Microsoft-Windows-Network-Connection-Broker

32 events across 1 channel

Event ID	Title	Channel
1001	StatusDescription - Status : Status.	Microsoft-Windows-Network-Connection-Broker
1002	Reference: Reference -RefCount : RefCount, file: file line: line.	Microsoft-Windows-Network-Connection-Broker
1003	Dereference: Dereference -RefCount : RefCount, file: file line: line.	Microsoft-Windows-Network-Connection-Broker
1101	Provider registration completed with context Object and status Status.	Microsoft-Windows-Network-Connection-Broker
1102	Provider deregistration completed with context Object and status Status.	Microsoft-Windows-Network-Connection-Broker
1103	Provider rundown completed with context Object and status Status.	Microsoft-Windows-Network-Connection-Broker
1104	Update sample completed for context ContextHandle, provider Provider, value …	Microsoft-Windows-Network-Connection-Broker
1105	Network change occured, new value = Value, new value type = ValueType.	Microsoft-Windows-Network-Connection-Broker
1106	Collecting provider Provider with request holder RequestHolder for notification.	Microsoft-Windows-Network-Connection-Broker
1107	Accepting update request for provider ContextHandle finished with status Status.	Microsoft-Windows-Network-Connection-Broker
1108	Completing update request for provider Provider finished with status Status.	Microsoft-Windows-Network-Connection-Broker
1109	Provider Provider created with refcount RefCount.	Microsoft-Windows-Network-Connection-Broker
1110	Provider Provider destroyed.	Microsoft-Windows-Network-Connection-Broker
1111	Provider Provider referenced, the previous refcount was RefCount.	Microsoft-Windows-Network-Connection-Broker
1112	Provider Provider dereferenced, the previous refcount was RefCount.	Microsoft-Windows-Network-Connection-Broker
1113	Description updated timer values -.	Microsoft-Windows-Network-Connection-Broker
1114	LogMessage.	Microsoft-Windows-Network-Connection-Broker
1115	Reference context: Reference_context -RefCount : RefCount, file: file line: …	Microsoft-Windows-Network-Connection-Broker
1116	Dereference context: Dereference_context -RefCount : RefCount, file: file line: …	Microsoft-Windows-Network-Connection-Broker
1117	CCReset event occurred of type ApplicationRestart for package: PackageName and …	Microsoft-Windows-Network-Connection-Broker
2001	Socket Broker: Registered trigger notifications for event id EventId and …	Microsoft-Windows-Network-Connection-Broker
2002	Socket Broker: De-Registered trigger notifications for event id EventId and …	Microsoft-Windows-Network-Connection-Broker
2003	Socket Broker: Application AppName is transferring ownership of a socket …	Microsoft-Windows-Network-Connection-Broker
2004	Socket Broker: Application AppName is retrieving socket SocketId for event id …	Microsoft-Windows-Network-Connection-Broker
2005	Socket Broker: BICreateEvent is called for event id BrokerEventId and …	Microsoft-Windows-Network-Connection-Broker
2006	Socket Broker: BIEnableEvent is called for event id BrokerEventId, application …	Microsoft-Windows-Network-Connection-Broker
2007	Socket Broker: BIDisableEvent is called for event id BrokerEventId, application …	Microsoft-Windows-Network-Connection-Broker
2008	Socket Broker: BIDeleteEvent is called for event id BrokerEventId, application …	Microsoft-Windows-Network-Connection-Broker
2009	Socket Broker: Notifying background task for event id BrokerEventId, socket id …	Microsoft-Windows-Network-Connection-Broker
2010	Socket Broker: CreatePushEnabledContext for event id BrokerEventId returned …	Microsoft-Windows-Network-Connection-Broker
2011	Socket Broker: RetrieveContext for event id BrokerEventId and socket id SocketId …	Microsoft-Windows-Network-Connection-Broker
2012	Socket Broker: EnumerateSockets for application name AppName returned status …	Microsoft-Windows-Network-Connection-Broker

Event ID 1001 — StatusDescription - Status : Status.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Message #

%1 - Status : %2

Fields #

Name	Description
`StatusDescription` UnicodeString	—
`Status` UInt32	— NTSTATUS reference

Event ID 1002 — Reference: Reference -RefCount : RefCount, file: file line: line.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Reference: Reference -RefCount : RefCount, file: file line: line.

Message #

Reference: %1 -RefCount : %2,  file: %3 line: %4

Fields #

Name	Description
`Reference` UnicodeString	—
`RefCount` UInt32	—
`file` AnsiString	—
`line` UInt32	—
`StatusDescription` UnicodeString	—
`FileName` AnsiString	—
`LineNumber` UInt32	—

Event ID 1003 — Dereference: Dereference -RefCount : RefCount, file: file line: line.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Dereference: Dereference -RefCount : RefCount, file: file line: line.

