detection.wiki

Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e

230 events across 1 channel

Event IDTitleChannel
10[TL_%!Operational
11[TL_%!Operational
12[TL_%!Operational
13[TL_%!Operational
14[TL_%!Operational
15[TL_%!Operational
16[TL_%!Operational
17[TL_%!Operational
18[TL_%!Operational
19[TL_%!Operational
20[TL_%!Operational
21[TL_%!Operational
22[TL_%!Operational
23[TL_%!Operational
24[TL_%!Operational
25[TL_%!Operational
26[TL_%!Operational
27[TL_%!Operational
28[TL_%!Operational
29[TL_%!Operational
30[TL_%!Operational
31[TL_%!Operational
32[TL_%!Operational
33[TL_%!Operational
34[TL_%!Operational
35[TL_%!Operational
36[TL_%!Operational
37[TL_%!Operational
38[TL_%!Operational
39[TL_%!Operational
40[TL_%!Operational
41[TL_%!Operational
42[TL_%!Operational
43[TL_%!Operational
44[TL_%!Operational
45[TL_%!Operational
46[TL_%!Operational
47[TL_%!Operational
48[TL_%!Operational
49[TL_%!Operational
50[TL_%!Operational
51[TL_%!Operational
52[TL_%!Operational
53[TL_%!Operational
54[TL_%!Operational
55[TL_%!Operational
56[TL_%!Operational
57[TL_%!Operational
58[TL_%!Operational
59[TL_%!Operational
60[TL_%!Operational
61[TL_%!Operational
62[TL_%!Operational
63[TL_%!Operational
64[TL_%!Operational
65[TL_%!Operational
66[TL_%!Operational
67[TL_%!Operational
68[TL_%!Operational
69[TL_%!Operational
70[TL_%!Operational
71[TL_%!Operational
72[TL_%!Operational
73[TL_%!Operational
74[TL_%!Operational
75[TL_%!Operational
76[TL_%!Operational
77[TL_%!Operational
78[TL_%!Operational
79[TL_%!Operational
80[TL_%!Operational
81[TL_%!Operational
82[TL_%!Operational
83[TL_%!Operational
84[TL_%!Operational
85[TL_%!Operational
86[TL_%!Operational
87[TL_%!Operational
88[TL_%!Operational
89[TL_%!Operational
90[TL_%!Operational
91[TL_%!Operational
92[TL_%!Operational
93[TL_%!Operational
94[TL_%!Operational
95[TL_%!Operational
96[TL_%!Operational
97[TL_%!Operational
98[TL_%!Operational
99[TL_%!Operational
100[TL_%!Operational
101[TL_%!Operational
102[TL_%!Operational
103[TL_%!Operational
104[TL_%!Operational
105[TL_%!Operational
106[TL_%!Operational
107[TL_%!Operational
108[TL_%!Operational
109[TL_%!Operational
110[TL_%!Operational
111[TL_%!Operational
112[TL_%!Operational
113[TL_%!Operational
114[TL_%!Operational
115[TL_%!Operational
116[TL_%!Operational
117[TL_%!Operational
118[TL_%!Operational
119[TL_%!Operational
120[TL_%!Operational
121[TL_%!Operational
122[TL_%!Operational
123[TL_%!Operational
124[TL_%!Operational
125[TL_%!Operational
126[TL_%!Operational
127[TL_%!Operational
128[TL_%!Operational
129[TL_%!Operational
130[TL_%!Operational
131[TL_%!Operational
132[TL_%!Operational
133[TL_%!Operational
134[TL_%!Operational
135[TL_%!Operational
136[TL_%!Operational
137[TL_%!Operational
138[TL_%!Operational
139[TL_%!Operational
140[TL_%!Operational
141[TL_%!Operational
142[TL_%!Operational
143[TL_%!Operational
144[TL_%!Operational
145[TL_%!Operational
146[TL_%!Operational
147[TL_%!Operational
148[TL_%!Operational
149[TL_%!Operational
150[TL_%!Operational
151[TL_%!Operational
152[TL_%!Operational
153[TL_%!Operational
154[TL_%!Operational
155[TL_%!Operational
156[TL_%!Operational
157[TL_%!Operational
158[TL_%!Operational
159[TL_%!Operational
160[TL_%!Operational
161[TL_%!Operational
162[TL_%!Operational
163[TL_%!Operational
164[TL_%!Operational
165[TL_%!Operational
166[TL_%!Operational
167[TL_%!Operational
168[TL_%!Operational
169[TL_%!Operational
170[TL_%!Operational
171[TL_%!Operational
172[TL_%!Operational
173[TL_%!Operational
174[TL_%!Operational
175[TL_%!Operational
176[TL_%!Operational
177[TL_%!Operational
178[TL_%!Operational
179[TL_%!Operational
180[TL_%!Operational
181[TL_%!Operational
182[TL_%!Operational
183[TL_%!Operational
184[TL_%!Operational
185[TL_%!Operational
186[TL_%!Operational
187[TL_%!Operational
188[TL_%!Operational
189[TL_%!Operational
190[TL_%!Operational
191[TL_%!Operational
192[TL_%!Operational
193[TL_%!Operational
194[TL_%!Operational
195[TL_%!Operational
196[TL_%!Operational
197[TL_%!Operational
198[TL_%!Operational
199[TL_%!Operational
200[TL_%!Operational
201[TL_%!Operational
202[TL_%!Operational
203[TL_%!Operational
204[TL_%!Operational
205[TL_%!Operational
206[TL_%!Operational
207[TL_%!Operational
208[TL_%!Operational
209[TL_%!Operational
210[TL_%!Operational
211[TL_%!Operational
212[TL_%!Operational
213[TL_%!Operational
214[TL_%!Operational
215[TL_%!Operational
216[TL_%!Operational
217[TL_%!Operational
218[TL_%!Operational
219[TL_%!Operational
220[TL_%!Operational
221[TL_%!Operational
222[TL_%!Operational
223[TL_%!Operational
224[TL_%!Operational
225[TL_%!Operational
226[TL_%!Operational
227[TL_%!Operational
228[TL_%!Operational
229[TL_%!Operational
230[TL_%!Operational
231[TL_%!Operational
232[TL_%!Operational
233[TL_%!Operational
234[TL_%!Operational
235[TL_%!Operational
236[TL_%!Operational
237[TL_%!Operational
238[TL_%!Operational
239[TL_%!Operational

Event ID 10 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(342) %!FUNC!:Forcing small completion stack size of !d! instead of !d!

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(342) %!FUNC!:Forcing small completion stack size of %2!d! instead of %3!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_stackSize Int32—
A11_oldStackSize Int32—

Event ID 11 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1362) %!FUNC!:Extending completion stack from !d! to !d! (irpCtrl=!p!).

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1362) %!FUNC!:Extending completion stack from %2!d! to %3!d! (irpCtrl=%4!p!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_IrpCtrl->CompletionStackLength Int32—
A11_newStackSize Int32—
A12_IrpCtrl Pointer—

Event ID 12 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1445) %!FUNC!:CN Insert Active (extend) IrpCtrl=!p! CompNode=!p!, [!d!].

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1445) %!FUNC!:CN Insert Active (extend) IrpCtrl=%2!p! CompNode=%3!p!, [%4!d!]

Fields #

NameDescription
!FUNC! AnsiString—
A10_newCNode->IrpCtrl Pointer—
A11_newCNode Pointer—
A12_newCNode->DataSnapshot.MajorFunction Int32—

Event ID 13 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1460) %!FUNC!:CN Insert Waiting (extend) IrpCtrl=!p! CompNode=!p!, [!d!].

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1460) %!FUNC!:CN Insert Waiting (extend)  IrpCtrl=%2!p! CompNode=%3!p!, [%4!d!]

Fields #

NameDescription
!FUNC! AnsiString—
A10_newCNode->IrpCtrl Pointer—
A11_newCNode Pointer—
A12_newCNode->DataSnapshot.MajorFunction Int32—

Event ID 14 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1486) %!FUNC!:While extending, hit non-tracked completion node, IrpCtrl=!p! [!d!,!d!].

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1486) %!FUNC!:While extending, hit non-tracked completion node, IrpCtrl=%2!p! [%3!d!,%4!d!]

Fields #

NameDescription
!FUNC! AnsiString—
A10_IrpCtrl Pointer—
A11_(CHAR)newCNode->DataSnapshot.MajorFunction Int32—
A12_(CHAR)newCNode->DataSnapshot.MinorFunction Int32—

Event ID 15 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1508) %!FUNC!:Extending an already extended stack.

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1508) %!FUNC!:Extending an already extended stack

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 16 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1834) %!FUNC!:Allocated type !d! IrpCtrl (!p!) for thread (!p!).

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1834) %!FUNC!:Allocated type %2!d! IrpCtrl (%3!p!) for thread (%4!p!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_OpType Int32—
A11_irpCtrl Pointer—
A12_Frame->ReserveIrpCtrls.StaticOwningThread[OpType] Pointer—

Event ID 17 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1893) %!FUNC!:Freeing type !d! IrpCtrl (!p!) for thread (!p!).

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(1893) %!FUNC!:Freeing type %2!d! IrpCtrl (%3!p!) for thread (%4!p!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_OpType Int32—
A11_IrpCtrl Pointer—
A12_Frame->ReserveIrpCtrls.StaticOwningThread[OpType] Pointer—

Event ID 18 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(2037) %!FUNC!:Allocated BackPocket IrpCtrl-1: (!p!) for thread (!p!), count=!d! index=!d!

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(2037) %!FUNC!:Allocated BackPocket IrpCtrl-1: (%2!p!) for thread (%3!p!), count=%4!d! index=%5!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_irpCtrl Pointer—
A11_th Pointer—
A12_Frame->ReserveIrpCtrls.Entries[i].Count Int32—
A13_i Int32—

Event ID 19 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(2109) %!FUNC!:Allocated BackPocket IrpCtrl-2: (!p!) for thread (!p!), count=!d! index=!d!

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(2109) %!FUNC!:Allocated BackPocket IrpCtrl-2: (%2!p!) for thread (%3!p!), count=%4!d! index=%5!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_irpCtrl Pointer—
A11_th Pointer—
A12_Frame->ReserveIrpCtrls.Entries[i].Count Int32—
A13_i Int32—

Event ID 20 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(2206) %!FUNC!:Freeing BackPocket IrpCtrl (!p!) for thread (!p!), count=!d! index=!d!

