FUNC!:CN Insert Waiting (non-drainable) IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_irpCtrl`	—
`A11_CompNode`	—
`A12_CHARCompNodeDataSnapshotMajorFunction`	—

Event ID 47 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(560) %!FUNC!:Linking, wait for non-drainable operation %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields

Name	Description
`FUNC`	—
`A10_CHARirpCtrlDataIopbMajorFunction`	—
`A11_CHARirpCtrlDataIopbMinorFunction`	—
`A12_FltGetIrpNameirpCtrlDataIopbMajorFunction`	—
`A13_irpCtrl`	—

Event ID 48 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(582) %!FUNC!:CN Insert Active  IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_CompNodeIrpCtrl`	—
`A11_CompNode`	—
`A12_CHARCompNodeDataSnapshotMajorFunction`	—

Event ID 49 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(622) %!FUNC!:CN Insert Waiting IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_irpCtrl`	—
`A11_CompNode`	—
`A12_CHARCompNodeDataSnapshotMajorFunction`	—

Event ID 50 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(648) %!FUNC!:Linking, swapped buffers, canceling IRP %2!d!,%3!d! (%4!S!)

Fields

Name	Description
`FUNC`	—
`A10_CHARirpCtrlDataIopbMajorFunction`	—
`A11_CHARirpCtrlDataIopbMinorFunction`	—
`A12_FltGetIrpNameirpCtrlDataIopbMajorFunction`	—

Event ID 51 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(656) %!FUNC!:Linking, swapped buffers, wait for non-IRP operation %2!d!,%3!d! (%4!S!)

Fields

Name	Description
`FUNC`	—
`A10_CHARirpCtrlDataIopbMajorFunction`	—
`A11_CHARirpCtrlDataIopbMinorFunction`	—
`A12_FltGetIrpNameirpCtrlDataIopbMajorFunction`	—

Event ID 52 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(690) %!FUNC!:CN Insert Waiting (non-drainable) IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_irpCtrl`	—
`A11_CompNode`	—
`A12_CHARCompNodeDataSnapshotMajorFunction`	—

Event ID 53 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(701) %!FUNC!:Linking, wait for non-drainable operation %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields

Name	Description
`FUNC`	—
`A10_CHARirpCtrlDataIopbMajorFunction`	—
`A11_CHARirpCtrlDataIopbMinorFunction`	—
`A12_FltGetIrpNameirpCtrlDataIopbMajorFunction`	—
`A13_irpCtrl`	—

Event ID 54 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(739) %!FUNC!:CN Delete         IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_CompNodeIrpCtrl`	—
`A11_CompNode`	—
`A12_CHARCompNodeDataSnapshotMajorFunction`	—

Event ID 55 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(923) %!FUNC!:Draining, IRP Cancel routine called

Fields

Name	Description
`FUNC`	—

Event ID 56 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(1108) %!FUNC!:Draining operation %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields

Name	Description
`FUNC`	—
`A10_CHARlocalIrpCtrlDataIopbMajorFunction`	—
`A11_CHARlocalIrpCtrlDataIopbMinorFunction`	—
`A12_FltGetIrpNamelocalIrpCtrlDataIopbMajorFunction`	—
`A13_localCompNodeIrpCtrl`	—

Event ID 57 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(1273) %!FUNC!:CN Insert Waiting (bufSwaped) IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_completionNodeIrpCtrl`	—
`A11_completionNode`	—
`A12_CHARcompletionNodeDataSnapshotMajorFunction`	—

Event ID 58 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(1296) %!FUNC!:Draining, Swapped buffers, canceling IRP %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields

Name	Description
`FUNC`	—
`A10_CHARirpCtrlDataIopbMajorFunction`	—
`A11_CHARirpCtrlDataIopbMinorFunction`	—
`A12_FltGetIrpNameirpCtrlDataIopbMajorFunction`	—
`A13_irpCtrl`	—

Event ID 59 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(1359) %!FUNC!:Draining, Swapped buffers, waiting for non-IRP operation %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields

Name	Description
`FUNC`	—
`A10_CHARirpCtrlDataIopbMajorFunction`	—
`A11_CHARirpCtrlDataIopbMinorFunction`	—
`A12_FltGetIrpNameirpCtrlDataIopbMajorFunction`	—
`A13_irpCtrl`	—

Event ID 60 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(1392) %!FUNC!:CN Insert Waiting (NotDrainable) IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields

Name	Description
`FUNC`	—
`A10_completionNodeIrpCtrl`	—
`A11_completionNode`	—
`A12_CHARcompletionNodeDataSnapshotMajorFunction`	—

Event ID 61 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] CompletionNodeSup.c(1407) %!FUNC!:Draining, Waiting for non-drainable operation %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields

Name	Description
`FUNC`	—
`A10_CHARirpCtrlDataIopbMajorFunction`	—
`A11_CHARirpCtrlDataIopbMinorFunction`	—
`A12_FltGetIrpNameirpCtrlDataIopbMajorFunction`	—
`A13_irpCtrl`	—

Event ID 62 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] EnumerationSup.c(1105) %!FUNC!:Wrong type of device object passed in: devobj %2!p!

Fields

Name	Description
`FUNC`	—
`A10_DeviceObject`	—

Event ID 63 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] EnumerationSup.c(1148) %!FUNC!:Wrong type of device object passed in: devobj %2!p!

Fields

Name	Description
`FUNC`	—
`A10_DeviceObject`	—

Event ID 64 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] ExceptionSup.c(62) %!FUNC!:Caught exception (%2!08x!, %3!p!, %4!p!, %5!p!)