Message #

Dereference: %1 -RefCount : %2,  file: %3 line: %4

Fields #

Name	Description
`Dereference` UnicodeString	—
`RefCount` UInt32	—
`file` AnsiString	—
`line` UInt32	—
`StatusDescription` UnicodeString	—
`FileName` AnsiString	—
`LineNumber` UInt32	—

Event ID 1101 — Provider registration completed with context Object and status Status.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Provider registration completed with context Object and status Status.

Message #

Provider registration completed with context %1 and status %2

Fields #

Name	Description
`Object` Pointer	—
`Status` UInt32	— NTSTATUS reference

Event ID 1102 — Provider deregistration completed with context Object and status Status.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Provider deregistration completed with context Object and status Status.

Message #

Provider deregistration completed with context %1 and status %2

Fields #

Name	Description
`Object` Pointer	—
`Status` UInt32	— NTSTATUS reference

Event ID 1103 — Provider rundown completed with context Object and status Status.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Provider rundown completed with context Object and status Status.

Message #

Provider rundown completed with context %1 and status %2

Fields #

Name	Description
`Object` Pointer	—
`Status` UInt32	— NTSTATUS reference

Event ID 1104 — Update sample completed for context ContextHandle, provider Provider, value Value, value type ValueType with status Status.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Update sample completed for context ContextHandle, provider Provider, value Value, value type ValueType with status Status.

Message #

Update sample completed for context %1, provider %2, value %6, value type %7 with status %9

Fields #

Name	Description
`ContextHandle` Pointer	—
`Provider` Pointer	—
`ServiceNlmEpoch` UInt64	—
`ServiceNlmSignature` Pointer	—
`ClientNlmEpoch` UInt64	—
`Value` UInt32	—
`ValueType` Int32	—
`ScheduleUpdate` Boolean	—
`Status` UInt32	— NTSTATUS reference

Event ID 1105 — Network change occured, new value = Value, new value type = ValueType.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Network change occured, new value = Value, new value type = ValueType.

Message #

Network change occured, new value = %7, new value type = %8

Fields #

Name	Description
`NlmEpochBefore` UInt64	—
`NlmSignatureBefore` Pointer	—
`NlmSignatureStableBefore` Boolean	—
`NlmEpochAfter` UInt64	—
`NlmSignatureAfter` Pointer	—
`NlmSignatureStableAfter` Boolean	—
`Value` UInt32	—
`ValueType` Int32	—
`ScheduleUpdate` Boolean	—

Event ID 1106 — Collecting provider Provider with request holder RequestHolder for notification.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Collecting provider Provider with request holder RequestHolder for notification.

Message #

Collecting provider %1 with request holder %2 for notification

Fields #

Name	Description
`Provider` Pointer	—
`RequestHolder` Pointer	—

Event ID 1107 — Accepting update request for provider ContextHandle finished with status Status.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Accepting update request for provider ContextHandle finished with status Status.

Message #

Accepting update request for provider %1 finished with status %6

Fields #

Name	Description
`ContextHandle` Pointer	—
`Provider` Pointer	—
`RequestHolder` Pointer	—
`UpdateRequested` Boolean	—
`CompleteCall` Boolean	—
`Status` UInt32	— NTSTATUS reference

Event ID 1108 — Completing update request for provider Provider finished with status Status.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Completing update request for provider Provider finished with status Status.

Message #

Completing update request for provider %1 finished with status %6

Fields #

Name	Description
`Provider` Pointer	—
`RequestHolder` Pointer	—
`Value` UInt32	—
`ValueType` Int32	—
`NlmEpoch` UInt64	—
`Status` UInt32	— NTSTATUS reference

Event ID 1109 — Provider Provider created with refcount RefCount.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Provider Provider created with refcount RefCount.

Message #

Provider %1 created with refcount %2

Fields #

Name	Description
`Provider` Pointer	—
`RefCount` UInt32	—
`FileName` AnsiString	—
`LineNumber` UInt32	—

Event ID 1110 — Provider Provider destroyed.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Provider Provider destroyed.

Message #

Provider %1 destroyed

Fields #

Name	Description
`Provider` Pointer	—
`RefCount` UInt32	—
`FileName` AnsiString	—
`LineNumber` UInt32	—

Event ID 1111 — Provider Provider referenced, the previous refcount was RefCount.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Provider Provider referenced, the previous refcount was RefCount.

Message #

Provider %1 referenced, the previous refcount was %2

Fields #

Name	Description
`Provider` Pointer	—
`RefCount` UInt32	—
`FileName` AnsiString	—
`LineNumber` UInt32	—

Event ID 1112 — Provider Provider dereferenced, the previous refcount was RefCount.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Provider Provider dereferenced, the previous refcount was RefCount.

