Microsoft-Windows-Ndu

23 events across 1 channel

Event ID	Title	Channel
2001		Diagnostic
2002	%1 Failed with %2.	Diagnostic
2003	Interface (Luid:%1) added to per-interface list for proc %2 at active index %3.	Diagnostic
2004	%1 Flow (Id:%2) established.	Diagnostic
2005	Flow Context (Flow Id:%1) Refcount%2.	Diagnostic
2006	Updated Interface Stats IfLuid:%1 ProfileId:%2 BytesSent:%3 BytesRecvd:%4.	Diagnostic
2007	Updated Flow Stats (Flow Id:%2) IfLuid:%1 BytesSent:%3 BytesRecvd:%4.	Diagnostic
2008	Registration for quota exceeded notification.	Diagnostic
2009	Unregistered from quota exceeded notification.	Diagnostic
2010	Registration for byte count limit.	Diagnostic
2011	Unregistered from byte count limit notification.	Diagnostic
2012		Diagnostic
2013		Diagnostic
2014	IfLuid:%1 ProfileId:%2 BytesSent:%3 BytesRecvd:%4 IsCosted: %5.	Diagnostic
2015		Diagnostic
2016		Diagnostic
2017	NduMergeSmbStatsList: Not transferred InterfaceLuid and ProfileId to Smb stats …	Diagnostic
2018	ProfileIdTracker::GetProfileIdForInterface: Profile Id not found.	Diagnostic
2019	NduGetHostSid::UMgrEnumerateSessionUsers could not find SessionId.	Diagnostic
2020	NduUpdateProcessStatsForContainerOrVmId succeeded: CurrentProcNumber:%1 …	Diagnostic
2021	%1: VirtualIfLuid:%2 OuterProcessId:%3 IfAlias:%4.	Diagnostic
2022	Wake count updated IfLuid:%1 Flow Id:%2 (0 means interface) WakeCount:%3.	Diagnostic
2023		Diagnostic

Event ID 2001 —

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

%1

Fields

Name	Description
`_DebugString`	—

Event ID 2002 — %1 Failed with %2.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

%1 Failed with %2

Fields

Name	Description
`_FunctionName`	—
`_Status`	—

Event ID 2003 — Interface (Luid:%1) added to per-interface list for proc %2 at active index %3.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

Interface (Luid:%1) added to per-interface list for proc %2 at active index %3

Fields

Name	Description
`Interface_Luid`	Interface (Luid.
`_IfLuid`	—
`_ProcNum`	—
`_ListIndex`	—

Event ID 2004 — %1 Flow (Id:%2) established.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

%1 Flow (Id:%2) established. ExePath: %3 SvcTag:%4 PkgName:%5 UserId:%6 Pid: %7

Fields

Name	Description
`established_ExePath`	—
`SvcTag`	—
`PkgName`	—
`UserId`	—
`Pid`	—
`_Direction`	—
`_FlowHandle`	—
`_ExePath`	—
`_SvcTag`	—
`_PkgName`	—
`_UserId`	—
`_Pid`	—

Event ID 2005 — Flow Context (Flow Id:%1) Refcount%2.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

Flow Context (Flow Id:%1) Refcount%2

Fields

Name	Description
`Flow_Context_Flow_Id`	Flow Context (Flow Id.
`_FlowHandle`	—
`_RefDeref`	—

Event ID 2006 — Updated Interface Stats IfLuid:%1 ProfileId:%2 BytesSent:%3 BytesRecvd:%4.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

Updated Interface Stats IfLuid:%1 ProfileId:%2 BytesSent:%3 BytesRecvd:%4

Fields

Name	Description
`Updated_Interface_Stats_IfLuid`	—
`ProfileId`	—
`BytesSent`	—
`BytesRecvd`	—
`_IfLuid`	—
`_ProfileId`	—
`_BytesSent`	—
`_BytesRecvd`	—

Event ID 2007 — Updated Flow Stats (Flow Id:%2) IfLuid:%1 BytesSent:%3 BytesRecvd:%4.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

Updated Flow Stats (Flow Id:%2) IfLuid:%1 BytesSent:%3 BytesRecvd:%4

Fields

Name	Description
`IfLuid`	—
`Updated_Flow_Stats_Flow_Id`	—
`BytesSent`	—
`BytesRecvd`	—
`_IfLuid`	—
`_FlowHandle`	—
`_BytesSent`	—
`_BytesRecvd`	—

Event ID 2008 — Registration for quota exceeded notification.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

Registration for quota exceeded notification. ExePath: %1 SvcTag:%2 PkgName:%3 UserId:%4 Cookie: %5 Quota: %6

