Microsoft-Windows-Hyper-V-VfpExt

440 events across 2 channels

Event ID	Title	Channel
1		Operational
1	VfpExt on port %1 (Name = %6, FriendlyName = %7) %3 %2 raw packets.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
2		Operational
2	VfpExt on port %1 (Name = %4, FriendlyName = %5) injected raw packets.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
51		Operational
51	VfpExt on port %1 (Name = %6, FriendlyName = %7) dropped %2 raw packets because …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
52		Operational
52	VfpExt on port %1 (Name = %7, FriendlyName = %8) dropped %2packets because of …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
53		Operational
53	VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2packets because of …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
54		Operational
54	VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2packets because of …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
55		Operational
55	VfpExt on port %1 (Name = %12, FriendlyName = %13) dropped %2packets because of …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
56		Operational
56	VfpExt on port %1 (Name = %12, FriendlyName = %13) dropped %2packets because of …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
57		Operational
57	VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2ARP packets because …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
100		Operational
100	VfpExt on port %1 (Name = %6, FriendlyName = %7) %3 %2 raw packets.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
101		Operational
101	%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
102		Operational
102	%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
103		Operational
103	%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
104		Operational
104	%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
105		Operational
105	%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
106		Operational
106	VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
107		Operational
107	VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
108		Operational
108	VfpExt on port %1 (Name = %9, FriendlyName = %10) matched %2packets with flow id …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
109		Operational
109	VfpExt on port %1 (Name = %9, FriendlyName = %10) matched %2packets with flow id …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
110		Operational
110	VfpExt has finished processing %2packets on port %1 (Name = %10, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
111		Operational
111	VfpExt has finished processing %2packets on port %1 (Name = %10, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
112		Operational
112	VfpExt has finished processing %2packets on port %1 (Name = %8, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
113		Operational
113	VfpExt has finished processing %2packets on port %1 (Name = %8, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
114		Operational
114	VfpExt has finished processing %2packets on port %1 (Name = %7, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
115		Operational
115	VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
116		Operational
116	VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
117		Operational
117	VfpExt on port %1 (Name = %8, FriendlyName = %9) found no match in layer %3 for …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
118		Operational
118	VfpExt on port %1 (Name = %8, FriendlyName = %9) found no match in layer %3 for …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
119		Operational
119	VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
120		Operational
120	VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
121		Operational
121	%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
122		Operational
122	VfpExt has finished processing %2packets on port %1 (Name = %7, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
151		Operational
151	VfpExt on port %1 (Name = %5, FriendlyName = %6) rewrote %2packets with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
152		Operational
152	VfpExt on port %1 (Name = %7, FriendlyName = %8) rewrote %2packets with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
153		Operational
153	VfpExt on port %1 (Name = %7, FriendlyName = %8) rewrote %2packets with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
154		Operational
154	VfpExt on port %1 (Name = %9, FriendlyName = %10) encapped %2packets with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
155		Operational
155	VfpExt on port %1 (Name = %3, FriendlyName = %4) decapped %2packets.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
156		Operational
156	VfpExt on port %1 (Name = %5, FriendlyName = %6) duplicated %2packets.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
157		Operational
157	VfpExt on port %1 (Name = %5, FriendlyName = %6) swallowed %2packet.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
158		Operational
158	VfpExt on port %1 (Name = %9, FriendlyName = %10) encapped %2packets with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
201		Operational
201	VfpExt on port %1 (Name = %8, FriendlyName = %9) deposited into nat pool %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
202		Operational
202	VfpExt on port %1 (Name = %8, FriendlyName = %9) deposited into nat pool %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
203		Operational
203	VfpExt on port %1 (Name = %8, FriendlyName = %9) withdrawed from nat pool %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
204		Operational
204	VfpExt on port %1 (Name = %8, FriendlyName = %9) withdrawed from nat pool %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
205		Operational
205	VfpExt on port %1 (Name = %8, FriendlyName = %9) removed from nat pool %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
206		Operational
206	VfpExt on port %1 (Name = %8, FriendlyName = %9) removed from nat pool %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
207		Operational
207	VfpExt on port %1 (Name = %8, FriendlyName = %9) %2 NatPortBinding: {internal …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
208		Operational
208	VfpExt on port %1 (Name = %8, FriendlyName = %9) %2 NatPortBinding: {internal …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
251		Operational
251	VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
252		Operational
252	VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
253		Operational
253	VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
254		Operational
254	VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
255		Operational
255	VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
256		Operational
256	VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
257		Operational
257	VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
301		Operational
301	VfpExt on port %1 (Name = %9, FriendlyName = %10) performing action %2 for item …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
302		Operational
302	VfpExt on QoS queue %1 performing action %2 for port %3 with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
303		Operational
303	VfpExt on max cap queue %1 with rate = %2 performing action %3.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
304		Operational
304	Subscriber %2 has subscribed for notifications in compartment id %1 with status …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
305		Operational
305	Subscriber %2 has unsubscribed from notifications in compartment ID %1.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
310		Operational
310	A ND mapping has been added with status %6: { next hop ip %1, MAC address %4, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
311		Operational
311	A ND mapping has been added with status %6: { next hop ip %1, MAC address %4, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
312		Operational
312	A ND mapping has been deleted: { next hop ip %1, interface %2, MAC address %4, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
313		Operational
313	A ND mapping has been deleted: { next hop ip %1, interface %2, MAC address %4, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
314		Operational
314	A flow matched PA route rule: { rule context %1, src ip %2, dst ip %3, next hop …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
315		Operational
315	A flow matched PA route rule: { rule context %1, src ip %2, dst ip %3, next hop …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
316		Operational
316	A callback from IP for PA route rule: { rule context %1, flags %2, dest ip %3, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
317		Operational
317	A callback from IP for PA route rule: { rule context %1, flags %2, dest ip %3, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
318		Operational
318	VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
319		Operational
319	VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
320		Operational
320	VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
321		Operational
321	VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
322		Operational
322	VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
323		Operational
323	VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
324		Operational
324	VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
325		Operational
325	VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
326		Operational
326	VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
327		Operational
327	A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
328		Operational
328	A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
329		Operational
329	A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
330		Operational
330	A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
331		Operational
331	QoS reservation created line %2 on switch %1 with status=%3.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
332		Operational
332	QoS reservation updated line %2 on switch %1 with status=%3.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
333		Operational
333	QoS reservation deleted line %2 on switch %1 with status=%3.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
334		Operational
334	QoS reservation line %2 on switch %1 changes available BW with status=%3.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
335		Operational
335	QoS reservation for line %2 on switch %1 handles an external NIC connect event …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
336		Operational
336	QoS reservation for line %2 on switch %1 handles an external NIC link state …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
337		Operational
337	QoS reservation for line %2 on switch %1 handles an external NIC link speed …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
338		Operational
338	QoS reservation for line %1 handles a new rate allocation event: %2.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
339		Operational
339	QoS reservation for line %2 on switch %1 adds queue %3 to the line.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
340		Operational
340	QoS reservation for line %2 on switch %1 deletes queue %3 from the line.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
341		Operational
341	VfpExt QoS queue %1 with EnforceIntraHostLimit=%3, TxCap=%4, TxMin=%5, RxCap=%6, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
342		Operational
342	VfpExt QoS queue %1 with EnforceIntraHostLimit=%3, TxCap=%4, TxMin=%5, RxCap=%6, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
343		Operational
343	VfpExt QoS queue %1 and port %2 successfully performed action '%3'.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
344		Operational
344	VfpExt QoS queue %1 and port %2 failed action '%3' with reason '%5', status=%4.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
345		Operational
345	VfpExt QoS reservation on vswitch '.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
346		Operational
346	VfpExt QoS reservation on vswitch '.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
347		Operational
347	VfpExt QoS reservation on vswitch '.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
348		Operational
348	VfpExt QoS reservation on vswitch '.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
349		Operational
349	VfpExt QoS reservation (line:'%1') has congestion control event '%2'.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
351		Operational
351	VfpExt dropped a packet from port %1 (Name = %7, FriendlyName = %8) in …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
352		Operational
352	VfpExt successfully forwarded a packet from port %1 (Name = %9, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
353		Operational
353	VfpExt is skipping destination port %2 (Name = %9, FriendlyName = %10) in …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
354		Operational
354	VfpExt failed to forward packet from source port %1 (Name = %8, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
355		Operational
355	The save operation for port %1 (Name = %5, FriendlyName = %6) failed with reason …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
356		Operational
356	The save completion operation for port %1 (Name = %5, FriendlyName = %6) failed …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
357		Operational
357	The save operation for port %1 (Name = %5, FriendlyName = %6) failed with reason …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
358		Operational
358	Succesfully saved port %1 (Name = %4, FriendlyName = %5).	Microsoft-Windows-Hyper-V-VfpExt-Analytic
359		Operational
359	The overall save operation for port %1 (Name = %4, FriendlyName = %5) is …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
360		Operational
360	Succesfully restored port %1 (Name = %4, FriendlyName = %5).	Microsoft-Windows-Hyper-V-VfpExt-Analytic
361		Operational
361	Save request for port %1 (Name = %3, FriendlyName = %4) returned to caller with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
362		Operational
362	Save request for port %1 (Name = %5, FriendlyName = %6) allowed to proceed to …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
363		Operational
363	Restore request for port %1 (Name = %5, FriendlyName = %6) ignored by extension …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
364		Operational
364	Restore request failure for port %1 (Name = %4, FriendlyName = %5) suppressed.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
400		Operational
400	%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
401		Operational
401	%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
402		Operational
402	%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
403		Operational
403	%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
404		Operational
404	%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
405		Operational
405	%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
451		Operational
451	Redirect for port %1 (Name = %3, FriendlyName = %4) failed.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
452		Operational
452	OID %2 issued on port ID %1 (Name = %4, FriendlyName = %5).	Microsoft-Windows-Hyper-V-VfpExt-Analytic
453		Operational
453	Status Indication code %2 from port ID %1 (Name = %3, FriendlyName = %4).	Microsoft-Windows-Hyper-V-VfpExt-Analytic
454		Operational
454	NDIS_OFFLOAD state in the context of %1.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
455		Operational
455	OID_RECEIVE_FILTER_SET_FILTER for port ID %2 (Name = %5, FriendlyName = %6).	Microsoft-Windows-Hyper-V-VfpExt-Analytic
456		Operational
456	PA route rule update callback: { rule context %1, elapsed time %2, cache pruning …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
500		Operational
500	DTLS Session {Port %1 (Name = %13, FriendlyName = %14), Session ID %2} {Port %1 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
501		Operational
501	DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
502		Operational
502	DTLS Session {Port %1 (Name = %10, FriendlyName = %11), Session ID %2} {Port %1 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
503		Operational
503	DTLS Session {Port %1 (Name = %10, FriendlyName = %11), Session ID %2} {Port %1 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
504		Operational
504	DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
505		Operational
505	DTLS Session {Port %1 (Name = %12, FriendlyName = %13), Session ID %2} {Port %1 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
506		Operational
506	DTLS on Port %1.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
507		Operational
507	DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
508		Operational
508	DTLS Session {Port %1 (Name = %12, FriendlyName = %13), Session ID %2} {Port %1 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
509		Operational
509	PADiscoveryEvent port %1 (Name = %12, FriendlyName = %13) direction %2 state %3 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
551		Operational
551	Port %1 (Name = %16, FriendlyName = %17) parsed DHCP packet Operation:%2 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
600		Operational
600	VfpExt on port %1 (Name = %33, FriendlyName = %34) created %2 unified flow %35: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
601		Operational
601	VfpExt on port %1 (Name = %33, FriendlyName = %34) created %2 unified flow %35: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
602		Operational
602	VfpExt on port %1 (Name = %31, FriendlyName = %32) created %2 unified flow: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
603		Operational
603	VfpExt on port %1 (Name = %31, FriendlyName = %32) created %2 unified flow: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
604		Operational
604	VfpExt on port %1 (Name = %33, FriendlyName = %34) matched %2 unified flow %35: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
605		Operational
605	VfpExt on port %1 (Name = %33, FriendlyName = %34) matched %2 unified flow %35: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
606		Operational
606	VfpExt on port %1 (Name = %31, FriendlyName = %32) matched %2 unified flow: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
607		Operational
607	VfpExt on port %1 (Name = %31, FriendlyName = %32) matched %2 unified flow: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
608		Operational
608	VfpExt on port %1 (Name = %29, FriendlyName = %30) deleted %2 unified flow %31: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
609		Operational
609	VfpExt on port %1 (Name = %29, FriendlyName = %30) deleted %2 unified flow %31: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
610		Operational
610	VfpExt on port %1 (Name = %28, FriendlyName = %29) deleted %2 unified flow: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
611		Operational
611	VfpExt on port %1 (Name = %28, FriendlyName = %29) deleted %2 unified flow: …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
650		Operational
650	File operation %1 on file %2 with size %3 completed with status %4, hex %5.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
700		Operational
700	Failure in control processing for object.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
701		Operational
701	Success during control processing for object.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
702		Operational
702	Ioctl completed.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
703		Operational
703	Failed when setting port information.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
704		Operational
704	Ioctl started.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
705		Operational
705	Failed when setting switch information.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
706		Operational
706	Ioctl pended.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
751		Operational
751	Matched redirect flow for deletion.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
752		Operational
752	Matched redirect flow for deletion.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
800		Operational
800	GFT offload capabilities in the context of %1.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
801		Operational
801	GFT offload counters updated %1.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
802		Operational
802	GFT aggregate counters are not freed because either the port could not be …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
803		Operational
803	VfpExt on port %1 (Name = %2, FriendlyName = %3) reset TTL for GFT offloaded …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
804		Operational
804	VfpExt on port %1 (Name = %2, FriendlyName = %3) changed GFT flow state of UF %4 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
805		Operational
805	VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4 add_flow failed with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
806		Operational
806	VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4, ProviderFlowEntry %5 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
807		Operational
807	VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4 delete_flow failed with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
808		Operational
808	Skipping Sx Port context %1 (Name = %2, FriendlyName = %3) as a match with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
809		Operational
809	Vfp failed to issue OID for VPort %1 with status %2 due to %3.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
810		Operational
810	Failed to set GFT port parser settings on port %1 (Name = %2, FriendlyName = %3) …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
900		Operational
900	Tag Id %1 completed operation with status: %2.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
950		Operational
950	VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
951		Operational
951	VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
952		Operational
952	VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
953		Operational
953	VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
954		Operational
954	VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, src …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
955		Operational
955	VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, src …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
956		Operational
956	VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
957		Operational
957	VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
958		Operational
958	VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, src …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
959		Operational
959	VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, src …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
960		Operational
960	VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
961		Operational
961	VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
962		Operational
962	VfpExt on port %1 (Name = %2, FriendlyName = %3) failed to schedule work item …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
963		Operational
963	Replacing layer flow addresses succeeded on port %1 (Name = %2, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
964		Operational
964	Replacing layer flow addresses failed on port %1 (Name = %2, FriendlyName = %3), …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
965		Operational
965	VfpExt on port %1 (Name = %2, FriendlyName = %3) ran port timer function %4.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
966		Operational
966	Suspended live migration state change on port %1 (Name = %2, FriendlyName = %3), …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
967		Operational
967	VfpExt set NDIS_NIC_SWITCH_VPORT_PARAMS_ENFORCE_MAX_SG_LIST on port (name = %1, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
968		Operational
968	VfpExt on port %1 (Name = %2, FriendlyName = %3) with numFlows %4 with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
969		Operational
969	Skipping Sx Switch context %1 (Name = %2, FriendlyName = %3) as a match with …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
970		Operational
970	Managing VM Context failed for VMId: %1 on port (name = %2, FriendlyName = %3) …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
971		Operational
971	VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
972		Operational
972	VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
973		Operational
973	VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
974		Operational
974	VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
975		Operational
975	VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
976		Operational
976	VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
977		Operational
977	VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
978		Operational
978	VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
979		Operational
979	VfpExt on port %1 received mappingdesc for following mapping: {mapping index …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
980		Operational
980	VfpExt on port %1 received mappingdesc for following mapping: {mapping index …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
981		Operational
981	Applying GFT Multi-Tenant Settings status %1 - port %2 (Name = %3), Enable: %4, …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
982		Operational
982	%1, status = %2.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
983		Operational
983	GFT direct configuration dispatch table for switch %1 returned status %2.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
984		Operational
984	VfpExt on port %1 layer %2 matched a redirect rule, using reconcilation path …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
990		Operational
990	VfpExt hairpin processing dropped packet because destination port after hairpin …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1000		Operational
1000	VFP PktMon Registration failed for switch %1 with status %2 and statusLocation …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1010		Operational
1010	VfpExt QoS config with EnableHardwareCaps=.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1011		Operational
1011	VPort OID failed for VportName=.	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1012		Operational
1012	%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1013		Operational
1013	%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1014		Operational
1014	VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1015		Operational
1015	VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1016		Operational
1016	VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1017		Operational
1017	VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1018		Operational
1018	%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1019		Operational
1019	%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1020		Operational
1020	VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow …	Microsoft-Windows-Hyper-V-VfpExt-Analytic
1021		Operational
1021	VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow …	Microsoft-Windows-Hyper-V-VfpExt-Analytic