Message #

[TL_%!LEVEL!] AllocateIrpCtrlSup.c(2206) %!FUNC!:Freeing BackPocket IrpCtrl (%2!p!) for thread (%3!p!), count=%4!d! index=%5!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_IrpCtrl Pointer—
A11_IrpCtrl->Data.Thread Pointer—
A12_Frame->ReserveIrpCtrls.Entries[i].Count Int32—
A13_i Int32—

Event ID 21 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AttachDetachSup.c(1181) %!FUNC!:Already attached to FS : DO=!p! Vol=!p! "!S!" (!S!).

Message #

[TL_%!LEVEL!] AttachDetachSup.c(1181) %!FUNC!:Already attached to FS  :   DO=%2!p! Vol=%3!p! "%4!S!" (%5!S!)

Event ID 22 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AttachDetachSup.c(1818) %!FUNC!:Error creating control device object, status=.

Message #

[TL_%!LEVEL!] AttachDetachSup.c(1818) %!FUNC!:Error creating control device object, status=%2

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 23 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AttachDetachSup.c(1956) %!FUNC!:Error creating volume device object, status=.

Message #

[TL_%!LEVEL!] AttachDetachSup.c(1956) %!FUNC!:Error creating volume device object, status=%2

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 24 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AttachDetachSup.c(1992) %!FUNC!:Error initializing Volume structure, status=.

Message #

[TL_%!LEVEL!] AttachDetachSup.c(1992) %!FUNC!:Error initializing Volume structure, status=%2

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 25 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AttachDetachSup.c(2145) %!FUNC!:Attaching to file system DO=!p! Vol=!p! "!S!" (!S!).

Message #

[TL_%!LEVEL!] AttachDetachSup.c(2145) %!FUNC!:Attaching to file system   DO=%2!p! Vol=%3!p! "%4!S!" (%5!S!)

Event ID 26 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AttachDetachSup.c(2188) %!FUNC!:Attaching to volume DO=!p! Vol=!p! "!S!" (!S!) AttachedToDO=!p!

Message #

[TL_%!LEVEL!] AttachDetachSup.c(2188) %!FUNC!:Attaching to volume        DO=%2!p! Vol=%3!p! "%4!S!" (%5!S!)          AttachedToDO=%6!p!

Event ID 27 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AttachDetachSup.c(2288) %!FUNC!:Detaching from filesystem DO=!p! Vol=!p! "!S!" (!S!) Notify=!x!

Message #

[TL_%!LEVEL!] AttachDetachSup.c(2288) %!FUNC!:Detaching from filesystem  DO=%2!p! Vol=%3!p! "%4!S!" (%5!S!) Notify=%6!x!

Event ID 28 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AttachDetachSup.c(2311) %!FUNC!:Detaching from volume DO=!p! Vol=!p! "!S!" (!S!) Notify=!x! AttachedToDO=!p!

Message #

[TL_%!LEVEL!] AttachDetachSup.c(2311) %!FUNC!:Detaching from volume      DO=%2!p! Vol=%3!p! "%4!S!" (%5!S!) Notify=%6!x! AttachedToDO=%7!p!

Event ID 29 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AttachDetachSup.c(2409) %:Name caching ENABLED on "%2".

Message #

[TL_%!LEVEL!] AttachDetachSup.c(2409) %!FUNC!:Name caching ENABLED on "%2"

Event ID 30 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] AttachDetachSup.c(2419) %:Name caching DISABLED on "%2".

Message #

[TL_%!LEVEL!] AttachDetachSup.c(2419) %!FUNC!:Name caching DISABLED on "%2"

Event ID 31 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CallbackSup.c(377) %!FUNC!:Buffer Swap Detected: oldB=!p! oldMdl=!p! newB=!p! newMdl=!p!

Message #

[TL_%!LEVEL!] CallbackSup.c(377) %!FUNC!:Buffer Swap Detected:      oldB=%2!p! oldMdl=%3!p! newB=%4!p! newMdl=%5!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_*origBufferPtr Pointer—
A11_origMdlAddressPtr ? *origMdlAddressPtr : NULL Pointer—
A12_*newBufferPtr Pointer—
A13_newMdlAddressPtr ? *newMdlAddressPtr : NULL Pointer—

Event ID 32 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Message #

[TL_%!LEVEL!] CallbackSup.c(706) %!FUNC!:MiniFilter returned Post-Op failure: Irp %2!p!, MajorFunction %3!S!, Instance %4!p!, Altitude %5!S!, Filter %6!p! FilterName %7!S!, InitiatingInstance %8!p!, FileObject %9!p!, FsContext %10!p!, Status %11!S!, Previous Status %12!S!

Event ID 33 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Message #

[TL_%!LEVEL!] CallbackSup.c(733) %!FUNC!:MiniFilter returned Post-Op failure: Irp %2!p!, MajorFunction %3!S!, Instance %4!p!, Altitude %5!S!, Filter %6!p! FilterName %7!S!, InitiatingInstance %8!p!, FileObject %9!p!, FsContext %10!p!, Status %11!S!, Previous Status %12!S!

Event ID 34 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Message #

[TL_%!LEVEL!] CallbackSup.c(770) %!FUNC!:MiniFilter completed Pre-Operation: Irp %2!p!, MajorFunction %3!S!, Instance %4!p!, Altitude %5!S!, Filter %6!p! FilterName %7!S!, InitiatingInstance %8!p!, FileObject %9!p!, FsContext %10!p!, Status %11!S!

Event ID 35 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Message #

[TL_%!LEVEL!] CallbackSup.c(795) %!FUNC!:MiniFilter completed Pre-Operation: Irp %2!p!, MajorFunction %3!S!, Instance %4!p!, Altitude %5!S!, Filter %6!p! FilterName %7!S!, InitiatingInstance %8!p!, FileObject %9!p!, FsContext %10!p!, Status %11!S!

Event ID 36 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CallbackSup.c(841) %!FUNC!:File System returned an error: Irp !p!, MajorFunction !S!, InitiatingInstance !p!, FileObject !p!, FsContext !p!, Status !S!

Message #

[TL_%!LEVEL!] CallbackSup.c(841) %!FUNC!:File System returned an error: Irp %2!p!, MajorFunction %3!S!, InitiatingInstance %4!p!, FileObject %5!p!, FsContext %6!p!, Status %7!S!

Fields #

NameDescription
!FUNC! AnsiString—
A10_event.IrpPtr Pointer—
A11_event.MajorFunction UInt32—
A12_IrpCtrl->InitiatingInstance Pointer—
A13_event.FileObject Pointer—
A14_event.FsContext Pointer—
A15_status HexInt32—

Event ID 37 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CallbackSup.c(860) %!FUNC!:File System returned an error: Irp !p!, MajorFunction !S!, InitiatingInstance !p!, FileObject !p!, FsContext !p!, Status !S!

Message #

[TL_%!LEVEL!] CallbackSup.c(860) %!FUNC!:File System returned an error: Irp %2!p!, MajorFunction %3!S!, InitiatingInstance %4!p!, FileObject %5!p!, FsContext %6!p!, Status %7!S!

Fields #

NameDescription
!FUNC! AnsiString—
A10_event.IrpPtr Pointer—
A11_event.MajorFunction UInt32—
A12_IrpCtrl->InitiatingInstance Pointer—
A13_event.FileObject Pointer—
A14_event.FsContext Pointer—
A15_status HexInt32—

Event ID 38 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CallbackSup.c(1262) %!FUNC!:Hiding operation in FltpPerformPreCallbacks: T=!p! FO=!p! Vol=!p! Major=!d! (!S!).

Message #

[TL_%!LEVEL!] CallbackSup.c(1262) %!FUNC!:Hiding operation in FltpPerformPreCallbacks:  T=%2!p! FO=%3!p! Vol=%4!p! Major=%5!d! (%6!S!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_KeGetCurrentThread() Pointer—
A11_irpCtrl->FileObject Pointer—
A12_volume Pointer—
A13_(CHAR)irpMajorId Int32—
A14_FltGetIrpName(irpMajorId) AnsiString—

Event ID 39 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CallbackSup.c(1884) %!FUNC!:Pending operation: !x!, Irpctrl=!p!, callbackNode=!p! (!S!).

Message #

[TL_%!LEVEL!] CallbackSup.c(1884) %!FUNC!:Pending operation: %2!x!, Irpctrl=%3!p!, callbackNode=%4!p! (%5!S!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_irpMajorId HexInt32—
A11_irpCtrl Pointer—
A12_callbackNode Pointer—
A13_FlagOn(irpCtrlFlags,IRPCTRFL_SYNCHRONIZE) ? 'SYNC' : 'NotSYNC' AnsiString—

Event ID 40 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(335) %!FUNC!:Freeing completion node tracking structure !p!

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(335) %!FUNC!:Freeing completion node tracking structure %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_TrackingCtrl->PointerToFree Pointer—

Event ID 41 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(401) %!FUNC!:CN Not Tracking IrpCtrl=!p! CompNode=!p! [!d!].

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(401) %!FUNC!:CN Not Tracking   IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields #

NameDescription
!FUNC! AnsiString—
A10_CompNode->IrpCtrl Pointer—
A11_CompNode Pointer—
A12_(CHAR)CompNode->DataSnapshot.MajorFunction Int32—

Event ID 42 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(440) %!FUNC!:CN Insert Active IrpCtrl=!p! CompNode=!p! [!d!].

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(440) %!FUNC!:CN Insert Active  IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields #

NameDescription
!FUNC! AnsiString—
A10_CompNode->IrpCtrl Pointer—
A11_CompNode Pointer—
A12_(CHAR)CompNode->DataSnapshot.MajorFunction Int32—

Event ID 43 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(480) %!FUNC!:CN Insert Waiting IrpCtrl=!p! CompNode=!p! [!d!].

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(480) %!FUNC!:CN Insert Waiting IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields #

NameDescription
!FUNC! AnsiString—
A10_irpCtrl Pointer—
A11_CompNode Pointer—
A12_(CHAR)CompNode->DataSnapshot.MajorFunction Int32—

Event ID 44 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(506) %!FUNC!:Linking, swapped buffers, canceling IRP !d!,!d! (!S!).

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(506) %!FUNC!:Linking, swapped buffers, canceling IRP %2!d!,%3!d! (%4!S!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_(CHAR)irpCtrl->Data.Iopb->MajorFunction Int32—
A11_(CHAR)irpCtrl->Data.Iopb->MinorFunction Int32—
A12_FltGetIrpName(irpCtrl->Data.Iopb->MajorFunction) AnsiString—

Event ID 45 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(514) %!FUNC!:Linking, swapped buffers, wait for non-IRP operation !d!,!d! (!S!).