Fields

Name	Description
`FUNC`	—
`A10_ExceptionPointerExceptionRecordExceptionCode`	—
`A11_ExceptionPointerContextRecord`	—
`A12_ExceptionPointerExceptionRecord`	—
`A13_ExceptionPointerExceptionRecordExceptionAddress`	—

Event ID 65 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(367) %!FUNC!:passing through FAST_IO_CHECK_IF_POSSIBLE

Fields

Name	Description
`FUNC`	—

Event ID 66 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(392) %!FUNC!:passing through FAST_IO_READ

Fields

Name	Description
`FUNC`	—

Event ID 67 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(417) %!FUNC!:passing through FAST_IO_WRITE

Fields

Name	Description
`FUNC`	—

Event ID 68 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(441) %!FUNC!:passing through FAST_IO_QUERY_BASIC_INFO

Fields

Name	Description
`FUNC`	—

Event ID 69 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(466) %!FUNC!:passing through FAST_IO_QUERY_STANDARD_INFO

Fields

Name	Description
`FUNC`	—

Event ID 70 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(487) %!FUNC!:passing through FAST_IO_QUERY_NETWORK_OPEN_INFO

Fields

Name	Description
`FUNC`	—

Event ID 71 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(526) %!FUNC!:passing through FAST_IO_LOCK

Fields

Name	Description
`FUNC`	—

Event ID 72 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(551) %!FUNC!:passing through FAST_IO_UNLOCK_SINGLE

Fields

Name	Description
`FUNC`	—

Event ID 73 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(574) %!FUNC!:passing through FAST_IO_UNLOCK_ALL

Fields

Name	Description
`FUNC`	—

Event ID 74 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(595) %!FUNC!:passing through FAST_IO_UNLOCK_ALL_BY_KEY

Fields

Name	Description
`FUNC`	—

Event ID 75 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(624) %!FUNC!:passing through FAST_IO_DEVICE_CONTROL

Fields

Name	Description
`FUNC`	—

Event ID 76 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(652) %!FUNC!:passing through FAST_IO_QUERY_OPEN

Fields

Name	Description
`FUNC`	—

Event ID 77 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(714) %!FUNC!:passing through FAST_IO_MDL_READ

Fields

Name	Description
`FUNC`	—

Event ID 78 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(738) %!FUNC!:passing through FAST_IO_MDL_READ_COMPLETE

Fields

Name	Description
`FUNC`	—

Event ID 79 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(758) %!FUNC!:passing through FAST_IO_PREPARE_MDL_WRITE

Fields

Name	Description
`FUNC`	—

Event ID 80 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FastIoSup.c(782) %!FUNC!:passing through FAST_IO_MDL_WRITE_COMPLETE

Fields

Name	Description
`FUNC`	—

Event ID 81 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FileListCtrlSup.c(198) %!FUNC!:Starting (%2!p!)

Fields

Name	Description
`FUNC`	—
`A10__localHead`	—

Event ID 82 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FileListCtrlSup.c(224) %!FUNC!:For "%2"

Fields

Name	Description
`FUNC`	—
`A10__VolumeDeviceName`	—

Event ID 83 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FileListCtrlSup.c(274) %!FUNC!:FSDelete  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_fileList`	—
`A11_fileListFlags`	—
`A12_fileListUseCount`	—

Event ID 84 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FileListCtrlSup.c(445) %!FUNC!:Found     (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_fileList`	—
`A11_fileListFlags`	—
`A12_fileListUseCount`	—

Event ID 85 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FileListCtrlSup.c(565) %!FUNC!:Created   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_newFileList`	—
`A11_newFileListFlags`	—
`A12_newFileListUseCount`	—

Event ID 86 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FileListCtrlSup.c(588) %!FUNC!:Found New (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_fileList`	—
`A11_fileListFlags`	—
`A12_fileListUseCount`	—

Event ID 87 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FileListCtrlSup.c(732) %!FUNC!:Allocate  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_newFileList`	—
`A11_newFileListFlags`	—
`A12_newFileListUseCount`	—

Event ID 88 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FileListCtrlSup.c(769) %!FUNC!:Release   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_FileList`	—
`A11_FileListFlags`	—
`A12_FileListUseCount`	—

Event ID 89 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FileListCtrlSup.c(792) %!FUNC!:DEFFERED  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_FileList`	—
`A11_FileListFlags`	—
`A12_FileListUseCount`	—

Event ID 90 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FileListCtrlSup.c(827) %!FUNC!:Cleanup   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_FileList`	—
`A11_FileListFlags`	—
`A12_FileListUseCount`	—

Event ID 91 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(995) %!FUNC!:DriverEntry: Error EtwRegister, status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 92 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1032) %!FUNC!:Failed to start notification for dynamic settings. status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 93 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1095) %!FUNC!:Num processors=%2!d!

Fields

Name	Description
`FUNC`	—
`A10_FltGlobalsNumProcessors`	—

Event ID 94 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1099) %!FUNC!:Max processors=%2!d!

Fields

Name	Description
`FUNC`	—
`A10_KeQueryMaximumProcessorCountExALL_PROCESSOR_GROUPS`	—

Event ID 95 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1103) %!FUNC!:CacheLine size=%2!d! (0x%3!x!)

Fields

Name	Description
`FUNC`	—
`A10_FltGlobalsCacheLineSize`	—
`A11_FltGlobalsCacheLineSize`	—

Event ID 96 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1110) %!FUNC!:Breaking on errors

Fields

Name	Description
`FUNC`	—

Event ID 97 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1116) %!FUNC!:Attaching to File System Recognizers

Fields

Name	Description
`FUNC`	—

Event ID 98 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1122) %!FUNC!:Randomly using STATIC IrpCtrl

Fields

Name	Description
`FUNC`	—

Event ID 99 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1128) %!FUNC!:Randomly using short CompletionNode stacks

Fields

Name	Description
`FUNC`	—

Event ID 100 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1188) %!FUNC!:DriverEntry: Error creating device, status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 101 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1218) %!FUNC!:DriverEntry: Error creating symbolic link for control device, status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 102 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1269) %!FUNC!:DriverEntry: Failed query for perf trace routines, status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 103 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1411) %!FUNC!:DriverEntry: Error Initializing Messaging Support, status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 104 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1677) %!FUNC!:Unloading driver (%2!p!)

Fields

Name	Description
`FUNC`	—
`A10_DriverObject`	—

Event ID 105 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1957) %!FUNC!:Waiting for %2!d! Zombied FltObject(s) to be freed

Fields

Name	Description
`FUNC`	—
`A10_i`	—

Event ID 106 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1965) %!FUNC!:Rundown wait complete

Fields

Name	Description
`FUNC`	—

Event ID 107 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1989) %!FUNC!:Waiting for %2!d! outstanding IrpCtrl(s) to complete

Fields

Name	Description
`FUNC`	—
`A10_i`	—

Event ID 108 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(1998) %!FUNC!:Rundown wait complete

Fields

Name	Description
`FUNC`	—

Event ID 109 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(2163) %!FUNC!:%2   DO=%3!p! Vol=%4!p! "%5!S!" (%6!S!)