Event ID 1 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Type`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1 — VfpExt on port %1 (Name = %6, FriendlyName = %7) %3 %2 raw packets.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %6, FriendlyName = %7) %3 %2 raw packets. GftFlags is %8. Contents (up to 64B) of the first packet in the NBL = %5

Fields

Name	Description
`PortId`	—
`Direction`	—
`Type`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 2 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 2 — VfpExt on port %1 (Name = %4, FriendlyName = %5) injected raw packets.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %4, FriendlyName = %5) injected raw packets. Contents (up to 64B) of the first packet in the NBL = %3

Fields

Name	Description
`PortId`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 51 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`Status`	—
`StatusLocation`	—

Event ID 51 — VfpExt on port %1 (Name = %6, FriendlyName = %7) dropped %2 raw packets because of %3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %6, FriendlyName = %7) dropped %2 raw packets because of %3. GftFlags is %8. Contents (up to 64B) of the first packet in the NBL = %5 (DropStatus=%9, DropLocation = %10)

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`Status`	—
`StatusLocation`	—

Event ID 52 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`Type`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 52 — VfpExt on port %1 (Name = %7, FriendlyName = %8) dropped %2packets because of %3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) dropped %2packets because of %3. {src mac = %4, dst mac = %5, type = %6, gftFlags = %9}

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`Type`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 53 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 53 — VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2packets because of %3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2packets because of %3. {src mac = %4, dst mac = %5}:{src ip = %6, dst ip = %7, protocol = %8, gftFlags = %11}

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 54 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 54 — VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2packets because of %3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2packets because of %3. {src mac = %4, dst mac = %5}:{src ip = %6, dst ip = %7, protocol = %8, gftFlags = %11}

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 55 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 55 — VfpExt on port %1 (Name = %12, FriendlyName = %13) dropped %2packets because of %3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %12, FriendlyName = %13) dropped %2packets because of %3. {src mac = %4, dst mac = %5}:{src ip = %6, dst ip = %7, protocol = %8}:{src port = %9, dst port = %10, isTcpSyn = %11, gftFlags = %14}

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 56 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 56 — VfpExt on port %1 (Name = %12, FriendlyName = %13) dropped %2packets because of %3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %12, FriendlyName = %13) dropped %2packets because of %3. {src mac = %4, dst mac = %5}:{src ip = %6, dst ip = %7, protocol = %8}:{src port = %9, dst port = %10, isTcpSyn = %11, gftFlags = %14}

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 57 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`ArpType`	—
`SenderMacAddr`	—
`SenderIpAddr`	—
`TargetMacAddr`	—
`TargetIpAddr`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 57 — VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2ARP packets because of %3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2ARP packets because of %3. ARP type - %4, {sender mac = %5, sender ip = %6, target mac = %7, target ip = %8, gftFlags = %11}

Fields

Name	Description
`PortId`	—
`Direction`	—
`Reason`	—
`ArpType`	—
`SenderMacAddr`	—
`SenderIpAddr`	—
`TargetMacAddr`	—
`TargetIpAddr`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 100 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`ProcessingType`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`ResumeLayer`	—

Event ID 100 — VfpExt on port %1 (Name = %6, FriendlyName = %7) %3 %2 raw packets.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %6, FriendlyName = %7) %3 %2 raw packets. GftFlags is %8, ResumeLayer is %9. Contents (up to 64B) of the first packet in the NBL = %5

Fields

Name	Description
`PortId`	—
`Direction`	—
`ProcessingType`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`ResumeLayer`	—

Event ID 101 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 101 — %6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 102 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 102 — %6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 103 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 103 — %6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7, dst ip = %8, protocol = %9, icmp type = %10}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %14}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 104 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 104 — %6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7, dst ip = %8, protocol = %9, icmp type = %10}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %14}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 105 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 105 — %6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 106 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 106 — VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol = %9, isTcpSyn = %10} to flow {layer = %3, flow type = %4}. GftFlags = %13.

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 107 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 107 — VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol = %9, isTcpSyn = %10} to flow {layer = %3, flow type = %4}. GftFlags = %13.

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 108 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 108 — VfpExt on port %1 (Name = %9, FriendlyName = %10) matched %2packets with flow id {src ip = %5, dst ip = %6, protocol = %7, icmp type = %8} to flow ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %9, FriendlyName = %10) matched %2packets with flow id {src ip = %5, dst ip = %6, protocol = %7, icmp type = %8} to flow {layer = %3, flow type = %4}. GftFlags = %11.

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 109 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 109 — VfpExt on port %1 (Name = %9, FriendlyName = %10) matched %2packets with flow id {src ip = %5, dst ip = %6, protocol = %7, icmp type = %8} to flow ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %9, FriendlyName = %10) matched %2packets with flow id {src ip = %5, dst ip = %6, protocol = %7, icmp type = %8} to flow {layer = %3, flow type = %4}. GftFlags = %11.

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 110 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 110 — VfpExt has finished processing %2packets on port %1 (Name = %10, FriendlyName = %11) with status %3 and statusLocation %13 with flow id {src ip = %...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt has finished processing %2packets on port %1 (Name = %10, FriendlyName = %11) with status %3 and statusLocation %13 with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}. GftFlags = %12.

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 111 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 111 — VfpExt has finished processing %2packets on port %1 (Name = %10, FriendlyName = %11) with status %3 and statusLocation %13 with flow id {src ip = %...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt has finished processing %2packets on port %1 (Name = %10, FriendlyName = %11) with status %3 and statusLocation %13 with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}. GftFlags = %12.

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 112 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 112 — VfpExt has finished processing %2packets on port %1 (Name = %8, FriendlyName = %9) with status %3 and statusLocation %11 with flow id {src ip = %4,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt has finished processing %2packets on port %1 (Name = %8, FriendlyName = %9) with status %3 and statusLocation %11 with flow id {src ip = %4, dst ip = %5, protocol = %6, icmp type = %7}. GftFlags = %10.

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 113 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 113 — VfpExt has finished processing %2packets on port %1 (Name = %8, FriendlyName = %9) with status %3 and statusLocation %11 with flow id {src ip = %4,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt has finished processing %2packets on port %1 (Name = %8, FriendlyName = %9) with status %3 and statusLocation %11 with flow id {src ip = %4, dst ip = %5, protocol = %6, icmp type = %7}. GftFlags = %10.

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 114 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 114 — VfpExt has finished processing %2packets on port %1 (Name = %7, FriendlyName = %8) with status %3 and statusLocation %10 with flow id {src ip = %4,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt has finished processing %2packets on port %1 (Name = %7, FriendlyName = %8) with status %3 and statusLocation %10 with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 115 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 115 — VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}, gftFlags = %12

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 116 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 116 — VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}, gftFlags = %12

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 117 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 117 — VfpExt on port %1 (Name = %8, FriendlyName = %9) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, protocol = %6, ic...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %8, FriendlyName = %9) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, protocol = %6, icmp type = %7}. GftFlags = %10

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 118 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 118 — VfpExt on port %1 (Name = %8, FriendlyName = %9) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, protocol = %6, ic...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %8, FriendlyName = %9) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, protocol = %6, icmp type = %7}. GftFlags = %10

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 119 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 119 — VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 120 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 120 — VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 121 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 121 — %6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 122 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 122 — VfpExt has finished processing %2packets on port %1 (Name = %7, FriendlyName = %8) with status %3 and statusLocation %10 with flow id {src ip = %4,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt has finished processing %2packets on port %1 (Name = %7, FriendlyName = %8) with status %3 and statusLocation %10 with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields

Name	Description
`PortId`	—
`Direction`	—
`Status`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 151 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 151 — VfpExt on port %1 (Name = %5, FriendlyName = %6) rewrote %2packets with following header: {src mac = %3, dst mac = %4}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %5, FriendlyName = %6) rewrote %2packets with following header: {src mac = %3, dst mac = %4}

Fields

Name	Description
`PortId`	—
`Direction`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 152 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 152 — VfpExt on port %1 (Name = %7, FriendlyName = %8) rewrote %2packets with following header: {src ip = %3, dst ip = %4}:{src port = %5, dst port = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) rewrote %2packets with following header: {src ip = %3, dst ip = %4}:{src port = %5, dst port = %6}

Fields

Name	Description
`PortId`	—
`Direction`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 153 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 153 — VfpExt on port %1 (Name = %7, FriendlyName = %8) rewrote %2packets with following header: {src ip = %3, dst ip = %4}:{src port = %5, dst port = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) rewrote %2packets with following header: {src ip = %3, dst ip = %4}:{src port = %5, dst port = %6}

Fields

Name	Description
`PortId`	—
`Direction`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 154 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`EncapType`	—
`GreKey`	—
`PortUniqueName`	—
`PortFriendlyName`	—

Event ID 154 — VfpExt on port %1 (Name = %9, FriendlyName = %10) encapped %2packets with following header: {src mac = %3, dst mac = %4}:{src ip = %5, dst ip = %6,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %9, FriendlyName = %10) encapped %2packets with following header: {src mac = %3, dst mac = %4}:{src ip = %5, dst ip = %6, encap type = %7, isolation id = %8}

Fields

Name	Description
`PortId`	—
`Direction`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`EncapType`	—
`GreKey`	—
`PortUniqueName`	—
`PortFriendlyName`	—

Event ID 155 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 155 — VfpExt on port %1 (Name = %3, FriendlyName = %4) decapped %2packets.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %3, FriendlyName = %4) decapped %2packets

Fields

Name	Description
`PortId`	—
`Direction`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 156 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 156 — VfpExt on port %1 (Name = %5, FriendlyName = %6) duplicated %2packets.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %5, FriendlyName = %6) duplicated %2packets. GftFlags = %7. Contents (up to 64B) of the first packet = %4

Fields

Name	Description
`PortId`	—
`Direction`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 157 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 157 — VfpExt on port %1 (Name = %5, FriendlyName = %6) swallowed %2packet.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %5, FriendlyName = %6) swallowed %2packet. GftFlags = %7. Contents (up to 64B) of the first packet = %4

Fields

Name	Description
`PortId`	—
`Direction`	—
`PktLen`	—
`PktContents`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 158 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`EncapType`	—
`GreKey`	—
`PortUniqueName`	—
`PortFriendlyName`	—

Event ID 158 — VfpExt on port %1 (Name = %9, FriendlyName = %10) encapped %2packets with following header: {src mac = %3, dst mac = %4}:{src ip = %5, dst ip = %6,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %9, FriendlyName = %10) encapped %2packets with following header: {src mac = %3, dst mac = %4}:{src ip = %5, dst ip = %6, encap type = %7, isolation id = %8}

Fields

Name	Description
`PortId`	—
`Direction`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`EncapType`	—
`GreKey`	—
`PortUniqueName`	—
`PortFriendlyName`	—