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(514) %!FUNC!:Linking, swapped buffers, wait for non-IRP operation %2!d!,%3!d! (%4!S!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_(CHAR)irpCtrl->Data.Iopb->MajorFunction Int32—
A11_(CHAR)irpCtrl->Data.Iopb->MinorFunction Int32—
A12_FltGetIrpName(irpCtrl->Data.Iopb->MajorFunction) AnsiString—

Event ID 46 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(548) %!FUNC!:CN Insert Waiting (non-drainable) IrpCtrl=!p! CompNode=!p! [!d!].

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(548) %!FUNC!:CN Insert Waiting (non-drainable) IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields #

NameDescription
!FUNC! AnsiString—
A10_irpCtrl Pointer—
A11_CompNode Pointer—
A12_(CHAR)CompNode->DataSnapshot.MajorFunction Int32—

Event ID 47 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(559) %!FUNC!:Linking, wait for non-drainable operation !d!,!d! (!S!) IrpCtrl=!p!

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(559) %!FUNC!:Linking, wait for non-drainable operation %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_(CHAR)irpCtrl->Data.Iopb->MajorFunction Int32—
A11_(CHAR)irpCtrl->Data.Iopb->MinorFunction Int32—
A12_FltGetIrpName(irpCtrl->Data.Iopb->MajorFunction) AnsiString—
A13_irpCtrl Pointer—

Event ID 48 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(596) %!FUNC!:CN Delete IrpCtrl=!p! CompNode=!p! [!d!].

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(596) %!FUNC!:CN Delete         IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields #

NameDescription
!FUNC! AnsiString—
A10_CompNode->IrpCtrl Pointer—
A11_CompNode Pointer—
A12_(CHAR)CompNode->DataSnapshot.MajorFunction Int32—

Event ID 49 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(780) %!FUNC!:Draining, IRP Cancel routine called.

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(780) %!FUNC!:Draining, IRP Cancel routine called

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 50 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(965) %!FUNC!:Draining operation !d!,!d! (!S!) IrpCtrl=!p!

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(965) %!FUNC!:Draining operation %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_(CHAR)localIrpCtrl.Data.Iopb->MajorFunction Int32—
A11_(CHAR)localIrpCtrl.Data.Iopb->MinorFunction Int32—
A12_FltGetIrpName(localIrpCtrl.Data.Iopb->MajorFunction) AnsiString—
A13_localCompNode.IrpCtrl Pointer—

Event ID 51 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(1130) %!FUNC!:CN Insert Waiting (bufSwaped) IrpCtrl=!p! CompNode=!p! [!d!].

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(1130) %!FUNC!:CN Insert Waiting (bufSwaped) IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields #

NameDescription
!FUNC! AnsiString—
A10_completionNode->IrpCtrl Pointer—
A11_completionNode Pointer—
A12_(CHAR)completionNode->DataSnapshot.MajorFunction Int32—

Event ID 52 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(1153) %!FUNC!:Draining, Swapped buffers, canceling IRP !d!,!d! (!S!) IrpCtrl=!p!

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(1153) %!FUNC!:Draining, Swapped buffers, canceling IRP %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_(CHAR)irpCtrl->Data.Iopb->MajorFunction Int32—
A11_(CHAR)irpCtrl->Data.Iopb->MinorFunction Int32—
A12_FltGetIrpName(irpCtrl->Data.Iopb->MajorFunction) AnsiString—
A13_irpCtrl Pointer—

Event ID 53 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(1216) %!FUNC!:Draining, Swapped buffers, waiting for non-IRP operation !d!,!d! (!S!) IrpCtrl=!p!

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(1216) %!FUNC!:Draining, Swapped buffers, waiting for non-IRP operation %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_(CHAR)irpCtrl->Data.Iopb->MajorFunction Int32—
A11_(CHAR)irpCtrl->Data.Iopb->MinorFunction Int32—
A12_FltGetIrpName(irpCtrl->Data.Iopb->MajorFunction) AnsiString—
A13_irpCtrl Pointer—

Event ID 54 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(1249) %!FUNC!:CN Insert Waiting (NotDrainable) IrpCtrl=!p! CompNode=!p! [!d!].

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(1249) %!FUNC!:CN Insert Waiting (NotDrainable) IrpCtrl=%2!p! CompNode=%3!p! [%4!d!]

Fields #

NameDescription
!FUNC! AnsiString—
A10_completionNode->IrpCtrl Pointer—
A11_completionNode Pointer—
A12_(CHAR)completionNode->DataSnapshot.MajorFunction Int32—

Event ID 55 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] CompletionNodeSup.c(1264) %!FUNC!:Draining, Waiting for non-drainable operation !d!,!d! (!S!) IrpCtrl=!p!

Message #

[TL_%!LEVEL!] CompletionNodeSup.c(1264) %!FUNC!:Draining, Waiting for non-drainable operation %2!d!,%3!d! (%4!S!) IrpCtrl=%5!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_(CHAR)irpCtrl->Data.Iopb->MajorFunction Int32—
A11_(CHAR)irpCtrl->Data.Iopb->MinorFunction Int32—
A12_FltGetIrpName(irpCtrl->Data.Iopb->MajorFunction) AnsiString—
A13_irpCtrl Pointer—

Event ID 56 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] EnumerationSup.c(1127) %!FUNC!:Wrong type of device object passed in: devobj !p!

Message #

[TL_%!LEVEL!] EnumerationSup.c(1127) %!FUNC!:Wrong type of device object passed in: devobj %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_DeviceObject Pointer—

Event ID 57 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] ExceptionSup.c(62) %!FUNC!:Caught exception (!08x!, !p!, !p!, !p!).

Message #

[TL_%!LEVEL!] ExceptionSup.c(62) %!FUNC!:Caught exception (%2!08x!, %3!p!, %4!p!, %5!p!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_ExceptionPointer->ExceptionRecord->ExceptionCode HexInt32—
A11_ExceptionPointer->ContextRecord Pointer—
A12_ExceptionPointer->ExceptionRecord Pointer—
A13_ExceptionPointer->ExceptionRecord->ExceptionAddress Pointer—

Event ID 58 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(337) %!FUNC!:passing through FAST_IO_CHECK_IF_POSSIBLE.

Message #

[TL_%!LEVEL!] FastIoSup.c(337) %!FUNC!:passing through FAST_IO_CHECK_IF_POSSIBLE

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 59 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(362) %!FUNC!:passing through FAST_IO_READ.

Message #

[TL_%!LEVEL!] FastIoSup.c(362) %!FUNC!:passing through FAST_IO_READ

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 60 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(387) %!FUNC!:passing through FAST_IO_WRITE.

Message #

[TL_%!LEVEL!] FastIoSup.c(387) %!FUNC!:passing through FAST_IO_WRITE

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 61 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(411) %!FUNC!:passing through FAST_IO_QUERY_BASIC_INFO.

Message #

[TL_%!LEVEL!] FastIoSup.c(411) %!FUNC!:passing through FAST_IO_QUERY_BASIC_INFO

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 62 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(436) %!FUNC!:passing through FAST_IO_QUERY_STANDARD_INFO.

Message #

[TL_%!LEVEL!] FastIoSup.c(436) %!FUNC!:passing through FAST_IO_QUERY_STANDARD_INFO

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 63 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(457) %!FUNC!:passing through FAST_IO_QUERY_NETWORK_OPEN_INFO.

Message #

[TL_%!LEVEL!] FastIoSup.c(457) %!FUNC!:passing through FAST_IO_QUERY_NETWORK_OPEN_INFO

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 64 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(496) %!FUNC!:passing through FAST_IO_LOCK.

Message #

[TL_%!LEVEL!] FastIoSup.c(496) %!FUNC!:passing through FAST_IO_LOCK

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 65 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(521) %!FUNC!:passing through FAST_IO_UNLOCK_SINGLE.

Message #

[TL_%!LEVEL!] FastIoSup.c(521) %!FUNC!:passing through FAST_IO_UNLOCK_SINGLE

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 66 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(544) %!FUNC!:passing through FAST_IO_UNLOCK_ALL.

Message #

[TL_%!LEVEL!] FastIoSup.c(544) %!FUNC!:passing through FAST_IO_UNLOCK_ALL

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 67 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(565) %!FUNC!:passing through FAST_IO_UNLOCK_ALL_BY_KEY.

Message #

[TL_%!LEVEL!] FastIoSup.c(565) %!FUNC!:passing through FAST_IO_UNLOCK_ALL_BY_KEY

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 68 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(594) %!FUNC!:passing through FAST_IO_DEVICE_CONTROL.

Message #

[TL_%!LEVEL!] FastIoSup.c(594) %!FUNC!:passing through FAST_IO_DEVICE_CONTROL

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 69 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(622) %!FUNC!:passing through FAST_IO_QUERY_OPEN.

Message #

[TL_%!LEVEL!] FastIoSup.c(622) %!FUNC!:passing through FAST_IO_QUERY_OPEN

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 70 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(684) %!FUNC!:passing through FAST_IO_MDL_READ.

Message #

[TL_%!LEVEL!] FastIoSup.c(684) %!FUNC!:passing through FAST_IO_MDL_READ

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 71 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(708) %!FUNC!:passing through FAST_IO_MDL_READ_COMPLETE.

Message #

[TL_%!LEVEL!] FastIoSup.c(708) %!FUNC!:passing through FAST_IO_MDL_READ_COMPLETE

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 72 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(728) %!FUNC!:passing through FAST_IO_PREPARE_MDL_WRITE.

Message #

[TL_%!LEVEL!] FastIoSup.c(728) %!FUNC!:passing through FAST_IO_PREPARE_MDL_WRITE

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 73 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FastIoSup.c(752) %!FUNC!:passing through FAST_IO_MDL_WRITE_COMPLETE.

Message #

[TL_%!LEVEL!] FastIoSup.c(752) %!FUNC!:passing through FAST_IO_MDL_WRITE_COMPLETE

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 74 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FileListCtrlSup.c(198) %!FUNC!:Starting (!p!).

Message #

[TL_%!LEVEL!] FileListCtrlSup.c(198) %!FUNC!:Starting (%2!p!)

Fields #

NameDescription
!FUNC! AnsiString—
A10__localHead Pointer—

Event ID 75 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FileListCtrlSup.c(224) %:For "%2".