Fields

Name	Description
`FUNC`	—
`A10_FsActiveActivatingfilesystemDeactivatingfilesystem`	—
`A11_FsControlDeviceObject`	—
`A12_NULL`	—
`A13__controlDeviceNameCtrlName`	—
`A14_GET_DEVICE_TYPE_NAMEFsControlDeviceObjectDeviceType`	—

Event ID 110 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(2270) %!FUNC!:Paging File operation, %2(%3!d!)

Fields

Name	Description
`FUNC`	—
`A10_FltGetIrpNameirpSpMajorFunction`	—
`A11_irpSpMajorFunction`	—

Event ID 111 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(2770) %!FUNC!:FO=%2!p! Closing  "%3!S!"

Fields

Name	Description
`FUNC`	—
`A10_irpSpFileObject`	—
`A11__irpSpFileObjectFileName`	—

Event ID 112 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(4419) %!FUNC!:Posting Irp %2!p! major=%3!d!

Fields

Name	Description
`FUNC`	—
`A10_IrpCtrlIrp`	—
`A11_IrpCtrlDataIopbMajorFunction`	—

Event ID 113 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(4747) %!FUNC!:Posting Irp %2!p!

Fields

Name	Description
`FUNC`	—
`A10_Irp`	—

Event ID 114 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(4916) %!FUNC!:TopLevelIrp set with unknown Irp 0x%2!x!

Fields

Name	Description
`FUNC`	—
`A10_irpSpMajorFunction`	—

Event ID 115 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(5774) %!FUNC!:Set thread hiding in FltpCreate:              T=%2!p! FO=%3!p! Vol=%4!p! Name="%5!S!"

Fields

Name	Description
`FUNC`	—
`A10_KeGetCurrentThread`	—
`A11_fileObject`	—
`A12_iccVolume`	—
`A13_fileObjectFileName`	—

Event ID 116 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(5845) %!FUNC!:Calling InstanceSetup on CreateIrp

Fields

Name	Description
`FUNC`	—

Event ID 117 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(5883) %!FUNC!:FO=%2!p! Creating "%3!S!"

Fields

Name	Description
`FUNC`	—
`A10_fileObject`	—
`A11__fileObjectFileName`	—

Event ID 118 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(6152) %!FUNC!:Reset thread hiding in FltpCreatePostCompl:   T=%2!p! FO=%3!p! Vol=%4!p! status=%5!S!

Fields

Name	Description
`FUNC`	—
`A10_KeGetCurrentThread`	—
`A11_IrpCtrlFileObject`	—
`A12_volume`	—
`A13_IrpCtrlDataIoStatusStatus`	—

Event ID 119 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(6160) %!FUNC!:Continue Thread hiding in FltpCreatePostCompl:T=%2!p! FO=%3!p! Vol=%4!p! status=%5!S!

Fields

Name	Description
`FUNC`	—
`A10_KeGetCurrentThread`	—
`A11_IrpCtrlFileObject`	—
`A12_volume`	—
`A13_IrpCtrlDataIoStatusStatus`	—

Event ID 120 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(6301) %!FUNC!:Calling InstanceSetup on CreateIrp

Fields

Name	Description
`FUNC`	—

Event ID 121 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(7471) %!FUNC!:Mount volume failure for   DO=%2!p! Vol=%3!p! "%4!S!", status=%5!S!            AttachedToDO=%6!p! FsCDO=%7!p!

Fields

Name	Description
`FUNC`	—
`A10_newDeviceObject`	—
`A11_volume`	—
`A12__volumeDeviceName`	—
`A13_status`	—
`A14_FltpGetFsDeviceObjectAfterMountdiskDeviceObject`	—
`A15_FsControlDeviceObject`	—

Event ID 122 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(7598) %!FUNC!:DeviceObject %2!p!,  Loading File System, Detaching from %3!S!

Fields

Name	Description
`FUNC`	—
`A10_DeviceObject`	—
`A11__devExtControlDeviceName`	—

Event ID 123 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(7649) %!FUNC!:Detaching from recognizer  DO=%2!p! Vol=%3!p! "%4!S!", status=%5!S!

Fields

Name	Description
`FUNC`	—
`A10_DeviceObject`	—
`A11_NULL`	—
`A12__devExtControlDeviceName`	—
`A13_IrpIoStatusStatus`	—

Event ID 124 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(11091) %!FUNC!:Calling InstanceSetup on FastIoQueryOpen

Fields

Name	Description
`FUNC`	—

Event ID 125 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(12425) %!FUNC!:Failed to restart registry watch, Context=%2!p!, status=%3!x!

Fields

Name	Description
`FUNC`	—
`A10_Context`	—
`A11_regWatchContextNotificationStatus`	—

Event ID 126 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] fltmgr.c(13271) %!FUNC!:Resetting notification for dynamic registry settings failed. Context=%2!p!, status=%3!x!

Fields

Name	Description
`FUNC`	—
`A10_regWatchContext`	—
`A11_regWatchContextNotificationStatus`	—

Event ID 127 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FrameSup.c(549) %!FUNC!:Error registering FS change notification, status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 128 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FrameSup.c(584) %!FUNC!:Error 0x%2!X! attaching to device %3!S!

Fields

Name	Description
`FUNC`	—
`A10_status`	—
`A11__tempString`	—

Event ID 129 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FrameSup.c(613) %!FUNC!:Error 0x%2!X! attaching to device %3!S!

Fields

Name	Description
`FUNC`	—
`A10_status`	—
`A11__tempString`	—

Event ID 130 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FrameSup.c(629) %!FUNC!:Created Frame %2!d! with altitude range %3!S!-%4!S!

Fields

Name	Description
`FUNC`	—
`A10_frameFrameID`	—
`A11__frameAltitudeIntervalLow`	—
`A12__frameAltitudeIntervalHigh`	—

Event ID 131 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FrameSup.c(1647) %!FUNC!:Failed allocating timer

Fields

Name	Description
`FUNC`	—

Event ID 132 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FrameSup.c(1659) %!FUNC!:Starting timer

Fields

Name	Description
`FUNC`	—

Event ID 133 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FrameSup.c(1762) %!FUNC!:FltpManualDeviceAttachWorker: Delaying: fl=%2!Ix!, dl=%3!d! (%4!d!)