Fields

Name	Description
`_ExePath`	—
`_SvcTag`	—
`_PkgName`	—
`_UserId`	—
`_Cookie`	—
`_Quota`	—

Event ID 2009 — Unregistered from quota exceeded notification.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

Unregistered from quota exceeded notification. Cookie: %1

Fields

Name	Description
`_Cookie`	—

Event ID 2010 — Registration for byte count limit.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

Registration for byte count limit. Luid: %1 ProfileId:%2 Limit: %3

Fields

Name	Description
`_IfLuid`	—
`_ProfileId`	—
`_BytesLimit`	—

Event ID 2011 — Unregistered from byte count limit notification.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

Unregistered from byte count limit notification. Luid: %1 ProfileId:%2

Fields

Name	Description
`_IfLuid`	—
`_ProfileId`	—

Event ID 2012 —

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

%1

Fields

Name	Description
`_DebugString`	—

Event ID 2013 —

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

%1

Fields

Name	Description
`_DebugString`	—

Event ID 2014 — IfLuid:%1 ProfileId:%2 BytesSent:%3 BytesRecvd:%4 IsCosted: %5.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

IfLuid:%1 ProfileId:%2 BytesSent:%3 BytesRecvd:%4 IsCosted: %5

Fields

Name	Description
`IfLuid`	—
`ProfileId`	—
`BytesSent`	—
`BytesRecvd`	—
`IsCosted`	—
`_IfLuid`	—
`_ProfileId`	—
`_BytesSent`	—
`_BytesRecvd`	—
`_IsCosted`	—

Event ID 2015 —

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Fields

Name	Description
`_IfLuid`	—
`TimeSinceLast`	—
`Energy`	—
`CurrentProc`	—
`BytesTxRx`	—
`Pid`	—
`IfMediaType`	—

Event ID 2016 —

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Fields

Name	Description
`ProcId`	—
`Count`	—

Event ID 2017 — NduMergeSmbStatsList: Not transferred InterfaceLuid and ProfileId to Smb stats because there is no one-and-only-one file transfer service (SMB) in ...

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

NduMergeSmbStatsList: Not transferred InterfaceLuid and ProfileId to Smb stats because there is no one-and-only-one file transfer service (SMB) in the system. SystemSMB count:%1 InContainer:%2;

Fields

Name	Description
`_SystemSmbCount`	—
`_IsContainer`	—

Event ID 2018 — ProfileIdTracker::GetProfileIdForInterface: Profile Id not found.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

ProfileIdTracker::GetProfileIdForInterface: Profile Id not found. Luid: %1

Fields

Name	Description
`_IfLuid`	—

Event ID 2019 — NduGetHostSid::UMgrEnumerateSessionUsers could not find SessionId.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

NduGetHostSid::UMgrEnumerateSessionUsers could not find SessionId: %1

Fields

Name	Description
`_SessionId`	—

Event ID 2020 — NduUpdateProcessStatsForContainerOrVmId succeeded: CurrentProcNumber:%1 PartitionId:%2 Direction:%3 IfLuid:%4 IfType:%5 BytesSent:%6 BytesRecvd:%7.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

NduUpdateProcessStatsForContainerOrVmId succeeded: CurrentProcNumber:%1 PartitionId:%2 Direction:%3 IfLuid:%4 IfType:%5 BytesSent:%6 BytesRecvd:%7

Fields

Name	Description
`NduUpdateProcessStatsForContainerOrVmId_succeeded_CurrentProcNumber`	NduUpdateProcessStatsForContainerOrVmId succeeded: CurrentProcNumber.
`PartitionId`	—
`Direction`	—
`IfLuid`	—
`IfType`	—
`BytesSent`	—
`BytesRecvd`	—
`CurrentProcNumber`	—

Event ID 2021 — %1: VirtualIfLuid:%2 OuterProcessId:%3 IfAlias:%4.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

%1: VirtualIfLuid:%2 OuterProcessId:%3 IfAlias:%4

Fields

Name	Description
`OuterProcessId`	1: VirtualIfLuid.
`IfAlias`	—
`Title`	—
`VirtualIfLuid`	—

Event ID 2022 — Wake count updated IfLuid:%1 Flow Id:%2 (0 means interface) WakeCount:%3.

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Message

Wake count updated IfLuid:%1 Flow Id:%2 (0 means interface) WakeCount:%3

Fields

Name	Description
`IfLuid`	—
`FlowHandle`	—
`WakeCount`	—

Event ID 2023 —

Provider: Microsoft-Windows-Ndu
Channel: Diagnostic

Fields

Name	Description
`_ProcNum`	—
`_ListIndex`	—
`_ListHead`	—
`_Entry`	—
`_EntryFlink`	—
`_EntryBlink`	—
`_Flags`	—