Message #

[TL_%!LEVEL!] FileListCtrlSup.c(224) %!FUNC!:For "%2"

Event ID 76 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FileListCtrlSup.c(274) %!FUNC!:FSDelete (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] FileListCtrlSup.c(274) %!FUNC!:FSDelete  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_fileList Pointer—
A11_fileList->Flags HexInt32—
A12_fileList->UseCount Int32—

Event ID 77 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FileListCtrlSup.c(445) %!FUNC!:Found (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] FileListCtrlSup.c(445) %!FUNC!:Found     (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_fileList Pointer—
A11_fileList->Flags HexInt32—
A12_fileList->UseCount Int32—

Event ID 78 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FileListCtrlSup.c(565) %!FUNC!:Created (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] FileListCtrlSup.c(565) %!FUNC!:Created   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_newFileList Pointer—
A11_newFileList->Flags HexInt32—
A12_newFileList->UseCount Int32—

Event ID 79 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FileListCtrlSup.c(588) %!FUNC!:Found New (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] FileListCtrlSup.c(588) %!FUNC!:Found New (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_fileList Pointer—
A11_fileList->Flags HexInt32—
A12_fileList->UseCount Int32—

Event ID 80 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FileListCtrlSup.c(732) %!FUNC!:Allocate (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] FileListCtrlSup.c(732) %!FUNC!:Allocate  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_newFileList Pointer—
A11_newFileList->Flags HexInt32—
A12_newFileList->UseCount Int32—

Event ID 81 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FileListCtrlSup.c(769) %!FUNC!:Release (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] FileListCtrlSup.c(769) %!FUNC!:Release   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FileList Pointer—
A11_FileList->Flags HexInt32—
A12_FileList->UseCount Int32—

Event ID 82 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FileListCtrlSup.c(792) %!FUNC!:DEFFERED (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] FileListCtrlSup.c(792) %!FUNC!:DEFFERED  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FileList Pointer—
A11_FileList->Flags HexInt32—
A12_FileList->UseCount Int32—

Event ID 83 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FileListCtrlSup.c(827) %!FUNC!:Cleanup (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] FileListCtrlSup.c(827) %!FUNC!:Cleanup   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FileList Pointer—
A11_FileList->Flags HexInt32—
A12_FileList->UseCount Int32—

Event ID 84 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(996) %!FUNC!:DriverEntry: Error EtwRegister, status=!x!

Message #

[TL_%!LEVEL!] fltmgr.c(996) %!FUNC!:DriverEntry: Error EtwRegister, status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 85 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1033) %!FUNC!:Failed to start notification for dynamic settings. status=!x!

Message #

[TL_%!LEVEL!] fltmgr.c(1033) %!FUNC!:Failed to start notification for dynamic settings. status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 86 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1096) %!FUNC!:Num processors=!d!

Message #

[TL_%!LEVEL!] fltmgr.c(1096) %!FUNC!:Num processors=%2!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltGlobals.NumProcessors Int32—

Event ID 87 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1100) %!FUNC!:Max processors=!d!

Message #

[TL_%!LEVEL!] fltmgr.c(1100) %!FUNC!:Max processors=%2!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_KeQueryMaximumProcessorCountEx( ALL_PROCESSOR_GROUPS ) Int32—

Event ID 88 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1104) %!FUNC!:CacheLine size=!d! (0x!x!).

Message #

[TL_%!LEVEL!] fltmgr.c(1104) %!FUNC!:CacheLine size=%2!d! (0x%3!x!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltGlobals.CacheLineSize Int32—
A11_FltGlobals.CacheLineSize HexInt32—

Event ID 89 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1111) %!FUNC!:Breaking on errors.

Message #

[TL_%!LEVEL!] fltmgr.c(1111) %!FUNC!:Breaking on errors

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 90 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1117) %!FUNC!:Attaching to File System Recognizers.

Message #

[TL_%!LEVEL!] fltmgr.c(1117) %!FUNC!:Attaching to File System Recognizers

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 91 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1123) %!FUNC!:Randomly using STATIC IrpCtrl.

Message #

[TL_%!LEVEL!] fltmgr.c(1123) %!FUNC!:Randomly using STATIC IrpCtrl

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 92 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1129) %!FUNC!:Randomly using short CompletionNode stacks.

Message #

[TL_%!LEVEL!] fltmgr.c(1129) %!FUNC!:Randomly using short CompletionNode stacks

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 93 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1189) %!FUNC!:DriverEntry: Error creating device, status=!x!

Message #

[TL_%!LEVEL!] fltmgr.c(1189) %!FUNC!:DriverEntry: Error creating device, status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 94 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1219) %!FUNC!:DriverEntry: Error creating symbolic link for control device, status=!x!

Message #

[TL_%!LEVEL!] fltmgr.c(1219) %!FUNC!:DriverEntry: Error creating symbolic link for control device, status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 95 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1270) %!FUNC!:DriverEntry: Failed query for perf trace routines, status=!x!

Message #

[TL_%!LEVEL!] fltmgr.c(1270) %!FUNC!:DriverEntry: Failed query for perf trace routines, status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 96 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1412) %!FUNC!:DriverEntry: Error Initializing Messaging Support, status=!x!

Message #

[TL_%!LEVEL!] fltmgr.c(1412) %!FUNC!:DriverEntry: Error Initializing Messaging Support, status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 97 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1678) %!FUNC!:Unloading driver (!p!).

Message #

[TL_%!LEVEL!] fltmgr.c(1678) %!FUNC!:Unloading driver (%2!p!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_DriverObject Pointer—

Event ID 98 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1958) %!FUNC!:Waiting for !d! Zombied FltObject(s) to be freed.

Message #

[TL_%!LEVEL!] fltmgr.c(1958) %!FUNC!:Waiting for %2!d! Zombied FltObject(s) to be freed

Fields #

NameDescription
!FUNC! AnsiString—
A10_i Int32—

Event ID 99 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1966) %!FUNC!:Rundown wait complete.

Message #

[TL_%!LEVEL!] fltmgr.c(1966) %!FUNC!:Rundown wait complete

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 100 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1990) %!FUNC!:Waiting for !d! outstanding IrpCtrl(s) to complete.

Message #

[TL_%!LEVEL!] fltmgr.c(1990) %!FUNC!:Waiting for %2!d! outstanding IrpCtrl(s) to complete

Fields #

NameDescription
!FUNC! AnsiString—
A10_i Int32—

Event ID 101 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(1999) %!FUNC!:Rundown wait complete.

Message #

[TL_%!LEVEL!] fltmgr.c(1999) %!FUNC!:Rundown wait complete

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 102 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(2164) %!FUNC!: DO=!p! Vol=!p! "!S!" (!S!).

Message #

[TL_%!LEVEL!] fltmgr.c(2164) %!FUNC!:%2   DO=%3!p! Vol=%4!p! "%5!S!" (%6!S!)

Event ID 103 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(2271) %!FUNC!:Paging File operation, (!d!).

Message #

[TL_%!LEVEL!] fltmgr.c(2271) %!FUNC!:Paging File operation, %2(%3!d!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltGetIrpName(irpSp->MajorFunction) AnsiString—
A11_irpSp->MajorFunction Int32—

Event ID 104 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(2771) %!FUNC!:FO=!p! Closing "!S!".

Message #

[TL_%!LEVEL!] fltmgr.c(2771) %!FUNC!:FO=%2!p! Closing  "%3!S!"

Event ID 105 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(4518) %!FUNC!:Posting Irp !p! major=!d!

Message #

[TL_%!LEVEL!] fltmgr.c(4518) %!FUNC!:Posting Irp %2!p! major=%3!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_IrpCtrl->Irp Pointer—
A11_IrpCtrl->Data.Iopb->MajorFunction Int32—

Event ID 106 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(4846) %!FUNC!:Posting Irp !p!

Message #

[TL_%!LEVEL!] fltmgr.c(4846) %!FUNC!:Posting Irp %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_Irp Pointer—

Event ID 107 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(5015) %!FUNC!:TopLevelIrp set with unknown Irp 0x!x!

Message #

[TL_%!LEVEL!] fltmgr.c(5015) %!FUNC!:TopLevelIrp set with unknown Irp 0x%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_irpSp->MajorFunction HexInt32—

Event ID 108 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(5859) %!FUNC!:Set thread hiding in FltpCreate: T=!p! FO=!p! Vol=!p! Name="!S!".

Message #

[TL_%!LEVEL!] fltmgr.c(5859) %!FUNC!:Set thread hiding in FltpCreate:              T=%2!p! FO=%3!p! Vol=%4!p! Name="%5!S!"

Event ID 109 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(5930) %!FUNC!:Calling InstanceSetup on CreateIrp.

Message #

[TL_%!LEVEL!] fltmgr.c(5930) %!FUNC!:Calling InstanceSetup on CreateIrp

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 110 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(5968) %!FUNC!:FO=!p! Creating "!S!".

Message #

[TL_%!LEVEL!] fltmgr.c(5968) %!FUNC!:FO=%2!p! Creating "%3!S!"

Event ID 111 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(6237) %!FUNC!:Reset thread hiding in FltpCreatePostCompl: T=!p! FO=!p! Vol=!p! status=!S!

Message #

[TL_%!LEVEL!] fltmgr.c(6237) %!FUNC!:Reset thread hiding in FltpCreatePostCompl:   T=%2!p! FO=%3!p! Vol=%4!p! status=%5!S!

Fields #

NameDescription
!FUNC! AnsiString—
A10_KeGetCurrentThread() Pointer—
A11_IrpCtrl->FileObject Pointer—
A12_volume Pointer—
A13_IrpCtrl->Data.IoStatus.Status HexInt32—

Event ID 112 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(6245) %!FUNC!:Continue Thread hiding in FltpCreatePostCompl:T=!p! FO=!p! Vol=!p! status=!S!

Message #

[TL_%!LEVEL!] fltmgr.c(6245) %!FUNC!:Continue Thread hiding in FltpCreatePostCompl:T=%2!p! FO=%3!p! Vol=%4!p! status=%5!S!

Fields #

NameDescription
!FUNC! AnsiString—
A10_KeGetCurrentThread() Pointer—
A11_IrpCtrl->FileObject Pointer—
A12_volume Pointer—
A13_IrpCtrl->Data.IoStatus.Status HexInt32—

Event ID 113 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(6386) %!FUNC!:Calling InstanceSetup on CreateIrp.

Message #

[TL_%!LEVEL!] fltmgr.c(6386) %!FUNC!:Calling InstanceSetup on CreateIrp

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 114 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(7580) %!FUNC!:Mount volume failure for DO=!p! Vol=!p! "!S!", status=!S! AttachedToDO=!p! FsCDO=!p!