Fields

Name	Description
`FUNC`	—
`A10_ctxFlags`	—
`A11_FltGlobalsManualAttachDelayCounter`	—
`A12_FltGlobalsManualDeviceAttachLimit`	—

Event ID 134 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FrameSup.c(1778) %!FUNC!:FltpManualDeviceAttachWorker: Checking: fl=%2!Ix!, dl=%3!d! (%4!d!)

Fields

Name	Description
`FUNC`	—
`A10_ctxFlags`	—
`A11_FltGlobalsManualAttachDelayCounter`	—
`A12_FltGlobalsManualDeviceAttachLimit`	—

Event ID 135 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FrameSup.c(2181) %!FUNC!:Altidue range for Frame %2!d! changed from %3!S!-%4!S! to %5!S!-%6!S!

Fields

Name	Description
`FUNC`	—
`A10_TopFrameFrameID`	—
`A11__TopFrameAltitudeIntervalLow`	—
`A12__TopFrameAltitudeIntervalHigh`	—
`A13__TopFrameAltitudeIntervalLow`	—
`A14_legacyAltitude`	—

Event ID 136 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] FrameSup.c(2291) %!FUNC!:The "%2" legacy filter is using the "%3!S!" load order group

Fields

Name	Description
`FUNC`	—
`A10__DriverObjDriverExtensionServiceKeyName`	—
`A11_PCWCHARvalueInfoData`	—

Event ID 137 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] InstanceSup.c(663) %!FUNC!:Instance Setup Aborted for Filter (%2!p!) "%3!S!", instance (%4!p!) on volume (%5!p!) "%6!S!"

Fields

Name	Description
`FUNC`	—
`A10_Filter`	—
`A11__FilterName`	—
`A12_instance`	—
`A13_Volume`	—
`A14__VolumeDeviceName`	—

Event ID 138 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] InstanceSup.c(680) %!FUNC!:Filter (%2!p!) "%3!S!" attached instance (%4!p!) to volume (%5!p!) "%6!S!"

Fields

Name	Description
`FUNC`	—
`A10_Filter`	—
`A11__FilterName`	—
`A12_instance`	—
`A13_Volume`	—
`A14__VolumeDeviceName`	—

Event ID 139 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] InstanceSup.c(1880) %!FUNC!:New instance for filter (%2!p!) "%3!S!" at altitude %4!S! for volume %5!p! "%6!S!"

Fields

Name	Description
`FUNC`	—
`A10_InstanceFilter`	—
`A11__InstanceFilterName`	—
`A12__InstanceAltitude`	—
`A13_Volume`	—
`A14__VolumeDeviceName`	—

Event ID 140 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] InstanceSup.c(1977) %!FUNC!:Instance %2!p! for filter (%3!p!) "%4!S!" already exists at altitude %5!S!

Fields

Name	Description
`FUNC`	—
`A10_currentInstance`	—
`A11_currentInstanceFilter`	—
`A12__currentInstanceFilterName`	—
`A13__InstanceAltitude`	—

Event ID 141 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] InstanceSup.c(2065) %!FUNC!:Filter (%2!p!) "%3!S!" detached instance (%4!p!) from volume (%5!p!) "%6!S!" NotifyFlags=%7!x!

Fields

Name	Description
`FUNC`	—
`A10_filter`	—
`A11__filterName`	—
`A12_Instance`	—
`A13_volume`	—
`A14__volumeDeviceName`	—
`A15_Reason`	—

Event ID 142 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(4656) %!FUNC!:Attemping Fastio (no lower minifilters) from FltReadFile: Buffer=%2!p!, offset=%3!I64x!, length=%4!x!

Fields

Name	Description
`FUNC`	—
`A10_Buffer`	—
`A11_fileOffsetQuadPart`	—
`A12_Length`	—

Event ID 143 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(4706) %!FUNC!:Attemping Fastio from FltReadFile: Buffer=%2!p!, offset=%3!I64x!, length=%4!x!

Fields

Name	Description
`FUNC`	—
`A10_Buffer`	—
`A11_fileOffsetQuadPart`	—
`A12_Length`	—

Event ID 144 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(4812) %!FUNC!:Fastio attempt from FltReadFile failed

Fields

Name	Description
`FUNC`	—

Event ID 145 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5228) %!FUNC!:Attemping Fastio (no lower minifilters) from FltWriteFile: Buffer=%2!p!, offset=%3!I64x!, length=%4!x!

Fields

Name	Description
`FUNC`	—
`A10_Buffer`	—
`A11_fileOffsetQuadPart`	—
`A12_Length`	—

Event ID 146 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5279) %!FUNC!:Attemping Fastio from FltWriteFile: Buffer=%2!p!, offset=%3!I64x!, length=%4!x!

Fields

Name	Description
`FUNC`	—
`A10_Buffer`	—
`A11_fileOffsetQuadPart`	—
`A12_Length`	—

Event ID 147 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5386) %!FUNC!:Fastio attempt from FltWriteFile failed

Fields

Name	Description
`FUNC`	—

Event ID 148 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5588) %!FUNC!:(No lower minifilters)

Fields

Name	Description
`FUNC`	—

Event ID 149 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5663) %!FUNC!:(Lower minifilter(s) exist)

Fields

Name	Description
`FUNC`	—

Event ID 150 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5801) %!FUNC!:Attemping Fastio from FltFastIoMdlRead: MDLChain=%2!p!, offset=%3!I64x!, length=%4!x!

Fields

Name	Description
`FUNC`	—
`A10_MdlChain`	—
`A11_FileOffsetQuadPart`	—
`A12_Length`	—

Event ID 151 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5819) %!FUNC!:Fastio attempt from FltReadFile failed

Fields

Name	Description
`FUNC`	—

Event ID 152 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5840) %!FUNC!:Attemping Fastio from FltFastIoMdlReadComplete: MDLChain=%2!p!

Fields

Name	Description
`FUNC`	—
`A10_MdlChain`	—

Event ID 153 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5855) %!FUNC!:Fastio attempt from FltFastIoMdlReadComplete failed

Fields

Name	Description
`FUNC`	—

Event ID 154 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5880) %!FUNC!:Attemping Fastio from FltFastIoPrepareMdlWrite: MDLChain=%2!p!, offset=%3!I64x!, length=%4!x!

