Microsoft-Windows-Hyper-V-VfpExt

440 events across 2 channels

Event IDTitleChannel
1VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) Type …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1Operational
2VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
2Operational
51VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped …Microsoft-Windows-Hyper-V-VfpExt-Analytic
51Operational
52VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped …Microsoft-Windows-Hyper-V-VfpExt-Analytic
52Operational
53VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped …Microsoft-Windows-Hyper-V-VfpExt-Analytic
53Operational
54VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped …Microsoft-Windows-Hyper-V-VfpExt-Analytic
54Operational
55VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped …Microsoft-Windows-Hyper-V-VfpExt-Analytic
55Operational
56VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped …Microsoft-Windows-Hyper-V-VfpExt-Analytic
56Operational
57VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped …Microsoft-Windows-Hyper-V-VfpExt-Analytic
57Operational
100VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
100Operational
101RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
101Operational
102RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
102Operational
103RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
103Operational
104RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
104Operational
105RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
105Operational
106VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched …Microsoft-Windows-Hyper-V-VfpExt-Analytic
106Operational
107VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched …Microsoft-Windows-Hyper-V-VfpExt-Analytic
107Operational
108VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched …Microsoft-Windows-Hyper-V-VfpExt-Analytic
108Operational
109VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched …Microsoft-Windows-Hyper-V-VfpExt-Analytic
109Operational
110VfpExt has finished processing Directionpackets on port PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
110Operational
111VfpExt has finished processing Directionpackets on port PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
111Operational
112VfpExt has finished processing Directionpackets on port PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
112Operational
113VfpExt has finished processing Directionpackets on port PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
113Operational
114VfpExt has finished processing Directionpackets on port PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
114Operational
115VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found …Microsoft-Windows-Hyper-V-VfpExt-Analytic
115Operational
116VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found …Microsoft-Windows-Hyper-V-VfpExt-Analytic
116Operational
117VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found …Microsoft-Windows-Hyper-V-VfpExt-Analytic
117Operational
118VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found …Microsoft-Windows-Hyper-V-VfpExt-Analytic
118Operational
119VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found …Microsoft-Windows-Hyper-V-VfpExt-Analytic
119Operational
120VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found …Microsoft-Windows-Hyper-V-VfpExt-Analytic
120Operational
121RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
121Operational
122VfpExt has finished processing Directionpackets on port PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
122Operational
151VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) rewrote …Microsoft-Windows-Hyper-V-VfpExt-Analytic
151Operational
152VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) rewrote …Microsoft-Windows-Hyper-V-VfpExt-Analytic
152Operational
153VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) rewrote …Microsoft-Windows-Hyper-V-VfpExt-Analytic
153Operational
154VfpExt on port PortId (Name = PortUniqueName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
154Operational
155VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
155Operational
156VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
156Operational
157VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
157Operational
158VfpExt on port PortId (Name = PortUniqueName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
158Operational
201VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
201Operational
202VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
202Operational
203VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
203Operational
204VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
204Operational
205VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
205Operational
206VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
206Operational
207VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
207Operational
208VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
208Operational
251VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) added …Microsoft-Windows-Hyper-V-VfpExt-Analytic
251Operational
252VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
252Operational
253VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
253Operational
254VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended …Microsoft-Windows-Hyper-V-VfpExt-Analytic
254Operational
255VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended …Microsoft-Windows-Hyper-V-VfpExt-Analytic
255Operational
256VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended …Microsoft-Windows-Hyper-V-VfpExt-Analytic
256Operational
257VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended …Microsoft-Windows-Hyper-V-VfpExt-Analytic
257Operational
301VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
301Operational
302VfpExt on QoS queue QueueName performing action QosQueueAction for port PortId …Microsoft-Windows-Hyper-V-VfpExt-Analytic
302Operational
303VfpExt on max cap queue MaxQueuePointer with rate = Rate performing action …Microsoft-Windows-Hyper-V-VfpExt-Analytic
303Operational
304Subscriber SubscriberContext has subscribed for notifications in compartment id …Microsoft-Windows-Hyper-V-VfpExt-Analytic
304Operational
305Subscriber SubscriberContext has unsubscribed from notifications in compartment …Microsoft-Windows-Hyper-V-VfpExt-Analytic
305Operational
310A ND mapping has been added with status Status: { next hop ip NextHop, MAC …Microsoft-Windows-Hyper-V-VfpExt-Analytic
310Operational
311A ND mapping has been added with status Status: { next hop ip NextHop, MAC …Microsoft-Windows-Hyper-V-VfpExt-Analytic
311Operational
312A ND mapping has been deleted: { next hop ip NextHop, interface InterfaceLuid, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
312Operational
313A ND mapping has been deleted: { next hop ip NextHop, interface InterfaceLuid, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
313Operational
314A flow matched PA route rule: { rule context RuleContext, src ip SrcIP, dst ip …Microsoft-Windows-Hyper-V-VfpExt-Analytic
314Operational
315A flow matched PA route rule: { rule context RuleContext, src ip SrcIP, dst ip …Microsoft-Windows-Hyper-V-VfpExt-Analytic
315Operational
316A callback from IP for PA route rule: { rule context RuleContext, flags Flags, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
316Operational
317A callback from IP for PA route rule: { rule context RuleContext, flags Flags, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
317Operational
318VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) added …Microsoft-Windows-Hyper-V-VfpExt-Analytic
318Operational
319VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
319Operational
320VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
320Operational
321VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) added …Microsoft-Windows-Hyper-V-VfpExt-Analytic
321Operational
322VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
322Operational
323VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
323Operational
324VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) added …Microsoft-Windows-Hyper-V-VfpExt-Analytic
324Operational
325VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
325Operational
326VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
326Operational
327A flow matched Mapencap rule: {rule context RuleContext, original dest mac = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
327Operational
328A flow matched Mapencap rule: {rule context RuleContext, original dest mac = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
328Operational
329A flow matched Mapencap rule: {rule context RuleContext, original dest mac = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
329Operational
330A flow matched Mapencap rule: {rule context RuleContext, original dest mac = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
330Operational
331QoS reservation created line LineId on switch SwitchName with …Microsoft-Windows-Hyper-V-VfpExt-Analytic
331Operational
332QoS reservation updated line LineId on switch SwitchName with …Microsoft-Windows-Hyper-V-VfpExt-Analytic
332Operational
333QoS reservation deleted line LineId on switch SwitchName with …Microsoft-Windows-Hyper-V-VfpExt-Analytic
333Operational
334QoS reservation line LineId on switch SwitchName changes available BW with …Microsoft-Windows-Hyper-V-VfpExt-Analytic
334Operational
335QoS reservation for line LineId on switch SwitchName handles an external NIC …Microsoft-Windows-Hyper-V-VfpExt-Analytic
335Operational
336QoS reservation for line LineId on switch SwitchName handles an external NIC …Microsoft-Windows-Hyper-V-VfpExt-Analytic
336Operational
337QoS reservation for line LineId on switch SwitchName handles an external NIC …Microsoft-Windows-Hyper-V-VfpExt-Analytic
337Operational
338QoS reservation for line LineId handles a new rate allocation event: …Microsoft-Windows-Hyper-V-VfpExt-Analytic
338Operational
339QoS reservation for line LineId on switch SwitchName adds queue QueueName to the …Microsoft-Windows-Hyper-V-VfpExt-Analytic
339Operational
340QoS reservation for line LineId on switch SwitchName deletes queue QueueName …Microsoft-Windows-Hyper-V-VfpExt-Analytic
340Operational
341VfpExt QoS queue QueueName with EnforceIntraHostLimit=EnforceIntraHostLimit, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
341Operational
342VfpExt QoS queue QueueName with EnforceIntraHostLimit=EnforceIntraHostLimit, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
342Operational
343VfpExt QoS queue QueueName and port PortId successfully performed action …Microsoft-Windows-Hyper-V-VfpExt-Analytic
343Operational
344VfpExt QoS queue QueueName and port PortId failed action 'Action' with reason …Microsoft-Windows-Hyper-V-VfpExt-Analytic
344Operational
345VfpExt QoS reservation on vswitch 'SwitchName' successfully performed action …Microsoft-Windows-Hyper-V-VfpExt-Analytic
345Operational
346VfpExt QoS reservation on vswitch 'SwitchName' failed action 'Operation' with …Microsoft-Windows-Hyper-V-VfpExt-Analytic
346Operational
347VfpExt QoS reservation on vswitch 'SwitchName' got external NIC event 'Event', …Microsoft-Windows-Hyper-V-VfpExt-Analytic
347Operational
348VfpExt QoS reservation on vswitch 'SwitchName' and queue 'QueueName' with …Microsoft-Windows-Hyper-V-VfpExt-Analytic
348Operational
349VfpExt QoS reservation (line:'LineId') has congestion control event 'Event'.Microsoft-Windows-Hyper-V-VfpExt-Analytic
349Operational
351VfpExt dropped a packet from port SrcPortId (Name = SrcPortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
351Operational
352VfpExt successfully forwarded a packet from port SrcPortId (Name = SrcPortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
352Operational
353VfpExt is skipping destination port DstPortId (Name = DstPortName, FriendlyName …Microsoft-Windows-Hyper-V-VfpExt-Analytic
353Operational
354VfpExt failed to forward packet from source port SrcPortId (Name = SrcPortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
354Operational
355The save operation for port SrcPortId (Name = PortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
355Operational
356The save completion operation for port SrcPortId (Name = PortName, FriendlyName …Microsoft-Windows-Hyper-V-VfpExt-Analytic
356Operational
357The save operation for port SrcPortId (Name = PortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
357Operational
358Succesfully saved port SrcPortId (Name = PortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
358Operational
359The overall save operation for port SrcPortId (Name = PortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
359Operational
360Succesfully restored port SrcPortId (Name = PortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
360Operational
361Save request for port SrcPortId (Name = PortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
361Operational
362Save request for port SrcPortId (Name = PortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
362Operational
363Restore request for port SrcPortId (Name = PortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
363Operational
364Restore request failure for port SrcPortId (Name = PortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
364Operational
400RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
400Operational
401RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
401Operational
402RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
402Operational
403RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
403Operational
404RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
404Operational
405RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
405Operational
451Redirect for port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
451Operational
452OID Oid issued on port ID PortId (Name = PortName, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
452Operational
453Status Indication code StatusCode from port ID PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
453Operational
454NDIS_OFFLOAD state in the context of Context.Microsoft-Windows-Hyper-V-VfpExt-Analytic
454Operational
455OID_RECEIVE_FILTER_SET_FILTER for port ID PortId (Name = PortName, FriendlyName …Microsoft-Windows-Hyper-V-VfpExt-Analytic
455Operational
456PA route rule update callback: { rule context RuleContext, elapsed time …Microsoft-Windows-Hyper-V-VfpExt-Analytic
456Operational
500DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), …Microsoft-Windows-Hyper-V-VfpExt-Analytic
500Operational
501DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), …Microsoft-Windows-Hyper-V-VfpExt-Analytic
501Operational
502DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), …Microsoft-Windows-Hyper-V-VfpExt-Analytic
502Operational
503DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), …Microsoft-Windows-Hyper-V-VfpExt-Analytic
503Operational
504DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), …Microsoft-Windows-Hyper-V-VfpExt-Analytic
504Operational
505DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), …Microsoft-Windows-Hyper-V-VfpExt-Analytic
505Operational
506DTLS on Port PortId.Microsoft-Windows-Hyper-V-VfpExt-Analytic
506Operational
507DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), …Microsoft-Windows-Hyper-V-VfpExt-Analytic
507Operational
508DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), …Microsoft-Windows-Hyper-V-VfpExt-Analytic
508Operational
509PADiscoveryEvent port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
509Operational
551Port PortId (Name = PortName, FriendlyName = PortFriendlyName) parsed DHCP …Microsoft-Windows-Hyper-V-VfpExt-Analytic
551Operational
600VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) created …Microsoft-Windows-Hyper-V-VfpExt-Analytic
600Operational
601VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) created …Microsoft-Windows-Hyper-V-VfpExt-Analytic
601Operational
602VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) created …Microsoft-Windows-Hyper-V-VfpExt-Analytic
602Operational
603VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) created …Microsoft-Windows-Hyper-V-VfpExt-Analytic
603Operational
604VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched …Microsoft-Windows-Hyper-V-VfpExt-Analytic
604Operational
605VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched …Microsoft-Windows-Hyper-V-VfpExt-Analytic
605Operational
606VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched …Microsoft-Windows-Hyper-V-VfpExt-Analytic
606Operational
607VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched …Microsoft-Windows-Hyper-V-VfpExt-Analytic
607Operational
608VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deleted …Microsoft-Windows-Hyper-V-VfpExt-Analytic
608Operational
609VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deleted …Microsoft-Windows-Hyper-V-VfpExt-Analytic
609Operational
610VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deleted …Microsoft-Windows-Hyper-V-VfpExt-Analytic
610Operational
611VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deleted …Microsoft-Windows-Hyper-V-VfpExt-Analytic
611Operational
650File operation FileOperation on file FileName with size FileSize completed with …Microsoft-Windows-Hyper-V-VfpExt-Analytic
650Operational
700Failure in control processing for object.Microsoft-Windows-Hyper-V-VfpExt-Analytic
700Operational
701Success during control processing for object.Microsoft-Windows-Hyper-V-VfpExt-Analytic
701Operational
702Ioctl completed.Microsoft-Windows-Hyper-V-VfpExt-Analytic
702Operational
703Failed when setting port information.Microsoft-Windows-Hyper-V-VfpExt-Analytic
703Operational
704Ioctl started.Microsoft-Windows-Hyper-V-VfpExt-Analytic
704Operational
705Failed when setting switch information.Microsoft-Windows-Hyper-V-VfpExt-Analytic
705Operational
706Ioctl pended.Microsoft-Windows-Hyper-V-VfpExt-Analytic
706Operational
751Matched redirect flow for deletion.Microsoft-Windows-Hyper-V-VfpExt-Analytic
751Operational
752Matched redirect flow for deletion.Microsoft-Windows-Hyper-V-VfpExt-Analytic
752Operational
800GFT offload capabilities in the context of Context.Microsoft-Windows-Hyper-V-VfpExt-Analytic
800Operational
801GFT offload counters updated Context.Microsoft-Windows-Hyper-V-VfpExt-Analytic
801Operational
802GFT aggregate counters are not freed because either the port could not be …Microsoft-Windows-Hyper-V-VfpExt-Analytic
802Operational
803VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) reset …Microsoft-Windows-Hyper-V-VfpExt-Analytic
803Operational
804VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) changed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
804Operational
805VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) UF …Microsoft-Windows-Hyper-V-VfpExt-Analytic
805Operational
806VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) UF …Microsoft-Windows-Hyper-V-VfpExt-Analytic
806Operational
807VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) UF …Microsoft-Windows-Hyper-V-VfpExt-Analytic
807Operational
808Skipping Sx Port context PortContext (Name = Name, FriendlyName = FriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
808Operational
809Vfp failed to issue OID for VPort PortId with status Status due to …Microsoft-Windows-Hyper-V-VfpExt-Analytic
809Operational
810Failed to set GFT port parser settings on port PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
810Operational
900Tag Id TagId completed operation with status: Status.Microsoft-Windows-Hyper-V-VfpExt-Analytic
900Operational
950VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ignore …Microsoft-Windows-Hyper-V-VfpExt-Analytic
950Operational
951VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ignore …Microsoft-Windows-Hyper-V-VfpExt-Analytic
951Operational
952VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ignore …Microsoft-Windows-Hyper-V-VfpExt-Analytic
952Operational
953VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ignore …Microsoft-Windows-Hyper-V-VfpExt-Analytic
953Operational
954VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
954Operational
955VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
955Operational
956VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
956Operational
957VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
957Operational
958VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
958Operational
959VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
959Operational
960VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
960Operational
961VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
961Operational
962VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) failed …Microsoft-Windows-Hyper-V-VfpExt-Analytic
962Operational
963Replacing layer flow addresses succeeded on port PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
963Operational
964Replacing layer flow addresses failed on port PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
964Operational
965VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ran …Microsoft-Windows-Hyper-V-VfpExt-Analytic
965Operational
966Suspended live migration state change on port PortId (Name = PortName, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
966Operational
967VfpExt set NDIS_NIC_SWITCH_VPORT_PARAMS_ENFORCE_MAX_SG_LIST on port (name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
967Operational
968VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with …Microsoft-Windows-Hyper-V-VfpExt-Analytic
968Operational
969Skipping Sx Switch context SwitchContext (Name = Name, FriendlyName = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
969Operational
970Managing VM Context failed for VMId: VmId on port (name = PortName, FriendlyName …Microsoft-Windows-Hyper-V-VfpExt-Analytic
970Operational
971VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
971Operational
972VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
972Operational
973VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
973Operational
974VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
974Operational
975VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
975Operational
976VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
976Operational
977VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
977Operational
978VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) …Microsoft-Windows-Hyper-V-VfpExt-Analytic
978Operational
979VfpExt on port PortId received mappingdesc for following mapping: {mapping index …Microsoft-Windows-Hyper-V-VfpExt-Analytic
979Operational
980VfpExt on port PortId received mappingdesc for following mapping: {mapping index …Microsoft-Windows-Hyper-V-VfpExt-Analytic
980Operational
981Applying GFT Multi-Tenant Settings status Status - port VPortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
981Operational
982Reason, status = Status.Microsoft-Windows-Hyper-V-VfpExt-Analytic
982Operational
983GFT direct configuration dispatch table for switch SwitchName returned status …Microsoft-Windows-Hyper-V-VfpExt-Analytic
983Operational
984VfpExt on port PortId layer LayerName matched a redirect rule, using …Microsoft-Windows-Hyper-V-VfpExt-Analytic
984Operational
990VfpExt hairpin processing dropped packet because destination port after hairpin …Microsoft-Windows-Hyper-V-VfpExt-Analytic
990Operational
1000VFP PktMon Registration failed for switch SwitchName with status Status and …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1000Operational
1010VfpExt QoS config with EnableHardwareCaps=EnableHardwareCaps, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1010Operational
1011VPort OID failed for VportName=PortName, AttachedFunctionId=AttachedFunctionId, …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1011Operational
1012RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1012Operational
1013RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1013Operational
1014VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1014Operational
1015VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1015Operational
1016VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1016Operational
1017VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1017Operational
1018RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1018Operational
1019RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1019Operational
1020VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1020Operational
1021VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched …Microsoft-Windows-Hyper-V-VfpExt-Analytic
1021Operational

Event ID 1 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) Type Direction raw packets.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) Type Direction raw packets. GftFlags is GftFlags. Contents (up to 64B) of the first packet in the NBL = PktContents.

Message #

VfpExt on port %1 (Name = %6, FriendlyName = %7) %3 %2 raw packets. GftFlags is %8. Contents (up to 64B) of the first packet in the NBL = %5

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Type UInt8
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) raw packets. GftFlags is . Contents (up to 64B) of the first packet in the NBL =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Type UInt8
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 2 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) injected raw packets.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) injected raw packets. Contents (up to 64B) of the first packet in the NBL = PktContents.

Message #

VfpExt on port %1 (Name = %4, FriendlyName = %5) injected raw packets. Contents (up to 64B) of the first packet in the NBL = %3

Fields #

NameDescription
PortId UInt32
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 2 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) injected raw packets. Contents (up to 64B) of the first packet in the NBL =.

Fields #

NameDescription
PortId UInt32
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 51 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped Direction raw packets because of Reason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped Direction raw packets because of Reason. GftFlags is GftFlags. Contents (up to 64B) of the first packet in the NBL = PktContents (DropStatus=Status, DropLocation = StatusLocation).

Message #

VfpExt on port %1 (Name = %6, FriendlyName = %7) dropped %2 raw packets because of %3. GftFlags is %8. Contents (up to 64B) of the first packet in the NBL = %5 (DropStatus=%9, DropLocation = %10)

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
Status HexInt32NTSTATUS reference
StatusLocation HexInt32

Event ID 51 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) dropped raw packets because of . GftFlags is . Contents (up to 64B) of the first packet in the NBL = (DropStatus=, DropLocation = ).