Message #

[TL_%!LEVEL!] fltmgr.c(7580) %!FUNC!:Mount volume failure for   DO=%2!p! Vol=%3!p! "%4!S!", status=%5!S!            AttachedToDO=%6!p! FsCDO=%7!p!

Event ID 115 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(7707) %!FUNC!:DeviceObject !p!, Loading File System, Detaching from !S!

Message #

[TL_%!LEVEL!] fltmgr.c(7707) %!FUNC!:DeviceObject %2!p!,  Loading File System, Detaching from %3!S!

Event ID 116 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(7783) %!FUNC!:Detaching from recognizer DO=!p! Vol=!p! "!S!", status=!S!

Message #

[TL_%!LEVEL!] fltmgr.c(7783) %!FUNC!:Detaching from recognizer  DO=%2!p! Vol=%3!p! "%4!S!", status=%5!S!

Event ID 117 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(11225) %!FUNC!:Calling InstanceSetup on FastIoQueryOpen.

Message #

[TL_%!LEVEL!] fltmgr.c(11225) %!FUNC!:Calling InstanceSetup on FastIoQueryOpen

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 118 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(12559) %!FUNC!:Failed to restart registry watch, Context=!p!, status=!x!

Message #

[TL_%!LEVEL!] fltmgr.c(12559) %!FUNC!:Failed to restart registry watch, Context=%2!p!, status=%3!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_Context Pointer—
A11_regWatchContext->NotificationStatus HexInt32—

Event ID 119 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] fltmgr.c(13405) %!FUNC!:Resetting notification for dynamic registry settings failed. Context=!p!, status=!x!

Message #

[TL_%!LEVEL!] fltmgr.c(13405) %!FUNC!:Resetting notification for dynamic registry settings failed. Context=%2!p!, status=%3!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_regWatchContext Pointer—
A11_regWatchContext->NotificationStatus HexInt32—

Event ID 120 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FrameSup.c(549) %!FUNC!:Error registering FS change notification, status=!x!

Message #

[TL_%!LEVEL!] FrameSup.c(549) %!FUNC!:Error registering FS change notification, status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 121 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FrameSup.c(584) %!FUNC!:Error 0x!X! attaching to device !S!

Message #

[TL_%!LEVEL!] FrameSup.c(584) %!FUNC!:Error 0x%2!X! attaching to device %3!S!

Event ID 122 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FrameSup.c(613) %!FUNC!:Error 0x!X! attaching to device !S!

Message #

[TL_%!LEVEL!] FrameSup.c(613) %!FUNC!:Error 0x%2!X! attaching to device %3!S!

Event ID 123 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FrameSup.c(629) %!FUNC!:Created Frame !d! with altitude range !S!-!S!

Message #

[TL_%!LEVEL!] FrameSup.c(629) %!FUNC!:Created Frame %2!d! with altitude range %3!S!-%4!S!

Event ID 124 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FrameSup.c(1647) %!FUNC!:Failed allocating timer.

Message #

[TL_%!LEVEL!] FrameSup.c(1647) %!FUNC!:Failed allocating timer

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 125 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FrameSup.c(1659) %!FUNC!:Starting timer.

Message #

[TL_%!LEVEL!] FrameSup.c(1659) %!FUNC!:Starting timer

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 126 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FrameSup.c(1762) %!FUNC!:FltpManualDeviceAttachWorker: Delaying: fl=!Ix!, dl=!d! (!d!).

Message #

[TL_%!LEVEL!] FrameSup.c(1762) %!FUNC!:FltpManualDeviceAttachWorker: Delaying: fl=%2!Ix!, dl=%3!d! (%4!d!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_ctxFlags Pointer—
A11_FltGlobals.ManualAttachDelayCounter Int32—
A12_FltGlobals.ManualDeviceAttachLimit Int32—

Event ID 127 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FrameSup.c(1778) %!FUNC!:FltpManualDeviceAttachWorker: Checking: fl=!Ix!, dl=!d! (!d!).

Message #

[TL_%!LEVEL!] FrameSup.c(1778) %!FUNC!:FltpManualDeviceAttachWorker: Checking: fl=%2!Ix!, dl=%3!d! (%4!d!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_ctxFlags Pointer—
A11_FltGlobals.ManualAttachDelayCounter Int32—
A12_FltGlobals.ManualDeviceAttachLimit Int32—

Event ID 128 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FrameSup.c(2181) %!FUNC!:Altidue range for Frame !d! changed from !S!-!S! to !S!-!S!

Message #

[TL_%!LEVEL!] FrameSup.c(2181) %!FUNC!:Altidue range for Frame %2!d! changed from %3!S!-%4!S! to %5!S!-%6!S!

Event ID 129 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] FrameSup.c(2291) %:The "%2" legacy filter is using the "%3" load order group.

Message #

[TL_%!LEVEL!] FrameSup.c(2291) %!FUNC!:The "%2" legacy filter is using the "%3!S!" load order group

Event ID 130 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] InstanceSup.c(663) %!FUNC!:Instance Setup Aborted for Filter (!p!) "!S!", instance (!p!) on volume (!p!) "!S!".

Message #

[TL_%!LEVEL!] InstanceSup.c(663) %!FUNC!:Instance Setup Aborted for Filter (%2!p!) "%3!S!", instance (%4!p!) on volume (%5!p!) "%6!S!"

Event ID 131 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] InstanceSup.c(680) %!FUNC!:Filter (!p!) "!S!" attached instance (!p!) to volume (!p!) "!S!".

Message #

[TL_%!LEVEL!] InstanceSup.c(680) %!FUNC!:Filter (%2!p!) "%3!S!" attached instance (%4!p!) to volume (%5!p!) "%6!S!"

Event ID 132 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] InstanceSup.c(1880) %!FUNC!:New instance for filter (!p!) "!S!" at altitude !S! for volume !p! "!S!".

Message #

[TL_%!LEVEL!] InstanceSup.c(1880) %!FUNC!:New instance for filter (%2!p!) "%3!S!" at altitude %4!S! for volume %5!p! "%6!S!"

Event ID 133 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] InstanceSup.c(1977) %!FUNC!:Instance !p! for filter (!p!) "!S!" already exists at altitude !S!

Message #

[TL_%!LEVEL!] InstanceSup.c(1977) %!FUNC!:Instance %2!p! for filter (%3!p!) "%4!S!" already exists at altitude %5!S!

Event ID 134 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] InstanceSup.c(2065) %!FUNC!:Filter (!p!) "!S!" detached instance (!p!) from volume (!p!) "!S!" NotifyFlags=!x!

Message #

[TL_%!LEVEL!] InstanceSup.c(2065) %!FUNC!:Filter (%2!p!) "%3!S!" detached instance (%4!p!) from volume (%5!p!) "%6!S!" NotifyFlags=%7!x!

Event ID 135 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(4573) %!FUNC!:Attemping Fastio (no lower minifilters) from FltReadFile: Buffer=!p!, offset=!I64x!, length=!x!

Message #

[TL_%!LEVEL!] IoSup.c(4573) %!FUNC!:Attemping Fastio (no lower minifilters) from FltReadFile: Buffer=%2!p!, offset=%3!I64x!, length=%4!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_Buffer Pointer—
A11_fileOffset.QuadPart HexInt64—
A12_Length HexInt32—

Event ID 136 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(4623) %!FUNC!:Attemping Fastio from FltReadFile: Buffer=!p!, offset=!I64x!, length=!x!

Message #

[TL_%!LEVEL!] IoSup.c(4623) %!FUNC!:Attemping Fastio from FltReadFile: Buffer=%2!p!, offset=%3!I64x!, length=%4!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_Buffer Pointer—
A11_fileOffset.QuadPart HexInt64—
A12_Length HexInt32—

Event ID 137 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(4729) %!FUNC!:Fastio attempt from FltReadFile failed.

Message #

[TL_%!LEVEL!] IoSup.c(4729) %!FUNC!:Fastio attempt from FltReadFile failed

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 138 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5145) %!FUNC!:Attemping Fastio (no lower minifilters) from FltWriteFile: Buffer=!p!, offset=!I64x!, length=!x!

Message #

[TL_%!LEVEL!] IoSup.c(5145) %!FUNC!:Attemping Fastio (no lower minifilters) from FltWriteFile: Buffer=%2!p!, offset=%3!I64x!, length=%4!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_Buffer Pointer—
A11_fileOffset.QuadPart HexInt64—
A12_Length HexInt32—

Event ID 139 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5196) %!FUNC!:Attemping Fastio from FltWriteFile: Buffer=!p!, offset=!I64x!, length=!x!

Message #

[TL_%!LEVEL!] IoSup.c(5196) %!FUNC!:Attemping Fastio from FltWriteFile: Buffer=%2!p!, offset=%3!I64x!, length=%4!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_Buffer Pointer—
A11_fileOffset.QuadPart HexInt64—
A12_Length HexInt32—

Event ID 140 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5303) %!FUNC!:Fastio attempt from FltWriteFile failed.

Message #

[TL_%!LEVEL!] IoSup.c(5303) %!FUNC!:Fastio attempt from FltWriteFile failed

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 141 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5505) %!FUNC!:(No lower minifilters).

Message #

[TL_%!LEVEL!] IoSup.c(5505) %!FUNC!:(No lower minifilters)

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 142 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5580) %!FUNC!:(Lower minifilter(s) exist).

Message #

[TL_%!LEVEL!] IoSup.c(5580) %!FUNC!:(Lower minifilter(s) exist)

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 143 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5718) %!FUNC!:Attemping Fastio from FltFastIoMdlRead: MDLChain=!p!, offset=!I64x!, length=!x!

Message #

[TL_%!LEVEL!] IoSup.c(5718) %!FUNC!:Attemping Fastio from FltFastIoMdlRead: MDLChain=%2!p!, offset=%3!I64x!, length=%4!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_MdlChain Pointer—
A11_FileOffset->QuadPart HexInt64—
A12_Length HexInt32—

Event ID 144 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5736) %!FUNC!:Fastio attempt from FltReadFile failed.

Message #

[TL_%!LEVEL!] IoSup.c(5736) %!FUNC!:Fastio attempt from FltReadFile failed

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 145 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5757) %!FUNC!:Attemping Fastio from FltFastIoMdlReadComplete: MDLChain=!p!

Message #

[TL_%!LEVEL!] IoSup.c(5757) %!FUNC!:Attemping Fastio from FltFastIoMdlReadComplete: MDLChain=%2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_MdlChain Pointer—

Event ID 146 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5772) %!FUNC!:Fastio attempt from FltFastIoMdlReadComplete failed.