Fields

Name	Description
`FUNC`	—
`A10_MdlChain`	—
`A11_FileOffsetQuadPart`	—
`A12_Length`	—

Event ID 155 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5898) %!FUNC!:Fastio attempt from FltFastIoPrepareMdlWrite failed

Fields

Name	Description
`FUNC`	—

Event ID 156 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5921) %!FUNC!:Attemping Fastio from FltFastIoMdlWriteComplete: MDLChain=%2!p!, offset=%3!I64x!

Fields

Name	Description
`FUNC`	—
`A10_MdlChain`	—
`A11_FileOffsetQuadPart`	—

Event ID 157 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] IoSup.c(5938) %!FUNC!:Fastio attempt from FltFastIoMdlWriteComplete failed

Fields

Name	Description
`FUNC`	—

Event ID 158 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2005) %!FUNC!:Timed out waiting for listener.

Fields

Name	Description
`FUNC`	—

Event ID 159 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2018) %!FUNC!:Port is disconncted: abandoning listener

Fields

Name	Description
`FUNC`	—

Event ID 160 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2026) %!FUNC!:Thread is Terminating.

Fields

Name	Description
`FUNC`	—

Event ID 161 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2102) %!FUNC!:Timed out waiting for listener.

Fields

Name	Description
`FUNC`	—

Event ID 162 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2115) %!FUNC!:Port is disconncted: abandoning listener

Fields

Name	Description
`FUNC`	—

Event ID 163 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2123) %!FUNC!:Thread is Terminating.

Fields

Name	Description
`FUNC`	—

Event ID 164 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2156) %!FUNC!:Found waiter IRP (%2!p!), dequeued it

Fields

Name	Description
`FUNC`	—
`A10_irp`	—

Event ID 165 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2257) %!FUNC!:Found waiter, but could not map user's buffer, IRP=%2!p!

Fields

Name	Description
`FUNC`	—
`A10_irp`	—

Event ID 166 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2381) %!FUNC!:Queueing replyWaiter (%2!p!)

Fields

Name	Description
`FUNC`	—
`A10__replyWaiter`	—

Event ID 167 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2434) %!FUNC!:Wait for reply status %2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 168 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2442) %!FUNC!:Thread is Terminating Thread timed out Port disconnected

Fields

Name	Description
`FUNC`	—

Event ID 169 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2803) %!FUNC!:Found waiter %2!p!, dequeued it

Fields

Name	Description
`FUNC`	—
`A10_currentWaiter`	—

Event ID 170 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2866) %!FUNC!:Setting reply event

Fields

Name	Description
`FUNC`	—

Event ID 171 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2883) %!FUNC!:No waiter for reply, messageId: 0x%2!X!

Fields

Name	Description
`FUNC`	—
`A10_ULONGreplyMessageId`	—

Event ID 172 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2932) %!FUNC!:Allocated %2!p!, enqueueing it (async)

Fields

Name	Description
`FUNC`	—
`A10_Irp`	—

Event ID 173 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(2995) %!FUNC!:Dequeued waiter %2!p!

Fields

Name	Description
`FUNC`	—
`A10_irp`	—

Event ID 174 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(3047) %!FUNC!:Verifying waiter list for Queue: %2!p! --

Fields

Name	Description
`FUNC`	—
`A10_Queue`	—

Event ID 175 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(3057) %!FUNC!:                    -- currentLink %2!p!

Fields

Name	Description
`FUNC`	—
`A10_currentLink`	—

Event ID 176 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(3158) %!FUNC!:Error creating server port object type, status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 177 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(3223) %!FUNC!:Error creating connection port object type, status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 178 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(3245) %!FUNC!:Error creating msg device object, status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 179 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(3263) %!FUNC!:Error creating symbolic link to msg device object, status=%2!x!

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 180 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(3365) %!FUNC!:Setting MessageWaiter event

Fields

Name	Description
`FUNC`	—

Event ID 181 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(3377) %!FUNC!:Setting MessageWaiter semaphore

Fields

Name	Description
`FUNC`	—

Event ID 182 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(3435) %!FUNC!:Cancelling MessageWaiter %2!p!

Fields

Name	Description
`FUNC`	—
`A10_Irp`	—

Event ID 183 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] MessageSup.c(3484) %!FUNC!:Removed MessageWaiter %2!p! from queue

Fields

Name	Description
`FUNC`	—
`A10_Irp`	—

Event ID 184 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(849) %!FUNC!:Temporary: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Fields

Name	Description
`FUNC`	—
`A10_nameCacheNode`	—
`A11_GenCtxFileObject`	—
`A12_nameCacheNodeTreeLinkFlags`	—
`A13_nameCacheNodeUseCount`	—
`A14__nameCacheNodeNameInfoName`	—

Event ID 185 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(1918) %!FUNC!:Deleting Node: (%2!p!) Fl=%3!03x!, Use=%4!d! "%5!S!"

Fields

Name	Description
`FUNC`	—
`A10_nameCacheNode`	—
`A11_nameCacheNodeTreeLinkFlagsflagToClear`	—
`A12_nameCacheNodeUseCount`	—
`A13__nameCacheNodeNameInfoName`	—

Event ID 186 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(3470) %!FUNC!:Freeing Node: (%2!p!), flags:%3!04x!, name: "%4!S!"

Fields

Name	Description
`FUNC`	—
`A10_nameCacheNode`	—
`A11_FlagOnnameCacheNodeTreeLinkFlags0x0ffff`	—
`A12__nameCacheNodeNameInfoName`	—

Event ID 187 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(3719) %!FUNC!:Getting NORMALIZED name for fo: %2!p!

Fields

Name	Description
`FUNC`	—
`A10_GenCtxFileObject`	—

Event ID 188 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(3728) %!FUNC!:Getting OPENED name for fo: %2!p!

Fields

Name	Description
`FUNC`	—
`A10_GenCtxFileObject`	—

Event ID 189 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(3738) %!FUNC!:Getting SHORT name for fo: %2!p!