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
Status HexInt32NTSTATUS reference
StatusLocation HexInt32

Event ID 52 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped Directionpackets because of Reason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped Directionpackets because of Reason. {src mac = SrcMacAddr, dst mac = DstMacAddr, type = Type, gftFlags = GftFlags}.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) dropped %2packets because of %3. {src mac = %4, dst mac = %5, type = %6, gftFlags = %9}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
Type UInt16
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 52 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) dropped packets because of . {src mac = , dst mac = , type = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
Type UInt16
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 53 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped Directionpackets because of Reason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped Directionpackets because of Reason. {src mac = SrcMacAddr, dst mac = DstMacAddr}:{src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, protocol = IpProtocol, gftFlags = GftFlags}.

Message #

VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2packets because of %3. {src mac = %4, dst mac = %5}:{src ip = %6, dst ip = %7, protocol = %8, gftFlags = %11}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 53 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) dropped packets because of . {src mac = , dst mac = }:{src ip = , dst ip = , protocol = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 54 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped Directionpackets because of Reason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped Directionpackets because of Reason. {src mac = SrcMacAddr, dst mac = DstMacAddr}:{src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, protocol = IpProtocol, gftFlags = GftFlags}.

Message #

VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2packets because of %3. {src mac = %4, dst mac = %5}:{src ip = %6, dst ip = %7, protocol = %8, gftFlags = %11}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 54 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) dropped packets because of . {src mac = , dst mac = }:{src ip = , dst ip = , protocol = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 55 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped Directionpackets because of Reason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) dropped packets because of . {src mac = , dst mac = }:{src ip = , dst ip = , protocol = }:{src port = , dst port = , isTcpSyn = , gftFlags = }.

Message #

VfpExt on port %1 (Name = %12, FriendlyName = %13) dropped %2packets because of %3. {src mac = %4, dst mac = %5}:{src ip = %6, dst ip = %7, protocol = %8}:{src port = %9, dst port = %10, isTcpSyn = %11, gftFlags = %14}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 55 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) dropped packets because of . {src mac = , dst mac = }:{src ip = , dst ip = , protocol = }:{src port = , dst port = , isTcpSyn = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 56 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped Directionpackets because of Reason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) dropped packets because of . {src mac = , dst mac = }:{src ip = , dst ip = , protocol = }:{src port = , dst port = , isTcpSyn = , gftFlags = }.

Message #

VfpExt on port %1 (Name = %12, FriendlyName = %13) dropped %2packets because of %3. {src mac = %4, dst mac = %5}:{src ip = %6, dst ip = %7, protocol = %8}:{src port = %9, dst port = %10, isTcpSyn = %11, gftFlags = %14}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 56 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) dropped packets because of . {src mac = , dst mac = }:{src ip = , dst ip = , protocol = }:{src port = , dst port = , isTcpSyn = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 57 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped DirectionARP packets because of Reason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) dropped DirectionARP packets because of Reason. ARP type - ArpType, {sender mac = SenderMacAddr, sender ip = SenderIpAddr, target mac = TargetMacAddr, target ip = TargetIpAddr, gftFlags = GftFlags}.

Message #

VfpExt on port %1 (Name = %9, FriendlyName = %10) dropped %2ARP packets because of %3. ARP type - %4, {sender mac = %5, sender ip = %6, target mac = %7, target ip = %8, gftFlags = %11}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
ArpType UInt16
SenderMacAddr UnicodeString
SenderIpAddr UInt32
TargetMacAddr UnicodeString
TargetIpAddr UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 57 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) dropped ARP packets because of . ARP type - , {sender mac = , sender ip = , target mac = , target ip = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Reason UInt8
ArpType UInt16
SenderMacAddr UnicodeString
SenderIpAddr UInt32
TargetMacAddr UnicodeString
TargetIpAddr UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 100 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ProcessingType Direction raw packets.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ProcessingType Direction raw packets. GftFlags is GftFlags, ResumeLayer is ResumeLayer. Contents (up to 64B) of the first packet in the NBL = PktContents.

Message #

VfpExt on port %1 (Name = %6, FriendlyName = %7) %3 %2 raw packets. GftFlags is %8, ResumeLayer is %9. Contents (up to 64B) of the first packet in the NBL = %5

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
ProcessingType UInt32
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
ResumeLayer UInt32

Event ID 100 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) raw packets. GftFlags is , ResumeLayer is . Contents (up to 64B) of the first packet in the NBL =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
ProcessingType UInt32
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
ResumeLayer UInt32

Event ID 101 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow ID {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 101 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 102 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow ID {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 102 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 103 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow id {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7, dst ip = %8, protocol = %9, icmp type = %10}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %14}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 103 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 104 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow id {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7, dst ip = %8, protocol = %9, icmp type = %10}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %14}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 104 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 105 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow id {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 105 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 106 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, src port = SrcPort, dst port = DstPort, p...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) matched packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = } to flow {layer = , flow type = }. GftFlags = .

Message #

VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol = %9, isTcpSyn = %10} to flow {layer = %3, flow type = %4}. GftFlags = %13.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 106 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) matched packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = } to flow {layer = , flow type = }. GftFlags = .

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 107 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, src port = SrcPort, dst port = DstPort, p...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) matched packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = } to flow {layer = , flow type = }. GftFlags = .

Message #

VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol = %9, isTcpSyn = %10} to flow {layer = %3, flow type = %4}. GftFlags = %13.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 107 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) matched packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = } to flow {layer = , flow type = }. GftFlags = .

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 108 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, protocol = IpProtocol, icmp type = IcmpTy...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, protocol = IpProtocol, icmp type = IcmpType} to flow {layer = LayerId, flow type = FlowType}. GftFlags = GftFlags.

Message #

VfpExt on port %1 (Name = %9, FriendlyName = %10) matched %2packets with flow id {src ip = %5, dst ip = %6, protocol = %7, icmp type = %8} to flow {layer = %3, flow type = %4}. GftFlags = %11.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 108 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) matched packets with flow id {src ip = , dst ip = , protocol = , icmp type = } to flow {layer = , flow type = }. GftFlags = .

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 109 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, protocol = IpProtocol, icmp type = IcmpTy...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, protocol = IpProtocol, icmp type = IcmpType} to flow {layer = LayerId, flow type = FlowType}. GftFlags = GftFlags.

Message #

VfpExt on port %1 (Name = %9, FriendlyName = %10) matched %2packets with flow id {src ip = %5, dst ip = %6, protocol = %7, icmp type = %8} to flow {layer = %3, flow type = %4}. GftFlags = %11.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 109 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) matched packets with flow id {src ip = , dst ip = , protocol = , icmp type = } to flow {layer = , flow type = }. GftFlags = .

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 110 — VfpExt has finished processing Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status Status and statusLocation StatusLocation with flow id {src ip = %...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt has finished processing %2packets on port %1 (Name = %10, FriendlyName = %11) with status %3 and statusLocation %13 with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}. GftFlags = %12.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 110 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 111 — VfpExt has finished processing Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status Status and statusLocation StatusLocation with flow id {src ip = %...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt has finished processing %2packets on port %1 (Name = %10, FriendlyName = %11) with status %3 and statusLocation %13 with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}. GftFlags = %12.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 111 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 112 — VfpExt has finished processing Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status Status and statusLocation StatusLocation with flow id {src ip = SrcIpv4...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt has finished processing packets on port (Name = , FriendlyName = ) with status and statusLocation with flow id {src ip = , dst ip = , protocol = , icmp type = }. GftFlags = .

Message #

VfpExt has finished processing %2packets on port %1 (Name = %8, FriendlyName = %9) with status %3 and statusLocation %11 with flow id {src ip = %4, dst ip = %5, protocol = %6, icmp type = %7}. GftFlags = %10.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 112 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt has finished processing packets on port (Name = , FriendlyName = ) with status and statusLocation with flow id {src ip = , dst ip = , protocol = , icmp type = }. GftFlags = .

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 113 — VfpExt has finished processing Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status Status and statusLocation StatusLocation with flow id {src ip = SrcIpv6...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt has finished processing packets on port (Name = , FriendlyName = ) with status and statusLocation with flow id {src ip = , dst ip = , protocol = , icmp type = }. GftFlags = .

Message #

VfpExt has finished processing %2packets on port %1 (Name = %8, FriendlyName = %9) with status %3 and statusLocation %11 with flow id {src ip = %4, dst ip = %5, protocol = %6, icmp type = %7}. GftFlags = %10.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 113 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt has finished processing packets on port (Name = , FriendlyName = ) with status and statusLocation with flow id {src ip = , dst ip = , protocol = , icmp type = }. GftFlags = .

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 114 — VfpExt has finished processing Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status Status and statusLocation StatusLocation with flow id {src ip = SrcIpv4...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt has finished processing Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status Status and statusLocation StatusLocation with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, gre key = GreKey}. GftFlags = GftFlags.

Message #

VfpExt has finished processing %2packets on port %1 (Name = %7, FriendlyName = %8) with status %3 and statusLocation %10 with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 114 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt has finished processing packets on port (Name = , FriendlyName = ) with status and statusLocation with flow id {src ip = , dst ip = , gre key = }. GftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 115 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, src port = Sr...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = }, gftFlags =.

Message #

VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}, gftFlags = %12

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 115 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = }, gftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 116 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, src port = Sr...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = }, gftFlags =.

Message #

VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}, gftFlags = %12

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 116 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = }, gftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 117 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, protocol = Ip...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, protocol = IpProtocol, icmp type = IcmpType}. GftFlags = GftFlags.

Message #

VfpExt on port %1 (Name = %8, FriendlyName = %9) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, protocol = %6, icmp type = %7}. GftFlags = %10

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 117 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , protocol = , icmp type = }. GftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 118 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, protocol = Ip...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, protocol = IpProtocol, icmp type = IcmpType}. GftFlags = GftFlags.

Message #

VfpExt on port %1 (Name = %8, FriendlyName = %9) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, protocol = %6, icmp type = %7}. GftFlags = %10

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 118 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , protocol = , icmp type = }. GftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 119 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, gre key = Gre...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, gre key = GreKey}. GftFlags = GftFlags.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 119 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , gre key = }. GftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 120 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, gre key = Gre...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, gre key = GreKey}. GftFlags = GftFlags.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 120 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , gre key = }. GftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 121 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow id {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 121 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 122 — VfpExt has finished processing Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status Status and statusLocation StatusLocation with flow id {src ip = SrcIpv6...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt has finished processing Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status Status and statusLocation StatusLocation with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, gre key = GreKey}. GftFlags = GftFlags.

Message #

VfpExt has finished processing %2packets on port %1 (Name = %7, FriendlyName = %8) with status %3 and statusLocation %10 with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 122 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt has finished processing packets on port (Name = , FriendlyName = ) with status and statusLocation with flow id {src ip = , dst ip = , gre key = }. GftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Status UInt32NTSTATUS reference
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 151 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) rewrote Directionpackets with following header: {src mac = SrcMacAddr, dst mac = DstMacAddr}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) rewrote Directionpackets with following header: {src mac = SrcMacAddr, dst mac = DstMacAddr}.

Message #

VfpExt on port %1 (Name = %5, FriendlyName = %6) rewrote %2packets with following header: {src mac = %3, dst mac = %4}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 151 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) rewrote packets with following header: {src mac = , dst mac = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 152 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) rewrote Directionpackets with following header: {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr}:{src port = SrcPort, dst port =...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) rewrote Directionpackets with following header: {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr}:{src port = SrcPort, dst port = DstPort}.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) rewrote %2packets with following header: {src ip = %3, dst ip = %4}:{src port = %5, dst port = %6}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 152 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) rewrote packets with following header: {src ip = , dst ip = }:{src port = , dst port = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 153 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) rewrote Directionpackets with following header: {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr}:{src port = SrcPort, dst port =...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) rewrote Directionpackets with following header: {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr}:{src port = SrcPort, dst port = DstPort}.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) rewrote %2packets with following header: {src ip = %3, dst ip = %4}:{src port = %5, dst port = %6}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 153 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) rewrote packets with following header: {src ip = , dst ip = }:{src port = , dst port = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 154 — VfpExt on port PortId (Name = PortUniqueName, FriendlyName = PortFriendlyName) encapped Directionpackets with following header: {src mac = SrcMacAddr, dst mac = DstMacAddr}:{src ip = SrcIpv4Addr, d...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortUniqueName, FriendlyName = PortFriendlyName) encapped Directionpackets with following header: {src mac = SrcMacAddr, dst mac = DstMacAddr}:{src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, encap type = EncapType, isolation id = GreKey}.

Message #

VfpExt on port %1 (Name = %9, FriendlyName = %10) encapped %2packets with following header: {src mac = %3, dst mac = %4}:{src ip = %5, dst ip = %6, encap type = %7, isolation id = %8}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
EncapType UInt8
GreKey UInt32
PortUniqueName UnicodeString
PortFriendlyName UnicodeString

Event ID 154 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) encapped packets with following header: {src mac = , dst mac = }:{src ip = , dst ip = , encap type = , isolation id = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
EncapType UInt8
GreKey UInt32
PortUniqueName UnicodeString
PortFriendlyName UnicodeString

Event ID 155 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) decapped Directionpackets.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) decapped Directionpackets.

Message #

VfpExt on port %1 (Name = %3, FriendlyName = %4) decapped %2packets

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 155 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) decapped packets.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 156 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) duplicated Directionpackets.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) duplicated Directionpackets. GftFlags = GftFlags. Contents (up to 64B) of the first packet = PktContents.

Message #

VfpExt on port %1 (Name = %5, FriendlyName = %6) duplicated %2packets. GftFlags = %7. Contents (up to 64B) of the first packet = %4

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 156 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) duplicated packets. GftFlags = . Contents (up to 64B) of the first packet =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 157 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) swallowed Directionpacket.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) swallowed Directionpacket. GftFlags = GftFlags. Contents (up to 64B) of the first packet = PktContents.

Message #

VfpExt on port %1 (Name = %5, FriendlyName = %6) swallowed %2packet. GftFlags = %7. Contents (up to 64B) of the first packet = %4

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 157 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) swallowed packet. GftFlags = . Contents (up to 64B) of the first packet =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
PktLen UInt32
PktContents Binary
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 158 — VfpExt on port PortId (Name = PortUniqueName, FriendlyName = PortFriendlyName) encapped Directionpackets with following header: {src mac = SrcMacAddr, dst mac = DstMacAddr}:{src ip = SrcIpv6Addr, d...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortUniqueName, FriendlyName = PortFriendlyName) encapped Directionpackets with following header: {src mac = SrcMacAddr, dst mac = DstMacAddr}:{src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, encap type = EncapType, isolation id = GreKey}.

Message #

VfpExt on port %1 (Name = %9, FriendlyName = %10) encapped %2packets with following header: {src mac = %3, dst mac = %4}:{src ip = %5, dst ip = %6, encap type = %7, isolation id = %8}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
EncapType UInt8
GreKey UInt32
PortUniqueName UnicodeString
PortFriendlyName UnicodeString

Event ID 158 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) encapped packets with following header: {src mac = , dst mac = }:{src ip = , dst ip = , encap type = , isolation id = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
EncapType UInt8
GreKey UInt32
PortUniqueName UnicodeString
PortFriendlyName UnicodeString

Event ID 201 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deposited into nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv4Addr, start port = StartPo...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deposited into nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv4Addr, start port = StartPort, end port = EndPort, ref limit = RefLimit}.

Message #

VfpExt on port %1 (Name = %8, FriendlyName = %9) deposited into nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv4Addr UInt32
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 201 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) deposited into nat pool the following nat range: {range type = , addr = , start port = , end port = , ref limit = }.

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv4Addr UInt32
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 202 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deposited into nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv6Addr, start port = StartPo...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deposited into nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv6Addr, start port = StartPort, end port = EndPort, ref limit = RefLimit}.

Message #

VfpExt on port %1 (Name = %8, FriendlyName = %9) deposited into nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv6Addr Binary
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 202 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) deposited into nat pool the following nat range: {range type = , addr = , start port = , end port = , ref limit = }.

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv6Addr Binary
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 203 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) withdrawed from nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv4Addr, start port = StartP...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) withdrawed from nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv4Addr, start port = StartPort, end port = EndPort, ref limit = RefLimit}.

Message #

VfpExt on port %1 (Name = %8, FriendlyName = %9) withdrawed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv4Addr UInt32
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 203 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) withdrawed from nat pool the following nat range: {range type = , addr = , start port = , end port = , ref limit = }.

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv4Addr UInt32
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 204 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) withdrawed from nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv6Addr, start port = StartP...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) withdrawed from nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv6Addr, start port = StartPort, end port = EndPort, ref limit = RefLimit}.

Message #

VfpExt on port %1 (Name = %8, FriendlyName = %9) withdrawed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv6Addr Binary
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 204 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) withdrawed from nat pool the following nat range: {range type = , addr = , start port = , end port = , ref limit = }.

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv6Addr Binary
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 205 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed from nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv4Addr, start port = StartPort...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed from nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv4Addr, start port = StartPort, end port = EndPort, ref limit = RefLimit}.

Message #

VfpExt on port %1 (Name = %8, FriendlyName = %9) removed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv4Addr UInt32
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 205 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) removed from nat pool the following nat range: {range type = , addr = , start port = , end port = , ref limit = }.

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv4Addr UInt32
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 206 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed from nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv6Addr, start port = StartPort...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed from nat pool NatPoolId the following nat range: {range type = NatRangeType, addr = Ipv6Addr, start port = StartPort, end port = EndPort, ref limit = RefLimit}.

Message #

VfpExt on port %1 (Name = %8, FriendlyName = %9) removed from nat pool %2 the following nat range: {range type = %3, addr = %4, start port = %5, end port = %6, ref limit = %7}

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv6Addr Binary
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 206 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) removed from nat pool the following nat range: {range type = , addr = , start port = , end port = , ref limit = }.

Fields #

NameDescription
PortId UInt32
NatPoolId UnicodeString
NatRangeType UInt8
Ipv6Addr Binary
StartPort UInt16
EndPort UInt16
RefLimit UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 207 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) NatPortBindingAction NatPortBinding: {internal addr = InternalIpv4Addr, internal port = InternalIpv4Port, external addr = Ex...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) NatPortBindingAction NatPortBinding: {internal addr = InternalIpv4Addr, internal port = InternalIpv4Port, external addr = ExternalIpv4Addr, external port = ExternalIpv4Port, reference = Reference}.

Message #

VfpExt on port %1 (Name = %8, FriendlyName = %9) %2 NatPortBinding: {internal addr = %3, internal port = %4, external addr = %5, external port = %6, reference = %7}

Fields #

NameDescription
PortId UInt32
NatPortBindingAction UInt8
InternalIpv4Addr UInt32
InternalIpv4Port UInt16
ExternalIpv4Addr UInt32
ExternalIpv4Port UInt16
Reference UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 207 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) NatPortBinding: {internal addr = , internal port = , external addr = , external port = , reference = }.

Fields #

NameDescription
PortId UInt32
NatPortBindingAction UInt8
InternalIpv4Addr UInt32
InternalIpv4Port UInt16
ExternalIpv4Addr UInt32
ExternalIpv4Port UInt16
Reference UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 208 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) NatPortBindingAction NatPortBinding: {internal addr = InternalIpv6Addr, internal port = InternalIpv6Port, external addr = Ex...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) NatPortBindingAction NatPortBinding: {internal addr = InternalIpv6Addr, internal port = InternalIpv6Port, external addr = ExternalIpv6Addr, external port = ExternalIpv6Port, reference = Reference}.

Message #

VfpExt on port %1 (Name = %8, FriendlyName = %9) %2 NatPortBinding: {internal addr = %3, internal port = %4, external addr = %5, external port = %6, reference = %7}

Fields #

NameDescription
PortId UInt32
NatPortBindingAction UInt8
InternalIpv6Addr Binary
InternalIpv6Port UInt16
ExternalIpv6Addr Binary
ExternalIpv6Port UInt16
Reference UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 208 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) NatPortBinding: {internal addr = , internal port = , external addr = , external port = , reference = }.