Event ID 201 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv4Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 201 — VfpExt on port %1 (Name = %8, FriendlyName = %9) deposited into nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %8, FriendlyName = %9) deposited into nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv4Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 202 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv6Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 202 — VfpExt on port %1 (Name = %8, FriendlyName = %9) deposited into nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %8, FriendlyName = %9) deposited into nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv6Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 203 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv4Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 203 — VfpExt on port %1 (Name = %8, FriendlyName = %9) withdrawed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %8, FriendlyName = %9) withdrawed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv4Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 204 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv6Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 204 — VfpExt on port %1 (Name = %8, FriendlyName = %9) withdrawed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %8, FriendlyName = %9) withdrawed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv6Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 205 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv4Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 205 — VfpExt on port %1 (Name = %8, FriendlyName = %9) removed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, en...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %8, FriendlyName = %9) removed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv4Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 206 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv6Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 206 — VfpExt on port %1 (Name = %8, FriendlyName = %9) removed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, en...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %8, FriendlyName = %9) removed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields

Name	Description
`PortId`	—
`NatPoolId`	—
`NatRangeType`	—
`Ipv6Addr`	—
`StartPort`	—
`EndPort`	—
`RefLimit`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 207 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`NatPortBindingAction`	—
`InternalIpv4Addr`	—
`InternalIpv4Port`	—
`ExternalIpv4Addr`	—
`ExternalIpv4Port`	—
`Reference`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 207 — VfpExt on port %1 (Name = %8, FriendlyName = %9) %2 NatPortBinding: {internal addr = %3, internal port = %4, external addr = %5, external port = %6...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %8, FriendlyName = %9) %2 NatPortBinding: {internal addr = %3, internal port = %4, external addr = %5, external port = %6, reference = %7}

Fields

Name	Description
`PortId`	—
`NatPortBindingAction`	—
`InternalIpv4Addr`	—
`InternalIpv4Port`	—
`ExternalIpv4Addr`	—
`ExternalIpv4Port`	—
`Reference`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 208 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`NatPortBindingAction`	—
`InternalIpv6Addr`	—
`InternalIpv6Port`	—
`ExternalIpv6Addr`	—
`ExternalIpv6Port`	—
`Reference`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 208 — VfpExt on port %1 (Name = %8, FriendlyName = %9) %2 NatPortBinding: {internal addr = %3, internal port = %4, external addr = %5, external port = %6...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %8, FriendlyName = %9) %2 NatPortBinding: {internal addr = %3, internal port = %4, external addr = %5, external port = %6, reference = %7}

Fields

Name	Description
`PortId`	—
`NatPortBindingAction`	—
`InternalIpv6Addr`	—
`InternalIpv6Port`	—
`ExternalIpv6Addr`	—
`ExternalIpv6Port`	—
`Reference`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 251 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 251 — VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 252 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 252 — VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %1...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 253 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 253 — VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %4, pa ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 254 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`IndexType`	—
`IpAddr`	—
`MacAddr`	—
`MappingType`	—
`PortName`	—
`PortFriendlyName`	—
`ProviderIpv4Addr`	—

Event ID 254 — VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp sent : {index type = %3, ip = %9, mac =...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp sent : {index type = %3, ip = %9, mac = %5, mapping type = %6}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`IndexType`	—
`IpAddr`	—
`MacAddr`	—
`MappingType`	—
`PortName`	—
`PortFriendlyName`	—
`ProviderIpv4Addr`	—

Event ID 255 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`IndexType`	—
`IpAddr`	—
`MacAddr`	—
`MappingType`	—
`PortName`	—
`PortFriendlyName`	—
`ProviderIpv4Addr`	—

Event ID 255 — VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp missed: {index type = %3, ip = %9, mac ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp missed: {index type = %3, ip = %9, mac = %5, mapping type = %6}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`IndexType`	—
`IpAddr`	—
`MacAddr`	—
`MappingType`	—
`PortName`	—
`PortFriendlyName`	—
`ProviderIpv4Addr`	—

Event ID 256 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`IndexType`	—
`IpAddr`	—
`MacAddr`	—
`MappingType`	—
`PortName`	—
`PortFriendlyName`	—
`ProviderIpv4Addr`	—

Event ID 256 — VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp sent : {index type = %3, ip = %4, mac =...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp sent : {index type = %3, ip = %4, mac = %5, mapping type = %6}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`IndexType`	—
`IpAddr`	—
`MacAddr`	—
`MappingType`	—
`PortName`	—
`PortFriendlyName`	—
`ProviderIpv4Addr`	—

Event ID 257 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`IndexType`	—
`IpAddr`	—
`MacAddr`	—
`MappingType`	—
`PortName`	—
`PortFriendlyName`	—
`ProviderIpv4Addr`	—

Event ID 257 — VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp missed: {index type = %3, ip = %4, mac ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp missed: {index type = %3, ip = %4, mac = %5, mapping type = %6}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`IndexType`	—
`IpAddr`	—
`MacAddr`	—
`MappingType`	—
`PortName`	—
`PortFriendlyName`	—
`ProviderIpv4Addr`	—

Event ID 301 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SerializationAction`	—
`SerializationItemType`	—
`ItemSize`	—
`ItemReference`	—
`ItemVersion`	—
`Status`	—
`AdditionalContext`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 301 — VfpExt on port %1 (Name = %9, FriendlyName = %10) performing action %2 for item %3 with size %4 reference %5 version %6 status %7: {additional cont...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %9, FriendlyName = %10) performing action %2 for item %3 with size %4 reference %5 version %6 status %7: {additional context %8}

Fields

Name	Description
`PortId`	—
`SerializationAction`	—
`SerializationItemType`	—
`ItemSize`	—
`ItemReference`	—
`ItemVersion`	—
`Status`	—
`AdditionalContext`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 302 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`QueueName`	—
`QosQueueAction`	—
`PortId`	—
`EnforceIntraHostLimit`	—
`TransmitCap`	—
`TransmitReservation`	—
`ReceiveCap`	—
`TransmitMaxQueue`	—
`ReceiveMaxQueue`	—

Event ID 302 — VfpExt on QoS queue %1 performing action %2 for port %3 with EnforceIntraHostLimit = %4, TxCap = %5, TxMin = %6, RxCap = %7, TxQueue = %8, RxQueue ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on QoS queue %1 performing action %2 for port %3 with EnforceIntraHostLimit = %4, TxCap = %5, TxMin = %6, RxCap = %7, TxQueue = %8, RxQueue = %9

Fields

Name	Description
`QueueName`	—
`QosQueueAction`	—
`PortId`	—
`EnforceIntraHostLimit`	—
`TransmitCap`	—
`TransmitReservation`	—
`ReceiveCap`	—
`TransmitMaxQueue`	—
`ReceiveMaxQueue`	—

Event ID 303 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`MaxQueuePointer`	—
`Rate`	—
`MaxQueueAction`	—

Event ID 303 — VfpExt on max cap queue %1 with rate = %2 performing action %3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on max cap queue %1 with rate = %2 performing action %3

Fields

Name	Description
`MaxQueuePointer`	—
`Rate`	—
`MaxQueueAction`	—

Event ID 304 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`CompartmentId`	—
`SubscriberContext`	—
`Status`	—
`Flags`	—
`NeighborChangesFlags`	—
`RouteChangesFlags`	—

Event ID 304 — Subscriber %2 has subscribed for notifications in compartment id %1 with status = %3, flags = {all = %4, neighbor changes = %5, route changes = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Subscriber %2 has subscribed for notifications in compartment id %1 with status = %3, flags = {all = %4, neighbor changes = %5, route changes = %6}

Fields

Name	Description
`CompartmentId`	—
`SubscriberContext`	—
`Status`	—
`Flags`	—
`NeighborChangesFlags`	—
`RouteChangesFlags`	—

Event ID 305 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`CompartmentId`	—
`SubscriberContext`	—
`Status`	—
`Flags`	—
`NeighborChangesFlags`	—
`RouteChangesFlags`	—

Event ID 305 — Subscriber %2 has unsubscribed from notifications in compartment ID %1.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Subscriber %2 has unsubscribed from notifications in compartment ID %1

Fields

Name	Description
`CompartmentId`	—
`SubscriberContext`	—
`Status`	—
`Flags`	—
`NeighborChangesFlags`	—
`RouteChangesFlags`	—

Event ID 310 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`NextHop`	—
`InterfaceLuid`	—
`AccessTime`	—
`MacAddr`	—
`MappingType`	—
`Status`	—

Event ID 310 — A ND mapping has been added with status %6: { next hop ip %1, MAC address %4, interface %2, type %5 }.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A ND mapping has been added with status %6: { next hop ip %1, MAC address %4, interface %2, type %5 }

Fields

Name	Description
`NextHop`	—
`InterfaceLuid`	—
`AccessTime`	—
`MacAddr`	—
`MappingType`	—
`Status`	—

Event ID 311 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`NextHop`	—
`InterfaceLuid`	—
`AccessTime`	—
`MacAddr`	—
`MappingType`	—
`Status`	—

Event ID 311 — A ND mapping has been added with status %6: { next hop ip %1, MAC address %4, interface %2, type %5 }.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A ND mapping has been added with status %6: { next hop ip %1, MAC address %4, interface %2, type %5 }

Fields

Name	Description
`NextHop`	—
`InterfaceLuid`	—
`AccessTime`	—
`MacAddr`	—
`MappingType`	—
`Status`	—

Event ID 312 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`NextHop`	—
`InterfaceLuid`	—
`AccessTime`	—
`MacAddr`	—
`MappingType`	—
`Status`	—

Event ID 312 — A ND mapping has been deleted: { next hop ip %1, interface %2, MAC address %4, type %5, access time %3 }.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A ND mapping has been deleted: { next hop ip %1, interface %2, MAC address %4, type %5, access time %3 }

Fields

Name	Description
`NextHop`	—
`InterfaceLuid`	—
`AccessTime`	—
`MacAddr`	—
`MappingType`	—
`Status`	—

Event ID 313 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`NextHop`	—
`InterfaceLuid`	—
`AccessTime`	—
`MacAddr`	—
`MappingType`	—
`Status`	—

Event ID 313 — A ND mapping has been deleted: { next hop ip %1, interface %2, MAC address %4, type %5, access time %3 }.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A ND mapping has been deleted: { next hop ip %1, interface %2, MAC address %4, type %5, access time %3 }

Fields

Name	Description
`NextHop`	—
`InterfaceLuid`	—
`AccessTime`	—
`MacAddr`	—
`MappingType`	—
`Status`	—

Event ID 314 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`RuleContext`	—
`SrcIP`	—
`DstIP`	—
`NextHop`	—
`MacAddr`	—

Event ID 314 — A flow matched PA route rule: { rule context %1, src ip %2, dst ip %3, next hop ip %4, resolved MAC address %5 }.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A flow matched PA route rule: { rule context %1, src ip %2, dst ip %3, next hop ip %4, resolved MAC address %5 }

Fields

Name	Description
`RuleContext`	—
`SrcIP`	—
`DstIP`	—
`NextHop`	—
`MacAddr`	—

Event ID 315 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`RuleContext`	—
`SrcIP`	—
`DstIP`	—
`NextHop`	—
`MacAddr`	—

Event ID 315 — A flow matched PA route rule: { rule context %1, src ip %2, dst ip %3, next hop ip %4, resolved MAC address %5 }.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A flow matched PA route rule: { rule context %1, src ip %2, dst ip %3, next hop ip %4, resolved MAC address %5 }

Fields

Name	Description
`RuleContext`	—
`SrcIP`	—
`DstIP`	—
`NextHop`	—
`MacAddr`	—

Event ID 316 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`RuleContext`	—
`Flags`	—
`DstIP`	—
`MacAddr`	—

Event ID 316 — A callback from IP for PA route rule: { rule context %1, flags %2, dest ip %3, MAC address %4 }.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A callback from IP for PA route rule: { rule context %1, flags %2, dest ip %3, MAC address %4 }

Fields

Name	Description
`RuleContext`	—
`Flags`	—
`DstIP`	—
`MacAddr`	—

Event ID 317 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`RuleContext`	—
`Flags`	—
`DstIP`	—
`MacAddr`	—

Event ID 317 — A callback from IP for PA route rule: { rule context %1, flags %2, dest ip %3, MAC address %4 }.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A callback from IP for PA route rule: { rule context %1, flags %2, dest ip %3, MAC address %4 }

Fields

Name	Description
`RuleContext`	—
`Flags`	—
`DstIP`	—
`MacAddr`	—

Event ID 318 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 318 — VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 319 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 319 — VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %1...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 320 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 320 — VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %6, pa ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 321 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 321 — VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 322 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 322 — VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %1...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 323 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 323 — VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %4, pa ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 324 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 324 — VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 325 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 325 — VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %1...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 326 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 326 — VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %6, pa ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 327 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`RuleContext`	—
`OriginalDestMacAddr`	—
`NewDestMacAddr`	—
`SrcCustomerIpv4Addr`	—
`SrcCustomerIpv6AddrLength`	—
`SrcCustomerIpv6Addr`	—
`DestCustomerIpv4Addr`	—
`DestCustomerIpv6AddrLength`	—
`DestCustomerIpv6Addr`	—
`SrcProviderIpv4Addr`	—
`SrcProviderIpv6AddrLength`	—
`SrcProviderIpv6Addr`	—
`DestProviderIpv4Addr`	—
`DestProviderIpv6AddrLength`	—
`DestProviderIpv6Addr`	—
`IsolationId`	—
`Flags`	—
`EncapType`	—
`MacLookupFlag`	—
`CaRouteFlag`	—
`UseMappingIsolationIdFlag`	—

Event ID 327 — A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %4, dest ca = %7, src pa = %10, dest pa = %13, ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %4, dest ca = %7, src pa = %10, dest pa = %13, isolation id = %16, flags = {all = %17, encap type = %18, mac lookup = %19, ca route = %20, use mapping isolation id = %21}}

Fields

Name	Description
`RuleContext`	—
`OriginalDestMacAddr`	—
`NewDestMacAddr`	—
`SrcCustomerIpv4Addr`	—
`SrcCustomerIpv6AddrLength`	—
`SrcCustomerIpv6Addr`	—
`DestCustomerIpv4Addr`	—
`DestCustomerIpv6AddrLength`	—
`DestCustomerIpv6Addr`	—
`SrcProviderIpv4Addr`	—
`SrcProviderIpv6AddrLength`	—
`SrcProviderIpv6Addr`	—
`DestProviderIpv4Addr`	—
`DestProviderIpv6AddrLength`	—
`DestProviderIpv6Addr`	—
`IsolationId`	—
`Flags`	—
`EncapType`	—
`MacLookupFlag`	—
`CaRouteFlag`	—
`UseMappingIsolationIdFlag`	—