Fields

Name	Description
`FUNC`	—
`A10_GenCtxFileObject`	—

Event ID 190 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(4313) %!FUNC!:Found: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Fields

Name	Description
`FUNC`	—
`A10_nameCacheNode`	—
`A11_GenCtxFileObject`	—
`A12_nameCacheNodeTreeLinkFlags`	—
`A13_nameCacheNodeUseCount`	—
`A14__nameCacheNodeNameInfoName`	—

Event ID 191 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(4469) %!FUNC!:Inserted: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Fields

Name	Description
`FUNC`	—
`A10_nameCacheNode`	—
`A11_GenCtxFileObject`	—
`A12_nameCacheNodeTreeLinkFlags`	—
`A13_nameCacheNodeUseCount`	—
`A14__nameCacheNodeNameInfoName`	—

Event ID 192 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(4545) %!FUNC!:Replaced: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Fields

Name	Description
`FUNC`	—
`A10_nameCacheNode`	—
`A11_GenCtxFileObject`	—
`A12_nameCacheNodeTreeLinkFlags`	—
`A13_nameCacheNodeUseCount`	—
`A14__nameCacheNodeNameInfoName`	—

Event ID 193 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(4572) %!FUNC!:Duplicate: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Fields

Name	Description
`FUNC`	—
`A10_foundNameCacheNode`	—
`A11_GenCtxFileObject`	—
`A12_foundNameCacheNodeTreeLinkFlags`	—
`A13_foundNameCacheNodeUseCount`	—
`A14__foundNameCacheNodeNameInfoName`	—

Event ID 194 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(4596) %!FUNC!:Temporary: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Fields

Name	Description
`FUNC`	—
`A10_nameCacheNode`	—
`A11_GenCtxFileObject`	—
`A12_nameCacheNodeTreeLinkFlags`	—
`A13_nameCacheNodeUseCount`	—
`A14__nameCacheNodeNameInfoName`	—

Event ID 195 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(4826) %!FUNC!:Invalidate Caching (0x%2!x!, 0x%3!x!): "%4!S!", [%5!S!] (%6!p!)

Fields

Name	Description
`FUNC`	—
`A10_IrpCtrlNULLIrpCtrlDataIopbMajorFunction0xff`	—
`A11_IrpCtrlNULLIrpCtrlDataIopbMinorFunction0xff`	—
`A12__VolumeDeviceName`	—
`A13__FileObjectFileName`	—
`A14_FileObject`	—

Event ID 196 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(5072) %!FUNC!:Reinstate Caching (0x%2!x!, 0x%3!x!): "%4!S!", [%5!S!] (%6!p!)

Fields

Name	Description
`FUNC`	—
`A10_IrpCtrlNULLIrpCtrlDataIopbMajorFunction0xff`	—
`A11_IrpCtrlNULLIrpCtrlDataIopbMinorFunction0xff`	—
`A12__VolumeDeviceName`	—
`A13__FileObjectFileName`	—
`A14_FileObject`	—

Event ID 197 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(6074) %!FUNC!:Refcounting file name information: %2!p! cnt=%3!d!

Fields

Name	Description
`FUNC`	—
`A10_FileNameInformation`	—
`A11_nameCacheNodeUseCount`	—

Event ID 198 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(6135) %!FUNC!:Releasing fni %2!p!

Fields

Name	Description
`FUNC`	—
`A10_FileNameInformation`	—

Event ID 199 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(6164) %!FUNC!: *FREEING FNI*

Fields

Name	Description
`FUNC`	—

Event ID 200 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(6173) %!FUNC!:

Fields

Name	Description
`FUNC`	—

Event ID 201 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(6996) %!FUNC!:Expanded    "%2" to "%3!S!"

Fields

Name	Description
`FUNC`	—
`A10__GenCtxShortFileName`	—
`A11__localGenCtxFileNameInformationName`	—

Event ID 202 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(7501) %!FUNC!:Purge name cache for POSIX delete: "%2", [%3!S!] (%4!p!)

Fields

Name	Description
`FUNC`	—
`A10__VolumeDeviceName`	—
`A11__FileObjectFileName`	—
`A12_FileObject`	—

Event ID 203 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameCacheSup.c(7516) %!FUNC!:Failed to invalidate name cache for POSIX delete: %2

Fields

Name	Description
`FUNC`	—
`A10_status`	—

Event ID 204 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameSup.c(854) %!FUNC!:Error building name: NameCtrl (%2!p!) [0x%3!x!] Error: 0x%4!x!  ShareNameLength: 0x%5!x! StreamNameLength: 0x%6!x!  Name: %7!S! CurrentShortName: %8!S!

Fields

Name	Description
`FUNC`	—
`A10_NameCtrl`	—
`A11_NameCtrlNameGenerationFlags`	—
`A12_NameCtrlError`	—
`A13_NameCtrlShareNameLength`	—
`A14_NameCtrlStreamNameLength`	—
`A15__NameCtrlName`	—
`A16__NameCtrlCurrentShortName`	—

Event ID 205 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameSup.c(987) %!FUNC!:Realloc:    (%2!p!) oldSz=%3!05x! newSz=%4!05x! name: %5!S! oldFlags: %6!08x! flagsToSet: %7!08x!

Fields

Name	Description
`FUNC`	—
`A10_NameCtrl`	—
`A11_NameCtrlBufferSize`	—
`A12_NewSize`	—
`A13__NameCtrlName`	—
`A14_NameCtrlFlags`	—
`A15_FlagsToSet`	—

Event ID 206 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameSup.c(2828) %!FUNC!:Opening By ID:             %2\%3!04x!%4!04x! %5!04x!%6!04x!

Fields

Name	Description
`FUNC`	—
`A10_GET_NAME_SUPPORT_VOLUME_DEVICE_NAMEGenCtx`	—
`A11_GenCtxFileObjectFileNameBuffer0`	—
`A12_GenCtxFileObjectFileNameBuffer1`	—
`A13_GenCtxFileObjectFileNameBuffer2`	—
`A14_GenCtxFileObjectFileNameBuffer3`	—

Event ID 207 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameSup.c(3578) %!FUNC!:Expanded    "%2" to "%3!S!"

Fields

Name	Description
`FUNC`	—
`A10__GenCtxShortFileName`	—
`A11__GenCtxExpandedFileName`	—

Event ID 208 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameSup.c(4213) %!FUNC!:Opening name: %2

Fields

Name	Description
`FUNC`	—
`A10__GenCtxNameCtrlName`	—

Event ID 209 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameSup.c(5979) %!FUNC!:Expanding path for fo: %2!p!