Message #

[TL_%!LEVEL!] IoSup.c(5772) %!FUNC!:Fastio attempt from FltFastIoMdlReadComplete failed

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 147 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5797) %!FUNC!:Attemping Fastio from FltFastIoPrepareMdlWrite: MDLChain=!p!, offset=!I64x!, length=!x!

Message #

[TL_%!LEVEL!] IoSup.c(5797) %!FUNC!:Attemping Fastio from FltFastIoPrepareMdlWrite: MDLChain=%2!p!, offset=%3!I64x!, length=%4!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_MdlChain Pointer—
A11_FileOffset->QuadPart HexInt64—
A12_Length HexInt32—

Event ID 148 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5815) %!FUNC!:Fastio attempt from FltFastIoPrepareMdlWrite failed.

Message #

[TL_%!LEVEL!] IoSup.c(5815) %!FUNC!:Fastio attempt from FltFastIoPrepareMdlWrite failed

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 149 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5838) %!FUNC!:Attemping Fastio from FltFastIoMdlWriteComplete: MDLChain=!p!, offset=!I64x!

Message #

[TL_%!LEVEL!] IoSup.c(5838) %!FUNC!:Attemping Fastio from FltFastIoMdlWriteComplete: MDLChain=%2!p!, offset=%3!I64x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_MdlChain Pointer—
A11_FileOffset->QuadPart HexInt64—

Event ID 150 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] IoSup.c(5855) %!FUNC!:Fastio attempt from FltFastIoMdlWriteComplete failed.

Message #

[TL_%!LEVEL!] IoSup.c(5855) %!FUNC!:Fastio attempt from FltFastIoMdlWriteComplete failed

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 151 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(1888) %!FUNC!:Timed out waiting for listener.

Message #

[TL_%!LEVEL!] MessageSup.c(1888) %!FUNC!:Timed out waiting for listener.

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 152 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(1901) %!FUNC!:Port is disconncted: abandoning listener.

Message #

[TL_%!LEVEL!] MessageSup.c(1901) %!FUNC!:Port is disconncted: abandoning listener

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 153 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(1909) %!FUNC!:Thread is Terminating.

Message #

[TL_%!LEVEL!] MessageSup.c(1909) %!FUNC!:Thread is Terminating.

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 154 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(1985) %!FUNC!:Timed out waiting for listener.

Message #

[TL_%!LEVEL!] MessageSup.c(1985) %!FUNC!:Timed out waiting for listener.

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 155 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(1998) %!FUNC!:Port is disconncted: abandoning listener.

Message #

[TL_%!LEVEL!] MessageSup.c(1998) %!FUNC!:Port is disconncted: abandoning listener

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 156 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2006) %!FUNC!:Thread is Terminating.

Message #

[TL_%!LEVEL!] MessageSup.c(2006) %!FUNC!:Thread is Terminating.

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 157 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2039) %!FUNC!:Found waiter IRP (!p!), dequeued it.

Message #

[TL_%!LEVEL!] MessageSup.c(2039) %!FUNC!:Found waiter IRP (%2!p!), dequeued it

Fields #

NameDescription
!FUNC! AnsiString—
A10_irp Pointer—

Event ID 158 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2140) %!FUNC!:Found waiter, but could not map user's buffer, IRP=!p!

Message #

[TL_%!LEVEL!] MessageSup.c(2140) %!FUNC!:Found waiter, but could not map user's buffer, IRP=%2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_irp Pointer—

Event ID 159 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2264) %!FUNC!:Queueing replyWaiter (!p!).

Message #

[TL_%!LEVEL!] MessageSup.c(2264) %!FUNC!:Queueing replyWaiter (%2!p!)

Fields #

NameDescription
!FUNC! AnsiString—
A10__replyWaiter Pointer—

Event ID 160 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2317) %!FUNC!:Wait for reply status !x!

Message #

[TL_%!LEVEL!] MessageSup.c(2317) %!FUNC!:Wait for reply status %2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 161 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2325) %!FUNC!:Thread is Terminating Thread timed out Port disconnected.

Message #

[TL_%!LEVEL!] MessageSup.c(2325) %!FUNC!:Thread is Terminating Thread timed out Port disconnected

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 162 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2686) %!FUNC!:Found waiter !p!, dequeued it.

Message #

[TL_%!LEVEL!] MessageSup.c(2686) %!FUNC!:Found waiter %2!p!, dequeued it

Fields #

NameDescription
!FUNC! AnsiString—
A10_currentWaiter Pointer—

Event ID 163 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2749) %!FUNC!:Setting reply event.

Message #

[TL_%!LEVEL!] MessageSup.c(2749) %!FUNC!:Setting reply event

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 164 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2766) %!FUNC!:No waiter for reply, messageId: 0x!X!

Message #

[TL_%!LEVEL!] MessageSup.c(2766) %!FUNC!:No waiter for reply, messageId: 0x%2!X!

Fields #

NameDescription
!FUNC! AnsiString—
A10_(ULONG) replyMessageId HexInt32—

Event ID 165 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2815) %!FUNC!:Allocated !p!, enqueueing it (async).

Message #

[TL_%!LEVEL!] MessageSup.c(2815) %!FUNC!:Allocated %2!p!, enqueueing it (async)

Fields #

NameDescription
!FUNC! AnsiString—
A10_Irp Pointer—

Event ID 166 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2878) %!FUNC!:Dequeued waiter !p!

Message #

[TL_%!LEVEL!] MessageSup.c(2878) %!FUNC!:Dequeued waiter %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_irp Pointer—

Event ID 167 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2930) %!FUNC!:Verifying waiter list for Queue: !p! --.

Message #

[TL_%!LEVEL!] MessageSup.c(2930) %!FUNC!:Verifying waiter list for Queue: %2!p! --

Fields #

NameDescription
!FUNC! AnsiString—
A10_Queue Pointer—

Event ID 168 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(2940) %!FUNC!: -- currentLink !p!

Message #

[TL_%!LEVEL!] MessageSup.c(2940) %!FUNC!:                    -- currentLink %2!p!

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 169 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(3041) %!FUNC!:Error creating server port object type, status=!x!

Message #

[TL_%!LEVEL!] MessageSup.c(3041) %!FUNC!:Error creating server port object type, status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 170 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(3106) %!FUNC!:Error creating connection port object type, status=!x!

Message #

[TL_%!LEVEL!] MessageSup.c(3106) %!FUNC!:Error creating connection port object type, status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 171 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(3128) %!FUNC!:Error creating msg device object, status=!x!

Message #

[TL_%!LEVEL!] MessageSup.c(3128) %!FUNC!:Error creating msg device object, status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 172 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(3146) %!FUNC!:Error creating symbolic link to msg device object, status=!x!

Message #

[TL_%!LEVEL!] MessageSup.c(3146) %!FUNC!:Error creating symbolic link to msg device object, status=%2!x!

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 173 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(3248) %!FUNC!:Setting MessageWaiter event.

Message #

[TL_%!LEVEL!] MessageSup.c(3248) %!FUNC!:Setting MessageWaiter event

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 174 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(3260) %!FUNC!:Setting MessageWaiter semaphore.

Message #

[TL_%!LEVEL!] MessageSup.c(3260) %!FUNC!:Setting MessageWaiter semaphore

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 175 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(3318) %!FUNC!:Cancelling MessageWaiter !p!

Message #

[TL_%!LEVEL!] MessageSup.c(3318) %!FUNC!:Cancelling MessageWaiter %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_Irp Pointer—

Event ID 176 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] MessageSup.c(3367) %!FUNC!:Removed MessageWaiter !p! from queue.

Message #

[TL_%!LEVEL!] MessageSup.c(3367) %!FUNC!:Removed MessageWaiter %2!p! from queue

Fields #

NameDescription
!FUNC! AnsiString—
A10_Irp Pointer—

Event ID 177 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(847) %!FUNC!:Temporary: (!p!) FO=!p!, Fl=!03x!, Use=!d! "!S!".

Message #

[TL_%!LEVEL!] NameCacheSup.c(847) %!FUNC!:Temporary: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Event ID 178 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(1916) %!FUNC!:Deleting Node: (!p!) Fl=!03x!, Use=!d! "!S!".

Message #

[TL_%!LEVEL!] NameCacheSup.c(1916) %!FUNC!:Deleting Node: (%2!p!) Fl=%3!03x!, Use=%4!d! "%5!S!"

Event ID 179 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(3468) %!FUNC!:Freeing Node: (!p!), flags:!04x!, name: "!S!".

Message #

[TL_%!LEVEL!] NameCacheSup.c(3468) %!FUNC!:Freeing Node: (%2!p!), flags:%3!04x!, name: "%4!S!"

Event ID 180 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(3717) %!FUNC!:Getting NORMALIZED name for fo: !p!

Message #

[TL_%!LEVEL!] NameCacheSup.c(3717) %!FUNC!:Getting NORMALIZED name for fo: %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_GenCtx->FileObject Pointer—

Event ID 181 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(3726) %!FUNC!:Getting OPENED name for fo: !p!

Message #

[TL_%!LEVEL!] NameCacheSup.c(3726) %!FUNC!:Getting OPENED name for fo: %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_GenCtx->FileObject Pointer—

Event ID 182 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(3736) %!FUNC!:Getting SHORT name for fo: !p!

Message #

[TL_%!LEVEL!] NameCacheSup.c(3736) %!FUNC!:Getting SHORT name for fo: %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_GenCtx->FileObject Pointer—

Event ID 183 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(4284) %!FUNC!:Found: (!p!) FO=!p!, Fl=!03x!, Use=!d! "!S!".

Message #

[TL_%!LEVEL!] NameCacheSup.c(4284) %!FUNC!:Found: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Event ID 184 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(4440) %!FUNC!:Inserted: (!p!) FO=!p!, Fl=!03x!, Use=!d! "!S!".

Message #

[TL_%!LEVEL!] NameCacheSup.c(4440) %!FUNC!:Inserted: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Event ID 185 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(4516) %!FUNC!:Replaced: (!p!) FO=!p!, Fl=!03x!, Use=!d! "!S!".

Message #

[TL_%!LEVEL!] NameCacheSup.c(4516) %!FUNC!:Replaced: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Event ID 186 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(4543) %!FUNC!:Duplicate: (!p!) FO=!p!, Fl=!03x!, Use=!d! "!S!".