Fields #

NameDescription
PortId UInt32
NatPortBindingAction UInt8
InternalIpv6Addr Binary
InternalIpv6Port UInt16
ExternalIpv6Addr Binary
ExternalIpv6Port UInt16
Reference UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 251 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) added into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa = ProviderIpv4Addr, m...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 251 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 252 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed from space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa = ProviderIpv4Addr,...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 252 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 253 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed (timer expiration) from space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 253 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 254 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended into space SpaceId the following mapping with notify Irp sent : {index type = IndexType, ip = ProviderIpv4Addr, mac =...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended into space SpaceId the following mapping with notify Irp sent : {index type = IndexType, ip = ProviderIpv4Addr, mac = MacAddr, mapping type = MappingType}.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp sent : {index type = %3, ip = %9, mac = %5, mapping type = %6}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
IndexType UInt8
IpAddr Binary
MacAddr UnicodeString
MappingType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
ProviderIpv4Addr UInt32

Event ID 254 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) pended into space the following mapping with notify Irp sent : {index type = , ip = , mac = , mapping type = }.

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
IndexType UInt8
IpAddr Binary
MacAddr UnicodeString
MappingType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
ProviderIpv4Addr UInt32

Event ID 255 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended into space SpaceId the following mapping with notify Irp missed: {index type = IndexType, ip = ProviderIpv4Addr, mac ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended into space SpaceId the following mapping with notify Irp missed: {index type = IndexType, ip = ProviderIpv4Addr, mac = MacAddr, mapping type = MappingType}.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp missed: {index type = %3, ip = %9, mac = %5, mapping type = %6}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
IndexType UInt8
IpAddr Binary
MacAddr UnicodeString
MappingType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
ProviderIpv4Addr UInt32

Event ID 255 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) pended into space the following mapping with notify Irp missed: {index type = , ip = , mac = , mapping type = }.

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
IndexType UInt8
IpAddr Binary
MacAddr UnicodeString
MappingType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
ProviderIpv4Addr UInt32

Event ID 256 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended into space SpaceId the following mapping with notify Irp sent : {index type = IndexType, ip = IpAddr, mac =...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended into space SpaceId the following mapping with notify Irp sent : {index type = IndexType, ip = IpAddr, mac = MacAddr, mapping type = MappingType}.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp sent : {index type = %3, ip = %4, mac = %5, mapping type = %6}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
IndexType UInt8
IpAddr Binary
MacAddr UnicodeString
MappingType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
ProviderIpv4Addr UInt32

Event ID 256 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) pended into space the following mapping with notify Irp sent : {index type = , ip = , mac = , mapping type = }.

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
IndexType UInt8
IpAddr Binary
MacAddr UnicodeString
MappingType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
ProviderIpv4Addr UInt32

Event ID 257 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended into space SpaceId the following mapping with notify Irp missed: {index type = IndexType, ip = IpAddr, mac ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) pended into space SpaceId the following mapping with notify Irp missed: {index type = IndexType, ip = IpAddr, mac = MacAddr, mapping type = MappingType}.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) pended into space %2 the following mapping with notify Irp missed: {index type = %3, ip = %4, mac = %5, mapping type = %6}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
IndexType UInt8
IpAddr Binary
MacAddr UnicodeString
MappingType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
ProviderIpv4Addr UInt32

Event ID 257 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) pended into space the following mapping with notify Irp missed: {index type = , ip = , mac = , mapping type = }.

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
IndexType UInt8
IpAddr Binary
MacAddr UnicodeString
MappingType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString
ProviderIpv4Addr UInt32

Event ID 301 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) performing action SerializationAction for item SerializationItemType with size ItemSize reference ItemReference version Item...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) performing action SerializationAction for item SerializationItemType with size ItemSize reference ItemReference version ItemVersion status Status: {additional context AdditionalContext}.

Message #

VfpExt on port %1 (Name = %9, FriendlyName = %10) performing action %2 for item %3 with size %4 reference %5 version %6 status %7: {additional context %8}

Fields #

NameDescription
PortId UInt32
SerializationAction UInt8
SerializationItemType UInt32
ItemSize UInt64
ItemReference UInt64
ItemVersion UInt64
Status UInt32NTSTATUS reference
AdditionalContext UInt64
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 301 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) performing action for item with size reference version status : {additional context }.

Fields #

NameDescription
PortId UInt32
SerializationAction UInt8
SerializationItemType UInt32
ItemSize UInt64
ItemReference UInt64
ItemVersion UInt64
Status UInt32NTSTATUS reference
AdditionalContext UInt64
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 302 — VfpExt on QoS queue QueueName performing action QosQueueAction for port PortId with EnforceIntraHostLimit = EnforceIntraHostLimit, TxCap = TransmitCap, TxMin = TransmitReservation, RxCap = ReceiveC...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on QoS queue QueueName performing action QosQueueAction for port PortId with EnforceIntraHostLimit = EnforceIntraHostLimit, TxCap = TransmitCap, TxMin = TransmitReservation, RxCap = ReceiveCap, TxQueue = TransmitMaxQueue, RxQueue = ReceiveMaxQueue.

Message #

VfpExt on QoS queue %1 performing action %2 for port %3 with EnforceIntraHostLimit = %4, TxCap = %5, TxMin = %6, RxCap = %7, TxQueue = %8, RxQueue = %9

Fields #

NameDescription
QueueName UnicodeString
QosQueueAction UInt8
PortId UInt32
EnforceIntraHostLimit Boolean
TransmitCap UInt32
TransmitReservation UInt32
ReceiveCap UInt32
TransmitMaxQueue UInt64
ReceiveMaxQueue UInt64

Event ID 302 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on QoS queue performing action for port with EnforceIntraHostLimit = , TxCap = , TxMin = , RxCap = , TxQueue = , RxQueue =.

Fields #

NameDescription
QueueName UnicodeString
QosQueueAction UInt8
PortId UInt32
EnforceIntraHostLimit Boolean
TransmitCap UInt32
TransmitReservation UInt32
ReceiveCap UInt32
TransmitMaxQueue UInt64
ReceiveMaxQueue UInt64

Event ID 303 — VfpExt on max cap queue MaxQueuePointer with rate = Rate performing action MaxQueueAction.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on max cap queue MaxQueuePointer with rate = Rate performing action MaxQueueAction.

Message #

VfpExt on max cap queue %1 with rate = %2 performing action %3

Fields #

NameDescription
MaxQueuePointer UInt64
Rate UInt64
MaxQueueAction UInt8

Event ID 303 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on max cap queue with rate = performing action.

Fields #

NameDescription
MaxQueuePointer UInt64
Rate UInt64
MaxQueueAction UInt8

Event ID 304 — Subscriber SubscriberContext has subscribed for notifications in compartment id CompartmentId with status = Status, flags = {all = Flags, neighbor changes = NeighborChangesFlags, route changes = Ro...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Subscriber SubscriberContext has subscribed for notifications in compartment id CompartmentId with status = Status, flags = {all = Flags, neighbor changes = NeighborChangesFlags, route changes = RouteChangesFlags}.

Message #

Subscriber %2 has subscribed for notifications in compartment id %1 with status = %3, flags = {all = %4, neighbor changes = %5, route changes = %6}

Fields #

NameDescription
CompartmentId UInt32
SubscriberContext Pointer
Status UInt32NTSTATUS reference
Flags UInt32
NeighborChangesFlags Boolean
RouteChangesFlags Boolean

Event ID 304 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Subscriber has subscribed for notifications in compartment id with status = , flags = {all = , neighbor changes = , route changes = }.

Fields #

NameDescription
CompartmentId UInt32
SubscriberContext Pointer
Status UInt32NTSTATUS reference
Flags UInt32
NeighborChangesFlags Boolean
RouteChangesFlags Boolean

Event ID 305 — Subscriber SubscriberContext has unsubscribed from notifications in compartment ID CompartmentId.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Subscriber SubscriberContext has unsubscribed from notifications in compartment ID CompartmentId.

Message #

Subscriber %2 has unsubscribed from notifications in compartment ID %1

Fields #

NameDescription
CompartmentId UInt32
SubscriberContext Pointer
Status UInt32NTSTATUS reference
Flags UInt32
NeighborChangesFlags Boolean
RouteChangesFlags Boolean

Event ID 305 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Subscriber has unsubscribed from notifications in compartment ID.

Fields #

NameDescription
CompartmentId UInt32
SubscriberContext Pointer
Status UInt32NTSTATUS reference
Flags UInt32
NeighborChangesFlags Boolean
RouteChangesFlags Boolean

Event ID 310 — A ND mapping has been added with status Status: { next hop ip NextHop, MAC address MacAddr, interface InterfaceLuid, type MappingType }.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

A ND mapping has been added with status Status: { next hop ip NextHop, MAC address MacAddr, interface InterfaceLuid, type MappingType }.

Message #

A ND mapping has been added with status %6: { next hop ip %1, MAC address %4, interface %2, type %5 }

Fields #

NameDescription
NextHop UInt32
InterfaceLuid UInt64
AccessTime UInt64
MacAddr UnicodeString
MappingType UInt32
Status UInt32NTSTATUS reference

Event ID 310 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

A ND mapping has been added with status : { next hop ip , MAC address , interface , type }.

Fields #

NameDescription
NextHop UInt32
InterfaceLuid UInt64
AccessTime UInt64
MacAddr UnicodeString
MappingType UInt32
Status UInt32NTSTATUS reference

Event ID 311 — A ND mapping has been added with status Status: { next hop ip NextHop, MAC address MacAddr, interface InterfaceLuid, type MappingType }.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

A ND mapping has been added with status Status: { next hop ip NextHop, MAC address MacAddr, interface InterfaceLuid, type MappingType }.

Message #

A ND mapping has been added with status %6: { next hop ip %1, MAC address %4, interface %2, type %5 }

Fields #

NameDescription
NextHop Binary
InterfaceLuid UInt64
AccessTime UInt64
MacAddr UnicodeString
MappingType UInt32
Status UInt32NTSTATUS reference

Event ID 311 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

A ND mapping has been added with status : { next hop ip , MAC address , interface , type }.

Fields #

NameDescription
NextHop Binary
InterfaceLuid UInt64
AccessTime UInt64
MacAddr UnicodeString
MappingType UInt32
Status UInt32NTSTATUS reference

Event ID 312 — A ND mapping has been deleted: { next hop ip NextHop, interface InterfaceLuid, MAC address MacAddr, type MappingType, access time AccessTime }.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

A ND mapping has been deleted: { next hop ip NextHop, interface InterfaceLuid, MAC address MacAddr, type MappingType, access time AccessTime }.

Message #

A ND mapping has been deleted: { next hop ip %1, interface %2, MAC address %4, type %5, access time %3 }

Fields #

NameDescription
NextHop UInt32
InterfaceLuid UInt64
AccessTime UInt64
MacAddr UnicodeString
MappingType UInt32
Status UInt32NTSTATUS reference

Event ID 312 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

A ND mapping has been deleted: { next hop ip , interface , MAC address , type , access time }.

Fields #

NameDescription
NextHop UInt32
InterfaceLuid UInt64
AccessTime UInt64
MacAddr UnicodeString
MappingType UInt32
Status UInt32NTSTATUS reference

Event ID 313 — A ND mapping has been deleted: { next hop ip NextHop, interface InterfaceLuid, MAC address MacAddr, type MappingType, access time AccessTime }.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

A ND mapping has been deleted: { next hop ip NextHop, interface InterfaceLuid, MAC address MacAddr, type MappingType, access time AccessTime }.

Message #

A ND mapping has been deleted: { next hop ip %1, interface %2, MAC address %4, type %5, access time %3 }

Fields #

NameDescription
NextHop Binary
InterfaceLuid UInt64
AccessTime UInt64
MacAddr UnicodeString
MappingType UInt32
Status UInt32NTSTATUS reference

Event ID 313 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

A ND mapping has been deleted: { next hop ip , interface , MAC address , type , access time }.

Fields #

NameDescription
NextHop Binary
InterfaceLuid UInt64
AccessTime UInt64
MacAddr UnicodeString
MappingType UInt32
Status UInt32NTSTATUS reference

Event ID 314 — A flow matched PA route rule: { rule context RuleContext, src ip SrcIP, dst ip DstIP, next hop ip NextHop, resolved MAC address MacAddr }.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

A flow matched PA route rule: { rule context RuleContext, src ip SrcIP, dst ip DstIP, next hop ip NextHop, resolved MAC address MacAddr }.

Message #

A flow matched PA route rule: { rule context %1, src ip %2, dst ip %3, next hop ip %4, resolved MAC address %5 }

Fields #

NameDescription
RuleContext Pointer
SrcIP UInt32
DstIP UInt32
NextHop UInt32
MacAddr UnicodeString

Event ID 314 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

A flow matched PA route rule: { rule context , src ip , dst ip , next hop ip , resolved MAC address }.

Fields #

NameDescription
RuleContext Pointer
SrcIP UInt32
DstIP UInt32
NextHop UInt32
MacAddr UnicodeString

Event ID 315 — A flow matched PA route rule: { rule context RuleContext, src ip SrcIP, dst ip DstIP, next hop ip NextHop, resolved MAC address MacAddr }.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

A flow matched PA route rule: { rule context RuleContext, src ip SrcIP, dst ip DstIP, next hop ip NextHop, resolved MAC address MacAddr }.

Message #

A flow matched PA route rule: { rule context %1, src ip %2, dst ip %3, next hop ip %4, resolved MAC address %5 }

Fields #

NameDescription
RuleContext Pointer
SrcIP Binary
DstIP Binary
NextHop Binary
MacAddr UnicodeString

Event ID 315 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

A flow matched PA route rule: { rule context , src ip , dst ip , next hop ip , resolved MAC address }.

Fields #

NameDescription
RuleContext Pointer
SrcIP Binary
DstIP Binary
NextHop Binary
MacAddr UnicodeString

Event ID 316 — A callback from IP for PA route rule: { rule context RuleContext, flags Flags, dest ip DstIP, MAC address MacAddr }.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

A callback from IP for PA route rule: { rule context RuleContext, flags Flags, dest ip DstIP, MAC address MacAddr }.

Message #

A callback from IP for PA route rule: { rule context %1, flags %2, dest ip %3, MAC address %4 }

Fields #

NameDescription
RuleContext Pointer
Flags UInt32
DstIP UInt32
MacAddr UnicodeString

Event ID 316 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

A callback from IP for PA route rule: { rule context , flags , dest ip , MAC address }.

Fields #

NameDescription
RuleContext Pointer
Flags UInt32
DstIP UInt32
MacAddr UnicodeString

Event ID 317 — A callback from IP for PA route rule: { rule context RuleContext, flags Flags, dest ip DstIP, MAC address MacAddr }.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

A callback from IP for PA route rule: { rule context RuleContext, flags Flags, dest ip DstIP, MAC address MacAddr }.

Message #

A callback from IP for PA route rule: { rule context %1, flags %2, dest ip %3, MAC address %4 }

Fields #

NameDescription
RuleContext Pointer
Flags UInt32
DstIP Binary
MacAddr UnicodeString

Event ID 317 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

A callback from IP for PA route rule: { rule context , flags , dest ip , MAC address }.

Fields #

NameDescription
RuleContext Pointer
Flags UInt32
DstIP Binary
MacAddr UnicodeString

Event ID 318 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) added into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa = ProviderIpv4Addr, m...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 318 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 319 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed from space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa = ProviderIpv4Addr,...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 319 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 320 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed (timer expiration) from space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 320 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 321 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) added into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa = ProviderIpv6Addr, m...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 321 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 322 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed from space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa = ProviderIpv6Addr,...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 322 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 323 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed (timer expiration) from space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 323 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 324 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) added into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa = ProviderIpv6Addr, m...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) added into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 324 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 325 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed from space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa = ProviderIpv6Addr,...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed from space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 325 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 326 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) removed (timer expiration) from space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) removed (timer expiration) from space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 326 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 327 — A flow matched Mapencap rule: {rule context RuleContext, original dest mac = OriginalDestMacAddr, new dest mac = NewDestMacAddr, src ca = SrcCustomerIpv4Addr, dest ca = DestCustomerIpv4Addr, src pa...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %4, dest ca = %7, src pa = %10, dest pa = %13, isolation id = %16, flags = {all = %17, encap type = %18, mac lookup = %19, ca route = %20, use mapping isolation id = %21}}

Fields #

NameDescription
RuleContext Pointer
OriginalDestMacAddr UnicodeString
NewDestMacAddr UnicodeString
SrcCustomerIpv4Addr UInt32
SrcCustomerIpv6AddrLength UInt32
SrcCustomerIpv6Addr Binary
DestCustomerIpv4Addr UInt32
DestCustomerIpv6AddrLength UInt32
DestCustomerIpv6Addr Binary
SrcProviderIpv4Addr UInt32
SrcProviderIpv6AddrLength UInt32
SrcProviderIpv6Addr Binary
DestProviderIpv4Addr UInt32
DestProviderIpv6AddrLength UInt32
DestProviderIpv6Addr Binary
IsolationId UInt32
Flags UInt32
EncapType UInt32
MacLookupFlag Boolean
CaRouteFlag Boolean
UseMappingIsolationIdFlag Boolean

Event ID 327 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
RuleContext Pointer
OriginalDestMacAddr UnicodeString
NewDestMacAddr UnicodeString
SrcCustomerIpv4Addr UInt32
SrcCustomerIpv6AddrLength UInt32
SrcCustomerIpv6Addr Binary
DestCustomerIpv4Addr UInt32
DestCustomerIpv6AddrLength UInt32
DestCustomerIpv6Addr Binary
SrcProviderIpv4Addr UInt32
SrcProviderIpv6AddrLength UInt32
SrcProviderIpv6Addr Binary
DestProviderIpv4Addr UInt32
DestProviderIpv6AddrLength UInt32
DestProviderIpv6Addr Binary
IsolationId UInt32
Flags UInt32
EncapType UInt32
MacLookupFlag Boolean
CaRouteFlag Boolean
UseMappingIsolationIdFlag Boolean

Event ID 328 — A flow matched Mapencap rule: {rule context RuleContext, original dest mac = OriginalDestMacAddr, new dest mac = NewDestMacAddr, src ca = SrcCustomerIpv6Addr, dest ca = DestCustomerIpv6Addr, src pa...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %6, dest ca = %9, src pa = %10, dest pa = %13, isolation id = %16, flags = {all = %17, encap type = %18, mac lookup = %19, ca route = %20, use mapping isolation id = %21}}

Fields #

NameDescription
RuleContext Pointer
OriginalDestMacAddr UnicodeString
NewDestMacAddr UnicodeString
SrcCustomerIpv4Addr UInt32
SrcCustomerIpv6AddrLength UInt32
SrcCustomerIpv6Addr Binary
DestCustomerIpv4Addr UInt32
DestCustomerIpv6AddrLength UInt32
DestCustomerIpv6Addr Binary
SrcProviderIpv4Addr UInt32
SrcProviderIpv6AddrLength UInt32
SrcProviderIpv6Addr Binary
DestProviderIpv4Addr UInt32
DestProviderIpv6AddrLength UInt32
DestProviderIpv6Addr Binary
IsolationId UInt32
Flags UInt32
EncapType UInt32
MacLookupFlag Boolean
CaRouteFlag Boolean
UseMappingIsolationIdFlag Boolean

Event ID 328 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
RuleContext Pointer
OriginalDestMacAddr UnicodeString
NewDestMacAddr UnicodeString
SrcCustomerIpv4Addr UInt32
SrcCustomerIpv6AddrLength UInt32
SrcCustomerIpv6Addr Binary
DestCustomerIpv4Addr UInt32
DestCustomerIpv6AddrLength UInt32
DestCustomerIpv6Addr Binary
SrcProviderIpv4Addr UInt32
SrcProviderIpv6AddrLength UInt32
SrcProviderIpv6Addr Binary
DestProviderIpv4Addr UInt32
DestProviderIpv6AddrLength UInt32
DestProviderIpv6Addr Binary
IsolationId UInt32
Flags UInt32
EncapType UInt32
MacLookupFlag Boolean
CaRouteFlag Boolean
UseMappingIsolationIdFlag Boolean

Event ID 329 — A flow matched Mapencap rule: {rule context RuleContext, original dest mac = OriginalDestMacAddr, new dest mac = NewDestMacAddr, src ca = SrcCustomerIpv4Addr, dest ca = DestCustomerIpv4Addr, src pa...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %4, dest ca = %7, src pa = %12, dest pa = %15, isolation id = %16, flags = {all = %17, encap type = %18, mac lookup = %19, ca route = %20, use mapping isolation id = %21}}

