Microsoft-Windows-Hyper-V-VSmb
45 events across 3 channels
Event ID 1 —
Fields
| Name | Description |
|---|---|
TraceData | — |
VmName | — |
VmId | — |
StackFrameCount | — |
StackFrame | — |
ModuleCount | — |
Module | — |
Event ID 1 — [VMID %3] %1.
Message
Fields
| Name | Description |
|---|---|
TraceData | — |
VmName | — |
VmId | — |
StackFrameCount | — |
StackFrame | — |
ModuleCount | — |
Module | — |
Event ID 2 —
Fields
| Name | Description |
|---|---|
TraceData | — |
VmName | — |
VmId | — |
StackFrameCount | — |
StackFrame | — |
ModuleCount | — |
Module | — |
Event ID 2 — [VMID %3] %1.
Message
Fields
| Name | Description |
|---|---|
TraceData | — |
VmName | — |
VmId | — |
StackFrameCount | — |
StackFrame | — |
ModuleCount | — |
Module | — |
Event ID 3 —
Fields
| Name | Description |
|---|---|
TraceData | — |
VmName | — |
VmId | — |
StackFrameCount | — |
StackFrame | — |
ModuleCount | — |
Module | — |
Event ID 3 — [VMID %3] %1.
Message
Fields
| Name | Description |
|---|---|
TraceData | — |
VmName | — |
VmId | — |
StackFrameCount | — |
StackFrame | — |
ModuleCount | — |
Module | — |
Event ID 4 —
Fields
| Name | Description |
|---|---|
TraceData | — |
VmName | — |
VmId | — |
StackFrameCount | — |
StackFrame | — |
ModuleCount | — |
Module | — |
Event ID 4 — [VMID %3] %1.
Message
Fields
| Name | Description |
|---|---|
TraceData | — |
VmName | — |
VmId | — |
StackFrameCount | — |
StackFrame | — |
ModuleCount | — |
Module | — |
Event ID 101 — SMB2 Response Negotiate
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
Event ID 102 — SMB2 Response Session Setup
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
Event ID 103 — SMB2 Response Logoff
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
Event ID 104 — SMB2 Response Tree Connect
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
ShareType | — |
ShareFlags | — |
Capabilities | — |
MaximalAccess | — |
Event ID 105 — SMB2 Response Tree Disconnect
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
Event ID 106 — SMB2 Response Echo
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
Event ID 108 — SMB2 Response Create
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
AllocationSize | — |
FileNameLength | — |
FileName | — |
Event ID 109 — SMB2 Response Close
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
AllocationSize | — |
FileNameLength | — |
FileName | — |
Event ID 110 — SMB2 Response Flush
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
AllocationSize | — |
FileNameLength | — |
FileName | — |
Event ID 111 — SMB2 Response Read
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
LengthRead | — |
Event ID 112 — SMB2 Response Write
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
LengthWritten | — |
Remaining | — |
WriteChannelInfoOffset | — |
WriteChannelInfoLength | — |
Event ID 113 — SMB2 Response Break Oplock
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
OplockLevel | — |
FileId | — |
Event ID 115 — SMB2 Response Acknowledge Break Lease
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
LeaseFlags | — |
LeaseState | — |
LeaseDuration | — |
LeaseKey | — |
Event ID 116 — SMB2 Response Lock
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
Event ID 117 — SMB2 Response Ioctl
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
ControlCode | — |
IoctlFlags | — |
FileId | — |
Event ID 118 — SMB2 Response Query Directory
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
Infoclass | — |
Event ID 119 — SMB2 Response Change Notify
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
Event ID 120 — SMB2 Response Query Info
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
InfoType | — |
InfoClass | — |
AllocationSize | — |
FileNameLength | — |
FileName | — |
Event ID 121 — SMB2 Response Set Info
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
InfoType | — |
InfoClass | — |
AllocationSize | — |
FileNameLength | — |
FileName | — |
Event ID 122 — SMB2 Response Error
Message
Fields
| Name | Description |
|---|---|
SessionId | — |
ProcessId | — |
TreeId | — |
MessageId | — |
MasterMessageId | — |
Command | — |
CreditsGranted | — |
Flags | — |
Status | — |
ResponseTime_QPC | — |
Event ID 201 — VSMBNET Read segment length
Message
Fields
| Name | Description |
|---|---|
LengthRead | — |
ResponseTime_QPC | — |
Event ID 202 — VSMBNET Read segment
Message
Fields
| Name | Description |
|---|---|
LengthRead | — |
ResponseTime_QPC | — |
Event ID 203 — VSMBNET write segment
Message
Fields
| Name | Description |
|---|---|
LengthWrite | — |
ResponseTime_QPC | — |
Event ID 204 —
Fields
| Name | Description |
|---|---|
VMId | — |
GpaPageIndex | — |
PageCount | — |
Event ID 204 — %1: VSMB Direct Map Section Created GPA Index %2 PageCount %3.
Message
Fields
| Name | Description |
|---|---|
VMId | — |
GpaPageIndex | — |
PageCount | — |
Event ID 205 —
Fields
| Name | Description |
|---|---|
VMId | — |
GpaPageIndex | — |
PageCount | — |
Event ID 205 — %1: VSMB Direct Map Section destroyed GPA Index %2.
Message
Fields
| Name | Description |
|---|---|
VMId | — |
GpaPageIndex | — |
PageCount | — |
Event ID 206 —
Fields
| Name | Description |
|---|---|
VMId | — |
VMName | — |
SharePath | — |
FileRelativePath | — |
ExpectedSize | — |
ActualSize | — |
Event ID 206 — %1: VSMB Dataless CIMFs Direct Map Request failed in share %2 for file %3 due to size mismatch.
Message
Fields
| Name | Description |
|---|---|
VMId | — |
VMName | — |
SharePath | — |
FileRelativePath | — |
ExpectedSize | — |
ActualSize | — |
Event ID 301 —
Fields
| Name | Description |
|---|---|
VMId | — |
VMName | — |
ShareName | — |
SharePath | — |
ShareFlags | — |
ShareJson | — |
Event ID 301 — '.
Message
Fields
| Name | Description |
|---|---|
VMId | — |
VMName | — |
ShareName | — |
SharePath | — |
ShareFlags | — |
ShareJson | — |
Event ID 401 —
Fields
| Name | Description |
|---|---|
Message | — |
Event ID 401 —
Message
Fields
| Name | Description |
|---|---|
Message | — |
Event ID 402 —
Fields
| Name | Description |
|---|---|
Message | — |
Event ID 402 —
Message
Fields
| Name | Description |
|---|---|
Message | — |
Event ID 403 —
Fields
| Name | Description |
|---|---|
Message | — |
Event ID 403 —
Message
Fields
| Name | Description |
|---|---|
Message | — |