Message #

[TL_%!LEVEL!] NameCacheSup.c(4543) %!FUNC!:Duplicate: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Event ID 187 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(4567) %!FUNC!:Temporary: (!p!) FO=!p!, Fl=!03x!, Use=!d! "!S!".

Message #

[TL_%!LEVEL!] NameCacheSup.c(4567) %!FUNC!:Temporary: (%2!p!) FO=%3!p!, Fl=%4!03x!, Use=%5!d! "%6!S!"

Event ID 188 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(4778) %!FUNC!:Invalidate Caching (0x!x!, 0x!x!): "!S!", [!S!] (!p!).

Message #

[TL_%!LEVEL!] NameCacheSup.c(4778) %!FUNC!:Invalidate Caching (0x%2!x!, 0x%3!x!): "%4!S!", [%5!S!] (%6!p!)

Event ID 189 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(5024) %!FUNC!:Reinstate Caching (0x!x!, 0x!x!): "!S!", [!S!] (!p!).

Message #

[TL_%!LEVEL!] NameCacheSup.c(5024) %!FUNC!:Reinstate Caching (0x%2!x!, 0x%3!x!): "%4!S!", [%5!S!] (%6!p!)

Event ID 190 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(6006) %!FUNC!:Refcounting file name information: !p! cnt=!d!

Message #

[TL_%!LEVEL!] NameCacheSup.c(6006) %!FUNC!:Refcounting file name information: %2!p! cnt=%3!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FileNameInformation Pointer—
A11_nameCacheNode->UseCount Int32—

Event ID 191 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(6067) %!FUNC!:Releasing fni !p!

Message #

[TL_%!LEVEL!] NameCacheSup.c(6067) %!FUNC!:Releasing fni %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FileNameInformation Pointer—

Event ID 192 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(6096) %!FUNC!: *FREEING FNI*.

Message #

[TL_%!LEVEL!] NameCacheSup.c(6096) %!FUNC!: *FREEING FNI*

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 193 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(6105) %!FUNC!

Message #

[TL_%!LEVEL!] NameCacheSup.c(6105) %!FUNC!:

Fields #

NameDescription
!FUNC! AnsiString—

Event ID 194 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(6928) %:Expanded "%2" to "%3".

Message #

[TL_%!LEVEL!] NameCacheSup.c(6928) %!FUNC!:Expanded    "%2" to "%3!S!"

Event ID 195 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(7433) %:Purge name cache for POSIX delete: "%2", [%3] (%4).

Message #

[TL_%!LEVEL!] NameCacheSup.c(7433) %!FUNC!:Purge name cache for POSIX delete: "%2", [%3!S!] (%4!p!)

Event ID 196 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameCacheSup.c(7448) %!FUNC!:Failed to invalidate name cache for POSIX delete.

Message #

[TL_%!LEVEL!] NameCacheSup.c(7448) %!FUNC!:Failed to invalidate name cache for POSIX delete: %2

Fields #

NameDescription
!FUNC! AnsiString—
A10_status HexInt32—

Event ID 197 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameSup.c(844) %!FUNC!:Error building name: NameCtrl (!p!) [0x!x!] Error: 0x!x! ShareNameLength: 0x!x! StreamNameLength: 0x!x! Name: !S! CurrentShortName: !S!

Message #

[TL_%!LEVEL!] NameSup.c(844) %!FUNC!:Error building name: NameCtrl (%2!p!) [0x%3!x!] Error: 0x%4!x!  ShareNameLength: 0x%5!x! StreamNameLength: 0x%6!x!  Name: %7!S! CurrentShortName: %8!S!

Event ID 198 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameSup.c(977) %!FUNC!:Realloc: (!p!) oldSz=!05x! newSz=!05x! name: !S! oldFlags: !08x! flagsToSet: !08x!

Message #

[TL_%!LEVEL!] NameSup.c(977) %!FUNC!:Realloc:    (%2!p!) oldSz=%3!05x! newSz=%4!05x! name: %5!S! oldFlags: %6!08x! flagsToSet: %7!08x!

Event ID 199 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameSup.c(2818) %!FUNC!:Opening By ID: \!04x!!04x! !04x!!04x!

Message #

[TL_%!LEVEL!] NameSup.c(2818) %!FUNC!:Opening By ID: %2\%3!04x!%4!04x! %5!04x!%6!04x!

Event ID 200 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameSup.c(3568) %:Expanded "%2" to "%3".

Message #

[TL_%!LEVEL!] NameSup.c(3568) %!FUNC!:Expanded    "%2" to "%3!S!"

Event ID 201 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameSup.c(4203) %!FUNC!:Opening name.

Message #

[TL_%!LEVEL!] NameSup.c(4203) %!FUNC!:Opening name: %2

Event ID 202 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameSup.c(5963) %!FUNC!:Expanding path for fo: !p!

Message #

[TL_%!LEVEL!] NameSup.c(5963) %!FUNC!:Expanding path for fo: %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_GenCtx->FileObject Pointer—

Event ID 203 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameSup.c(7291) %!FUNC!:NORMALIZE FORMAT for name in (!p!) Name: !S! Volume: !S! Final Component: !S! Extension: !S! Stream: !S! Parent Dir: !S!

Message #

[TL_%!LEVEL!] NameSup.c(7291) %!FUNC!:NORMALIZE FORMAT for name in (%2!p!)   Name: %3!S!   Volume: %4!S!   Final Component: %5!S!   Extension: %6!S!   Stream: %7!S!   Parent Dir: %8!S!

Event ID 204 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameSup.c(7309) %!FUNC!:OPENED FORMAT for name in (!p!) Name: !S! Volume: !S! Final Component: !S! Extension: !S! Stream: !S! Parent Dir: !S!

Message #

[TL_%!LEVEL!] NameSup.c(7309) %!FUNC!:OPENED FORMAT for name in (%2!p!)   Name: %3!S!   Volume: %4!S!   Final Component: %5!S!   Extension: %6!S!   Stream: %7!S!   Parent Dir: %8!S!

Event ID 205 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameSup.c(7327) %!FUNC!:SHORT FORMAT for name in (!p!) Name: !S! Volume: !S! Final Component: !S! Extension: !S! Stream: !S! Parent Dir: !S!

Message #

[TL_%!LEVEL!] NameSup.c(7327) %!FUNC!:SHORT FORMAT for name in (%2!p!)   Name: %3!S!   Volume: %4!S!   Final Component: %5!S!   Extension: %6!S!   Stream: %7!S!   Parent Dir: %8!S!

Event ID 206 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] NameSup.c(7345) %!FUNC!:UNKNOWN FORMAT for name in (!p!).

Message #

[TL_%!LEVEL!] NameSup.c(7345) %!FUNC!:UNKNOWN FORMAT for name in (%2!p!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_FileNameInformation Pointer—

Event ID 207 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] PendingSup.c(626) %!FUNC!:Resumed Pending operation: !x!, Irpctrl=!p!, callbackNode=!p! (!S!).

Message #

[TL_%!LEVEL!] PendingSup.c(626) %!FUNC!:Resumed Pending operation: %2!x!, Irpctrl=%3!p!, callbackNode=%4!p! (%5!S!)

Fields #

NameDescription
!FUNC! AnsiString—
A10_CallbackData->Iopb->MajorFunction HexInt32—
A11_icc.IrpCtrl Pointer—
A12_icc.IrpCtrl->PendingCallbackNode Pointer—
A13_FlagOn(icc.IrpCtrl->Flags,IRPCTRFL_SYNCHRONIZE) ? 'SYNC' : 'NotSYNC' AnsiString—

Event ID 208 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] queuesup.c(686) %!FUNC!:Posting --- Irp:!p! MajorFunction:!d!

Message #

[TL_%!LEVEL!] queuesup.c(686) %!FUNC!:Posting --- Irp:%2!p! MajorFunction:%3!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_irpCtrl->Irp Pointer—
A11_irpCtrl->Data.Iopb->MajorFunction Int32—

Event ID 209 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] queuesup.c(712) %!FUNC!:Could not post -- Irp:!p! MajorFunction:!d!

Message #

[TL_%!LEVEL!] queuesup.c(712) %!FUNC!:Could not post -- Irp:%2!p! MajorFunction:%3!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_irpCtrl->Irp Pointer—
A11_irpCtrl->Data.Iopb->MajorFunction Int32—

Event ID 210 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] queuesup.c(723) %!FUNC!:Processing inline -- Irp:!p! MajorFunction: !d!

Message #

[TL_%!LEVEL!] queuesup.c(723) %!FUNC!:Processing inline -- Irp:%2!p! MajorFunction: %3!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_irpCtrl->Irp Pointer—
A11_irpCtrl->Data.Iopb->MajorFunction Int32—

Event ID 211 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] RegSup.c(451) %!FUNC!:Error !x! initializing verifier for filter: !S!

Message #

[TL_%!LEVEL!] RegSup.c(451) %!FUNC!:Error %2!x! initializing verifier for filter: %3!S!

Event ID 212 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] RegSup.c(572) %:Filter "%2" registered at altitude %3.

Message #

[TL_%!LEVEL!] RegSup.c(572) %!FUNC!:Filter "%2" registered at altitude %3!S!

Event ID 213 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] RegSup.c(829) %:Filter "%2" unregistering.

Message #

[TL_%!LEVEL!] RegSup.c(829) %!FUNC!:Filter "%2" unregistering

Event ID 214 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] StreamListCtrlSup.c(177) %!FUNC!:Starting (!p!).

Message #

[TL_%!LEVEL!] StreamListCtrlSup.c(177) %!FUNC!:Starting (%2!p!)

Fields #

NameDescription
!FUNC! AnsiString—
A10__localHead Pointer—

Event ID 215 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] StreamListCtrlSup.c(205) %:For "%2".