Fields #

NameDescription
RuleContext Pointer
OriginalDestMacAddr UnicodeString
NewDestMacAddr UnicodeString
SrcCustomerIpv4Addr UInt32
SrcCustomerIpv6AddrLength UInt32
SrcCustomerIpv6Addr Binary
DestCustomerIpv4Addr UInt32
DestCustomerIpv6AddrLength UInt32
DestCustomerIpv6Addr Binary
SrcProviderIpv4Addr UInt32
SrcProviderIpv6AddrLength UInt32
SrcProviderIpv6Addr Binary
DestProviderIpv4Addr UInt32
DestProviderIpv6AddrLength UInt32
DestProviderIpv6Addr Binary
IsolationId UInt32
Flags UInt32
EncapType UInt32
MacLookupFlag Boolean
CaRouteFlag Boolean
UseMappingIsolationIdFlag Boolean

Event ID 329 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
RuleContext Pointer
OriginalDestMacAddr UnicodeString
NewDestMacAddr UnicodeString
SrcCustomerIpv4Addr UInt32
SrcCustomerIpv6AddrLength UInt32
SrcCustomerIpv6Addr Binary
DestCustomerIpv4Addr UInt32
DestCustomerIpv6AddrLength UInt32
DestCustomerIpv6Addr Binary
SrcProviderIpv4Addr UInt32
SrcProviderIpv6AddrLength UInt32
SrcProviderIpv6Addr Binary
DestProviderIpv4Addr UInt32
DestProviderIpv6AddrLength UInt32
DestProviderIpv6Addr Binary
IsolationId UInt32
Flags UInt32
EncapType UInt32
MacLookupFlag Boolean
CaRouteFlag Boolean
UseMappingIsolationIdFlag Boolean

Event ID 330 — A flow matched Mapencap rule: {rule context RuleContext, original dest mac = OriginalDestMacAddr, new dest mac = NewDestMacAddr, src ca = SrcCustomerIpv6Addr, dest ca = DestCustomerIpv6Addr, src pa...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

A flow matched Mapencap rule: {rule context %1, original dest mac = %2, new dest mac = %3, src ca = %6, dest ca = %9, src pa = %12, dest pa = %15, isolation id = %16, flags = {all = %17, encap type = %18, mac lookup = %19, ca route = %20, use mapping isolation id = %21}}

Fields #

NameDescription
RuleContext Pointer
OriginalDestMacAddr UnicodeString
NewDestMacAddr UnicodeString
SrcCustomerIpv4Addr UInt32
SrcCustomerIpv6AddrLength UInt32
SrcCustomerIpv6Addr Binary
DestCustomerIpv4Addr UInt32
DestCustomerIpv6AddrLength UInt32
DestCustomerIpv6Addr Binary
SrcProviderIpv4Addr UInt32
SrcProviderIpv6AddrLength UInt32
SrcProviderIpv6Addr Binary
DestProviderIpv4Addr UInt32
DestProviderIpv6AddrLength UInt32
DestProviderIpv6Addr Binary
IsolationId UInt32
Flags UInt32
EncapType UInt32
MacLookupFlag Boolean
CaRouteFlag Boolean
UseMappingIsolationIdFlag Boolean

Event ID 330 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
RuleContext Pointer
OriginalDestMacAddr UnicodeString
NewDestMacAddr UnicodeString
SrcCustomerIpv4Addr UInt32
SrcCustomerIpv6AddrLength UInt32
SrcCustomerIpv6Addr Binary
DestCustomerIpv4Addr UInt32
DestCustomerIpv6AddrLength UInt32
DestCustomerIpv6Addr Binary
SrcProviderIpv4Addr UInt32
SrcProviderIpv6AddrLength UInt32
SrcProviderIpv6Addr Binary
DestProviderIpv4Addr UInt32
DestProviderIpv6AddrLength UInt32
DestProviderIpv6Addr Binary
IsolationId UInt32
Flags UInt32
EncapType UInt32
MacLookupFlag Boolean
CaRouteFlag Boolean
UseMappingIsolationIdFlag Boolean

Event ID 331 — QoS reservation created line LineId on switch SwitchName with status=FailedReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

QoS reservation created line on switch with status=. Line's config is {res mode = , default res = , link speed pct = , NIC link speed = , NIC min guarantee pct = reservable bw = , avail bw = }.

Message #

QoS reservation created line %2 on switch %1 with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 331 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

QoS reservation created line on switch with status=. Line's config is {res mode = , default res = , link speed pct = , NIC link speed = , NIC min guarantee pct = reservable bw = , avail bw = }.

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 332 — QoS reservation updated line LineId on switch SwitchName with status=FailedReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

QoS reservation updated line on switch with status=. Line's config is {res mode = , default res = , link speed pct = , NIC link speed = , NIC min guarantee pct = reservable bw = , avail bw = }.

Message #

QoS reservation updated line %2 on switch %1 with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 332 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

QoS reservation updated line on switch with status=. Line's config is {res mode = , default res = , link speed pct = , NIC link speed = , NIC min guarantee pct = reservable bw = , avail bw = }.

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 333 — QoS reservation deleted line LineId on switch SwitchName with status=FailedReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

QoS reservation deleted line LineId on switch SwitchName with status=FailedReason.

Message #

QoS reservation deleted line %2 on switch %1 with status=%3.

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 333 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

QoS reservation deleted line on switch with status=.

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 334 — QoS reservation line LineId on switch SwitchName changes available BW with status=FailedReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

QoS reservation line %2 on switch %1 changes available BW with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 334 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 335 — QoS reservation for line LineId on switch SwitchName handles an external NIC connect event with status=FailedReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

QoS reservation for line %2 on switch %1 handles an external NIC connect event with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 335 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 336 — QoS reservation for line LineId on switch SwitchName handles an external NIC link state event with status=FailedReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

QoS reservation for line %2 on switch %1 handles an external NIC link state event with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 336 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 337 — QoS reservation for line LineId on switch SwitchName handles an external NIC link speed change event with status=FailedReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

QoS reservation for line %2 on switch %1 handles an external NIC link speed change event with status=%3. Line's config is {res mode = %4, default res = %5, link speed pct = %6, NIC link speed = %7, NIC min guarantee pct = %8 reservable bw = %9, avail bw = %10}

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 337 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
FailedReason UInt32
ReservationMode UInt32
DefaultReservation UInt64
LinkSpeedPct UInt32
LinkSpeed UInt64
LinkSpeedGuaranteePct UInt32
ReservableBw UInt64
AvailableBw Int64

Event ID 338 — QoS reservation for line LineId handles a new rate allocation event: AllocationEvent.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

QoS reservation for line LineId handles a new rate allocation event: AllocationEvent.

Message #

QoS reservation for line %1 handles a new rate allocation event: %2

Fields #

NameDescription
LineId UInt64
AllocationEvent UInt32

Event ID 338 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

QoS reservation for line handles a new rate allocation event.

Fields #

NameDescription
LineId UInt64
AllocationEvent UInt32

Event ID 339 — QoS reservation for line LineId on switch SwitchName adds queue QueueName to the line.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

QoS reservation for line LineId on switch SwitchName adds queue QueueName to the line.

Message #

QoS reservation for line %2 on switch %1 adds queue %3 to the line

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
QueueName UnicodeString

Event ID 339 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

QoS reservation for line on switch adds queue to the line.

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
QueueName UnicodeString

Event ID 340 — QoS reservation for line LineId on switch SwitchName deletes queue QueueName from the line.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

QoS reservation for line LineId on switch SwitchName deletes queue QueueName from the line.

Message #

QoS reservation for line %2 on switch %1 deletes queue %3 from the line

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
QueueName UnicodeString

Event ID 340 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

QoS reservation for line on switch deletes queue from the line.

Fields #

NameDescription
SwitchName UnicodeString
LineId UInt64
QueueName UnicodeString

Event ID 341 — VfpExt QoS queue QueueName with EnforceIntraHostLimit=EnforceIntraHostLimit, TxCap=TransmitCap, TxMin=TransmitReservation, RxCap=ReceiveCap, TxQueueDepth=TransmitQueueDepth, RxQueueDepth=ReceiveQue...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt QoS queue %1 with EnforceIntraHostLimit=%3, TxCap=%4, TxMin=%5, RxCap=%6, TxQueueDepth=%7, RxQueueDepth=%8, TxBurstSize=%9, RxBurstSize=%10, ResLowPct=%11, ResHighPct=%12, ResHeadroomPct=%13, ResRampupTime=%14, ResMinRate=%15, successfully performed action '%2'

Fields #

NameDescription
QueueName UnicodeString
Action UInt8
EnforceIntraHostLimit Boolean
TransmitCap UInt32
TransmitReservation UInt32
ReceiveCap UInt32
TransmitQueueDepth UInt32
ReceiveQueueDepth UInt32
TransmitBurstSize UInt32
ReceiveBurstSize UInt32
UnderUtilizedPct UInt8
OverUtilizedPct UInt8
HeadroomPct UInt8
RampupTimeMs UInt32
MinRateMbps UInt32

Event ID 341 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
QueueName UnicodeString
Action UInt8
EnforceIntraHostLimit Boolean
TransmitCap UInt32
TransmitReservation UInt32
ReceiveCap UInt32
TransmitQueueDepth UInt32
ReceiveQueueDepth UInt32
TransmitBurstSize UInt32
ReceiveBurstSize UInt32
UnderUtilizedPct UInt8
OverUtilizedPct UInt8
HeadroomPct UInt8
RampupTimeMs UInt32
MinRateMbps UInt32

Event ID 342 — VfpExt QoS queue QueueName with EnforceIntraHostLimit=EnforceIntraHostLimit, TxCap=TransmitCap, TxMin=TransmitReservation, RxCap=ReceiveCap, TxQueueDepth=TransmitQueueDepth, RxQueueDepth=ReceiveQue...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt QoS queue %1 with EnforceIntraHostLimit=%3, TxCap=%4, TxMin=%5, RxCap=%6, TxQueueDepth=%9, RxQueueDepth=%10, TxBurstSize=%11, RxBurstSize=%12, ResLowPct=%13, ResHighPct=%14, ResHeadroomPct=%15, ResRampupTime=%16, ResMinRate=%17, failed action '%2' with reason '%8', status=%7

Fields #

NameDescription
QueueName UnicodeString
Action UInt8
EnforceIntraHostLimit Boolean
TransmitCap UInt32
TransmitReservation UInt32
ReceiveCap UInt32
Status UInt32NTSTATUS reference
FailReason UInt8
TransmitQueueDepth UInt32
ReceiveQueueDepth UInt32
TransmitBurstSize UInt32
ReceiveBurstSize UInt32
UnderUtilizedPct UInt8
OverUtilizedPct UInt8
HeadroomPct UInt8
RampupTimeMs UInt32
MinRateMbps UInt32

Event ID 342 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
QueueName UnicodeString
Action UInt8
EnforceIntraHostLimit Boolean
TransmitCap UInt32
TransmitReservation UInt32
ReceiveCap UInt32
Status UInt32NTSTATUS reference
FailReason UInt8
TransmitQueueDepth UInt32
ReceiveQueueDepth UInt32
TransmitBurstSize UInt32
ReceiveBurstSize UInt32
UnderUtilizedPct UInt8
OverUtilizedPct UInt8
HeadroomPct UInt8
RampupTimeMs UInt32
MinRateMbps UInt32

Event ID 343 — VfpExt QoS queue QueueName and port PortId successfully performed action 'Action'.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt QoS queue QueueName and port PortId successfully performed action 'Action'.

Message #

VfpExt QoS queue %1 and port %2 successfully performed action '%3'

Fields #

NameDescription
QueueName UnicodeString
PortId UInt32
Action UInt8

Event ID 343 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt QoS queue QueueName and port PortId successfully performed action 'Action'.

Fields #

NameDescription
QueueName UnicodeString
PortId UInt32
Action UInt8

Event ID 344 — VfpExt QoS queue QueueName and port PortId failed action 'Action' with reason 'FailReason', status=Status.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt QoS queue QueueName and port PortId failed action 'Action' with reason 'FailReason', status=Status.

Message #

VfpExt QoS queue %1 and port %2 failed action '%3' with reason '%5', status=%4

Fields #

NameDescription
QueueName UnicodeString
PortId UInt32
Action UInt8
Status UInt32NTSTATUS reference
FailReason UInt8

Event ID 344 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt QoS queue QueueName and port PortId failed action 'Action' with reason 'FailReason', status=Status.

Fields #

NameDescription
QueueName UnicodeString
PortId UInt32
Action UInt8
Status UInt32NTSTATUS reference
FailReason UInt8

Event ID 345 — VfpExt QoS reservation on vswitch 'SwitchName' successfully performed action 'Operation', line info = {mode=ReservationMode, defaultRes=DefaultReservation, defaultQDepth=DefaultQueueDepth, defaultQ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt QoS reservation on vswitch '%1' successfully performed action '%2', line info = {mode=%3, defaultRes=%4, defaultQDepth=%11, defaultQBurstSize=%12, defaultQUnderUtilized=%13, defaultQOverUtilized=%14, defaultQHeadroom=%15, defaultQRampup=%16, defaultQueueMinRate=%17, NIC linkspeed=%6, res linkspeed pct=%5, DCB0 pct=%7, reservableBW=%8, availableBW=%9, numActiveQueues=%10}

Fields #

NameDescription
SwitchName UnicodeString
Operation UInt8
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ReservationMode UInt8
DefaultReservation UInt64
LinkSpeedPct UInt32
NicLinkSpeed UInt64
NicLinkSpeedGuarantee UInt32
ReservableBw UInt64
AvailableBw Int64
NumQueues UInt32
DefaultQueueDepth UInt32
DefaultQueueBurstSize UInt32
DefaultQueueUnderUtilizedPct UInt8
DefaultQueueOverUtilizedPct UInt8
DefaultQueueHeadroomPct UInt8
DefaultQueueRampupTimeMs UInt32
DefaultQueueMinRateMbps UInt32

Event ID 345 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SwitchName UnicodeString
Operation UInt8
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ReservationMode UInt8
DefaultReservation UInt64
LinkSpeedPct UInt32
NicLinkSpeed UInt64
NicLinkSpeedGuarantee UInt32
ReservableBw UInt64
AvailableBw Int64
NumQueues UInt32
DefaultQueueDepth UInt32
DefaultQueueBurstSize UInt32
DefaultQueueUnderUtilizedPct UInt8
DefaultQueueOverUtilizedPct UInt8
DefaultQueueHeadroomPct UInt8
DefaultQueueRampupTimeMs UInt32
DefaultQueueMinRateMbps UInt32

Event ID 346 — VfpExt QoS reservation on vswitch 'SwitchName' failed action 'Operation' with reason 'FailReason', status=Status, failed config={mode=ReservationMode, defaultRes=DefaultReservation, defaultQDepth=D...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt QoS reservation on vswitch '%1' failed action '%2' with reason '%11', status=%10, failed config={mode=%3, defaultRes=%4, defaultQDepth=%13, defaultQBurstSize=%14, defaultQUnderUtilized=%15, defaultQOverUtilized=%16, defaultQHeadroom=%17, defaultQRampup=%18, defaultQueueMinRate=%19, res linkspeed pct=%5}, line info= {NIC linkspeed=%6, DCB0 pct=%7, reservableBW=%8, availableBW=%9, numActiveQueues=%12}

Fields #

NameDescription
SwitchName UnicodeString
Operation UInt8
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ReservationMode UInt8
DefaultReservation UInt64
LinkSpeedPct UInt32
NicLinkSpeed UInt64
NicLinkSpeedGuarantee UInt32
ReservableBw UInt64
AvailableBw Int64
Status UInt32NTSTATUS reference
FailReason UInt8
NumQueues UInt32
DefaultQueueDepth UInt32
DefaultQueueBurstSize UInt32
DefaultQueueUnderUtilizedPct UInt8
DefaultQueueOverUtilizedPct UInt8
DefaultQueueHeadroomPct UInt8
DefaultQueueRampupTimeMs UInt32
DefaultQueueMinRateMbps UInt32

Event ID 346 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SwitchName UnicodeString
Operation UInt8
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ReservationMode UInt8
DefaultReservation UInt64
LinkSpeedPct UInt32
NicLinkSpeed UInt64
NicLinkSpeedGuarantee UInt32
ReservableBw UInt64
AvailableBw Int64
Status UInt32NTSTATUS reference
FailReason UInt8
NumQueues UInt32
DefaultQueueDepth UInt32
DefaultQueueBurstSize UInt32
DefaultQueueUnderUtilizedPct UInt8
DefaultQueueOverUtilizedPct UInt8
DefaultQueueHeadroomPct UInt8
DefaultQueueRampupTimeMs UInt32
DefaultQueueMinRateMbps UInt32

Event ID 347 — VfpExt QoS reservation on vswitch 'SwitchName' got external NIC event 'Event', status='Status', line info = {mode=ReservationMode, default res=DefaultReservation, NIC linkspeed=NicLinkSpeed, res li...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt QoS reservation on vswitch '%1' got external NIC event '%2', status='%10', line info = {mode=%3, default res=%4, NIC linkspeed=%6, res linkspeed pct=%5, DCB0 pct=%7, reservableBW=%8, availableBW=%9, numActiveQueues=%11}

Fields #

NameDescription
SwitchName UnicodeString
Event UInt8
ReservationMode UInt8
DefaultReservation UInt64
LinkSpeedPct UInt32
NicLinkSpeed UInt64
NicLinkSpeedGuarantee UInt32
ReservableBw UInt64
AvailableBw Int64
Status UInt32NTSTATUS reference
NumQueues UInt32

Event ID 347 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SwitchName UnicodeString
Event UInt8
ReservationMode UInt8
DefaultReservation UInt64
LinkSpeedPct UInt32
NicLinkSpeed UInt64
NicLinkSpeedGuarantee UInt32
ReservableBw UInt64
AvailableBw Int64
Status UInt32NTSTATUS reference
NumQueues UInt32

Event ID 348 — VfpExt QoS reservation on vswitch 'SwitchName' and queue 'QueueName' with reservation QueueReservation successfully performed action 'Operation', line info = {mode=ReservationMode, default res=Defa...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt QoS reservation on vswitch '%1' and queue '%2' with reservation %3 successfully performed action '%4', line info = {mode=%5, default res=%6, NIC linkspeed=%8, res linkspeed pct=%7, DCB0 pct=%9, reservableBW=%10, availableBW=%11, numActiveQueues=%12}

Fields #

NameDescription
SwitchName UnicodeString
QueueName UnicodeString
QueueReservation UInt64
Operation UInt8
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ReservationMode UInt8
DefaultReservation UInt64
LinkSpeedPct UInt32
NicLinkSpeed UInt64
NicLinkSpeedGuarantee UInt32
ReservableBw UInt64
AvailableBw Int64
NumQueues UInt32

Event ID 348 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SwitchName UnicodeString
QueueName UnicodeString
QueueReservation UInt64
Operation UInt8
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ReservationMode UInt8
DefaultReservation UInt64
LinkSpeedPct UInt32
NicLinkSpeed UInt64
NicLinkSpeedGuarantee UInt32
ReservableBw UInt64
AvailableBw Int64
NumQueues UInt32

Event ID 349 — VfpExt QoS reservation (line:'LineId') has congestion control event 'Event'.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt QoS reservation (line:'LineId') has congestion control event 'Event'.

Message #

VfpExt QoS reservation (line:'%1') has congestion control event '%2'

Fields #

NameDescription
LineId Pointer
Event UInt8

Event ID 349 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt QoS reservation (line:'LineId') has congestion control event 'Event'.

Fields #

NameDescription
LineId Pointer
Event UInt8

Event ID 351 — VfpExt dropped a packet from port SrcPortId (Name = SrcPortName, FriendlyName = SrcPortFriendlyName) in forwarding because of Reason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt dropped a packet from port SrcPortId (Name = SrcPortName, FriendlyName = SrcPortFriendlyName) in forwarding because of Reason. {src mac = SrcMacAddr, dst mac = DstMacAddr, type = Type, vlanID = VLAN}, gftFlags = GftFlags.