Event ID 328 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`RuleContext`	—
`OriginalDestMacAddr`	—
`NewDestMacAddr`	—
`SrcCustomerIpv4Addr`	—
`SrcCustomerIpv6AddrLength`	—
`SrcCustomerIpv6Addr`	—
`DestCustomerIpv4Addr`	—
`DestCustomerIpv6AddrLength`	—
`DestCustomerIpv6Addr`	—
`SrcProviderIpv4Addr`	—
`SrcProviderIpv6AddrLength`	—
`SrcProviderIpv6Addr`	—
`DestProviderIpv4Addr`	—
`DestProviderIpv6AddrLength`	—
`DestProviderIpv6Addr`	—
`IsolationId`	—
`Flags`	—
`EncapType`	—
`MacLookupFlag`	—
`CaRouteFlag`	—
`UseMappingIsolationIdFlag`	—

Event ID 328 — A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %6, dest ca = %9, src pa = %10, dest pa = %13, ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %6, dest ca = %9, src pa = %10, dest pa = %13, isolation id = %16, flags = {all = %17, encap type = %18, mac lookup = %19, ca route = %20, use mapping isolation id = %21}}

Fields

Name	Description
`RuleContext`	—
`OriginalDestMacAddr`	—
`NewDestMacAddr`	—
`SrcCustomerIpv4Addr`	—
`SrcCustomerIpv6AddrLength`	—
`SrcCustomerIpv6Addr`	—
`DestCustomerIpv4Addr`	—
`DestCustomerIpv6AddrLength`	—
`DestCustomerIpv6Addr`	—
`SrcProviderIpv4Addr`	—
`SrcProviderIpv6AddrLength`	—
`SrcProviderIpv6Addr`	—
`DestProviderIpv4Addr`	—
`DestProviderIpv6AddrLength`	—
`DestProviderIpv6Addr`	—
`IsolationId`	—
`Flags`	—
`EncapType`	—
`MacLookupFlag`	—
`CaRouteFlag`	—
`UseMappingIsolationIdFlag`	—

Event ID 329 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`RuleContext`	—
`OriginalDestMacAddr`	—
`NewDestMacAddr`	—
`SrcCustomerIpv4Addr`	—
`SrcCustomerIpv6AddrLength`	—
`SrcCustomerIpv6Addr`	—
`DestCustomerIpv4Addr`	—
`DestCustomerIpv6AddrLength`	—
`DestCustomerIpv6Addr`	—
`SrcProviderIpv4Addr`	—
`SrcProviderIpv6AddrLength`	—
`SrcProviderIpv6Addr`	—
`DestProviderIpv4Addr`	—
`DestProviderIpv6AddrLength`	—
`DestProviderIpv6Addr`	—
`IsolationId`	—
`Flags`	—
`EncapType`	—
`MacLookupFlag`	—
`CaRouteFlag`	—
`UseMappingIsolationIdFlag`	—

Event ID 329 — A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %4, dest ca = %7, src pa = %12, dest pa = %15, ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %4, dest ca = %7, src pa = %12, dest pa = %15, isolation id = %16, flags = {all = %17, encap type = %18, mac lookup = %19, ca route = %20, use mapping isolation id = %21}}

Fields

Name	Description
`RuleContext`	—
`OriginalDestMacAddr`	—
`NewDestMacAddr`	—
`SrcCustomerIpv4Addr`	—
`SrcCustomerIpv6AddrLength`	—
`SrcCustomerIpv6Addr`	—
`DestCustomerIpv4Addr`	—
`DestCustomerIpv6AddrLength`	—
`DestCustomerIpv6Addr`	—
`SrcProviderIpv4Addr`	—
`SrcProviderIpv6AddrLength`	—
`SrcProviderIpv6Addr`	—
`DestProviderIpv4Addr`	—
`DestProviderIpv6AddrLength`	—
`DestProviderIpv6Addr`	—
`IsolationId`	—
`Flags`	—
`EncapType`	—
`MacLookupFlag`	—
`CaRouteFlag`	—
`UseMappingIsolationIdFlag`	—

Event ID 330 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`RuleContext`	—
`OriginalDestMacAddr`	—
`NewDestMacAddr`	—
`SrcCustomerIpv4Addr`	—
`SrcCustomerIpv6AddrLength`	—
`SrcCustomerIpv6Addr`	—
`DestCustomerIpv4Addr`	—
`DestCustomerIpv6AddrLength`	—
`DestCustomerIpv6Addr`	—
`SrcProviderIpv4Addr`	—
`SrcProviderIpv6AddrLength`	—
`SrcProviderIpv6Addr`	—
`DestProviderIpv4Addr`	—
`DestProviderIpv6AddrLength`	—
`DestProviderIpv6Addr`	—
`IsolationId`	—
`Flags`	—
`EncapType`	—
`MacLookupFlag`	—
`CaRouteFlag`	—
`UseMappingIsolationIdFlag`	—

Event ID 330 — A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %6, dest ca = %9, src pa = %12, dest pa = %15, ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %6, dest ca = %9, src pa = %12, dest pa = %15, isolation id = %16, flags = {all = %17, encap type = %18, mac lookup = %19, ca route = %20, use mapping isolation id = %21}}

Fields

Name	Description
`RuleContext`	—
`OriginalDestMacAddr`	—
`NewDestMacAddr`	—
`SrcCustomerIpv4Addr`	—
`SrcCustomerIpv6AddrLength`	—
`SrcCustomerIpv6Addr`	—
`DestCustomerIpv4Addr`	—
`DestCustomerIpv6AddrLength`	—
`DestCustomerIpv6Addr`	—
`SrcProviderIpv4Addr`	—
`SrcProviderIpv6AddrLength`	—
`SrcProviderIpv6Addr`	—
`DestProviderIpv4Addr`	—
`DestProviderIpv6AddrLength`	—
`DestProviderIpv6Addr`	—
`IsolationId`	—
`Flags`	—
`EncapType`	—
`MacLookupFlag`	—
`CaRouteFlag`	—
`UseMappingIsolationIdFlag`	—

Event ID 331 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 331 — QoS reservation created line %2 on switch %1 with status=%3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

QoS reservation created line %2 on switch %1 with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 332 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 332 — QoS reservation updated line %2 on switch %1 with status=%3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

QoS reservation updated line %2 on switch %1 with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 333 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 333 — QoS reservation deleted line %2 on switch %1 with status=%3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

QoS reservation deleted line %2 on switch %1 with status=%3.

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 334 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 334 — QoS reservation line %2 on switch %1 changes available BW with status=%3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

QoS reservation line %2 on switch %1 changes available BW with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 335 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 335 — QoS reservation for line %2 on switch %1 handles an external NIC connect event with status=%3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

QoS reservation for line %2 on switch %1 handles an external NIC connect event with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 336 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 336 — QoS reservation for line %2 on switch %1 handles an external NIC link state event with status=%3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

QoS reservation for line %2 on switch %1 handles an external NIC link state event with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 337 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 337 — QoS reservation for line %2 on switch %1 handles an external NIC link speed change event with status=%3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

QoS reservation for line %2 on switch %1 handles an external NIC link speed change event with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`FailedReason`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`LinkSpeed`	—
`LinkSpeedGuaranteePct`	—
`ReservableBw`	—
`AvailableBw`	—

Event ID 338 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`LineId`	—
`AllocationEvent`	—

Event ID 338 — QoS reservation for line %1 handles a new rate allocation event: %2.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

QoS reservation for line %1 handles a new rate allocation event: %2

Fields

Name	Description
`LineId`	—
`AllocationEvent`	—

Event ID 339 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`QueueName`	—

Event ID 339 — QoS reservation for line %2 on switch %1 adds queue %3 to the line.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

QoS reservation for line %2 on switch %1 adds queue %3 to the line

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`QueueName`	—

Event ID 340 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`QueueName`	—

Event ID 340 — QoS reservation for line %2 on switch %1 deletes queue %3 from the line.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

QoS reservation for line %2 on switch %1 deletes queue %3 from the line

Fields

Name	Description
`SwitchName`	—
`LineId`	—
`QueueName`	—

Event ID 341 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`QueueName`	—
`Action`	—
`EnforceIntraHostLimit`	—
`TransmitCap`	—
`TransmitReservation`	—
`ReceiveCap`	—
`TransmitQueueDepth`	—
`ReceiveQueueDepth`	—
`TransmitBurstSize`	—
`ReceiveBurstSize`	—
`UnderUtilizedPct`	—
`OverUtilizedPct`	—
`HeadroomPct`	—
`RampupTimeMs`	—
`MinRateMbps`	—

Event ID 341 — VfpExt QoS queue %1 with EnforceIntraHostLimit=%3, TxCap=%4, TxMin=%5, RxCap=%6, TxQueueDepth=%7, RxQueueDepth=%8, TxBurstSize=%9, RxBurstSize=%10,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt QoS queue %1 with EnforceIntraHostLimit=%3, TxCap=%4, TxMin=%5, RxCap=%6, TxQueueDepth=%7, RxQueueDepth=%8, TxBurstSize=%9, RxBurstSize=%10, ResLowPct=%11, ResHighPct=%12, ResHeadroomPct=%13, ResRampupTime=%14, ResMinRate=%15, successfully performed action '%2'

Fields

Name	Description
`QueueName`	—
`Action`	—
`EnforceIntraHostLimit`	—
`TransmitCap`	—
`TransmitReservation`	—
`ReceiveCap`	—
`TransmitQueueDepth`	—
`ReceiveQueueDepth`	—
`TransmitBurstSize`	—
`ReceiveBurstSize`	—
`UnderUtilizedPct`	—
`OverUtilizedPct`	—
`HeadroomPct`	—
`RampupTimeMs`	—
`MinRateMbps`	—

Event ID 342 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`QueueName`	—
`Action`	—
`EnforceIntraHostLimit`	—
`TransmitCap`	—
`TransmitReservation`	—
`ReceiveCap`	—
`Status`	—
`FailReason`	—
`TransmitQueueDepth`	—
`ReceiveQueueDepth`	—
`TransmitBurstSize`	—
`ReceiveBurstSize`	—
`UnderUtilizedPct`	—
`OverUtilizedPct`	—
`HeadroomPct`	—
`RampupTimeMs`	—
`MinRateMbps`	—

Event ID 342 — VfpExt QoS queue %1 with EnforceIntraHostLimit=%3, TxCap=%4, TxMin=%5, RxCap=%6, TxQueueDepth=%9, RxQueueDepth=%10, TxBurstSize=%11, RxBurstSize=%1...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt QoS queue %1 with EnforceIntraHostLimit=%3, TxCap=%4, TxMin=%5, RxCap=%6, TxQueueDepth=%9, RxQueueDepth=%10, TxBurstSize=%11, RxBurstSize=%12, ResLowPct=%13, ResHighPct=%14, ResHeadroomPct=%15, ResRampupTime=%16, ResMinRate=%17, failed action '%2' with reason '%8', status=%7

Fields

Name	Description
`QueueName`	—
`Action`	—
`EnforceIntraHostLimit`	—
`TransmitCap`	—
`TransmitReservation`	—
`ReceiveCap`	—
`Status`	—
`FailReason`	—
`TransmitQueueDepth`	—
`ReceiveQueueDepth`	—
`TransmitBurstSize`	—
`ReceiveBurstSize`	—
`UnderUtilizedPct`	—
`OverUtilizedPct`	—
`HeadroomPct`	—
`RampupTimeMs`	—
`MinRateMbps`	—

Event ID 343 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`QueueName`	—
`PortId`	—
`Action`	—

Event ID 343 — VfpExt QoS queue %1 and port %2 successfully performed action '%3'.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt QoS queue %1 and port %2 successfully performed action '%3'

Fields

Name	Description
`QueueName`	—
`PortId`	—
`Action`	—

Event ID 344 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`QueueName`	—
`PortId`	—
`Action`	—
`Status`	—
`FailReason`	—

Event ID 344 — VfpExt QoS queue %1 and port %2 failed action '%3' with reason '%5', status=%4.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt QoS queue %1 and port %2 failed action '%3' with reason '%5', status=%4

Fields

Name	Description
`QueueName`	—
`PortId`	—
`Action`	—
`Status`	—
`FailReason`	—

Event ID 345 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`Operation`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`NicLinkSpeed`	—
`NicLinkSpeedGuarantee`	—
`ReservableBw`	—
`AvailableBw`	—
`NumQueues`	—
`DefaultQueueDepth`	—
`DefaultQueueBurstSize`	—
`DefaultQueueUnderUtilizedPct`	—
`DefaultQueueOverUtilizedPct`	—
`DefaultQueueHeadroomPct`	—
`DefaultQueueRampupTimeMs`	—
`DefaultQueueMinRateMbps`	—

Event ID 345 — VfpExt QoS reservation on vswitch '.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt QoS reservation on vswitch '%1' successfully performed action '%2', line info = {mode=%3, defaultRes=%4, defaultQDepth=%11, defaultQBurstSize=%12, defaultQUnderUtilized=%13, defaultQOverUtilized=%14, defaultQHeadroom=%15, defaultQRampup=%16, defaultQueueMinRate=%17, NIC linkspeed=%6, res linkspeed pct=%5, DCB0 pct=%7, reservableBW=%8, availableBW=%9, numActiveQueues=%10}

Fields

Name	Description
`SwitchName`	—
`Operation`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`NicLinkSpeed`	—
`NicLinkSpeedGuarantee`	—
`ReservableBw`	—
`AvailableBw`	—
`NumQueues`	—
`DefaultQueueDepth`	—
`DefaultQueueBurstSize`	—
`DefaultQueueUnderUtilizedPct`	—
`DefaultQueueOverUtilizedPct`	—
`DefaultQueueHeadroomPct`	—
`DefaultQueueRampupTimeMs`	—
`DefaultQueueMinRateMbps`	—