Fields

Name	Description
`FUNC`	—
`A10_GenCtxFileObject`	—

Event ID 210 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameSup.c(7307) %!FUNC!:NORMALIZE FORMAT for name in (%2!p!)   Name:            %3!S!   Volume:          %4!S!   Final Component: %5!S!   Extension:       %6!S!   Stream:          %7!S!   Parent Dir:      %8!S!

Fields

Name	Description
`FUNC`	—
`A10_FileNameInformation`	—
`A11__FileNameInformationName`	—
`A12__FileNameInformationVolume`	—
`A13__FileNameInformationFinalComponent`	—
`A14__FileNameInformationExtension`	—
`A15__FileNameInformationStream`	—
`A16__FileNameInformationParentDir`	—

Event ID 211 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameSup.c(7325) %!FUNC!:OPENED FORMAT for name in (%2!p!)   Name:            %3!S!   Volume:          %4!S!   Final Component: %5!S!   Extension:       %6!S!   Stream:          %7!S!   Parent Dir:      %8!S!

Fields

Name	Description
`FUNC`	—
`A10_FileNameInformation`	—
`A11__FileNameInformationName`	—
`A12__FileNameInformationVolume`	—
`A13__FileNameInformationFinalComponent`	—
`A14__FileNameInformationExtension`	—
`A15__FileNameInformationStream`	—
`A16__FileNameInformationParentDir`	—

Event ID 212 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameSup.c(7343) %!FUNC!:SHORT FORMAT for name in (%2!p!)   Name:            %3!S!   Volume:          %4!S!   Final Component: %5!S!   Extension:       %6!S!   Stream:          %7!S!   Parent Dir:      %8!S!

Fields

Name	Description
`FUNC`	—
`A10_FileNameInformation`	—
`A11__FileNameInformationName`	—
`A12__FileNameInformationVolume`	—
`A13__FileNameInformationFinalComponent`	—
`A14__FileNameInformationExtension`	—
`A15__FileNameInformationStream`	—
`A16__FileNameInformationParentDir`	—

Event ID 213 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] NameSup.c(7361) %!FUNC!:UNKNOWN FORMAT for name in (%2!p!)

Fields

Name	Description
`FUNC`	—
`A10_FileNameInformation`	—

Event ID 214 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] PendingSup.c(626) %!FUNC!:Resumed Pending operation: %2!x!, Irpctrl=%3!p!, callbackNode=%4!p! (%5!S!)

Fields

Name	Description
`FUNC`	—
`A10_CallbackDataIopbMajorFunction`	—
`A11_iccIrpCtrl`	—
`A12_iccIrpCtrlPendingCallbackNode`	—
`A13_FlagOniccIrpCtrlFlagsIRPCTRFL_SYNCHRONIZESYNCNotSYNC`	—

Event ID 215 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] queuesup.c(686) %!FUNC!:Posting --- Irp:%2!p! MajorFunction:%3!d!

Fields

Name	Description
`FUNC`	—
`A10_irpCtrlIrp`	—
`A11_irpCtrlDataIopbMajorFunction`	—

Event ID 216 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] queuesup.c(712) %!FUNC!:Could not post -- Irp:%2!p! MajorFunction:%3!d!

Fields

Name	Description
`FUNC`	—
`A10_irpCtrlIrp`	—
`A11_irpCtrlDataIopbMajorFunction`	—

Event ID 217 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] queuesup.c(723) %!FUNC!:Processing inline -- Irp:%2!p! MajorFunction: %3!d!

Fields

Name	Description
`FUNC`	—
`A10_irpCtrlIrp`	—
`A11_irpCtrlDataIopbMajorFunction`	—

Event ID 218 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] RegSup.c(451) %!FUNC!:Error %2!x! initializing verifier for filter: %3!S!

Fields

Name	Description
`FUNC`	—
`A10_status`	—
`A11__filterName`	—

Event ID 219 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] RegSup.c(572) %!FUNC!:Filter "%2" registered at altitude %3!S!

Fields

Name	Description
`FUNC`	—
`A10__filterName`	—
`A11__filterDefaultAltitude`	—

Event ID 220 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] RegSup.c(829) %!FUNC!:Filter "%2" unregistering

Fields

Name	Description
`FUNC`	—
`A10__FilterName`	—

Event ID 221 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] StreamListCtrlSup.c(177) %!FUNC!:Starting (%2!p!)

Fields

Name	Description
`FUNC`	—
`A10__localHead`	—

Event ID 222 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] StreamListCtrlSup.c(205) %!FUNC!:For "%2"

Fields

Name	Description
`FUNC`	—
`A10__VolumeDeviceName`	—

Event ID 223 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] StreamListCtrlSup.c(256) %!FUNC!:FSDelete  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_streamList`	—
`A11_streamListFlags`	—
`A12_streamListUseCount`	—

Event ID 224 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] StreamListCtrlSup.c(409) %!FUNC!:Found     (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_streamList`	—
`A11_streamListFlags`	—
`A12_streamListUseCount`	—

Event ID 225 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] StreamListCtrlSup.c(540) %!FUNC!:Created   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_newStreamList`	—
`A11_newStreamListFlags`	—
`A12_newStreamListUseCount`	—

Event ID 226 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] StreamListCtrlSup.c(572) %!FUNC!:Found New (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_streamList`	—
`A11_streamListFlags`	—
`A12_streamListUseCount`	—

Event ID 227 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] StreamListCtrlSup.c(715) %!FUNC!:Allocate  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_newStreamList`	—
`A11_newStreamListFlags`	—
`A12_newStreamListUseCount`	—

Event ID 228 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] StreamListCtrlSup.c(754) %!FUNC!:Release   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_StreamList`	—
`A11_StreamListFlags`	—
`A12_StreamListUseCount`	—

Event ID 229 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] StreamListCtrlSup.c(807) %!FUNC!:DEFFERED  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_StreamList`	—
`A11_StreamListFlags`	—
`A12_StreamListUseCount`	—

Event ID 230 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] StreamListCtrlSup.c(843) %!FUNC!:Cleanup   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields

Name	Description
`FUNC`	—
`A10_StreamList`	—
`A11_StreamListFlags`	—
`A12_StreamListUseCount`	—

Event ID 231 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] SyncSup.c(260) %!FUNC!:PointerRef:   %2!p! (%3!d!) %4!S!