Message #

VfpExt dropped a packet from port %1 (Name = %7, FriendlyName = %8) in forwarding because of %2. {src mac = %3, dst mac = %4, type = %5, vlanID = %6}, gftFlags = %9

Fields #

NameDescription
SrcPortId UInt32
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
Type UInt16
VLAN UInt32
SrcPortName UnicodeString
SrcPortFriendlyName UnicodeString
GftFlags UInt32

Event ID 351 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt dropped a packet from port (Name = , FriendlyName = ) in forwarding because of . {src mac = , dst mac = , type = , vlanID = }, gftFlags =.

Fields #

NameDescription
SrcPortId UInt32
Reason UInt8
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
Type UInt16
VLAN UInt32
SrcPortName UnicodeString
SrcPortFriendlyName UnicodeString
GftFlags UInt32

Event ID 352 — VfpExt successfully forwarded a packet from port SrcPortId (Name = SrcPortName, FriendlyName = SrcPortFriendlyName) to destination DstPortId (Name = DstPortName, FriendlyName = DstPortFriendlyName).

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt successfully forwarded a packet from port %1 (Name = %9, FriendlyName = %10) to destination %2 (Name = %11, FriendlyName = %12). {src mac = %3, dst mac = %4, type = %5, vlanID = %6, isBroadcast = %7, innerForwardingUsed = %8}, gftFlags = %13

Fields #

NameDescription
SrcPortId UInt32
DstPortId UInt32
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
Type UInt16
VLAN UInt32
IsBroadcast Boolean
InnerForwarding Boolean
SrcPortName UnicodeString
SrcPortFriendlyName UnicodeString
DstPortName UnicodeString
DstPortFriendlyName UnicodeString
GftFlags UInt32

Event ID 352 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SrcPortId UInt32
DstPortId UInt32
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
Type UInt16
VLAN UInt32
IsBroadcast Boolean
InnerForwarding Boolean
SrcPortName UnicodeString
SrcPortFriendlyName UnicodeString
DstPortName UnicodeString
DstPortFriendlyName UnicodeString
GftFlags UInt32

Event ID 353 — VfpExt is skipping destination port DstPortId (Name = DstPortName, FriendlyName = DstPortFriendlyName) in broadcast list of packet from source port SrcPortId (Name = SrcPortName, FriendlyName = Src...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt is skipping destination port (Name = , FriendlyName = ) in broadcast list of packet from source port (Name = , FriendlyName = ). {src mac = , dst mac = , type = , vlanID = }, gftFlags =.

Message #

VfpExt is skipping destination port %2 (Name = %9, FriendlyName = %10) in broadcast list of packet from source port %1 (Name = %7, FriendlyName = %8). {src mac = %3, dst mac = %4, type = %5, vlanID = %6}, gftFlags = %11

Fields #

NameDescription
SrcPortId UInt32
DstPortId UInt32
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
Type UInt16
VLAN UInt32
SrcPortName UnicodeString
SrcPortFriendlyName UnicodeString
DstPortName UnicodeString
DstPortFriendlyName UnicodeString
GftFlags UInt32

Event ID 353 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt is skipping destination port (Name = , FriendlyName = ) in broadcast list of packet from source port (Name = , FriendlyName = ). {src mac = , dst mac = , type = , vlanID = }, gftFlags =.

Fields #

NameDescription
SrcPortId UInt32
DstPortId UInt32
SrcMacAddr UnicodeString
DstMacAddr UnicodeString
Type UInt16
VLAN UInt32
SrcPortName UnicodeString
SrcPortFriendlyName UnicodeString
DstPortName UnicodeString
DstPortFriendlyName UnicodeString
GftFlags UInt32

Event ID 354 — VfpExt failed to forward packet from source port SrcPortId (Name = SrcPortName, FriendlyName = SrcPortFriendlyName) based on inner headers, attempting to forward based on outer hea...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt failed to forward packet from source port %1 (Name = %8, FriendlyName = %9) based on inner headers, attempting to forward based on outer headers. {outer src mac = %2, outer dst mac = %3, type = %4, inner dest mac = %5, vlan id = %6, isolation id = %7}, gftFlags = %10

Fields #

NameDescription
SrcPortId UInt32
OutSrcMacAddr UnicodeString
OutDstMacAddr UnicodeString
Type UInt16
InnerDstMacAddr UnicodeString
VLAN UInt32
IsolationId UInt32
SrcPortName UnicodeString
SrcPortFriendlyName UnicodeString
GftFlags UInt32

Event ID 354 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SrcPortId UInt32
OutSrcMacAddr UnicodeString
OutDstMacAddr UnicodeString
Type UInt16
InnerDstMacAddr UnicodeString
VLAN UInt32
IsolationId UInt32
SrcPortName UnicodeString
SrcPortFriendlyName UnicodeString
GftFlags UInt32

Event ID 355 — The save operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) failed with reason 'Reason'.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

The save operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) failed with reason 'Reason'. ExtendedData1: Ext1, ExtendedData2: Ext2.

Message #

The save operation for port %1 (Name = %5, FriendlyName = %6) failed with reason '%2'. ExtendedData1: %3, ExtendedData2: %4.

Fields #

NameDescription
SrcPortId UInt32
Reason UInt8
Ext1 UInt32
Ext2 UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 355 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

The save operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) failed with reason 'Reason'. ExtendedData1: Ext1, ExtendedData2: Ext2.

Fields #

NameDescription
SrcPortId UInt32
Reason UInt8
Ext1 UInt32
Ext2 UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 356 — The save completion operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) failed with reason 'Reason'.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

The save completion operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) failed with reason 'Reason'. ExtendedData1: Ext1, ExtendedData2: Ext2.

Message #

The save completion operation for port %1 (Name = %5, FriendlyName = %6) failed with reason '%2'. ExtendedData1: %3, ExtendedData2: %4.

Fields #

NameDescription
SrcPortId UInt32
Reason UInt8
Ext1 UInt32
Ext2 UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 356 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

The save completion operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) failed with reason 'Reason'. ExtendedData1: Ext1, ExtendedData2: Ext2.

Fields #

NameDescription
SrcPortId UInt32
Reason UInt8
Ext1 UInt32
Ext2 UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 357 — The save operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) failed with reason 'Reason'.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

The save operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) failed with reason 'Reason'. ExtendedData1: Ext1, ExtendedData2: Ext2.

Message #

The save operation for port %1 (Name = %5, FriendlyName = %6) failed with reason '%2'. ExtendedData1: %3, ExtendedData2: %4.

Fields #

NameDescription
SrcPortId UInt32
Reason UInt8
Ext1 UInt32
Ext2 UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 357 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

The save operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) failed with reason 'Reason'. ExtendedData1: Ext1, ExtendedData2: Ext2.

Fields #

NameDescription
SrcPortId UInt32
Reason UInt8
Ext1 UInt32
Ext2 UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 358 — Succesfully saved port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName).

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Succesfully saved port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName). Size: SaveDataSize, BlockPortOnRestore: BlockOnRestore.

Message #

Succesfully saved port %1 (Name = %4, FriendlyName = %5). Size: %2, BlockPortOnRestore: %3.

Fields #

NameDescription
SrcPortId UInt32
SaveDataSize UInt32
BlockOnRestore Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 358 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Succesfully saved port (Name = , FriendlyName = ). Size: , BlockPortOnRestore: .

Fields #

NameDescription
SrcPortId UInt32
SaveDataSize UInt32
BlockOnRestore Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 359 — The overall save operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) is complete.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

The overall save operation for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) is complete.

Message #

The overall save operation for port %1 (Name = %4, FriendlyName = %5) is complete.

Fields #

NameDescription
SrcPortId UInt32
SaveDataSize UInt32
BlockOnRestore Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 359 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

The overall save operation for port (Name = , FriendlyName = ) is complete.

Fields #

NameDescription
SrcPortId UInt32
SaveDataSize UInt32
BlockOnRestore Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 360 — Succesfully restored port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName).

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Succesfully restored port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName). Size: SaveDataSize, Block State: BlockOnRestore.

Message #

Succesfully restored port %1 (Name = %4, FriendlyName = %5). Size: %2, Block State: %3.

Fields #

NameDescription
SrcPortId UInt32
SaveDataSize UInt32
BlockOnRestore Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 360 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Succesfully restored port (Name = , FriendlyName = ). Size: , Block State: .

Fields #

NameDescription
SrcPortId UInt32
SaveDataSize UInt32
BlockOnRestore Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 361 — Save request for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) returned to caller with a size request of SaveDataSize.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Save request for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) returned to caller with a size request of SaveDataSize.

Message #

Save request for port %1 (Name = %3, FriendlyName = %4) returned to caller with a size request of %2.

Fields #

NameDescription
SrcPortId UInt32
SaveDataSize UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 361 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Save request for port (Name = , FriendlyName = ) returned to caller with a size request of .

Fields #

NameDescription
SrcPortId UInt32
SaveDataSize UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 362 — Save request for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) allowed to proceed to the next component with reason 'Reason'.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Save request for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) allowed to proceed to the next component with reason 'Reason'.

Message #

Save request for port %1 (Name = %5, FriendlyName = %6) allowed to proceed to the next component with reason '%4'.

Fields #

NameDescription
SrcPortId UInt32
MessageLength UInt32
Message UnicodeString
Reason UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 362 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Save request for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) allowed to proceed to the next component with reason 'Reason'.

Fields #

NameDescription
SrcPortId UInt32
MessageLength UInt32
Message UnicodeString
Reason UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 363 — Restore request for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) ignored by extension 'Message' with reason 'Reason'.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Restore request for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) ignored by extension 'Message' with reason 'Reason'.

Message #

Restore request for port %1 (Name = %5, FriendlyName = %6) ignored by extension '%3' with reason '%4'.

Fields #

NameDescription
SrcPortId UInt32
MessageLength UInt32
Message UnicodeString
Reason UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 363 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Restore request for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) ignored by extension 'Message' with reason 'Reason'.

Fields #

NameDescription
SrcPortId UInt32
MessageLength UInt32
Message UnicodeString
Reason UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 364 — Restore request failure for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) suppressed.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Restore request failure for port SrcPortId (Name = PortName, FriendlyName = PortFriendlyName) suppressed.

Message #

Restore request failure for port %1 (Name = %4, FriendlyName = %5) suppressed

Fields #

NameDescription
SrcPortId UInt32
MessageLength UInt32
Message UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 364 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Restore request failure for port (Name = , FriendlyName = ) suppressed.

Fields #

NameDescription
SrcPortId UInt32
MessageLength UInt32
Message UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 400 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow ID {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 400 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 401 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow ID {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 401 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 402 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow id {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7, dst ip = %8, protocol = %9, icmp type = %10}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %14}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 402 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 403 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow id {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %12, FriendlyName = %13) with status = %11 and statusLocation = %15: flow id {src ip = %7, dst ip = %8, protocol = %9, icmp type = %10}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %14}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 403 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 404 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow id {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 404 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 405 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow id {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 405 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 451 — Redirect for port PortId (Name = PortName, FriendlyName = PortFriendlyName) failed.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Redirect for port PortId (Name = PortName, FriendlyName = PortFriendlyName) failed. Reason: 'Reason'.

Message #

Redirect for port %1 (Name = %3, FriendlyName = %4) failed. Reason: '%2'.

Fields #

NameDescription
PortId UInt32
Reason UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 451 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Redirect for port PortId (Name = PortName, FriendlyName = PortFriendlyName) failed. Reason: 'Reason'.

Fields #

NameDescription
PortId UInt32
Reason UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 452 — OID Oid issued on port ID PortId (Name = PortName, FriendlyName = PortFriendlyName).

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

OID Oid issued on port ID PortId (Name = PortName, FriendlyName = PortFriendlyName). Status: Status.

Message #

OID %2 issued on port ID %1 (Name = %4, FriendlyName = %5). Status: %3.

Fields #

NameDescription
PortId UInt32
Oid UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 452 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

OID issued on port ID (Name = , FriendlyName = ). Status: .

Fields #

NameDescription
PortId UInt32
Oid UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 453 — Status Indication code StatusCode from port ID PortId (Name = PortName, FriendlyName = PortFriendlyName).

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Status Indication code StatusCode from port ID PortId (Name = PortName, FriendlyName = PortFriendlyName).

Message #

Status Indication code %2 from port ID %1 (Name = %3, FriendlyName = %4).

Fields #

NameDescription
PortId UInt32
StatusCode UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 453 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Status Indication code from port ID (Name = , FriendlyName = ).

Fields #

NameDescription
PortId UInt32
StatusCode UInt32
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 454 — NDIS_OFFLOAD state in the context of Context.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

NDIS_OFFLOAD state in the context of %1. HeaderRevision %2, EncapsulationTypes %3, MaxHeaderSizeSupported %4, NvgreTransmitChecksumOffloadSupported %5, NvgreReceiveChecksumOffloadSupported %6, NvgreLsoV2Supported %7, NvgreRssSupported %8, NvgreVmqSupported %9, VxlanTransmitChecksumOffloadSupported %10, VxlanReceiveChecksumOffloadSupported %11, VxlanLsoV2Supported %12, VxlanRssSupported %13, VxlanVmqSupported %14, VxlanUDPPortNumber %15, VxlanUDPPortNumberConfigurable %16.

Fields #

NameDescription
Context UnicodeString
HeaderRevision UInt32
EncapsulationTypes UInt32
MaxHeaderSizeSupported UInt32
NvgreTransmitChecksumOffloadSupported UInt8
NvgreReceiveChecksumOffloadSupported UInt8
NvgreLsoV2Supported UInt8
NvgreRssSupported UInt8
NvgreVmqSupported UInt8
VxlanTransmitChecksumOffloadSupported UInt8
VxlanReceiveChecksumOffloadSupported UInt8
VxlanLsoV2Supported UInt8
VxlanRssSupported UInt8
VxlanVmqSupported UInt8
VxlanUDPPortNumber UInt16
VxlanUDPPortNumberConfigurable Boolean

Event ID 454 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
Context UnicodeString
HeaderRevision UInt32
EncapsulationTypes UInt32
MaxHeaderSizeSupported UInt32
NvgreTransmitChecksumOffloadSupported UInt8
NvgreReceiveChecksumOffloadSupported UInt8
NvgreLsoV2Supported UInt8
NvgreRssSupported UInt8
NvgreVmqSupported UInt8
VxlanTransmitChecksumOffloadSupported UInt8
VxlanReceiveChecksumOffloadSupported UInt8
VxlanLsoV2Supported UInt8
VxlanRssSupported UInt8
VxlanVmqSupported UInt8
VxlanUDPPortNumber UInt16
VxlanUDPPortNumberConfigurable Boolean

Event ID 455 — OID_RECEIVE_FILTER_SET_FILTER for port ID PortId (Name = PortName, FriendlyName = PortFriendlyName).

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

OID_RECEIVE_FILTER_SET_FILTER for port ID PortId (Name = PortName, FriendlyName = PortFriendlyName). Inner Mac VMQ Setting Enabled = InnerMacVmqSettingEnabled, MAC address on filter MacAddress, Inner Mac Flag Set = InnerMacFilterSet.

Message #

OID_RECEIVE_FILTER_SET_FILTER for port ID %2 (Name = %5, FriendlyName = %6). Inner Mac VMQ Setting Enabled = %1, MAC address on filter %3, Inner Mac Flag Set = %4.

Fields #

NameDescription
InnerMacVmqSettingEnabled Boolean
PortId UInt32
MacAddress UnicodeString
InnerMacFilterSet Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 455 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

OID_RECEIVE_FILTER_SET_FILTER for port ID (Name = , FriendlyName = ). Inner Mac VMQ Setting Enabled = , MAC address on filter , Inner Mac Flag Set = .

Fields #

NameDescription
InnerMacVmqSettingEnabled Boolean
PortId UInt32
MacAddress UnicodeString
InnerMacFilterSet Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 456 — PA route rule update callback: { rule context RuleContext, elapsed time ElapsedTime, cache pruning timeout CachePruningTimeout, cache pruning threshold CachePruningThreshold, ND entries NumNdEntrie...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

PA route rule update callback: { rule context RuleContext, elapsed time ElapsedTime, cache pruning timeout CachePruningTimeout, cache pruning threshold CachePruningThreshold, ND entries NumNdEntries }.

Message #

PA route rule update callback: { rule context %1, elapsed time %2, cache pruning timeout %3, cache pruning threshold %4, ND entries %5 }

Fields #

NameDescription
RuleContext Pointer
ElapsedTime UInt32
CachePruningTimeout UInt32
CachePruningThreshold UInt32
NumNdEntries UInt32

Event ID 456 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

PA route rule update callback: { rule context , elapsed time , cache pruning timeout , cache pruning threshold , ND entries }.

Fields #

NameDescription
RuleContext Pointer
ElapsedTime UInt32
CachePruningTimeout UInt32
CachePruningThreshold UInt32
NumNdEntries UInt32

Event ID 500 — DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID } Called security API with select params , , and returned status .

Message #

DTLS Session {Port %1 (Name = %13, FriendlyName = %14), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6} Called  security API %7 with select params %8, %9, %10 and %11 returned status %12.

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
SecurityApiName UnicodeString
SelectParamInfo1 UnicodeString
SelectParamInfo2 UnicodeString
SelectParamInfo3 UInt64
SelectParamInfo4 UInt64
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 500 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID } Called security API with select params , , and returned status .

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
SecurityApiName UnicodeString
SelectParamInfo1 UnicodeString
SelectParamInfo2 UnicodeString
SelectParamInfo3 UInt64
SelectParamInfo4 UInt64
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 501 — DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID TunnelID} Handshake fatal error: FailureReason.

Message #

DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  Handshake fatal error: %7.

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 501 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID } Handshake fatal error: .

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 502 — DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID TunnelID} Transition state from OldState to NewState. Reason: DeactivateReason.

Message #

DTLS Session {Port %1 (Name = %10, FriendlyName = %11), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  Transition state from %7 to %8. Reason: %9

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
OldState UInt8
NewState UInt8
DeactivateReason UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 502 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID } Transition state from to . Reason.

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
OldState UInt8
NewState UInt8
DeactivateReason UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 503 — DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID } DTLS packet direction Content Type , Handshake Protocol.

Message #

DTLS Session {Port %1 (Name = %10, FriendlyName = %11), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  DTLS packet direction %7 Content Type %8, Handshake Protocol %9

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
DtlsContentType UInt8
DtlsHandshakeProtocol UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 503 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID } DTLS packet direction Content Type , Handshake Protocol.

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
DtlsContentType UInt8
DtlsHandshakeProtocol UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 504 — DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID TunnelID} TraceString.

Message #

DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  %7

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
TraceString UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 504 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID }.

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
TraceString UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 505 — DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID } . Numeric params: Str params.

Message #

DTLS Session {Port %1 (Name = %12, FriendlyName = %13), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  %7.  Numeric params:%8 %9 Str params: %10 %11

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
TraceString UnicodeString
GenericNumericParam1 UInt64
GenericNumericParam2 UInt64
GenericStringParam1 UnicodeString
GenericStringParam2 UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 505 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID } . Numeric params: Str params.

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
TraceString UnicodeString
GenericNumericParam1 UInt64
GenericNumericParam2 UInt64
GenericStringParam1 UnicodeString
GenericStringParam2 UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 506 — DTLS on Port PortId.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

DTLS on Port PortId ((Name = PortName, FriendlyName = PortFriendlyName) TraceString.

Message #

DTLS on Port %1 ((Name = %3, FriendlyName = %4) %2

Fields #

NameDescription
PortId UInt32
TraceString UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 506 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

DTLS on Port ((Name = , FriendlyName = ).

Fields #

NameDescription
PortId UInt32
TraceString UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 507 — DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID TunnelID} TraceString.

Message #

DTLS Session {Port %1 (Name = %8, FriendlyName = %9), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  %7

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
TraceString UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 507 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID }.

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
TraceString UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 508 — DTLS Session {Port PortId (Name = PortName, FriendlyName = PortFriendlyName), Session ID SessionId} {Port PortId Peer Outer IP PeerOuterIpv4Addr, Peer Inner MAC PeerInnerMacAddr, TNI TNI, Tunnel ID...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID } . Numeric params: Str params.