Event ID 346 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`Operation`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`NicLinkSpeed`	—
`NicLinkSpeedGuarantee`	—
`ReservableBw`	—
`AvailableBw`	—
`Status`	—
`FailReason`	—
`NumQueues`	—
`DefaultQueueDepth`	—
`DefaultQueueBurstSize`	—
`DefaultQueueUnderUtilizedPct`	—
`DefaultQueueOverUtilizedPct`	—
`DefaultQueueHeadroomPct`	—
`DefaultQueueRampupTimeMs`	—
`DefaultQueueMinRateMbps`	—

Event ID 346 — VfpExt QoS reservation on vswitch '.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt QoS reservation on vswitch '%1' failed action '%2' with reason '%11', status=%10, failed config={mode=%3, defaultRes=%4, defaultQDepth=%13, defaultQBurstSize=%14, defaultQUnderUtilized=%15, defaultQOverUtilized=%16, defaultQHeadroom=%17, defaultQRampup=%18, defaultQueueMinRate=%19, res linkspeed pct=%5}, line info= {NIC linkspeed=%6, DCB0 pct=%7, reservableBW=%8, availableBW=%9, numActiveQueues=%12}

Fields

Name	Description
`SwitchName`	—
`Operation`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`NicLinkSpeed`	—
`NicLinkSpeedGuarantee`	—
`ReservableBw`	—
`AvailableBw`	—
`Status`	—
`FailReason`	—
`NumQueues`	—
`DefaultQueueDepth`	—
`DefaultQueueBurstSize`	—
`DefaultQueueUnderUtilizedPct`	—
`DefaultQueueOverUtilizedPct`	—
`DefaultQueueHeadroomPct`	—
`DefaultQueueRampupTimeMs`	—
`DefaultQueueMinRateMbps`	—

Event ID 347 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`Event`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`NicLinkSpeed`	—
`NicLinkSpeedGuarantee`	—
`ReservableBw`	—
`AvailableBw`	—
`Status`	—
`NumQueues`	—

Event ID 347 — VfpExt QoS reservation on vswitch '.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt QoS reservation on vswitch '%1' got external NIC event '%2', status='%10', line info = {mode=%3, default res=%4, NIC linkspeed=%6, res linkspeed pct=%5, DCB0 pct=%7, reservableBW=%8, availableBW=%9, numActiveQueues=%11}

Fields

Name	Description
`SwitchName`	—
`Event`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`NicLinkSpeed`	—
`NicLinkSpeedGuarantee`	—
`ReservableBw`	—
`AvailableBw`	—
`Status`	—
`NumQueues`	—

Event ID 348 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`QueueName`	—
`QueueReservation`	—
`Operation`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`NicLinkSpeed`	—
`NicLinkSpeedGuarantee`	—
`ReservableBw`	—
`AvailableBw`	—
`NumQueues`	—

Event ID 348 — VfpExt QoS reservation on vswitch '.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt QoS reservation on vswitch '%1' and queue '%2' with reservation %3 successfully performed action '%4', line info = {mode=%5, default res=%6, NIC linkspeed=%8, res linkspeed pct=%7, DCB0 pct=%9, reservableBW=%10, availableBW=%11, numActiveQueues=%12}

Fields

Name	Description
`SwitchName`	—
`QueueName`	—
`QueueReservation`	—
`Operation`	—
`ReservationMode`	—
`DefaultReservation`	—
`LinkSpeedPct`	—
`NicLinkSpeed`	—
`NicLinkSpeedGuarantee`	—
`ReservableBw`	—
`AvailableBw`	—
`NumQueues`	—

Event ID 349 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`LineId`	—
`Event`	—

Event ID 349 — VfpExt QoS reservation (line:'%1') has congestion control event '%2'.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt QoS reservation (line:'%1') has congestion control event '%2'

Fields

Name	Description
`LineId`	—
`Event`	—

Event ID 351 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`Type`	—
`VLAN`	—
`SrcPortName`	—
`SrcPortFriendlyName`	—
`GftFlags`	—

Event ID 351 — VfpExt dropped a packet from port %1 (Name = %7, FriendlyName = %8) in forwarding because of %2.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt dropped a packet from port %1 (Name = %7, FriendlyName = %8) in forwarding because of %2. {src mac = %3, dst mac = %4, type = %5, vlanID = %6}, gftFlags = %9

Fields

Name	Description
`SrcPortId`	—
`Reason`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`Type`	—
`VLAN`	—
`SrcPortName`	—
`SrcPortFriendlyName`	—
`GftFlags`	—

Event ID 352 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`DstPortId`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`Type`	—
`VLAN`	—
`IsBroadcast`	—
`InnerForwarding`	—
`SrcPortName`	—
`SrcPortFriendlyName`	—
`DstPortName`	—
`DstPortFriendlyName`	—
`GftFlags`	—

Event ID 352 — VfpExt successfully forwarded a packet from port %1 (Name = %9, FriendlyName = %10) to destination %2 (Name = %11, FriendlyName = %12).

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt successfully forwarded a packet from port %1 (Name = %9, FriendlyName = %10) to destination %2 (Name = %11, FriendlyName = %12). {src mac = %3, dst mac = %4, type = %5, vlanID = %6, isBroadcast = %7, innerForwardingUsed = %8}, gftFlags = %13

Fields

Name	Description
`SrcPortId`	—
`DstPortId`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`Type`	—
`VLAN`	—
`IsBroadcast`	—
`InnerForwarding`	—
`SrcPortName`	—
`SrcPortFriendlyName`	—
`DstPortName`	—
`DstPortFriendlyName`	—
`GftFlags`	—

Event ID 353 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`DstPortId`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`Type`	—
`VLAN`	—
`SrcPortName`	—
`SrcPortFriendlyName`	—
`DstPortName`	—
`DstPortFriendlyName`	—
`GftFlags`	—

Event ID 353 — VfpExt is skipping destination port %2 (Name = %9, FriendlyName = %10) in broadcast list of packet from source port %1 (Name = %7, FriendlyName = %8).

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt is skipping destination port %2 (Name = %9, FriendlyName = %10) in broadcast list of packet from source port %1 (Name = %7, FriendlyName = %8). {src mac = %3, dst mac = %4, type = %5, vlanID = %6}, gftFlags = %11

Fields

Name	Description
`SrcPortId`	—
`DstPortId`	—
`SrcMacAddr`	—
`DstMacAddr`	—
`Type`	—
`VLAN`	—
`SrcPortName`	—
`SrcPortFriendlyName`	—
`DstPortName`	—
`DstPortFriendlyName`	—
`GftFlags`	—

Event ID 354 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`OutSrcMacAddr`	—
`OutDstMacAddr`	—
`Type`	—
`InnerDstMacAddr`	—
`VLAN`	—
`IsolationId`	—
`SrcPortName`	—
`SrcPortFriendlyName`	—
`GftFlags`	—

Event ID 354 — VfpExt failed to forward packet from source port %1 (Name = %8, FriendlyName = %9) based on inner headers, attempting to forward based on outer hea...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt failed to forward packet from source port %1 (Name = %8, FriendlyName = %9) based on inner headers, attempting to forward based on outer headers. {outer src mac = %2, outer dst mac = %3, type = %4, inner dest mac = %5, vlan id = %6, isolation id = %7}, gftFlags = %10

Fields

Name	Description
`SrcPortId`	—
`OutSrcMacAddr`	—
`OutDstMacAddr`	—
`Type`	—
`InnerDstMacAddr`	—
`VLAN`	—
`IsolationId`	—
`SrcPortName`	—
`SrcPortFriendlyName`	—
`GftFlags`	—

Event ID 355 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`Reason`	—
`Ext1`	—
`Ext2`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 355 — The save operation for port %1 (Name = %5, FriendlyName = %6) failed with reason '%2'.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

The save operation for port %1 (Name = %5, FriendlyName = %6) failed with reason '%2'. ExtendedData1: %3, ExtendedData2: %4.

Fields

Name	Description
`SrcPortId`	—
`Reason`	—
`Ext1`	—
`Ext2`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 356 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`Reason`	—
`Ext1`	—
`Ext2`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 356 — The save completion operation for port %1 (Name = %5, FriendlyName = %6) failed with reason '%2'.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

The save completion operation for port %1 (Name = %5, FriendlyName = %6) failed with reason '%2'. ExtendedData1: %3, ExtendedData2: %4.

Fields

Name	Description
`SrcPortId`	—
`Reason`	—
`Ext1`	—
`Ext2`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 357 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`Reason`	—
`Ext1`	—
`Ext2`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 357 — The save operation for port %1 (Name = %5, FriendlyName = %6) failed with reason '%2'.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

The save operation for port %1 (Name = %5, FriendlyName = %6) failed with reason '%2'. ExtendedData1: %3, ExtendedData2: %4.

Fields

Name	Description
`SrcPortId`	—
`Reason`	—
`Ext1`	—
`Ext2`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 358 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`SaveDataSize`	—
`BlockOnRestore`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 358 — Succesfully saved port %1 (Name = %4, FriendlyName = %5).

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Succesfully saved port %1 (Name = %4, FriendlyName = %5). Size: %2, BlockPortOnRestore: %3.

Fields

Name	Description
`SrcPortId`	—
`SaveDataSize`	—
`BlockOnRestore`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 359 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`SaveDataSize`	—
`BlockOnRestore`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 359 — The overall save operation for port %1 (Name = %4, FriendlyName = %5) is complete.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

The overall save operation for port %1 (Name = %4, FriendlyName = %5) is complete.

Fields

Name	Description
`SrcPortId`	—
`SaveDataSize`	—
`BlockOnRestore`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 360 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`SaveDataSize`	—
`BlockOnRestore`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 360 — Succesfully restored port %1 (Name = %4, FriendlyName = %5).

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Succesfully restored port %1 (Name = %4, FriendlyName = %5). Size: %2, Block State: %3.

Fields

Name	Description
`SrcPortId`	—
`SaveDataSize`	—
`BlockOnRestore`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 361 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`SaveDataSize`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 361 — Save request for port %1 (Name = %3, FriendlyName = %4) returned to caller with a size request of %2.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Save request for port %1 (Name = %3, FriendlyName = %4) returned to caller with a size request of %2.

Fields

Name	Description
`SrcPortId`	—
`SaveDataSize`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 362 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`MessageLength`	—
`Message`	—
`Reason`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 362 — Save request for port %1 (Name = %5, FriendlyName = %6) allowed to proceed to the next component with reason '%4'.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Save request for port %1 (Name = %5, FriendlyName = %6) allowed to proceed to the next component with reason '%4'.

Fields

Name	Description
`SrcPortId`	—
`MessageLength`	—
`Message`	—
`Reason`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 363 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`MessageLength`	—
`Message`	—
`Reason`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 363 — Restore request for port %1 (Name = %5, FriendlyName = %6) ignored by extension '%3' with reason '%4'.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Restore request for port %1 (Name = %5, FriendlyName = %6) ignored by extension '%3' with reason '%4'.

Fields

Name	Description
`SrcPortId`	—
`MessageLength`	—
`Message`	—
`Reason`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 364 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`MessageLength`	—
`Message`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 364 — Restore request failure for port %1 (Name = %4, FriendlyName = %5) suppressed.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Restore request failure for port %1 (Name = %4, FriendlyName = %5) suppressed

Fields

Name	Description
`SrcPortId`	—
`MessageLength`	—
`Message`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 400 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 400 — %6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 401 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 401 — %6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 402 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 402 — %6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7, dst ip = %8, protocol = %9, icmp type = %10}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %14}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 403 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 403 — %6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7, dst ip = %8, protocol = %9, icmp type = %10}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %14}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 404 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 404 — %6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 405 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 405 — %6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 451 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Reason`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 451 — Redirect for port %1 (Name = %3, FriendlyName = %4) failed.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Redirect for port %1 (Name = %3, FriendlyName = %4) failed. Reason: '%2'.

Fields

Name	Description
`PortId`	—
`Reason`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 452 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Oid`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 452 — OID %2 issued on port ID %1 (Name = %4, FriendlyName = %5).

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

OID %2 issued on port ID %1 (Name = %4, FriendlyName = %5). Status: %3.

Fields

Name	Description
`PortId`	—
`Oid`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 453 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`StatusCode`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 453 — Status Indication code %2 from port ID %1 (Name = %3, FriendlyName = %4).

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Status Indication code %2 from port ID %1 (Name = %3, FriendlyName = %4).

Fields

Name	Description
`PortId`	—
`StatusCode`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 454 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`Context`	—
`HeaderRevision`	—
`EncapsulationTypes`	—
`MaxHeaderSizeSupported`	—
`NvgreTransmitChecksumOffloadSupported`	—
`NvgreReceiveChecksumOffloadSupported`	—
`NvgreLsoV2Supported`	—
`NvgreRssSupported`	—
`NvgreVmqSupported`	—
`VxlanTransmitChecksumOffloadSupported`	—
`VxlanReceiveChecksumOffloadSupported`	—
`VxlanLsoV2Supported`	—
`VxlanRssSupported`	—
`VxlanVmqSupported`	—
`VxlanUDPPortNumber`	—
`VxlanUDPPortNumberConfigurable`	—

Event ID 454 — NDIS_OFFLOAD state in the context of %1.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

NDIS_OFFLOAD state in the context of %1. HeaderRevision %2, EncapsulationTypes %3, MaxHeaderSizeSupported %4, NvgreTransmitChecksumOffloadSupported %5, NvgreReceiveChecksumOffloadSupported %6, NvgreLsoV2Supported %7, NvgreRssSupported %8, NvgreVmqSupported %9, VxlanTransmitChecksumOffloadSupported %10, VxlanReceiveChecksumOffloadSupported %11, VxlanLsoV2Supported %12, VxlanRssSupported %13, VxlanVmqSupported %14, VxlanUDPPortNumber %15, VxlanUDPPortNumberConfigurable %16.