Message #

[TL_%!LEVEL!] StreamListCtrlSup.c(205) %!FUNC!:For "%2"

Event ID 216 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] StreamListCtrlSup.c(256) %!FUNC!:FSDelete (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] StreamListCtrlSup.c(256) %!FUNC!:FSDelete  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_streamList Pointer—
A11_streamList->Flags HexInt32—
A12_streamList->UseCount Int32—

Event ID 217 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] StreamListCtrlSup.c(409) %!FUNC!:Found (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] StreamListCtrlSup.c(409) %!FUNC!:Found     (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_streamList Pointer—
A11_streamList->Flags HexInt32—
A12_streamList->UseCount Int32—

Event ID 218 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] StreamListCtrlSup.c(540) %!FUNC!:Created (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] StreamListCtrlSup.c(540) %!FUNC!:Created   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_newStreamList Pointer—
A11_newStreamList->Flags HexInt32—
A12_newStreamList->UseCount Int32—

Event ID 219 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] StreamListCtrlSup.c(572) %!FUNC!:Found New (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] StreamListCtrlSup.c(572) %!FUNC!:Found New (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_streamList Pointer—
A11_streamList->Flags HexInt32—
A12_streamList->UseCount Int32—

Event ID 220 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] StreamListCtrlSup.c(715) %!FUNC!:Allocate (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] StreamListCtrlSup.c(715) %!FUNC!:Allocate  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_newStreamList Pointer—
A11_newStreamList->Flags HexInt32—
A12_newStreamList->UseCount Int32—

Event ID 221 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] StreamListCtrlSup.c(754) %!FUNC!:Release (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] StreamListCtrlSup.c(754) %!FUNC!:Release   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_StreamList Pointer—
A11_StreamList->Flags HexInt32—
A12_StreamList->UseCount Int32—

Event ID 222 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] StreamListCtrlSup.c(807) %!FUNC!:DEFFERED (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] StreamListCtrlSup.c(807) %!FUNC!:DEFFERED  (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_StreamList Pointer—
A11_StreamList->Flags HexInt32—
A12_StreamList->UseCount Int32—

Event ID 223 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] StreamListCtrlSup.c(843) %!FUNC!:Cleanup (!p!) Fl=!03x! Use=!d!

Message #

[TL_%!LEVEL!] StreamListCtrlSup.c(843) %!FUNC!:Cleanup   (%2!p!)              Fl=%3!03x! Use=%4!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_StreamList Pointer—
A11_StreamList->Flags HexInt32—
A12_StreamList->UseCount Int32—

Event ID 224 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] SyncSup.c(260) %!FUNC!:PointerRef: !p! (!d!) !S!

Message #

[TL_%!LEVEL!] SyncSup.c(260) %!FUNC!:PointerRef: %2!p! (%3!d!) %4!S!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltObject Pointer—
A11_((PFLT_OBJECT)FltObject)->PointerCount Int32—
A12_reason AnsiString—

Event ID 225 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] SyncSup.c(302) %!FUNC!:PointerDeRef: !p! (!d!) !S!

Message #

[TL_%!LEVEL!] SyncSup.c(302) %!FUNC!:PointerDeRef: %2!p! (%3!d!) %4!S!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltObject Pointer—
A11_((PFLT_OBJECT)FltObject)->PointerCount Int32—
A12_reason AnsiString—

Event ID 226 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] TargetedIoSup.c(1924) %!FUNC!:Wrong type of device object passed in: devobj !p!

Message #

[TL_%!LEVEL!] TargetedIoSup.c(1924) %!FUNC!:Wrong type of device object passed in: devobj %2!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_deviceObject Pointer—

Event ID 227 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] VolumeSup.c(225) %!FUNC!:The file system driver is an unknown file system type.

Message #

[TL_%!LEVEL!] VolumeSup.c(225) %!FUNC!:The file system driver %2 is an unknown file system type

Event ID 228 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] VolumeSup.c(952) %!FUNC!:SetupNotify already called for volume (!p!) "!S!".

Message #

[TL_%!LEVEL!] VolumeSup.c(952) %!FUNC!:SetupNotify already called for volume (%2!p!) "%3!S!"

Event ID 229 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] VolumeSup.c(2606) %!FUNC!:Cleared thread hiding in FltpClearHiddenOp...: T=!p! FO=!p! Vol=!p! IrpMaj=!d!

Message #

[TL_%!LEVEL!] VolumeSup.c(2606) %!FUNC!:Cleared thread hiding in FltpClearHiddenOp...: T=%2!p! FO=%3!p! Vol=%4!p! IrpMaj=%5!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_KeGetCurrentThread() Pointer—
A11_FileObject Pointer—
A12_Volume Pointer—
A13_IrpMajor Int32—

Event ID 230 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] WorkSup.c(193) %!FUNC!:Work=!p! QueType=!d! Count=!d! Limit=!d!, QUEUED.

Message #

[TL_%!LEVEL!] WorkSup.c(193) %!FUNC!:Work=%2!p! QueType=%3!d! Count=%4!d! Limit=%5!d!, QUEUED

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltWork Pointer—
A11_QueueType Int32—
A12_FltGlobals.ThrottledWorkCtrl.Queues[QueueType].RunningCount Int32—
A13_FltGlobals.ThrottledWorkCtrl.Queues[QueueType].RunningLimit Int32—

Event ID 231 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] WorkSup.c(214) %!FUNC!:Work=!p! QType=!d! Count=!d! Limit=!d!, THROTTLED.

Message #

[TL_%!LEVEL!] WorkSup.c(214) %!FUNC!:Work=%2!p! QType=%3!d! Count=%4!d! Limit=%5!d!, THROTTLED

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltWork Pointer—
A11_QueueType Int32—
A12_FltGlobals.ThrottledWorkCtrl.Queues[QueueType].RunningCount Int32—
A13_FltGlobals.ThrottledWorkCtrl.Queues[QueueType].RunningLimit Int32—

Event ID 232 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] WorkSup.c(290) %!FUNC!:Work=!p! QType=!d! Count=!d! Limit=!d!, UnTHROTTLED.

Message #

[TL_%!LEVEL!] WorkSup.c(290) %!FUNC!:Work=%2!p! QType=%3!d! Count=%4!d! Limit=%5!d!, UnTHROTTLED

Fields #

NameDescription
!FUNC! AnsiString—
A10_fltWork Pointer—
A11_QueueType Int32—
A12_FltGlobals.ThrottledWorkCtrl.Queues[QueueType].RunningCount Int32—
A13_FltGlobals.ThrottledWorkCtrl.Queues[QueueType].RunningLimit Int32—

Event ID 233 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] WorkSup.c(319) %!FUNC!:Work=!p! QType=!d! Count=!d! Limit=!d!, UnQUEUED.

Message #

[TL_%!LEVEL!] WorkSup.c(319) %!FUNC!:Work=%2!p! QType=%3!d! Count=%4!d! Limit=%5!d!, UnQUEUED

Fields #

NameDescription
!FUNC! AnsiString—
A10_NULL Pointer—
A11_QueueType Int32—
A12_FltGlobals.ThrottledWorkCtrl.Queues[QueueType].RunningCount Int32—
A13_FltGlobals.ThrottledWorkCtrl.Queues[QueueType].RunningLimit Int32—

Event ID 234 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] WorkSup.c(457) %!FUNC!:Work=!p! QType=!d! FltObj=!p! Routine=!p! Context=!p! IoPriority=!d!

Message #

[TL_%!LEVEL!] WorkSup.c(457) %!FUNC!:Work=%2!p! QType=%3!d! FltObj=%4!p! Routine=%5!p! Context=%6!p! IoPriority=%7!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_GenericWorkItem Pointer—
A11_qtype Int32—
A12_fltObject Pointer—
A13_GenericWorkItem->GenericWorkerRoutine Pointer—
A14_GenericWorkItem->Context Pointer—
A15_GenericWorkItem->IoPriorityInfo.IoPriority Int32—

Event ID 235 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] WorkSup.c(569) %!FUNC!:Work=!p! QType=!d! Instnc=!p! Routine=!p! Context=!p! IoPriority=!d!

Message #

[TL_%!LEVEL!] WorkSup.c(569) %!FUNC!:Work=%2!p! QType=%3!d! Instnc=%4!p! Routine=%5!p! Context=%6!p! IoPriority=%7!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_DeferredWorkItem Pointer—
A11_qtype Int32—
A12_instance Pointer—
A13_DeferredWorkItem->DeferredWorkerRoutine Pointer—
A14_DeferredWorkItem->Context Pointer—
A15_DeferredWorkItem->IoPriorityInfo.IoPriority Int32—

Event ID 236 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] WorkSup.c(666) %!FUNC!:Work=!p! QType=!d! FltObj=!p! Routine=!p! Context=!p!

Message #

[TL_%!LEVEL!] WorkSup.c(666) %!FUNC!:Work=%2!p! QType=%3!d! FltObj=%4!p! Routine=%5!p! Context=%6!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltWorkItem Pointer—
A11_FltWorkItem->QueueType Int32—
A12_FltWorkItem->FltObject Pointer—
A13_FltWorkItem->GenericWorkerRoutine Pointer—
A14_FltWorkItem->Context Pointer—

Event ID 237 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] WorkSup.c(714) %!FUNC!:Work=!p! QType=!d! Instnc=!p! Routine=!p! Context=!p!

Message #

[TL_%!LEVEL!] WorkSup.c(714) %!FUNC!:Work=%2!p! QType=%3!d! Instnc=%4!p! Routine=%5!p! Context=%6!p!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltWorkItem Pointer—
A11_FltWorkItem->QueueType Int32—
A12_FltWorkItem->Instance Pointer—
A13_FltWorkItem->DeferredWorkerRoutine Pointer—
A14_FltWorkItem->Context Pointer—

Event ID 238 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] WorkSup.c(841) %!FUNC!:Work=!p! QType=!d! FltObj=!p! Routine=!p! Context=!p! IoPriority=!d!

Message #

[TL_%!LEVEL!] WorkSup.c(841) %!FUNC!:Work=%2!p! QType=%3!d! FltObj=%4!p! Routine=%5!p! Context=%6!p! IoPriority=%7!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltWorkItem Pointer—
A11_QueueType Int32—
A12_FltObject Pointer—
A13_WorkerRoutine Pointer—
A14_Context Pointer—
A15_FltWorkItem->IoPriorityInfo.IoPriority Int32—

Event ID 239 — [TL_%!

Provider
Microsoft-Windows-FltMgrTrace_4d0b89d93def39952d07a17be000652e
Channel
Operational

Description

[TL_%!LEVEL!] WorkSup.c(1022) %!FUNC!:Work=!p! QType=!d! Instnc=!p! Routine=!p! Context=!p! IoPriority=!d!

Message #

[TL_%!LEVEL!] WorkSup.c(1022) %!FUNC!:Work=%2!p! QType=%3!d! Instnc=%4!p! Routine=%5!p! Context=%6!p! IoPriority=%7!d!

Fields #

NameDescription
!FUNC! AnsiString—
A10_FltWorkItem Pointer—
A11_QueueType Int32—
A12_FltWorkItem->Instance Pointer—
A13_WorkerRoutine Pointer—
A14_Context Pointer—
A15_FltWorkItem->IoPriorityInfo.IoPriority Int32—