Fields

Name	Description
`FUNC`	—
`A10_FltObject`	—
`A11_PFLT_OBJECTFltObjectPointerCount`	—
`A12_reason`	—

Event ID 232 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] SyncSup.c(302) %!FUNC!:PointerDeRef: %2!p! (%3!d!) %4!S!

Fields

Name	Description
`FUNC`	—
`A10_FltObject`	—
`A11_PFLT_OBJECTFltObjectPointerCount`	—
`A12_reason`	—

Event ID 233 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] TargetedIoSup.c(1924) %!FUNC!:Wrong type of device object passed in: devobj %2!p!

Fields

Name	Description
`FUNC`	—
`A10_deviceObject`	—

Event ID 234 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] VolumeSup.c(225) %!FUNC!:The file system driver %2 is an unknown file system type

Fields

Name	Description
`FUNC`	—
`A10_CDODriverName`	—

Event ID 235 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] VolumeSup.c(952) %!FUNC!:SetupNotify already called for volume (%2!p!) "%3!S!"

Fields

Name	Description
`FUNC`	—
`A10_Volume`	—
`A11__VolumeDeviceName`	—

Event ID 236 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] VolumeSup.c(2606) %!FUNC!:Cleared thread hiding in FltpClearHiddenOp...: T=%2!p! FO=%3!p! Vol=%4!p! IrpMaj=%5!d!

Fields

Name	Description
`FUNC`	—
`A10_KeGetCurrentThread`	—
`A11_FileObject`	—
`A12_Volume`	—
`A13_IrpMajor`	—

Event ID 237 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] WorkSup.c(193) %!FUNC!:Work=%2!p! QueType=%3!d! Count=%4!d! Limit=%5!d!, QUEUED

Fields

Name	Description
`FUNC`	—
`A10_FltWork`	—
`A11_QueueType`	—
`A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount`	—
`A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit`	—

Event ID 238 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] WorkSup.c(214) %!FUNC!:Work=%2!p! QType=%3!d! Count=%4!d! Limit=%5!d!, THROTTLED

Fields

Name	Description
`FUNC`	—
`A10_FltWork`	—
`A11_QueueType`	—
`A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount`	—
`A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit`	—

Event ID 239 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] WorkSup.c(290) %!FUNC!:Work=%2!p! QType=%3!d! Count=%4!d! Limit=%5!d!, UnTHROTTLED

Fields

Name	Description
`FUNC`	—
`A10_fltWork`	—
`A11_QueueType`	—
`A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount`	—
`A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit`	—

Event ID 240 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] WorkSup.c(319) %!FUNC!:Work=%2!p! QType=%3!d! Count=%4!d! Limit=%5!d!, UnQUEUED

Fields

Name	Description
`FUNC`	—
`A10_NULL`	—
`A11_QueueType`	—
`A12_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningCount`	—
`A13_FltGlobalsThrottledWorkCtrlQueuesQueueTypeRunningLimit`	—

Event ID 241 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] WorkSup.c(457) %!FUNC!:Work=%2!p! QType=%3!d! FltObj=%4!p! Routine=%5!p! Context=%6!p! IoPriority=%7!d!

Fields

Name	Description
`FUNC`	—
`A10_GenericWorkItem`	—
`A11_qtype`	—
`A12_fltObject`	—
`A13_GenericWorkItemGenericWorkerRoutine`	—
`A14_GenericWorkItemContext`	—
`A15_GenericWorkItemIoPriorityInfoIoPriority`	—

Event ID 242 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] WorkSup.c(569) %!FUNC!:Work=%2!p! QType=%3!d! Instnc=%4!p! Routine=%5!p! Context=%6!p! IoPriority=%7!d!

Fields

Name	Description
`FUNC`	—
`A10_DeferredWorkItem`	—
`A11_qtype`	—
`A12_instance`	—
`A13_DeferredWorkItemDeferredWorkerRoutine`	—
`A14_DeferredWorkItemContext`	—
`A15_DeferredWorkItemIoPriorityInfoIoPriority`	—

Event ID 243 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] WorkSup.c(666) %!FUNC!:Work=%2!p! QType=%3!d! FltObj=%4!p! Routine=%5!p! Context=%6!p!

Fields

Name	Description
`FUNC`	—
`A10_FltWorkItem`	—
`A11_FltWorkItemQueueType`	—
`A12_FltWorkItemFltObject`	—
`A13_FltWorkItemGenericWorkerRoutine`	—
`A14_FltWorkItemContext`	—

Event ID 244 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] WorkSup.c(714) %!FUNC!:Work=%2!p! QType=%3!d! Instnc=%4!p! Routine=%5!p! Context=%6!p!

Fields

Name	Description
`FUNC`	—
`A10_FltWorkItem`	—
`A11_FltWorkItemQueueType`	—
`A12_FltWorkItemInstance`	—
`A13_FltWorkItemDeferredWorkerRoutine`	—
`A14_FltWorkItemContext`	—

Event ID 245 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] WorkSup.c(841) %!FUNC!:Work=%2!p! QType=%3!d! FltObj=%4!p! Routine=%5!p! Context=%6!p! IoPriority=%7!d!

Fields

Name	Description
`FUNC`	—
`A10_FltWorkItem`	—
`A11_QueueType`	—
`A12_FltObject`	—
`A13_WorkerRoutine`	—
`A14_Context`	—
`A15_FltWorkItemIoPriorityInfoIoPriority`	—

Event ID 246 — [TL_%!

Provider: Microsoft-Windows-FltMgrTrace_307b3ab035ae31a8462e37b4da258d1a
Channel: Operational

Message

[TL_%!LEVEL!] WorkSup.c(1022) %!FUNC!:Work=%2!p! QType=%3!d! Instnc=%4!p! Routine=%5!p! Context=%6!p! IoPriority=%7!d!

Fields

Name	Description
`FUNC`	—
`A10_FltWorkItem`	—
`A11_QueueType`	—
`A12_FltWorkItemInstance`	—
`A13_WorkerRoutine`	—
`A14_Context`	—
`A15_FltWorkItemIoPriorityInfoIoPriority`	—