Fields

Name	Description
`Context`	—
`HeaderRevision`	—
`EncapsulationTypes`	—
`MaxHeaderSizeSupported`	—
`NvgreTransmitChecksumOffloadSupported`	—
`NvgreReceiveChecksumOffloadSupported`	—
`NvgreLsoV2Supported`	—
`NvgreRssSupported`	—
`NvgreVmqSupported`	—
`VxlanTransmitChecksumOffloadSupported`	—
`VxlanReceiveChecksumOffloadSupported`	—
`VxlanLsoV2Supported`	—
`VxlanRssSupported`	—
`VxlanVmqSupported`	—
`VxlanUDPPortNumber`	—
`VxlanUDPPortNumberConfigurable`	—

Event ID 455 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`InnerMacVmqSettingEnabled`	—
`PortId`	—
`MacAddress`	—
`InnerMacFilterSet`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 455 — OID_RECEIVE_FILTER_SET_FILTER for port ID %2 (Name = %5, FriendlyName = %6).

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

OID_RECEIVE_FILTER_SET_FILTER for port ID %2 (Name = %5, FriendlyName = %6). Inner Mac VMQ Setting Enabled = %1, MAC address on filter %3, Inner Mac Flag Set = %4.

Fields

Name	Description
`InnerMacVmqSettingEnabled`	—
`PortId`	—
`MacAddress`	—
`InnerMacFilterSet`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 456 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`RuleContext`	—
`ElapsedTime`	—
`CachePruningTimeout`	—
`CachePruningThreshold`	—
`NumNdEntries`	—

Event ID 456 — PA route rule update callback: { rule context %1, elapsed time %2, cache pruning timeout %3, cache pruning threshold %4, ND entries %5 }.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

PA route rule update callback: { rule context %1, elapsed time %2, cache pruning timeout %3, cache pruning threshold %4, ND entries %5 }

Fields

Name	Description
`RuleContext`	—
`ElapsedTime`	—
`CachePruningTimeout`	—
`CachePruningThreshold`	—
`NumNdEntries`	—

Event ID 500 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`SecurityApiName`	—
`SelectParamInfo1`	—
`SelectParamInfo2`	—
`SelectParamInfo3`	—
`SelectParamInfo4`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 500 — DTLS Session {Port %1 (Name = %13, FriendlyName = %14), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6} Called s...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

DTLS Session {Port %1 (Name = %13, FriendlyName = %14), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6} Called  security API %7 with select params %8, %9, %10 and %11 returned status %12.

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`SecurityApiName`	—
`SelectParamInfo1`	—
`SelectParamInfo2`	—
`SelectParamInfo3`	—
`SelectParamInfo4`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 501 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`FailureReason`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 501 — DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6} Handshake ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  Handshake fatal error: %7.

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`FailureReason`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 502 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`OldState`	—
`NewState`	—
`DeactivateReason`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 502 — DTLS Session {Port %1 (Name = %10, FriendlyName = %11), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6} Transiti...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

DTLS Session {Port %1 (Name = %10, FriendlyName = %11), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  Transition state from %7 to %8. Reason: %9

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`OldState`	—
`NewState`	—
`DeactivateReason`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 503 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`Direction`	—
`DtlsContentType`	—
`DtlsHandshakeProtocol`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 503 — DTLS Session {Port %1 (Name = %10, FriendlyName = %11), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6} DTLS pac...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

DTLS Session {Port %1 (Name = %10, FriendlyName = %11), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  DTLS packet direction %7 Content Type %8, Handshake Protocol %9

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`Direction`	—
`DtlsContentType`	—
`DtlsHandshakeProtocol`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 504 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`TraceString`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 504 — DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6} %7.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  %7

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`TraceString`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 505 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`TraceString`	—
`GenericNumericParam1`	—
`GenericNumericParam2`	—
`GenericStringParam1`	—
`GenericStringParam2`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 505 — DTLS Session {Port %1 (Name = %12, FriendlyName = %13), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6} %7.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

DTLS Session {Port %1 (Name = %12, FriendlyName = %13), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  %7.  Numeric params:%8 %9 Str params: %10 %11

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`TraceString`	—
`GenericNumericParam1`	—
`GenericNumericParam2`	—
`GenericStringParam1`	—
`GenericStringParam2`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 506 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`TraceString`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 506 — DTLS on Port %1.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

DTLS on Port %1 ((Name = %3, FriendlyName = %4) %2

Fields

Name	Description
`PortId`	—
`TraceString`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 507 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`TraceString`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 507 — DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6} %7.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  %7

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`TraceString`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 508 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`TraceString`	—
`GenericNumericParam1`	—
`GenericNumericParam2`	—
`GenericStringParam1`	—
`GenericStringParam2`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 508 — DTLS Session {Port %1 (Name = %12, FriendlyName = %13), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6} %7.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

DTLS Session {Port %1 (Name = %12, FriendlyName = %13), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  %7.  Numeric params:%8 %9 Str params: %10 %11

Fields

Name	Description
`PortId`	—
`SessionId`	—
`PeerOuterIpv4Addr`	—
`PeerInnerMacAddr`	—
`TNI`	—
`TunnelID`	—
`TraceString`	—
`GenericNumericParam1`	—
`GenericNumericParam2`	—
`GenericStringParam1`	—
`GenericStringParam2`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 509 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`PADiscoveryFlowState`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`PADiscoveryType`	—
`DiscoveredIpv4Addr`	—
`TraceString`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 509 — PADiscoveryEvent port %1 (Name = %12, FriendlyName = %13) direction %2 state %3 flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, pr...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

PADiscoveryEvent port %1 (Name = %12, FriendlyName = %13) direction %2 state %3 flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8} DiscoveryType = %9 PADiscovered = %10  message = %11

Fields

Name	Description
`PortId`	—
`Direction`	—
`PADiscoveryFlowState`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`PADiscoveryType`	—
`DiscoveredIpv4Addr`	—
`TraceString`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 551 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Operation`	—
`Message`	—
`ClientIp`	—
`ClientMac`	—
`TransactionId`	—
`AssignedIp`	—
`ServerIp`	—
`RequestedIp`	—
`RelayIp`	—
`DnsIp`	—
`SrcIp`	—
`SrcPort`	—
`DstIp`	—
`DstPort`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 551 — Port %1 (Name = %16, FriendlyName = %17) parsed DHCP packet Operation:%2 MessageType:%3 ClientIp:%4 ClientMac:%5 TransactionId:%6 AssignedIp:%7 Ser...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Port %1 (Name = %16, FriendlyName = %17) parsed DHCP packet Operation:%2 MessageType:%3 ClientIp:%4 ClientMac:%5 TransactionId:%6 AssignedIp:%7 ServerIp:%8 RequestedIp:%9 RelayIp:%10 DnsIp:%11 SrcIp=>SrcPort:%12=>%13 DstIp=>DstPort:%14=>%15. GftFlags = %18

Fields

Name	Description
`PortId`	—
`Operation`	—
`Message`	—
`ClientIp`	—
`ClientMac`	—
`TransactionId`	—
`AssignedIp`	—
`ServerIp`	—
`RequestedIp`	—
`RelayIp`	—
`DnsIp`	—
`SrcIp`	—
`SrcPort`	—
`DstIp`	—
`DstPort`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 600 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 600 — VfpExt on port %1 (Name = %33, FriendlyName = %34) created %2 unified flow %35: IsMain=%3, IsPending=%4, IsSecondary=%36, IsMirror=%37, IsHairpin=%...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %33, FriendlyName = %34) created %2 unified flow %35: IsMain=%3, IsPending=%4, IsSecondary=%36, IsMirror=%37, IsHairpin=%38, HairpinChecked=%39, OriginalInbound=%40, IsTcpSyn=%29, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}, {EncapTransposition0 (%30), EncapTransposition1 (%31), InnerTransposition (%32)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 601 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 601 — VfpExt on port %1 (Name = %33, FriendlyName = %34) created %2 unified flow %35: IsMain=%3, IsPending=%4, IsSecondary=%36, IsMirror=%37, IsHairpin=%...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %33, FriendlyName = %34) created %2 unified flow %35: IsMain=%3, IsPending=%4, IsSecondary=%36, IsMirror=%37, IsHairpin=%38, HairpinChecked=%39, OriginalInbound=%40, IsTcpSyn=%29, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}, {EncapTransposition0 (%30), EncapTransposition1 (%31), InnerTransposition (%32)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 602 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IcmpType`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 602 — VfpExt on port %1 (Name = %31, FriendlyName = %32) created %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %31, FriendlyName = %32) created %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}, {EncapTransposition0 (%28), EncapTransposition1 (%29), InnerTransposition (%30)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IcmpType`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 603 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IcmpType`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 603 — VfpExt on port %1 (Name = %31, FriendlyName = %32) created %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %31, FriendlyName = %32) created %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}, {EncapTransposition0 (%28), EncapTransposition1 (%29), InnerTransposition (%30)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IcmpType`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 604 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 604 — VfpExt on port %1 (Name = %33, FriendlyName = %34) matched %2 unified flow %35: IsMain=%3, IsSecondary=%36, IsMirror=%37, IsHairpin=%38, HairpinChe...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %33, FriendlyName = %34) matched %2 unified flow %35: IsMain=%3, IsSecondary=%36, IsMirror=%37, IsHairpin=%38, HairpinChecked=%39, OriginalInbound=%40, IsPending=%4, IsTcpSyn=%29, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}, {EncapTransposition0 (%30), EncapTransposition1 (%31), InnerTransposition (%32)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 605 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 605 — VfpExt on port %1 (Name = %33, FriendlyName = %34) matched %2 unified flow %35: IsMain=%3, IsSecondary=%36, IsMirror=%37, IsHairpin=%38, HairpinChe...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %33, FriendlyName = %34) matched %2 unified flow %35: IsMain=%3, IsSecondary=%36, IsMirror=%37, IsHairpin=%38, HairpinChecked=%39, OriginalInbound=%40, IsPending=%4, IsTcpSyn=%29, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}, {EncapTransposition0 (%30), EncapTransposition1 (%31), InnerTransposition (%32)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IsTcpSyn`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 606 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IcmpType`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 606 — VfpExt on port %1 (Name = %31, FriendlyName = %32) matched %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %31, FriendlyName = %32) matched %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}, {EncapTransposition0 (%28), EncapTransposition1 (%29), InnerTransposition (%30)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IcmpType`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 607 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IcmpType`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 607 — VfpExt on port %1 (Name = %31, FriendlyName = %32) matched %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %31, FriendlyName = %32) matched %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}, {EncapTransposition0 (%28), EncapTransposition1 (%29), InnerTransposition (%30)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IcmpType`	—
`EncapTransposition0`	—
`EncapTransposition1`	—
`Transposition`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 608 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 608 — VfpExt on port %1 (Name = %29, FriendlyName = %30) deleted %2 unified flow %31: IsMain=%3, IsPending=%4, IsSecondary=%32, IsMirror=%33, IsHairpin=%...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %29, FriendlyName = %30) deleted %2 unified flow %31: IsMain=%3, IsPending=%4, IsSecondary=%32, IsMirror=%33, IsHairpin=%34, HairpinChecked=%35, OriginalInbound=%36, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 609 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 609 — VfpExt on port %1 (Name = %29, FriendlyName = %30) deleted %2 unified flow %31: IsMain=%3, IsPending=%4, IsSecondary=%32, IsMirror=%33, IsHairpin=%...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %29, FriendlyName = %30) deleted %2 unified flow %31: IsMain=%3, IsPending=%4, IsSecondary=%32, IsMirror=%33, IsHairpin=%34, HairpinChecked=%35, OriginalInbound=%36, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`IsSecondary`	—
`IsMirror`	—
`IsHairpin`	—
`HairpinChecked`	—
`OriginalInbound`	—

Event ID 610 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 610 — VfpExt on port %1 (Name = %28, FriendlyName = %29) deleted %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %28, FriendlyName = %29) deleted %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv4Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv4Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 611 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 611 — VfpExt on port %1 (Name = %28, FriendlyName = %29) deleted %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %28, FriendlyName = %29) deleted %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}

Fields

Name	Description
`PortId`	—
`Direction`	—
`IsMain`	—
`IsPending`	—
`TNI`	—
`VLAN`	—
`NumEncaps`	—
`EncapType0`	—
`EncapSrcMacAddr0`	—
`EncapDestMacAddr0`	—
`EncapSrcIpv4Addr0`	—
`EncapDstIpv6Addr0`	—
`TenantId0`	—
`EncryptVxlanId0`	—
`EncapType1`	—
`EncapSrcMacAddr1`	—
`EncapDestMacAddr1`	—
`EncapSrcIpv4Addr1`	—
`EncapDstIpv6Addr1`	—
`TenantId1`	—
`EncryptVxlanId1`	—
`IpProtocol`	—
`SrcMacAddr`	—
`DestMacAddr`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IcmpType`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 650 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`FileOperation`	—
`FileName`	—
`FileSize`	—
`OperationStatus`	—
`Status`	—

Event ID 650 — File operation %1 on file %2 with size %3 completed with status %4, hex %5.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

File operation %1 on file %2 with size %3 completed with status %4, hex %5

Fields

Name	Description
`FileOperation`	—
`FileName`	—
`FileSize`	—
`OperationStatus`	—
`Status`	—

Event ID 700 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`Id`	—
`TraceObjectOperationType`	—
`ItemType`	—
`SubType`	—
`Flags`	—
`PortId`	—
`PortName`	—
`Status`	—
`ControlFailureReason`	—
`FailureReason`	—
`Name`	—

Event ID 700 — Failure in control processing for object.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Failure in control processing for object. Id: %1, Name: %11, Operation Type: %2, Type: %3, SubType: %4, Flags: %5, Port id: %6, Port name: %7, Status: %8, Failure reason (value = %10): %9

Fields

Name	Description
`Id`	—
`TraceObjectOperationType`	—
`ItemType`	—
`SubType`	—
`Flags`	—
`PortId`	—
`PortName`	—
`Status`	—
`ControlFailureReason`	—
`FailureReason`	—
`Name`	—

Event ID 701 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`Id`	—
`TraceObjectOperationType`	—
`ItemType`	—
`SubType`	—
`Flags`	—
`PortId`	—
`PortName`	—
`Status`	—
`ControlFailureReason`	—
`FailureReason`	—
`Name`	—

Event ID 701 — Success during control processing for object.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Success during control processing for object. Id: %1, Name: %11, Operation Type: %2, Type: %3, SubType: %4, Flags: %5, Port id: %6, Port name: %7