Message #

DTLS Session {Port %1 (Name = %12, FriendlyName = %13), Session ID %2} {Port %1 Peer Outer IP %3, Peer Inner MAC %4, TNI %5, Tunnel ID %6}  %7.  Numeric params:%8 %9 Str params: %10 %11

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
TraceString UnicodeString
GenericNumericParam1 UInt64
GenericNumericParam2 UInt64
GenericStringParam1 UnicodeString
GenericStringParam2 UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 508 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

DTLS Session {Port (Name = , FriendlyName = ), Session ID } {Port Peer Outer IP , Peer Inner MAC , TNI , Tunnel ID } . Numeric params: Str params.

Fields #

NameDescription
PortId UInt32
SessionId UInt32
PeerOuterIpv4Addr UInt32
PeerInnerMacAddr UnicodeString
TNI UInt64
TunnelID UInt32
TraceString UnicodeString
GenericNumericParam1 UInt64
GenericNumericParam2 UInt64
GenericStringParam1 UnicodeString
GenericStringParam2 UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 509 — PADiscoveryEvent port PortId (Name = PortName, FriendlyName = PortFriendlyName) direction Direction state PADiscoveryFlowState flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, src port = SrcPor...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

PADiscoveryEvent port (Name = , FriendlyName = ) direction state flow id {src ip = , dst ip = , src port = , dst port = , protocol = } DiscoveryType = PADiscovered = message =.

Message #

PADiscoveryEvent port %1 (Name = %12, FriendlyName = %13) direction %2 state %3 flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8} DiscoveryType = %9 PADiscovered = %10  message = %11

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
PADiscoveryFlowState UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
PADiscoveryType UInt8
DiscoveredIpv4Addr UInt32
TraceString UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 509 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

PADiscoveryEvent port (Name = , FriendlyName = ) direction state flow id {src ip = , dst ip = , src port = , dst port = , protocol = } DiscoveryType = PADiscovered = message =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
PADiscoveryFlowState UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
PADiscoveryType UInt8
DiscoveredIpv4Addr UInt32
TraceString UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 551 — Port PortId (Name = PortName, FriendlyName = PortFriendlyName) parsed DHCP packet Operation:Operation MessageType:Message ClientIp:ClientIp ClientMac:ClientMac TransactionId:TransactionId AssignedI...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

Port %1 (Name = %16, FriendlyName = %17) parsed DHCP packet Operation:%2 MessageType:%3 ClientIp:%4 ClientMac:%5 TransactionId:%6 AssignedIp:%7 ServerIp:%8 RequestedIp:%9 RelayIp:%10 DnsIp:%11 SrcIp=>SrcPort:%12=>%13 DstIp=>DstPort:%14=>%15. GftFlags = %18

Fields #

NameDescription
PortId UInt32
Operation UInt8
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
Message UInt8
ClientIp UInt32
ClientMac UnicodeString
TransactionId UInt32
AssignedIp UInt32
ServerIp UInt32
RequestedIp UInt32
RelayIp UInt32
DnsIp UInt32
SrcIp UInt32
SrcPort UInt16
DstIp UInt32
DstPort UInt16
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 551 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Operation UInt8
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
Message UInt8
ClientIp UInt32
ClientMac UnicodeString
TransactionId UInt32
AssignedIp UInt32
ServerIp UInt32
RequestedIp UInt32
RelayIp UInt32
DnsIp UInt32
SrcIp UInt32
SrcPort UInt16
DstIp UInt32
DstPort UInt16
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 600 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) created Direction unified flow UnifiedFlow: IsMain=IsMain, IsPending=IsPending, IsSecondary=IsSecondary, IsMirror=IsMirror, ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %33, FriendlyName = %34) created %2 unified flow %35: IsMain=%3, IsPending=%4, IsSecondary=%36, IsMirror=%37, IsHairpin=%38, HairpinChecked=%39, OriginalInbound=%40, IsTcpSyn=%29, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}, {EncapTransposition0 (%30), EncapTransposition1 (%31), InnerTransposition (%32)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 600 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 601 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) created Direction unified flow UnifiedFlow: IsMain=IsMain, IsPending=IsPending, IsSecondary=IsSecondary, IsMirror=IsMirror, ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %33, FriendlyName = %34) created %2 unified flow %35: IsMain=%3, IsPending=%4, IsSecondary=%36, IsMirror=%37, IsHairpin=%38, HairpinChecked=%39, OriginalInbound=%40, IsTcpSyn=%29, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}, {EncapTransposition0 (%30), EncapTransposition1 (%31), InnerTransposition (%32)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 601 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 602 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) created Direction unified flow: IsMain=IsMain, IsPending=IsPending, Tni=TNI, VlanId=VLAN, NumEncaps=NumEncaps, {EncapFlowId0...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %31, FriendlyName = %32) created %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}, {EncapTransposition0 (%28), EncapTransposition1 (%29), InnerTransposition (%30)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IcmpType UInt8
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 602 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IcmpType UInt8
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 603 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) created Direction unified flow: IsMain=IsMain, IsPending=IsPending, Tni=TNI, VlanId=VLAN, NumEncaps=NumEncaps, {EncapFlowId0...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %31, FriendlyName = %32) created %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}, {EncapTransposition0 (%28), EncapTransposition1 (%29), InnerTransposition (%30)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IcmpType UInt8
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 603 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IcmpType UInt8
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 604 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Direction unified flow UnifiedFlow: IsMain=IsMain, IsSecondary=IsSecondary, IsMirror=IsMirror, IsHairpin=IsHairpin, ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %33, FriendlyName = %34) matched %2 unified flow %35: IsMain=%3, IsSecondary=%36, IsMirror=%37, IsHairpin=%38, HairpinChecked=%39, OriginalInbound=%40, IsPending=%4, IsTcpSyn=%29, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}, {EncapTransposition0 (%30), EncapTransposition1 (%31), InnerTransposition (%32)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 604 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 605 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Direction unified flow UnifiedFlow: IsMain=IsMain, IsSecondary=IsSecondary, IsMirror=IsMirror, IsHairpin=IsHairpin, ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %33, FriendlyName = %34) matched %2 unified flow %35: IsMain=%3, IsSecondary=%36, IsMirror=%37, IsHairpin=%38, HairpinChecked=%39, OriginalInbound=%40, IsPending=%4, IsTcpSyn=%29, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}, {EncapTransposition0 (%30), EncapTransposition1 (%31), InnerTransposition (%32)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 605 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IsTcpSyn Boolean
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 606 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Direction unified flow: IsMain=IsMain, IsPending=IsPending, Tni=TNI, VlanId=VLAN, NumEncaps=NumEncaps, {EncapFlowId0...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %31, FriendlyName = %32) matched %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}, {EncapTransposition0 (%28), EncapTransposition1 (%29), InnerTransposition (%30)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IcmpType UInt8
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 606 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IcmpType UInt8
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 607 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Direction unified flow: IsMain=IsMain, IsPending=IsPending, Tni=TNI, VlanId=VLAN, NumEncaps=NumEncaps, {EncapFlowId0...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %31, FriendlyName = %32) matched %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}, {EncapTransposition0 (%28), EncapTransposition1 (%29), InnerTransposition (%30)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IcmpType UInt8
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 607 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IcmpType UInt8
EncapTransposition0 AnsiString
EncapTransposition1 AnsiString
Transposition AnsiString
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 608 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deleted Direction unified flow UnifiedFlow: IsMain=IsMain, IsPending=IsPending, IsSecondary=IsSecondary, IsMirror=IsMirror, ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %29, FriendlyName = %30) deleted %2 unified flow %31: IsMain=%3, IsPending=%4, IsSecondary=%32, IsMirror=%33, IsHairpin=%34, HairpinChecked=%35, OriginalInbound=%36, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 608 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 609 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deleted Direction unified flow UnifiedFlow: IsMain=IsMain, IsPending=IsPending, IsSecondary=IsSecondary, IsMirror=IsMirror, ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %29, FriendlyName = %30) deleted %2 unified flow %31: IsMain=%3, IsPending=%4, IsSecondary=%32, IsMirror=%33, IsHairpin=%34, HairpinChecked=%35, OriginalInbound=%36, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, SrcPort=%27, DestPort=%28)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 609 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
IsSecondary UInt8
IsMirror UInt8
IsHairpin UInt8
HairpinChecked UInt8
OriginalInbound UInt8

Event ID 610 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deleted Direction unified flow: IsMain=IsMain, IsPending=IsPending, Tni=TNI, VlanId=VLAN, NumEncaps=NumEncaps, {EncapFlowId0...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %28, FriendlyName = %29) deleted %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 610 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 UInt32
EncapDstIpv4Addr0 UInt32
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 UInt32
EncapDstIpv4Addr1 UInt32
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 611 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) deleted Direction unified flow: IsMain=IsMain, IsPending=IsPending, Tni=TNI, VlanId=VLAN, NumEncaps=NumEncaps, {EncapFlowId0...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %28, FriendlyName = %29) deleted %2 unified flow: IsMain=%3, IsPending=%4, Tni=%5, VlanId=%6, NumEncaps=%7, {EncapFlowId0 (EncapType=%8, SrcMac=%9, DestMac=%10, SrcIp=%11, DestIp=%12, TenantId=%13, EncryptVlanId=%14) EncapFlowId1 (EncapType=%15, SrcMac=%16, DestMac=%17, SrcIp=%18, DestIp=%19, TenantId=%20, EncryptVlanId=%21) InnerFlowId (Protocol=%22, SrcMac=%23, DestMac=%24, SrcIp=%25, DestIp=%26, IcmpType=%27)}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 611 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
IsMain UInt8
IsPending UInt8
TNI UInt64
VLAN UInt32
NumEncaps UInt8
EncapType0 AnsiString
EncapSrcMacAddr0 UnicodeString
EncapDestMacAddr0 UnicodeString
EncapSrcIpv4Addr0 Binary
EncapDstIpv6Addr0 Binary
TenantId0 UInt32
EncryptVxlanId0 UInt32
EncapType1 AnsiString
EncapSrcMacAddr1 UnicodeString
EncapDestMacAddr1 UnicodeString
EncapSrcIpv4Addr1 Binary
EncapDstIpv6Addr1 Binary
TenantId1 UInt32
EncryptVxlanId1 UInt32
IpProtocol UInt8
SrcMacAddr UnicodeString
DestMacAddr UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
IcmpType UInt8
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 650 — File operation FileOperation on file FileName with size FileSize completed with status OperationStatus, hex Status.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

File operation FileOperation on file FileName with size FileSize completed with status OperationStatus, hex Status.

Message #

File operation %1 on file %2 with size %3 completed with status %4, hex %5

Fields #

NameDescription
FileOperation UInt8
FileName UnicodeString
FileSize UInt64
OperationStatus UInt32
Status UInt32NTSTATUS reference

Event ID 650 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

File operation on file with size completed with status , hex.

Fields #

NameDescription
FileOperation UInt8
FileName UnicodeString
FileSize UInt64
OperationStatus UInt32
Status UInt32NTSTATUS reference

Event ID 700 — Failure in control processing for object.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Failure in control processing for object. Id: Id, Name: Name, Operation Type: TraceObjectOperationType, Type: ItemType, SubType: SubType, Flags: Flags, Port id: PortId, Port name: PortName, Status: Status, Failure reason (value = FailureReason): ControlFailureReason.

Message #

Failure in control processing for object. Id: %1, Name: %11, Operation Type: %2, Type: %3, SubType: %4, Flags: %5, Port id: %6, Port name: %7, Status: %8, Failure reason (value = %10): %9

Fields #

NameDescription
Id UnicodeString
TraceObjectOperationType UInt32
ItemType UInt32
SubType UInt8
Flags UInt16
PortId UInt32
PortName UnicodeString
Status UInt32NTSTATUS reference
ControlFailureReason UInt32
FailureReason UInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
Name UnicodeString

Event ID 700 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Failure in control processing for object. Id: , Name: , Operation Type: , Type: , SubType: , Flags: , Port id: , Port name: , Status: , Failure reason (value = ).

Fields #

NameDescription
Id UnicodeString
TraceObjectOperationType UInt32
ItemType UInt32
SubType UInt8
Flags UInt16
PortId UInt32
PortName UnicodeString
Status UInt32NTSTATUS reference
ControlFailureReason UInt32
FailureReason UInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
Name UnicodeString

Event ID 701 — Success during control processing for object.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Success during control processing for object. Id: Id, Name: Name, Operation Type: TraceObjectOperationType, Type: ItemType, SubType: SubType, Flags: Flags, Port id: PortId, Port name: PortName.

Message #

Success during control processing for object. Id: %1, Name: %11, Operation Type: %2, Type: %3, SubType: %4, Flags: %5, Port id: %6, Port name: %7

Fields #

NameDescription
Id UnicodeString
TraceObjectOperationType UInt32
ItemType UInt32
SubType UInt8
Flags UInt16
PortId UInt32
PortName UnicodeString
Status UInt32NTSTATUS reference
ControlFailureReason UInt32
FailureReason UInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
Name UnicodeString

Event ID 701 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Success during control processing for object. Id: , Name: , Operation Type: , Type: , SubType: , Flags: , Port id: , Port name.

Fields #

NameDescription
Id UnicodeString
TraceObjectOperationType UInt32
ItemType UInt32
SubType UInt8
Flags UInt16
PortId UInt32
PortName UnicodeString
Status UInt32NTSTATUS reference
ControlFailureReason UInt32
FailureReason UInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
Name UnicodeString

Event ID 702 — Ioctl completed.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Ioctl completed. Switch name: SwitchName, Port id: PortId, Port name: PortName, Process id: ProcessId, Irp: Irp, Status: Status.

Message #

Ioctl completed. Switch name: %1, Port id: %2, Port name: %3, Process id: %5, Irp: %6, Status: %7

Fields #

NameDescription
SwitchName UnicodeString
PortId UInt32
PortName UnicodeString
Operation UInt16
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ProcessId UInt32
Irp Pointer
Status UInt32NTSTATUS reference

Event ID 702 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Ioctl completed. Switch name: , Port id: , Port name: , Process id: , Irp: , Status.

Fields #

NameDescription
SwitchName UnicodeString
PortId UInt32
PortName UnicodeString
Operation UInt16
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ProcessId UInt32
Irp Pointer
Status UInt32NTSTATUS reference

Event ID 703 — Failed when setting port information.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Failed when setting port information. Port Id: PortId, Port Name: PortName, Operation: Operation, Status: Status, Failure reason (value = FailureReason): ControlFailureReason.

Message #

Failed when setting port information. Port Id: %1, Port Name: %2, Operation: %3, Status: %4, Failure reason (value = %6): %5

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
Operation UInt16
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
Status UInt32NTSTATUS reference
ControlFailureReason UInt32
FailureReason UInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 703 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Failed when setting port information. Port Id: , Port Name: , Operation: , Status: , Failure reason (value = ).

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
Operation UInt16
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
Status UInt32NTSTATUS reference
ControlFailureReason UInt32
FailureReason UInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 704 — Ioctl started.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Ioctl started. Switch name: SwitchName, Port id: PortId, Port name: PortName, Operation: Operation, Process id: ProcessId, Irp: Irp.

Message #

Ioctl started. Switch name: %1, Port id: %2, Port name: %3, Operation: %4, Process id: %5, Irp: %6

Fields #

NameDescription
SwitchName UnicodeString
PortId UInt32
PortName UnicodeString
Operation UInt16
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ProcessId UInt32
Irp Pointer
Status UInt32NTSTATUS reference

Event ID 704 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Ioctl started. Switch name: , Port id: , Port name: , Operation: , Process id: , Irp.

Fields #

NameDescription
SwitchName UnicodeString
PortId UInt32
PortName UnicodeString
Operation UInt16
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ProcessId UInt32
Irp Pointer
Status UInt32NTSTATUS reference

Event ID 705 — Failed when setting switch information.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Failed when setting switch information. Switch name: SwitchName, Operation: Operation, Status: Status, Failure reason (value = FailureReason): ControlFailureReason.

Message #

Failed when setting switch information. Switch name: %1, Operation: %2, Status: %3, Failure reason (value = %5): %4

Fields #

NameDescription
SwitchName UnicodeString
Operation UInt16
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
Status UInt32NTSTATUS reference
ControlFailureReason UInt32
FailureReason UInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 705 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Failed when setting switch information. Switch name: , Operation: , Status: , Failure reason (value = ).

Fields #

NameDescription
SwitchName UnicodeString
Operation UInt16
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
Status UInt32NTSTATUS reference
ControlFailureReason UInt32
FailureReason UInt32
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 706 — Ioctl pended.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Ioctl pended. Switch name: SwitchName, Port id: PortId, Port name: PortName, Operation: Operation, Process id: ProcessId, Irp: Irp.

Message #

Ioctl pended. Switch name: %1, Port id: %2, Port name: %3, Operation: %4, Process id: %5, Irp: %6

Fields #

NameDescription
SwitchName UnicodeString
PortId UInt32
PortName UnicodeString
Operation UInt16
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ProcessId UInt32
Irp Pointer
Status UInt32NTSTATUS reference

Event ID 706 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Ioctl pended. Switch name: , Port id: , Port name: , Operation: , Process id: , Irp.

Fields #

NameDescription
SwitchName UnicodeString
PortId UInt32
PortName UnicodeString
Operation UInt16
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
ProcessId UInt32
Irp Pointer
Status UInt32NTSTATUS reference

Event ID 751 — Matched redirect flow for deletion.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Matched redirect flow for deletion. Port id: , Layer id: , Src ip: , Dst ip: , Src port: , Dst port: , Protocol: , Encap dest ip: , Encap src ip: , Inner dest mac: , Gre key: , Port name.

Message #

Matched redirect flow for deletion. Port id: %1, Layer id: %2, Src ip: %3, Dst ip: %4, Src port: %5, Dst port: %6, Protocol: %7, Encap dest ip: %8, Encap src ip: %9, Inner dest mac: %10, Gre key: %11, Port name: %12

Fields #

NameDescription
PortId UInt32
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
EncapDstIpv4Addr UInt32
EncapSrcIpv4Addr UInt32
InnerDestMacAddr UnicodeString
GreKey UInt32
PortName UnicodeString

Event ID 751 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Matched redirect flow for deletion. Port id: , Layer id: , Src ip: , Dst ip: , Src port: , Dst port: , Protocol: , Encap dest ip: , Encap src ip: , Inner dest mac: , Gre key: , Port name.

Fields #

NameDescription
PortId UInt32
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
EncapDstIpv4Addr UInt32
EncapSrcIpv4Addr UInt32
InnerDestMacAddr UnicodeString
GreKey UInt32
PortName UnicodeString

Event ID 752 — Matched redirect flow for deletion.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Matched redirect flow for deletion. Port id: , Layer id: , Src ip: , Dst ip: , Src port: , Dst port: , Protocol: , Encap dest ip: , Encap src ip: , Inner dest mac: , Gre key: , Port name.

Message #

Matched redirect flow for deletion. Port id: %1, Layer id: %2, Src ip: %3, Dst ip: %4, Src port: %5, Dst port: %6, Protocol: %7, Encap dest ip: %8, Encap src ip: %9, Inner dest mac: %10, Gre key: %11, Port name: %12

Fields #

NameDescription
PortId UInt32
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
EncapDstIpv6Addr Binary
EncapSrcIpv6Addr Binary
InnerDestMacAddr UnicodeString
GreKey UInt32
PortName UnicodeString

Event ID 752 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Matched redirect flow for deletion. Port id: , Layer id: , Src ip: , Dst ip: , Src port: , Dst port: , Protocol: , Encap dest ip: , Encap src ip: , Inner dest mac: , Gre key: , Port name.