Fields

Name	Description
`Id`	—
`TraceObjectOperationType`	—
`ItemType`	—
`SubType`	—
`Flags`	—
`PortId`	—
`PortName`	—
`Status`	—
`ControlFailureReason`	—
`FailureReason`	—
`Name`	—

Event ID 702 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`PortId`	—
`PortName`	—
`Operation`	—
`ProcessId`	—
`Irp`	—
`Status`	—

Event ID 702 — Ioctl completed.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Ioctl completed. Switch name: %1, Port id: %2, Port name: %3, Process id: %5, Irp: %6, Status: %7

Fields

Name	Description
`SwitchName`	—
`PortId`	—
`PortName`	—
`Operation`	—
`ProcessId`	—
`Irp`	—
`Status`	—

Event ID 703 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`Operation`	—
`Status`	—
`ControlFailureReason`	—
`FailureReason`	—

Event ID 703 — Failed when setting port information.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Failed when setting port information. Port Id: %1, Port Name: %2, Operation: %3, Status: %4, Failure reason (value = %6): %5

Fields

Name	Description
`PortId`	—
`PortName`	—
`Operation`	—
`Status`	—
`ControlFailureReason`	—
`FailureReason`	—

Event ID 704 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`PortId`	—
`PortName`	—
`Operation`	—
`ProcessId`	—
`Irp`	—
`Status`	—

Event ID 704 — Ioctl started.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Ioctl started. Switch name: %1, Port id: %2, Port name: %3, Operation: %4, Process id: %5, Irp: %6

Fields

Name	Description
`SwitchName`	—
`PortId`	—
`PortName`	—
`Operation`	—
`ProcessId`	—
`Irp`	—
`Status`	—

Event ID 705 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`Operation`	—
`Status`	—
`ControlFailureReason`	—
`FailureReason`	—

Event ID 705 — Failed when setting switch information.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Failed when setting switch information. Switch name: %1, Operation: %2, Status: %3, Failure reason (value = %5): %4

Fields

Name	Description
`SwitchName`	—
`Operation`	—
`Status`	—
`ControlFailureReason`	—
`FailureReason`	—

Event ID 706 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`PortId`	—
`PortName`	—
`Operation`	—
`ProcessId`	—
`Irp`	—
`Status`	—

Event ID 706 — Ioctl pended.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Ioctl pended. Switch name: %1, Port id: %2, Port name: %3, Operation: %4, Process id: %5, Irp: %6

Fields

Name	Description
`SwitchName`	—
`PortId`	—
`PortName`	—
`Operation`	—
`ProcessId`	—
`Irp`	—
`Status`	—

Event ID 751 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`EncapDstIpv4Addr`	—
`EncapSrcIpv4Addr`	—
`InnerDestMacAddr`	—
`GreKey`	—
`PortName`	—

Event ID 751 — Matched redirect flow for deletion.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Matched redirect flow for deletion. Port id: %1, Layer id: %2, Src ip: %3, Dst ip: %4, Src port: %5, Dst port: %6, Protocol: %7, Encap dest ip: %8, Encap src ip: %9, Inner dest mac: %10, Gre key: %11, Port name: %12

Fields

Name	Description
`PortId`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`EncapDstIpv4Addr`	—
`EncapSrcIpv4Addr`	—
`InnerDestMacAddr`	—
`GreKey`	—
`PortName`	—

Event ID 752 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`EncapDstIpv6Addr`	—
`EncapSrcIpv6Addr`	—
`InnerDestMacAddr`	—
`GreKey`	—
`PortName`	—

Event ID 752 — Matched redirect flow for deletion.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Matched redirect flow for deletion. Port id: %1, Layer id: %2, Src ip: %3, Dst ip: %4, Src port: %5, Dst port: %6, Protocol: %7, Encap dest ip: %8, Encap src ip: %9, Inner dest mac: %10, Gre key: %11, Port name: %12

Fields

Name	Description
`PortId`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`EncapDstIpv6Addr`	—
`EncapSrcIpv6Addr`	—
`InnerDestMacAddr`	—
`GreKey`	—
`PortName`	—

Event ID 800 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`Context`	—
`Flags`	—
`CounterCapabilities`	—
`SupportedTableTypes`	—
`SupportedEncapsulationTypes`	—
`SupportedIngressExactMatchTableActions`	—
`SupportedEgressExactMatchTableActions`	—
`SoftwareSupportedIngressExactMatchTableActions`	—
`SoftwareSupportedEgressExactMatchTableActions`	—
`SupportedIngressWildcardMatchTableActions`	—
`SupportedEgressWildcardMatchTableActions`	—
`SoftwareSupportedIngressWildcardMatchTableActions`	—
`SoftwareSupportedEgressWildcardMatchTableActions`	—
`NumPacketCounterObjects`	—
`NumByteCounterObjects`	—
`NumPacketByteCounterObjects`	—
`NumPacketByteCounterAndStateObjects`	—
`NumCounterObjectsPerIngressExactMatchFlowEntry`	—
`NumCounterObjectsPerEgressExactMatchFlowEntry`	—
`NumCounterObjectsPerIngressWildcardMatchFlowEntry`	—
`NumCounterObjectsPerEgressWildcardMatchFlowEntry`	—

Event ID 800 — GFT offload capabilities in the context of %1.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

GFT offload capabilities in the context of %1. Flags %2, CounterCapabilities %3, SupportedTableTypes %4, SupportedEncapsulationTypes %5, SupportedIngressExactMatchTableActions %6, SupportedEgressExactMatchTableActions %7, SoftwareSupportedIngressExactMatchTableActions %8, SoftwareSupportedEgressExactMatchTableActions %9, SupportedIngressWildcardMatchTableActions %10, SupportedEgressWildcardMatchTableActions %11, SoftwareSupportedIngressWildcardMatchTableActions %12, SoftwareSupportedEgressWildcardMatchTableActions %13, NumPacketCounterObjects %14, NumByteCounterObjects %15, NumPacketByteCounterObjects %16, NumPacketByteCounterAndStateObjects %17, NumCounterObjectsPerIngressExactMatchFlowEntry %18, NumCounterObjectsPerEgressExactMatchFlowEntry %19 NumCounterObjectsPerIngressWildcardMatchFlowEntry %20, NumCounterObjectsPerEgressWildcardMatchFlowEntry %21.

Fields

Name	Description
`Context`	—
`Flags`	—
`CounterCapabilities`	—
`SupportedTableTypes`	—
`SupportedEncapsulationTypes`	—
`SupportedIngressExactMatchTableActions`	—
`SupportedEgressExactMatchTableActions`	—
`SoftwareSupportedIngressExactMatchTableActions`	—
`SoftwareSupportedEgressExactMatchTableActions`	—
`SupportedIngressWildcardMatchTableActions`	—
`SupportedEgressWildcardMatchTableActions`	—
`SoftwareSupportedIngressWildcardMatchTableActions`	—
`SoftwareSupportedEgressWildcardMatchTableActions`	—
`NumPacketCounterObjects`	—
`NumByteCounterObjects`	—
`NumPacketByteCounterObjects`	—
`NumPacketByteCounterAndStateObjects`	—
`NumCounterObjectsPerIngressExactMatchFlowEntry`	—
`NumCounterObjectsPerEgressExactMatchFlowEntry`	—
`NumCounterObjectsPerIngressWildcardMatchFlowEntry`	—
`NumCounterObjectsPerEgressWildcardMatchFlowEntry`	—

Event ID 801 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`Context`	—

Event ID 801 — GFT offload counters updated %1.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

GFT offload counters updated %1.

Fields

Name	Description
`Context`	—

Event ID 802 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`Status`	—
`GftCounterId`	—
`PortId`	—
`PortName`	—

Event ID 802 — GFT aggregate counters are not freed because either the port could not be referenced or the OID request failed.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

GFT aggregate counters are not freed because either the port could not be referenced or the OID request failed. Status: %1, GFT Counter id: %2, Port id: %3, Port name: %4.

Fields

Name	Description
`Status`	—
`GftCounterId`	—
`PortId`	—
`PortName`	—

Event ID 803 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`GftProviderFlowEntryId`	—
`CurrSysTime`	—
`GftTimeStamp`	—
`GftUpdateElapsedInTtlUnits`	—
`MaxTtl`	—
`TTL`	—
`NumPackets`	—
`NumBytes`	—
`PrevNumPackets`	—
`PrevNumBytes`	—

Event ID 803 — VfpExt on port %1 (Name = %2, FriendlyName = %3) reset TTL for GFT offloaded unified flow %4 , GftProviderFlowEntryId %5.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %2, FriendlyName = %3) reset TTL for GFT offloaded unified flow %4  , GftProviderFlowEntryId %5. CurrSysTime %6, GftTimeStamp %7, GftUpdateInTtlUnits %8, MaxTtl %9, Ttl %10, PrevNumPackets %13, PrevNumBytes %14 NumPackets %11, NumBytes %12

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`GftProviderFlowEntryId`	—
`CurrSysTime`	—
`GftTimeStamp`	—
`GftUpdateElapsedInTtlUnits`	—
`MaxTtl`	—
`TTL`	—
`NumPackets`	—
`NumBytes`	—
`PrevNumPackets`	—
`PrevNumBytes`	—

Event ID 804 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`OldGftFlowState`	—
`NewGftFlowState`	—
`IsPendingDelete`	—
`IsMarkedForHwDeletion`	—
`ReoffloadReqd`	—
`RetryOffload`	—
`GftFlowBlockReason`	—
`GftFlowRetryReason`	—

Event ID 804 — VfpExt on port %1 (Name = %2, FriendlyName = %3) changed GFT flow state of UF %4 from %5 to %6.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %2, FriendlyName = %3) changed GFT flow state of UF %4 from %5 to %6. GftPendingDelete is %7, GftMarkedForHwDeletion is %8, ReoffloadReqd is %9, RetryOffload is %10, BlockReason %11, RetryReason %12

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`OldGftFlowState`	—
`NewGftFlowState`	—
`IsPendingDelete`	—
`IsMarkedForHwDeletion`	—
`ReoffloadReqd`	—
`RetryOffload`	—
`GftFlowBlockReason`	—
`GftFlowRetryReason`	—

Event ID 805 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`Status`	—
`FailureReason`	—

Event ID 805 — VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4 add_flow failed with status %5 due to %6.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4 add_flow failed with status %5 due to %6

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`Status`	—
`FailureReason`	—

Event ID 806 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`ProviderFlowEntryId`	—
`GftFlowState`	—
`GftFlowOffloadReason`	—
`IsPendingDelete`	—

Event ID 806 — VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4, ProviderFlowEntry %5 add_flow succeded.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4, ProviderFlowEntry %5 add_flow succeded. Flow state %6, Offload reason %7, GftPendingDelete %8

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`ProviderFlowEntryId`	—
`GftFlowState`	—
`GftFlowOffloadReason`	—
`IsPendingDelete`	—

Event ID 807 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`Status`	—
`FailureReason`	—

Event ID 807 — VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4 delete_flow failed with status %5 due to %6.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4 delete_flow failed with status %5 due to %6

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`UnifiedFlow`	—
`Status`	—
`FailureReason`	—

Event ID 808 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortContext`	—
`Name`	—
`FriendlyName`	—
`FailureReason`	—

Event ID 808 — Skipping Sx Port context %1 (Name = %2, FriendlyName = %3) as a match with reason '%4'.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Skipping Sx Port context %1 (Name = %2, FriendlyName = %3) as a match with reason '%4'

Fields

Name	Description
`PortContext`	—
`Name`	—
`FriendlyName`	—
`FailureReason`	—

Event ID 809 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Status`	—
`FailureReason`	—

Event ID 809 — Vfp failed to issue OID for VPort %1 with status %2 due to %3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Vfp failed to issue OID for VPort %1 with status %2 due to %3

Fields

Name	Description
`PortId`	—
`Status`	—
`FailureReason`	—

Event ID 810 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`FriendlyName`	—
`Status`	—
`FailureReason`	—

Event ID 810 — Failed to set GFT port parser settings on port %1 (Name = %2, FriendlyName = %3) with status %4 due to %5.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Failed to set GFT port parser settings on port %1 (Name = %2, FriendlyName = %3) with status %4 due to %5

Fields

Name	Description
`PortId`	—
`PortName`	—
`FriendlyName`	—
`Status`	—
`FailureReason`	—

Event ID 900 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`TagId`	—
`Status`	—
`Reason`	—

Event ID 900 — Tag Id %1 completed operation with status: %2.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Tag Id %1 completed operation with status: %2. Extended operation status: %3

Fields

Name	Description
`TagId`	—
`Status`	—
`Reason`	—

Event ID 950 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 950 — VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac add...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 951 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 951 — VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac add...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 952 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 952 — VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac add...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 953 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 953 — VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac add...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 954 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`FlowType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—

Event ID 954 — VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, src port = %4, dst port = %5, protocol = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, src port = %4, dst port = %5, protocol = %6}.

Fields

Name	Description
`FlowType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—

Event ID 955 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`FlowType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—

Event ID 955 — VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, src port = %4, dst port = %5, protocol = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, src port = %4, dst port = %5, protocol = %6}.

Fields

Name	Description
`FlowType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—

Event ID 956 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`FlowType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—

Event ID 956 — VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, protocol = %4, icmp type = %5}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, protocol = %4, icmp type = %5}.

Fields

Name	Description
`FlowType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—

Event ID 957 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`FlowType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—

Event ID 957 — VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, protocol = %4, icmp type = %5}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, protocol = %4, icmp type = %5}.

Fields

Name	Description
`FlowType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—

Event ID 958 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`FlowType`	—
`IsMain`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`NumPackets`	—
`NumBytes`	—
`NumReversePackets`	—
`NumReverseBytes`	—

Event ID 958 — VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, src port = %5, dst port = %6, protocol = %7}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, src port = %5, dst port = %6, protocol = %7}. IsMain = %2, NumPackets = %8, NumBytes = %9, NumPackets = %10, NumBytes = %11

Fields

Name	Description
`FlowType`	—
`IsMain`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`NumPackets`	—
`NumBytes`	—
`NumReversePackets`	—
`NumReverseBytes`	—

Event ID 959 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`FlowType`	—
`IsMain`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`NumPackets`	—
`NumBytes`	—
`NumReversePackets`	—
`NumReverseBytes`	—

Event ID 959 — VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, src port = %5, dst port = %6, protocol = %7}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, src port = %5, dst port = %6, protocol = %7}. IsMain = %2, NumPackets = %8, NumBytes = %9, NumPackets = %10, NumBytes = %11

Fields

Name	Description
`FlowType`	—
`IsMain`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`NumPackets`	—
`NumBytes`	—
`NumReversePackets`	—
`NumReverseBytes`	—

Event ID 960 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`FlowType`	—
`IsMain`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`NumPackets`	—
`NumBytes`	—
`NumReversePackets`	—
`NumReverseBytes`	—

Event ID 960 — VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, protocol = %5, icmp type = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, protocol = %5, icmp type = %6}. IsMain = %2, NumPackets = %7, NumBytes = %8. NumPackets = %9, NumBytes = %10

Fields

Name	Description
`FlowType`	—
`IsMain`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`IpProtocol`	—
`IcmpType`	—
`NumPackets`	—
`NumBytes`	—
`NumReversePackets`	—
`NumReverseBytes`	—

Event ID 961 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`FlowType`	—
`IsMain`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`NumPackets`	—
`NumBytes`	—
`NumReversePackets`	—
`NumReverseBytes`	—

Event ID 961 — VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, protocol = %5, icmp type = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, protocol = %5, icmp type = %6}. IsMain = %2, NumPackets = %7, NumBytes = %8. NumPackets = %9, NumBytes = %10

Fields

Name	Description
`FlowType`	—
`IsMain`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`IpProtocol`	—
`IcmpType`	—
`NumPackets`	—
`NumBytes`	—
`NumReversePackets`	—
`NumReverseBytes`	—

Event ID 962 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`Status`	—

Event ID 962 — VfpExt on port %1 (Name = %2, FriendlyName = %3) failed to schedule work item due to status %4.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %2, FriendlyName = %3) failed to schedule work item due to status %4

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`Status`	—

Event ID 963 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`LayerId`	—
`Status`	—
`NumOutboundFlowsReplaced`	—
`NumInboundFlowsReplaced`	—

Event ID 963 — Replacing layer flow addresses succeeded on port %1 (Name = %2, FriendlyName = %3), layer %4, status %5, number of outbound flows replaced = %6, nu...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Replacing layer flow addresses succeeded on port %1 (Name = %2, FriendlyName = %3), layer %4, status %5, number of outbound flows replaced = %6, number of inbound flows replaced = %7

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`LayerId`	—
`Status`	—
`NumOutboundFlowsReplaced`	—
`NumInboundFlowsReplaced`	—

Event ID 964 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`LayerId`	—
`Status`	—
`NumOutboundFlowsReplaced`	—
`NumInboundFlowsReplaced`	—

Event ID 964 — Replacing layer flow addresses failed on port %1 (Name = %2, FriendlyName = %3), layer %4, status %5, number of outbound flows replaced = %6, numbe...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Replacing layer flow addresses failed on port %1 (Name = %2, FriendlyName = %3), layer %4, status %5, number of outbound flows replaced = %6, number of inbound flows replaced = %7

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`LayerId`	—
`Status`	—
`NumOutboundFlowsReplaced`	—
`NumInboundFlowsReplaced`	—

Event ID 965 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`PortTimerFunction`	—

Event ID 965 — VfpExt on port %1 (Name = %2, FriendlyName = %3) ran port timer function %4.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %2, FriendlyName = %3) ran port timer function %4

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`PortTimerFunction`	—

Event ID 966 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`SuspendedLmState`	—

Event ID 966 — Suspended live migration state change on port %1 (Name = %2, FriendlyName = %3), new live migration state = %4.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Suspended live migration state change on port %1 (Name = %2, FriendlyName = %3), new live migration state = %4

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`SuspendedLmState`	—

Event ID 967 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortName`	—
`PortFriendlyName`	—

Event ID 967 — VfpExt set NDIS_NIC_SWITCH_VPORT_PARAMS_ENFORCE_MAX_SG_LIST on port (name = %1, Friendlyname = %2) during VF VPort Creation.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt set NDIS_NIC_SWITCH_VPORT_PARAMS_ENFORCE_MAX_SG_LIST on port (name = %1, Friendlyname = %2) during VF VPort Creation

Fields

Name	Description
`PortName`	—
`PortFriendlyName`	—

Event ID 968 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`MaxEntries`	—
`StepDownMinItem`	—
`NextTimerUpdateInterval`	—
`Status`	—
`OutstandingWorkItems`	—
`HeuristicTimerUpdatesEnabled`	—

Event ID 968 — VfpExt on port %1 (Name = %2, FriendlyName = %3) with numFlows %4 with StepDownMinItem enabled : %5 with timer interval %6 is scheduled with status...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %2, FriendlyName = %3) with numFlows %4 with StepDownMinItem enabled : %5 with timer interval %6 is scheduled with status %7 with %8 outstanding work times and heurstic is enabled: %9

Fields

Name	Description
`PortId`	—
`PortName`	—
`PortFriendlyName`	—
`MaxEntries`	—
`StepDownMinItem`	—
`NextTimerUpdateInterval`	—
`Status`	—
`OutstandingWorkItems`	—
`HeuristicTimerUpdatesEnabled`	—

Event ID 969 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchContext`	—
`Name`	—
`FriendlyName`	—
`FailureReason`	—

Event ID 969 — Skipping Sx Switch context %1 (Name = %2, FriendlyName = %3) as a match with reason '%4'.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Skipping Sx Switch context %1 (Name = %2, FriendlyName = %3) as a match with reason '%4'

Fields

Name	Description
`SwitchContext`	—
`Name`	—
`FriendlyName`	—
`FailureReason`	—

Event ID 970 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`VmId`	—
`PortName`	—
`PortFriendlyName`	—
`Status`	—
`FailureReason`	—

Event ID 970 — Managing VM Context failed for VMId: %1 on port (name = %2, FriendlyName = %3) with status = %4, internal reason: %5.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Managing VM Context failed for VMId: %1 on port (name = %2, FriendlyName = %3) with status = %4, internal reason: %5

Fields

Name	Description
`VmId`	—
`PortName`	—
`PortFriendlyName`	—
`Status`	—
`FailureReason`	—

Event ID 971 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 971 — VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr =...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 972 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 972 — VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr =...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 973 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 973 — VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr =...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 974 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 974 — VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr =...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 975 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 975 — VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 976 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 976 — VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 977 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 977 — VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 978 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 978 — VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields

Name	Description
`PortId`	—
`SpaceId`	—
`MappingType`	—
`CustomerIpv4Addr`	—
`CustomerIpv6AddrLength`	—
`CustomerIpv6Addr`	—
`ProviderIpv4Addr`	—
`ProviderIpv6AddrLength`	—
`ProviderIpv6Addr`	—
`MacAddr`	—
`CustomerMacAddr`	—
`IsolationId`	—
`Flags`	—
`PermanentFlag`	—
`NonUniquePAFlag`	—
`MacMappingFlag`	—
`L4LoadBalanced`	—
`L3LoadBalanced`	—
`PortName`	—
`PortFriendlyName`	—

Event ID 979 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`MappingIndexType`	—
`Ipv4Addr`	—
`Ipv6AddrLength`	—
`Ipv6Addr`	—

Event ID 979 — VfpExt on port %1 received mappingdesc for following mapping: {mapping index type = %2, address = %3}}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 received mappingdesc for following mapping: {mapping index type = %2, address = %3}}

Fields

Name	Description
`PortId`	—
`MappingIndexType`	—
`Ipv4Addr`	—
`Ipv6AddrLength`	—
`Ipv6Addr`	—

Event ID 980 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`MappingIndexType`	—
`Ipv4Addr`	—
`Ipv6AddrLength`	—
`Ipv6Addr`	—

Event ID 980 — VfpExt on port %1 received mappingdesc for following mapping: {mapping index type = %2, address = %5}}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 received mappingdesc for following mapping: {mapping index type = %2, address = %5}}

Fields

Name	Description
`PortId`	—
`MappingIndexType`	—
`Ipv4Addr`	—
`Ipv6AddrLength`	—
`Ipv6Addr`	—

Event ID 981 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`Status`	—
`VPortId`	—
`PortName`	—
`Enable`	—
`UseVlanMask`	—
`UseMaxVlanRange`	—
`UseMinVlanRange`	—
`VlanMask`	—
`MaxVlanRange`	—
`MinVlanRange`	—

Event ID 981 — Applying GFT Multi-Tenant Settings status %1 - port %2 (Name = %3), Enable: %4, UseVlanMask: %5, UseVlanMaxRange: %6, UseVlanMinRange: %7, VlanMask...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

Applying GFT Multi-Tenant Settings status %1 - port %2 (Name = %3), Enable: %4, UseVlanMask: %5, UseVlanMaxRange: %6, UseVlanMinRange: %7, VlanMask: %8, MaxVlanRange: %9, MinVlanRange: %10

Fields

Name	Description
`Status`	—
`VPortId`	—
`PortName`	—
`Enable`	—
`UseVlanMask`	—
`UseMaxVlanRange`	—
`UseMinVlanRange`	—
`VlanMask`	—
`MaxVlanRange`	—
`MinVlanRange`	—

Event ID 982 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`Reason`	—
`Status`	—

Event ID 982 — %1, status = %2.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%1, status = %2

Fields

Name	Description
`Reason`	—
`Status`	—

Event ID 983 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`Status`	—
`GftClientHandle`	—
`GftProviderHandle`	—
`GftClientDirectConfigurationRequestCompleteHandler`	—
`GftProviderDirectConfigurationRequestHandler`	—

Event ID 983 — GFT direct configuration dispatch table for switch %1 returned status %2.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

GFT direct configuration dispatch table for switch %1 returned status %2. ClientHandle %3, ProviderHandle %4, ClientRequestCompletionHandler %5, ProviderRequestHandler %6.

Fields

Name	Description
`SwitchName`	—
`Status`	—
`GftClientHandle`	—
`GftProviderHandle`	—
`GftClientDirectConfigurationRequestCompleteHandler`	—
`GftProviderDirectConfigurationRequestHandler`	—

Event ID 984 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`LayerName`	—
`Path`	—

Event ID 984 — VfpExt on port %1 layer %2 matched a redirect rule, using reconcilation path {%3}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 layer %2 matched a redirect rule, using reconcilation path {%3}

Fields

Name	Description
`PortId`	—
`LayerName`	—
`Path`	—

Event ID 990 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SrcPortId`	—
`SrcPortName`	—
`SrcPortFriendlyName`	—
`TargetPortId`	—
`TargetPortName`	—
`TargetPortFriendlyName`	—
`IsMirror`	—
`Packet`	—
`OriginalPacket`	—

Event ID 990 — VfpExt hairpin processing dropped packet because destination port after hairpin processing is same as original source part.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt hairpin processing dropped packet because destination port after hairpin processing is same as original source part. Source port %1 (Name = %2, FriendlyName = %3) Target port %4 (Name = %5, FriendlyName = %6) IsMirror = %7, Packet = %8, Original Packet = %9

Fields

Name	Description
`SrcPortId`	—
`SrcPortName`	—
`SrcPortFriendlyName`	—
`TargetPortId`	—
`TargetPortName`	—
`TargetPortFriendlyName`	—
`IsMirror`	—
`Packet`	—
`OriginalPacket`	—

Event ID 1000 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`SwitchName`	—
`Status`	—
`StatusLocation`	—

Event ID 1000 — VFP PktMon Registration failed for switch %1 with status %2 and statusLocation %3.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VFP PktMon Registration failed for switch %1 with status %2 and statusLocation %3

Fields

Name	Description
`SwitchName`	—
`Status`	—
`StatusLocation`	—

Event ID 1010 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`EnableHardwareCaps`	—
`EnableHardwareReservations`	—
`EnableSoftwareReservations`	—
`Flags`	—
`Status`	—
`FailReason`	—

Event ID 1010 — VfpExt QoS config with EnableHardwareCaps=.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt QoS config with EnableHardwareCaps=%1, EnableHardwareReservations=%2, EnableSoftwareReservations=%3, Flags=%4, failed with status:(%5), reason:(%6)

Fields

Name	Description
`EnableHardwareCaps`	—
`EnableHardwareReservations`	—
`EnableSoftwareReservations`	—
`Flags`	—
`Status`	—
`FailReason`	—

Event ID 1011 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortName`	—
`AttachedFunctionId`	—
`Reason`	—
`Status`	—

Event ID 1011 — VPort OID failed for VportName=.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VPort OID failed for VportName=%1, AttachedFunctionId=%2, status=(%4), reason=(%3)

Fields

Name	Description
`PortName`	—
`AttachedFunctionId`	—
`Reason`	—
`Status`	—

Event ID 1012 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 1012 — %6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 1013 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 1013 — %6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 1014 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1014 — VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}, gftFlags = %12

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1015 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1015 — VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, ...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}, gftFlags = %12

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1016 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1016 — VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1017 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1017 — VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}.

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1018 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 1018 — %6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 1019 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 1019 — %6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7,...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`GroupId`	—
`RuleId`	—
`RuleType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`GreKey`	—
`Status`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—
`StatusLocation`	—

Event ID 1020 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1020 — VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol = %9, isTcpSyn = %10} to flow {layer = %3, flow type = %4}. GftFlags = %13.

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv4Addr`	—
`DstIpv4Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1021 —

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Operational

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—

Event ID 1021 — VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol...

Provider: Microsoft-Windows-Hyper-V-VfpExt
Channel: Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message

VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol = %9, isTcpSyn = %10} to flow {layer = %3, flow type = %4}. GftFlags = %13.

Fields

Name	Description
`PortId`	—
`Direction`	—
`LayerId`	—
`FlowType`	—
`SrcIpv6Addr`	—
`DstIpv6Addr`	—
`SrcPort`	—
`DstPort`	—
`IpProtocol`	—
`IsTcpSyn`	—
`PortName`	—
`PortFriendlyName`	—
`GftFlags`	—