Fields #

NameDescription
PortId UInt32
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
EncapDstIpv6Addr Binary
EncapSrcIpv6Addr Binary
InnerDestMacAddr UnicodeString
GreKey UInt32
PortName UnicodeString

Event ID 800 — GFT offload capabilities in the context of Context.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

GFT offload capabilities in the context of %1. Flags %2, CounterCapabilities %3, SupportedTableTypes %4, SupportedEncapsulationTypes %5, SupportedIngressExactMatchTableActions %6, SupportedEgressExactMatchTableActions %7, SoftwareSupportedIngressExactMatchTableActions %8, SoftwareSupportedEgressExactMatchTableActions %9, SupportedIngressWildcardMatchTableActions %10, SupportedEgressWildcardMatchTableActions %11, SoftwareSupportedIngressWildcardMatchTableActions %12, SoftwareSupportedEgressWildcardMatchTableActions %13, NumPacketCounterObjects %14, NumByteCounterObjects %15, NumPacketByteCounterObjects %16, NumPacketByteCounterAndStateObjects %17, NumCounterObjectsPerIngressExactMatchFlowEntry %18, NumCounterObjectsPerEgressExactMatchFlowEntry %19 NumCounterObjectsPerIngressWildcardMatchFlowEntry %20, NumCounterObjectsPerEgressWildcardMatchFlowEntry %21.

Fields #

NameDescription
Context UnicodeString
Flags UInt32
CounterCapabilities UInt32
SupportedTableTypes UInt32
SupportedEncapsulationTypes UInt32
SupportedIngressExactMatchTableActions UInt32
SupportedEgressExactMatchTableActions UInt32
SoftwareSupportedIngressExactMatchTableActions UInt32
SoftwareSupportedEgressExactMatchTableActions UInt32
SupportedIngressWildcardMatchTableActions UInt32
SupportedEgressWildcardMatchTableActions UInt32
SoftwareSupportedIngressWildcardMatchTableActions UInt32
SoftwareSupportedEgressWildcardMatchTableActions UInt32
NumPacketCounterObjects UInt32
NumByteCounterObjects UInt32
NumPacketByteCounterObjects UInt32
NumPacketByteCounterAndStateObjects UInt32
NumCounterObjectsPerIngressExactMatchFlowEntry UInt32
NumCounterObjectsPerEgressExactMatchFlowEntry UInt32
NumCounterObjectsPerIngressWildcardMatchFlowEntry UInt32
NumCounterObjectsPerEgressWildcardMatchFlowEntry UInt32

Event ID 800 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
Context UnicodeString
Flags UInt32
CounterCapabilities UInt32
SupportedTableTypes UInt32
SupportedEncapsulationTypes UInt32
SupportedIngressExactMatchTableActions UInt32
SupportedEgressExactMatchTableActions UInt32
SoftwareSupportedIngressExactMatchTableActions UInt32
SoftwareSupportedEgressExactMatchTableActions UInt32
SupportedIngressWildcardMatchTableActions UInt32
SupportedEgressWildcardMatchTableActions UInt32
SoftwareSupportedIngressWildcardMatchTableActions UInt32
SoftwareSupportedEgressWildcardMatchTableActions UInt32
NumPacketCounterObjects UInt32
NumByteCounterObjects UInt32
NumPacketByteCounterObjects UInt32
NumPacketByteCounterAndStateObjects UInt32
NumCounterObjectsPerIngressExactMatchFlowEntry UInt32
NumCounterObjectsPerEgressExactMatchFlowEntry UInt32
NumCounterObjectsPerIngressWildcardMatchFlowEntry UInt32
NumCounterObjectsPerEgressWildcardMatchFlowEntry UInt32

Event ID 801 — GFT offload counters updated Context.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

GFT offload counters updated Context.

Message #

GFT offload counters updated %1.

Fields #

NameDescription
Context UnicodeString

Event ID 801 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

GFT offload counters updated .

Fields #

NameDescription
Context UnicodeString

Event ID 802 — GFT aggregate counters are not freed because either the port could not be referenced or the OID request failed.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

GFT aggregate counters are not freed because either the port could not be referenced or the OID request failed. Status: Status, GFT Counter id: GftCounterId, Port id: PortId, Port name: PortName.

Message #

GFT aggregate counters are not freed because either the port could not be referenced or the OID request failed. Status: %1, GFT Counter id: %2, Port id: %3, Port name: %4.

Fields #

NameDescription
Status UInt32NTSTATUS reference
GftCounterId UInt32
PortId UInt32
PortName UnicodeString

Event ID 802 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

GFT aggregate counters are not freed because either the port could not be referenced or the OID request failed. Status: , GFT Counter id: , Port id: , Port name: .

Fields #

NameDescription
Status UInt32NTSTATUS reference
GftCounterId UInt32
PortId UInt32
PortName UnicodeString

Event ID 803 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) reset TTL for GFT offloaded unified flow UnifiedFlow , GftProviderFlowEntryId GftProviderFlowEntryId.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %2, FriendlyName = %3) reset TTL for GFT offloaded unified flow %4  , GftProviderFlowEntryId %5. CurrSysTime %6, GftTimeStamp %7, GftUpdateInTtlUnits %8, MaxTtl %9, Ttl %10, PrevNumPackets %13, PrevNumBytes %14 NumPackets %11, NumBytes %12

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
GftProviderFlowEntryId UInt64
CurrSysTime UInt64
GftTimeStamp UInt64
GftUpdateElapsedInTtlUnits UInt32
MaxTtl UInt32
TTL UInt32
NumPackets UInt64
NumBytes UInt64
PrevNumPackets UInt64
PrevNumBytes UInt64

Event ID 803 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
GftProviderFlowEntryId UInt64
CurrSysTime UInt64
GftTimeStamp UInt64
GftUpdateElapsedInTtlUnits UInt32
MaxTtl UInt32
TTL UInt32
NumPackets UInt64
NumBytes UInt64
PrevNumPackets UInt64
PrevNumBytes UInt64

Event ID 804 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) changed GFT flow state of UF UnifiedFlow from OldGftFlowState to NewGftFlowState.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) changed GFT flow state of UF from to . GftPendingDelete is , GftMarkedForHwDeletion is , ReoffloadReqd is , RetryOffload is , BlockReason , RetryReason.

Message #

VfpExt on port %1 (Name = %2, FriendlyName = %3) changed GFT flow state of UF %4 from %5 to %6. GftPendingDelete is %7, GftMarkedForHwDeletion is %8, ReoffloadReqd is %9, RetryOffload is %10, BlockReason %11, RetryReason %12

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
OldGftFlowState UInt8
NewGftFlowState UInt8
IsPendingDelete Boolean
IsMarkedForHwDeletion Boolean
ReoffloadReqd Boolean
RetryOffload Boolean
GftFlowBlockReason UInt8
GftFlowRetryReason UInt8

Event ID 804 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) changed GFT flow state of UF from to . GftPendingDelete is , GftMarkedForHwDeletion is , ReoffloadReqd is , RetryOffload is , BlockReason , RetryReason.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
OldGftFlowState UInt8
NewGftFlowState UInt8
IsPendingDelete Boolean
IsMarkedForHwDeletion Boolean
ReoffloadReqd Boolean
RetryOffload Boolean
GftFlowBlockReason UInt8
GftFlowRetryReason UInt8

Event ID 805 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) UF UnifiedFlow add_flow failed with status Status due to FailureReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) UF UnifiedFlow add_flow failed with status Status due to FailureReason.

Message #

VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4 add_flow failed with status %5 due to %6

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
Status UInt32NTSTATUS reference
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 805 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) UF add_flow failed with status due to.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
Status UInt32NTSTATUS reference
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 806 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) UF UnifiedFlow, ProviderFlowEntry ProviderFlowEntryId add_flow succeded.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) UF UnifiedFlow, ProviderFlowEntry ProviderFlowEntryId add_flow succeded. Flow state GftFlowState, Offload reason GftFlowOffloadReason, GftPendingDelete IsPendingDelete.

Message #

VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4, ProviderFlowEntry %5 add_flow succeded. Flow state %6, Offload reason %7, GftPendingDelete %8

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
ProviderFlowEntryId UInt64
GftFlowState UInt8
GftFlowOffloadReason UInt8
IsPendingDelete Boolean

Event ID 806 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) UF , ProviderFlowEntry add_flow succeded. Flow state , Offload reason , GftPendingDelete.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
ProviderFlowEntryId UInt64
GftFlowState UInt8
GftFlowOffloadReason UInt8
IsPendingDelete Boolean

Event ID 807 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) UF UnifiedFlow delete_flow failed with status Status due to FailureReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) UF UnifiedFlow delete_flow failed with status Status due to FailureReason.

Message #

VfpExt on port %1 (Name = %2, FriendlyName = %3) UF %4 delete_flow failed with status %5 due to %6

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
Status UInt32NTSTATUS reference
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 807 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) UF delete_flow failed with status due to.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
UnifiedFlow UInt64
Status UInt32NTSTATUS reference
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 808 — Skipping Sx Port context PortContext (Name = Name, FriendlyName = FriendlyName) as a match with reason 'FailureReason'.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Skipping Sx Port context PortContext (Name = Name, FriendlyName = FriendlyName) as a match with reason 'FailureReason'.

Message #

Skipping Sx Port context %1 (Name = %2, FriendlyName = %3) as a match with reason '%4'

Fields #

NameDescription
PortContext UInt64
Name UnicodeString
FriendlyName UnicodeString
FailureReason UInt8
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 808 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Skipping Sx Port context PortContext (Name = Name, FriendlyName = FriendlyName) as a match with reason 'FailureReason'.

Fields #

NameDescription
PortContext UInt64
Name UnicodeString
FriendlyName UnicodeString
FailureReason UInt8
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 809 — Vfp failed to issue OID for VPort PortId with status Status due to FailureReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Vfp failed to issue OID for VPort PortId with status Status due to FailureReason.

Message #

Vfp failed to issue OID for VPort %1 with status %2 due to %3

Fields #

NameDescription
PortId UInt32
Status UInt32NTSTATUS reference
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 809 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Vfp failed to issue OID for VPort with status due to.

Fields #

NameDescription
PortId UInt32
Status UInt32NTSTATUS reference
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 810 — Failed to set GFT port parser settings on port PortId (Name = PortName, FriendlyName = FriendlyName) with status Status due to FailureReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Failed to set GFT port parser settings on port PortId (Name = PortName, FriendlyName = FriendlyName) with status Status due to FailureReason.

Message #

Failed to set GFT port parser settings on port %1 (Name = %2, FriendlyName = %3) with status %4 due to %5

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
FriendlyName UnicodeString
Status UInt32NTSTATUS reference
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 810 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Failed to set GFT port parser settings on port (Name = , FriendlyName = ) with status due to.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
FriendlyName UnicodeString
Status UInt32NTSTATUS reference
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 900 — Tag Id TagId completed operation with status: Status.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Tag Id TagId completed operation with status: Status. Extended operation status: Reason.

Message #

Tag Id %1 completed operation with status: %2. Extended operation status: %3

Fields #

NameDescription
TagId UnicodeString
Status UInt32NTSTATUS reference
Reason UInt8

Event ID 900 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Tag Id completed operation with status: . Extended operation status.

Fields #

NameDescription
TagId UnicodeString
Status UInt32NTSTATUS reference
Reason UInt8

Event ID 950 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ignore adding into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa = ProviderIpv...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 950 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 951 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ignore adding into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa = ProviderIpv...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 951 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 952 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ignore adding into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa = ProviderIpv...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 952 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 953 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ignore adding into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa = ProviderIpv...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) ignore adding into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 953 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 954 — VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, src port = SrcPort, dst port = DstPort, protocol = IpProtocol}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, src port = SrcPort, dst port = DstPort, protocol = IpProtocol}.

Message #

VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, src port = %4, dst port = %5, protocol = %6}.

Fields #

NameDescription
FlowType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8

Event ID 954 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt deleted layer flow of type with flow id {src ip = , dst ip = , src port = , dst port = , protocol = }.

Fields #

NameDescription
FlowType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8

Event ID 955 — VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, src port = SrcPort, dst port = DstPort, protocol = IpProtocol}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, src port = SrcPort, dst port = DstPort, protocol = IpProtocol}.

Message #

VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, src port = %4, dst port = %5, protocol = %6}.

Fields #

NameDescription
FlowType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8

Event ID 955 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt deleted layer flow of type with flow id {src ip = , dst ip = , src port = , dst port = , protocol = }.

Fields #

NameDescription
FlowType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8

Event ID 956 — VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, protocol = IpProtocol, icmp type = IcmpType}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, protocol = IpProtocol, icmp type = IcmpType}.

Message #

VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, protocol = %4, icmp type = %5}.

Fields #

NameDescription
FlowType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8

Event ID 956 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt deleted layer flow of type with flow id {src ip = , dst ip = , protocol = , icmp type = }.

Fields #

NameDescription
FlowType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8

Event ID 957 — VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, protocol = IpProtocol, icmp type = IcmpType}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, protocol = IpProtocol, icmp type = IcmpType}.

Message #

VfpExt deleted layer flow of type %1 with flow id {src ip = %2, dst ip = %3, protocol = %4, icmp type = %5}.

Fields #

NameDescription
FlowType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8

Event ID 957 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt deleted layer flow of type with flow id {src ip = , dst ip = , protocol = , icmp type = }.

Fields #

NameDescription
FlowType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8

Event ID 958 — VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, src port = SrcPort, dst port = DstPort, protocol = IpProtocol}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt deleted layer flow of type with flow id {src ip = , dst ip = , src port = , dst port = , protocol = }. IsMain = , NumPackets = , NumBytes = , NumPackets = , NumBytes =.

Message #

VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, src port = %5, dst port = %6, protocol = %7}. IsMain = %2, NumPackets = %8, NumBytes = %9, NumPackets = %10, NumBytes = %11

Fields #

NameDescription
FlowType UInt8
IsMain UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
NumPackets UInt64
NumBytes UInt64
NumReversePackets UInt64
NumReverseBytes UInt64

Event ID 958 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt deleted layer flow of type with flow id {src ip = , dst ip = , src port = , dst port = , protocol = }. IsMain = , NumPackets = , NumBytes = , NumPackets = , NumBytes =.

Fields #

NameDescription
FlowType UInt8
IsMain UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
NumPackets UInt64
NumBytes UInt64
NumReversePackets UInt64
NumReverseBytes UInt64

Event ID 959 — VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, src port = SrcPort, dst port = DstPort, protocol = IpProtocol}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt deleted layer flow of type with flow id {src ip = , dst ip = , src port = , dst port = , protocol = }. IsMain = , NumPackets = , NumBytes = , NumPackets = , NumBytes =.

Message #

VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, src port = %5, dst port = %6, protocol = %7}. IsMain = %2, NumPackets = %8, NumBytes = %9, NumPackets = %10, NumBytes = %11

Fields #

NameDescription
FlowType UInt8
IsMain UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
NumPackets UInt64
NumBytes UInt64
NumReversePackets UInt64
NumReverseBytes UInt64

Event ID 959 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt deleted layer flow of type with flow id {src ip = , dst ip = , src port = , dst port = , protocol = }. IsMain = , NumPackets = , NumBytes = , NumPackets = , NumBytes =.

Fields #

NameDescription
FlowType UInt8
IsMain UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
NumPackets UInt64
NumBytes UInt64
NumReversePackets UInt64
NumReverseBytes UInt64

Event ID 960 — VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, protocol = IpProtocol, icmp type = IcmpType}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, protocol = IpProtocol, icmp type = IcmpType}. IsMain = IsMain, NumPackets = NumPackets, NumBytes = NumBytes. NumPackets = NumReversePackets, NumBytes = NumReverseBytes.

Message #

VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, protocol = %5, icmp type = %6}. IsMain = %2, NumPackets = %7, NumBytes = %8. NumPackets = %9, NumBytes = %10

Fields #

NameDescription
FlowType UInt8
IsMain UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
NumPackets UInt64
NumBytes UInt64
NumReversePackets UInt64
NumReverseBytes UInt64

Event ID 960 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt deleted layer flow of type with flow id {src ip = , dst ip = , protocol = , icmp type = }. IsMain = , NumPackets = , NumBytes = . NumPackets = , NumBytes =.

Fields #

NameDescription
FlowType UInt8
IsMain UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
IpProtocol UInt8
IcmpType UInt8
NumPackets UInt64
NumBytes UInt64
NumReversePackets UInt64
NumReverseBytes UInt64

Event ID 961 — VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, protocol = IpProtocol, icmp type = IcmpType}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt deleted layer flow of type FlowType with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, protocol = IpProtocol, icmp type = IcmpType}. IsMain = IsMain, NumPackets = NumPackets, NumBytes = NumBytes. NumPackets = NumReversePackets, NumBytes = NumReverseBytes.

Message #

VfpExt deleted layer flow of type %1 with flow id {src ip = %3, dst ip = %4, protocol = %5, icmp type = %6}. IsMain = %2, NumPackets = %7, NumBytes = %8. NumPackets = %9, NumBytes = %10

Fields #

NameDescription
FlowType UInt8
IsMain UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
NumPackets UInt64
NumBytes UInt64
NumReversePackets UInt64
NumReverseBytes UInt64

Event ID 961 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt deleted layer flow of type with flow id {src ip = , dst ip = , protocol = , icmp type = }. IsMain = , NumPackets = , NumBytes = . NumPackets = , NumBytes =.

Fields #

NameDescription
FlowType UInt8
IsMain UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
IpProtocol UInt8
IcmpType UInt8
NumPackets UInt64
NumBytes UInt64
NumReversePackets UInt64
NumReverseBytes UInt64

Event ID 962 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) failed to schedule work item due to status Status.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) failed to schedule work item due to status Status.

Message #

VfpExt on port %1 (Name = %2, FriendlyName = %3) failed to schedule work item due to status %4

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
Status UInt32NTSTATUS reference

Event ID 962 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) failed to schedule work item due to status.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
Status UInt32NTSTATUS reference

Event ID 963 — Replacing layer flow addresses succeeded on port PortId (Name = PortName, FriendlyName = PortFriendlyName), layer LayerId, status Status, number of outbound flows replaced = NumOutboundFlowsReplace...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Replacing layer flow addresses succeeded on port PortId (Name = PortName, FriendlyName = PortFriendlyName), layer LayerId, status Status, number of outbound flows replaced = NumOutboundFlowsReplaced, number of inbound flows replaced = NumInboundFlowsReplaced.

Message #

Replacing layer flow addresses succeeded on port %1 (Name = %2, FriendlyName = %3), layer %4, status %5, number of outbound flows replaced = %6, number of inbound flows replaced = %7

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
LayerId UnicodeString
Status UInt32NTSTATUS reference
NumOutboundFlowsReplaced UInt32
NumInboundFlowsReplaced UInt32

Event ID 963 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Replacing layer flow addresses succeeded on port (Name = , FriendlyName = ), layer , status , number of outbound flows replaced = , number of inbound flows replaced =.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
LayerId UnicodeString
Status UInt32NTSTATUS reference
NumOutboundFlowsReplaced UInt32
NumInboundFlowsReplaced UInt32

Event ID 964 — Replacing layer flow addresses failed on port PortId (Name = PortName, FriendlyName = PortFriendlyName), layer LayerId, status Status, number of outbound flows replaced = NumOutboundFlowsReplaced, ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Replacing layer flow addresses failed on port PortId (Name = PortName, FriendlyName = PortFriendlyName), layer LayerId, status Status, number of outbound flows replaced = NumOutboundFlowsReplaced, number of inbound flows replaced = NumInboundFlowsReplaced.

Message #

Replacing layer flow addresses failed on port %1 (Name = %2, FriendlyName = %3), layer %4, status %5, number of outbound flows replaced = %6, number of inbound flows replaced = %7

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
LayerId UnicodeString
Status UInt32NTSTATUS reference
NumOutboundFlowsReplaced UInt32
NumInboundFlowsReplaced UInt32

Event ID 964 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Replacing layer flow addresses failed on port (Name = , FriendlyName = ), layer , status , number of outbound flows replaced = , number of inbound flows replaced =.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
LayerId UnicodeString
Status UInt32NTSTATUS reference
NumOutboundFlowsReplaced UInt32
NumInboundFlowsReplaced UInt32

Event ID 965 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ran port timer function PortTimerFunction.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) ran port timer function PortTimerFunction.

Message #

VfpExt on port %1 (Name = %2, FriendlyName = %3) ran port timer function %4

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
PortTimerFunction UInt8

Event ID 965 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) ran port timer function.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
PortTimerFunction UInt8

Event ID 966 — Suspended live migration state change on port PortId (Name = PortName, FriendlyName = PortFriendlyName), new live migration state = SuspendedLmState.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Suspended live migration state change on port PortId (Name = PortName, FriendlyName = PortFriendlyName), new live migration state = SuspendedLmState.

Message #

Suspended live migration state change on port %1 (Name = %2, FriendlyName = %3), new live migration state = %4

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
SuspendedLmState UInt8

Event ID 966 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Suspended live migration state change on port (Name = , FriendlyName = ), new live migration state =.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
SuspendedLmState UInt8

Event ID 967 — VfpExt set NDIS_NIC_SWITCH_VPORT_PARAMS_ENFORCE_MAX_SG_LIST on port (name = PortName, Friendlyname = PortFriendlyName) during VF VPort Creation.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt set NDIS_NIC_SWITCH_VPORT_PARAMS_ENFORCE_MAX_SG_LIST on port (name = PortName, Friendlyname = PortFriendlyName) during VF VPort Creation.

Message #

VfpExt set NDIS_NIC_SWITCH_VPORT_PARAMS_ENFORCE_MAX_SG_LIST on port (name = %1, Friendlyname = %2) during VF VPort Creation

Fields #

NameDescription
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 967 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt set NDIS_NIC_SWITCH_VPORT_PARAMS_ENFORCE_MAX_SG_LIST on port (name = , Friendlyname = ) during VF VPort Creation.

Fields #

NameDescription
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 968 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with numFlows MaxEntries with StepDownMinItem enabled : StepDownMinItem with timer interval NextTimerUpdateInterval is sched...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) with numFlows with StepDownMinItem enabled : with timer interval is scheduled with status with outstanding work times and heurstic is enabled.

Message #

VfpExt on port %1 (Name = %2, FriendlyName = %3) with numFlows %4 with StepDownMinItem enabled : %5 with timer interval %6 is scheduled with status %7 with %8 outstanding work times and heurstic is enabled: %9

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
MaxEntries UInt32
StepDownMinItem Boolean
NextTimerUpdateInterval Int64
Status UInt32NTSTATUS reference
OutstandingWorkItems UInt32
HeuristicTimerUpdatesEnabled Boolean

Event ID 968 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) with numFlows with StepDownMinItem enabled : with timer interval is scheduled with status with outstanding work times and heurstic is enabled.

Fields #

NameDescription
PortId UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
MaxEntries UInt32
StepDownMinItem Boolean
NextTimerUpdateInterval Int64
Status UInt32NTSTATUS reference
OutstandingWorkItems UInt32
HeuristicTimerUpdatesEnabled Boolean

Event ID 969 — Skipping Sx Switch context SwitchContext (Name = Name, FriendlyName = FriendlyName) as a match with reason 'FailureReason'.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Skipping Sx Switch context SwitchContext (Name = Name, FriendlyName = FriendlyName) as a match with reason 'FailureReason'.

Message #

Skipping Sx Switch context %1 (Name = %2, FriendlyName = %3) as a match with reason '%4'

Fields #

NameDescription
SwitchContext UInt64
Name UnicodeString
FriendlyName UnicodeString
FailureReason UInt8
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 969 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Skipping Sx Switch context SwitchContext (Name = Name, FriendlyName = FriendlyName) as a match with reason 'FailureReason'.

Fields #

NameDescription
SwitchContext UInt64
Name UnicodeString
FriendlyName UnicodeString
FailureReason UInt8
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 970 — Managing VM Context failed for VMId: VmId on port (name = PortName, FriendlyName = PortFriendlyName) with status = Status, internal reason: FailureReason.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Managing VM Context failed for VMId: VmId on port (name = PortName, FriendlyName = PortFriendlyName) with status = Status, internal reason: FailureReason.

Message #

Managing VM Context failed for VMId: %1 on port (name = %2, FriendlyName = %3) with status = %4, internal reason: %5

Fields #

NameDescription
VmId UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString
Status UInt32NTSTATUS reference
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 970 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Managing VM Context failed for VMId: on port (name = , FriendlyName = ) with status = , internal reason.

Fields #

NameDescription
VmId UnicodeString
PortName UnicodeString
PortFriendlyName UnicodeString
Status UInt32NTSTATUS reference
FailureReason UnicodeString
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.

Event ID 971 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) refreshing into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa = ProviderIpv4Ad...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 971 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 972 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) refreshing into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa = ProviderIpv4Ad...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 972 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 973 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) refreshing into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa = ProviderIpv6Ad...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 973 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 974 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) refreshing into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa = ProviderIpv6Ad...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) refreshing into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 974 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 975 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) Negative caching into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa = Provider...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 975 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 976 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) Negative caching into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa = Provider...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %7, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 976 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 977 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) Negative caching into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv4Addr, pa = Provider...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %4, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 977 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 978 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) Negative caching into space SpaceId the following mapping: {mapping type = MappingType, ca = CustomerIpv6Addr, pa = Provider...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt on port %1 (Name = %19, FriendlyName = %20) Negative caching into space %2 the following mapping: {mapping type = %3, ca = %6, pa = %9, mac addr = %10, customer mac addr = %11, isolation id = %12, flags = {all = %13, permanent = %14, non unique PA = %15, mac mapping = %16, L4-load-balanced mapping = %17, L3-load-balanced mapping = %18}}

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 978 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
SpaceId UnicodeString
MappingType UInt8
CustomerIpv4Addr UInt32
CustomerIpv6AddrLength UInt32
CustomerIpv6Addr Binary
ProviderIpv4Addr UInt32
ProviderIpv6AddrLength UInt32
ProviderIpv6Addr Binary
MacAddr UnicodeString
CustomerMacAddr UnicodeString
IsolationId UInt32
Flags UInt32
PermanentFlag Boolean
NonUniquePAFlag Boolean
MacMappingFlag Boolean
L4LoadBalanced Boolean
L3LoadBalanced Boolean
PortName UnicodeString
PortFriendlyName UnicodeString

Event ID 979 — VfpExt on port PortId received mappingdesc for following mapping: {mapping index type = MappingIndexType, address = Ipv4Addr}}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId received mappingdesc for following mapping: {mapping index type = MappingIndexType, address = Ipv4Addr}}.

Message #

VfpExt on port %1 received mappingdesc for following mapping: {mapping index type = %2, address = %3}}

Fields #

NameDescription
PortId UInt32
MappingIndexType UInt8
Ipv4Addr UInt32
Ipv6AddrLength UInt32
Ipv6Addr Binary

Event ID 979 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port received mappingdesc for following mapping: {mapping index type = , address = }}.

Fields #

NameDescription
PortId UInt32
MappingIndexType UInt8
Ipv4Addr UInt32
Ipv6AddrLength UInt32
Ipv6Addr Binary

Event ID 980 — VfpExt on port PortId received mappingdesc for following mapping: {mapping index type = MappingIndexType, address = Ipv6Addr}}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId received mappingdesc for following mapping: {mapping index type = MappingIndexType, address = Ipv6Addr}}.

Message #

VfpExt on port %1 received mappingdesc for following mapping: {mapping index type = %2, address = %5}}

Fields #

NameDescription
PortId UInt32
MappingIndexType UInt8
Ipv4Addr UInt32
Ipv6AddrLength UInt32
Ipv6Addr Binary

Event ID 980 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port received mappingdesc for following mapping: {mapping index type = , address = }}.

Fields #

NameDescription
PortId UInt32
MappingIndexType UInt8
Ipv4Addr UInt32
Ipv6AddrLength UInt32
Ipv6Addr Binary

Event ID 981 — Applying GFT Multi-Tenant Settings status Status - port VPortId (Name = PortName), Enable: Enable, UseVlanMask: UseVlanMask, UseVlanMaxRange: UseMaxVlanRange, UseVlanMinRange: UseMinVlanRange, Vlan...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Applying GFT Multi-Tenant Settings status Status - port VPortId (Name = PortName), Enable: Enable, UseVlanMask: UseVlanMask, UseVlanMaxRange: UseMaxVlanRange, UseVlanMinRange: UseMinVlanRange, VlanMask: VlanMask, MaxVlanRange: MaxVlanRange, MinVlanRange: MinVlanRange.

Message #

Applying GFT Multi-Tenant Settings status %1 - port %2 (Name = %3), Enable: %4, UseVlanMask: %5, UseVlanMaxRange: %6, UseVlanMinRange: %7, VlanMask: %8, MaxVlanRange: %9, MinVlanRange: %10

Fields #

NameDescription
Status UInt32NTSTATUS reference
VPortId UInt32
PortName UnicodeString
Enable Boolean
UseVlanMask Boolean
UseMaxVlanRange Boolean
UseMinVlanRange Boolean
VlanMask HexInt32
MaxVlanRange UInt32
MinVlanRange UInt32

Event ID 981 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

Applying GFT Multi-Tenant Settings status - port (Name = ), Enable: , UseVlanMask: , UseVlanMaxRange: , UseVlanMinRange: , VlanMask: , MaxVlanRange: , MinVlanRange.

Fields #

NameDescription
Status UInt32NTSTATUS reference
VPortId UInt32
PortName UnicodeString
Enable Boolean
UseVlanMask Boolean
UseMaxVlanRange Boolean
UseMinVlanRange Boolean
VlanMask HexInt32
MaxVlanRange UInt32
MinVlanRange UInt32

Event ID 982 — Reason, status = Status.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

Reason, status = Status.

Message #

%1, status = %2

Fields #

NameDescription
Reason UnicodeString
Status UInt32NTSTATUS reference

Event ID 982 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

, status =.

Fields #

NameDescription
Reason UnicodeString
Status UInt32NTSTATUS reference

Event ID 983 — GFT direct configuration dispatch table for switch SwitchName returned status Status.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

GFT direct configuration dispatch table for switch returned status . ClientHandle , ProviderHandle , ClientRequestCompletionHandler , ProviderRequestHandler .

Message #

GFT direct configuration dispatch table for switch %1 returned status %2. ClientHandle %3, ProviderHandle %4, ClientRequestCompletionHandler %5, ProviderRequestHandler %6.

Fields #

NameDescription
SwitchName UnicodeString
Status UInt32NTSTATUS reference
GftClientHandle UInt64
GftProviderHandle UInt64
GftClientDirectConfigurationRequestCompleteHandler UInt64
GftProviderDirectConfigurationRequestHandler UInt64

Event ID 983 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

GFT direct configuration dispatch table for switch returned status . ClientHandle , ProviderHandle , ClientRequestCompletionHandler , ProviderRequestHandler .

Fields #

NameDescription
SwitchName UnicodeString
Status UInt32NTSTATUS reference
GftClientHandle UInt64
GftProviderHandle UInt64
GftClientDirectConfigurationRequestCompleteHandler UInt64
GftProviderDirectConfigurationRequestHandler UInt64

Event ID 984 — VfpExt on port PortId layer LayerName matched a redirect rule, using reconcilation path {Path}.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId layer LayerName matched a redirect rule, using reconcilation path {Path}.

Message #

VfpExt on port %1 layer %2 matched a redirect rule, using reconcilation path {%3}

Fields #

NameDescription
PortId UInt32
LayerName UnicodeString
Known values
%%14596
IP Packet
%%14597
Transport
%%14598
Forward
%%14599
Stream
%%14600
Datagram Data
%%14601
ICMP Error
%%14602
MAC 802.3
%%14603
MAC Native
%%14604
vSwitch
%%14608
Resource Assignment
%%14609
Listen
%%14610
Receive/Accept
%%14611
Connect
%%14612
Flow Established
%%14614
Resource Release
%%14615
Endpoint Closure
%%14616
Connect Redirect
%%14617
Bind Redirect
%%14624
Stream Packet
%%14625
Accept Redirect
%%14626
Accept Redirect
%%14640
ICMP Echo-Request
%%14641
vSwitch Ingress
%%14642
vSwitch Egress
%%14643
Unknown
Path UInt8

Event ID 984 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port layer matched a redirect rule, using reconcilation path {}.

Fields #

NameDescription
PortId UInt32
LayerName UnicodeString
Known values
%%14596
IP Packet
%%14597
Transport
%%14598
Forward
%%14599
Stream
%%14600
Datagram Data
%%14601
ICMP Error
%%14602
MAC 802.3
%%14603
MAC Native
%%14604
vSwitch
%%14608
Resource Assignment
%%14609
Listen
%%14610
Receive/Accept
%%14611
Connect
%%14612
Flow Established
%%14614
Resource Release
%%14615
Endpoint Closure
%%14616
Connect Redirect
%%14617
Bind Redirect
%%14624
Stream Packet
%%14625
Accept Redirect
%%14626
Accept Redirect
%%14640
ICMP Echo-Request
%%14641
vSwitch Ingress
%%14642
vSwitch Egress
%%14643
Unknown
Path UInt8

Event ID 990 — VfpExt hairpin processing dropped packet because destination port after hairpin processing is same as original source part.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

VfpExt hairpin processing dropped packet because destination port after hairpin processing is same as original source part. Source port %1 (Name = %2, FriendlyName = %3) Target port %4 (Name = %5, FriendlyName = %6) IsMirror = %7, Packet = %8, Original Packet = %9

Fields #

NameDescription
SrcPortId UInt32
SrcPortName UnicodeString
SrcPortFriendlyName UnicodeString
TargetPortId UInt32
TargetPortName UnicodeString
TargetPortFriendlyName UnicodeString
IsMirror Boolean
Packet Pointer
OriginalPacket Pointer

Event ID 990 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
SrcPortId UInt32
SrcPortName UnicodeString
SrcPortFriendlyName UnicodeString
TargetPortId UInt32
TargetPortName UnicodeString
TargetPortFriendlyName UnicodeString
IsMirror Boolean
Packet Pointer
OriginalPacket Pointer

Event ID 1000 — VFP PktMon Registration failed for switch SwitchName with status Status and statusLocation StatusLocation.

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VFP PktMon Registration failed for switch SwitchName with status Status and statusLocation StatusLocation.

Message #

VFP PktMon Registration failed for switch %1 with status %2 and statusLocation %3

Fields #

NameDescription
SwitchName UnicodeString
Status UInt32NTSTATUS reference
StatusLocation UInt32

Event ID 1000 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VFP PktMon Registration failed for switch with status and statusLocation.

Fields #

NameDescription
SwitchName UnicodeString
Status UInt32NTSTATUS reference
StatusLocation UInt32

Event ID 1010 — VfpExt QoS config with EnableHardwareCaps=EnableHardwareCaps, EnableHardwareReservations=EnableHardwareReservations, EnableSoftwareReservations=EnableSoftwareReservations, Flags=Flags, failed with ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt QoS config with EnableHardwareCaps=EnableHardwareCaps, EnableHardwareReservations=EnableHardwareReservations, EnableSoftwareReservations=EnableSoftwareReservations, Flags=Flags, failed with status:(Status), reason:(FailReason).

Message #

VfpExt QoS config with EnableHardwareCaps=%1, EnableHardwareReservations=%2, EnableSoftwareReservations=%3, Flags=%4, failed with status:(%5), reason:(%6)

Fields #

NameDescription
EnableHardwareCaps Boolean
EnableHardwareReservations Boolean
EnableSoftwareReservations Boolean
Flags UInt8
Status UInt32NTSTATUS reference
FailReason UInt8

Event ID 1010 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt QoS config with EnableHardwareCaps=, EnableHardwareReservations=, EnableSoftwareReservations=, Flags=, failed with status:(), reason:().

Fields #

NameDescription
EnableHardwareCaps Boolean
EnableHardwareReservations Boolean
EnableSoftwareReservations Boolean
Flags UInt8
Status UInt32NTSTATUS reference
FailReason UInt8

Event ID 1011 — VPort OID failed for VportName=PortName, AttachedFunctionId=AttachedFunctionId, status=(Status), reason=(Reason).

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VPort OID failed for VportName=PortName, AttachedFunctionId=AttachedFunctionId, status=(Status), reason=(Reason).

Message #

VPort OID failed for VportName=%1, AttachedFunctionId=%2, status=(%4), reason=(%3)

Fields #

NameDescription
PortName UnicodeString
AttachedFunctionId UInt16
Reason UInt32
Status UInt32NTSTATUS reference

Event ID 1011 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VPort OID failed for VportName=, AttachedFunctionId=, status=(), reason=().

Fields #

NameDescription
PortName UnicodeString
AttachedFunctionId UInt16
Reason UInt32
Status UInt32NTSTATUS reference

Event ID 1012 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow ID {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 1012 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 1013 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow ID {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %14, FriendlyName = %15) with status = %13 and statusLocation = %17: flow ID {src ip = %7, dst ip = %8, src port = %9, dst port = %10, protocol = %11, isTcpSyn = %12}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %16}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 1013 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 1014 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, src port = Sr...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = }, gftFlags =.

Message #

VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}, gftFlags = %12

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1014 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = }, gftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1015 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, src port = Sr...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = }, gftFlags =.

Message #

VfpExt on port %1 (Name = %10, FriendlyName = %11) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, src port = %6, dst port = %7, protocol = %8, isTcpSyn = %9}, gftFlags = %12

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1015 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = }, gftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1016 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, gre key = Gre...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, gre key = GreKey}. GftFlags = GftFlags.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1016 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , gre key = }. GftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1017 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, gre key = Gre...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) found no match in layer LayerId for Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, gre key = GreKey}. GftFlags = GftFlags.

Message #

VfpExt on port %1 (Name = %7, FriendlyName = %8) found no match in layer %3 for %2packets with flow id {src ip = %4, dst ip = %5, gre key = %6}. GftFlags = %9

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1017 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) found no match in layer for packets with flow id {src ip = , dst ip = , gre key = }. GftFlags =.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1018 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow id {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 1018 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 1019 — RuleTyperule with ID RuleId processed Directionpackets on port PortId (Name = PortName, FriendlyName = PortFriendlyName) with status = Status and statusLocation = StatusLocation: flow id {src ip = ...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Message #

%6rule with ID %5 processed %2packets on port %1 (Name = %11, FriendlyName = %12) with status = %10 and statusLocation = %14: flow id {src ip = %7, dst ip = %8, gre key = %9}, rule {layer = %3, group = %4, rule id = %5, gftFlags = %13}

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 1019 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

rule with ID processed packets on port (Name = , FriendlyName = ) with status = and statusLocation = : flow id {src ip = , dst ip = , gre key = }, rule {layer = , group = , rule id = , gftFlags = }.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
GroupId UnicodeString
RuleId UnicodeString
RuleType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
GreKey UInt32
Status UInt32NTSTATUS reference
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32
StatusLocation UInt32

Event ID 1020 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Directionpackets with flow id {src ip = SrcIpv4Addr, dst ip = DstIpv4Addr, src port = SrcPort, dst port = DstPort, p...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) matched packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = } to flow {layer = , flow type = }. GftFlags = .

Message #

VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol = %9, isTcpSyn = %10} to flow {layer = %3, flow type = %4}. GftFlags = %13.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1020 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) matched packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = } to flow {layer = , flow type = }. GftFlags = .

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv4Addr UInt32
DstIpv4Addr UInt32
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1021 — VfpExt on port PortId (Name = PortName, FriendlyName = PortFriendlyName) matched Directionpackets with flow id {src ip = SrcIpv6Addr, dst ip = DstIpv6Addr, src port = SrcPort, dst port = DstPort, p...

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Microsoft-Windows-Hyper-V-VfpExt-Analytic

Description

VfpExt on port (Name = , FriendlyName = ) matched packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = } to flow {layer = , flow type = }. GftFlags = .

Message #

VfpExt on port %1 (Name = %11, FriendlyName = %12) matched %2packets with flow id {src ip = %5, dst ip = %6, src port = %7, dst port = %8, protocol = %9, isTcpSyn = %10} to flow {layer = %3, flow type = %4}. GftFlags = %13.

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32

Event ID 1021 —

Provider
Microsoft-Windows-Hyper-V-VfpExt
Channel
Operational

Description

VfpExt on port (Name = , FriendlyName = ) matched packets with flow id {src ip = , dst ip = , src port = , dst port = , protocol = , isTcpSyn = } to flow {layer = , flow type = }. GftFlags = .

Fields #

NameDescription
PortId UInt32
Direction UInt8
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
LayerId UnicodeString
FlowType UInt8
SrcIpv6Addr Binary
DstIpv6Addr Binary
SrcPort UInt16
DstPort UInt16
IpProtocol UInt8
IsTcpSyn Boolean
PortName UnicodeString
PortFriendlyName UnicodeString
GftFlags UInt32