Message #

Provider %1 dereferenced, the previous refcount was %2

Fields #

Name	Description
`Provider` Pointer	—
`RefCount` UInt32	—
`FileName` AnsiString	—
`LineNumber` UInt32	—

Event ID 1113 — Description updated timer values -.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Description updated timer values -.

Message #

%1 updated timer values - 
 app input value %2 current timeout value %3 stored timeout value %4 wns test timeout value %5

Fields #

Name	Description
`Description` UnicodeString	—
`App provided time` UInt32	—
`Current keepalive time` UInt32	—
`Lowered keepalive time` UInt32	—
`WNS test input time` UInt32	—
`Appprovidedtime` UInt32	—
`Currentkeepalivetime` UInt32	—
`Loweredkeepalivetime` UInt32	—
`WNStestinputtime` UInt32	—

Event ID 1114 — LogMessage.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Message #

%1

Fields #

Name	Description
`LogMessage` UnicodeString	—

Event ID 1115 — Reference context: Reference_context -RefCount : RefCount, file: file line: line.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Reference context: Reference_context -RefCount : RefCount, file: file line: line.

Message #

Reference context: %1 -RefCount : %2,  file: %3 line: %4

Fields #

Name	Description
`Reference_context` UnicodeString	—
`RefCount` UInt32	—
`file` AnsiString	—
`line` UInt32	—
`StatusDescription` UnicodeString	—
`FileName` AnsiString	—
`LineNumber` UInt32	—

Event ID 1116 — Dereference context: Dereference_context -RefCount : RefCount, file: file line: line.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Dereference context: Dereference_context -RefCount : RefCount, file: file line: line.

Message #

Dereference context: %1 -RefCount : %2,  file: %3 line: %4

Fields #

Name	Description
`Dereference_context` UnicodeString	—
`RefCount` UInt32	—
`file` AnsiString	—
`line` UInt32	—
`StatusDescription` UnicodeString	—
`FileName` AnsiString	—
`LineNumber` UInt32	—

Event ID 1117 — CCReset event occurred of type ApplicationRestart for package: PackageName and fired: Fired.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

CCReset event occurred of type ApplicationRestart for package: PackageName and fired: Fired.

Message #

CCReset event occurred of type ApplicationRestart for package: %1 and fired: %2

Fields #

Name	Description
`PackageName` UnicodeString	—
`Fired` Boolean	—

Event ID 2001 — Socket Broker: Registered trigger notifications for event id EventId and application name AppName.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: Registered trigger notifications for event id EventId and application name AppName.

Message #

Socket Broker: Registered trigger notifications for event id %1 and application name %2

Fields #

Name	Description
`EventId` GUID	—
`AppName` UnicodeString	—

Event ID 2002 — Socket Broker: De-Registered trigger notifications for event id EventId and application name AppName.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: De-Registered trigger notifications for event id EventId and application name AppName.

Message #

Socket Broker: De-Registered trigger notifications for event id %1 and application name %2

Fields #

Name	Description
`EventId` GUID	—
`AppName` UnicodeString	—

Event ID 2003 — Socket Broker: Application AppName is transferring ownership of a socket SocketId with address family AddressFamily, socket type SocketType, protocol Protocol, tcp listener IsTcpListener and eve...

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: Application AppName is transferring ownership of a socket SocketId with address family AddressFamily, socket type SocketType, protocol Protocol, tcp listener IsTcpListener and event id EventId.

Message #

Socket Broker: Application %3 is transferring ownership of a socket %2 with address family %4, socket type %5, protocol %6, tcp listener %7 and event id %1

Fields #

Name	Description
`EventId` GUID	—
`SocketId` UnicodeString	—
`AppName` UnicodeString	—
`AddressFamily` Int32	—
`SocketType` Int32	—
`Protocol` Int32	— Known values `0` HOPOPT `1` ICMP `2` IGMP `6` TCP `17` UDP `41` IPv6 `43` IPv6-Route `44` IPv6-Frag `47` GRE `50` ESP `51` AH `58` ICMPv6 `89` OSPF `103` PIM `132` SCTP
`IsTcpListener` Boolean	—

Event ID 2004 — Socket Broker: Application AppName is retrieving socket SocketId for event id EventId.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: Application AppName is retrieving socket SocketId for event id EventId.

Message #

Socket Broker: Application %3 is retrieving socket %2 for event id %1

Fields #

Name	Description
`EventId` GUID	—
`SocketId` UnicodeString	—
`AppName` UnicodeString	—

Event ID 2005 — Socket Broker: BICreateEvent is called for event id BrokerEventId and application AppName.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: BICreateEvent is called for event id BrokerEventId and application AppName.

Message #

Socket Broker: BICreateEvent is called for event id %1 and application %2

Fields #

Name	Description
`BrokerEventId` GUID	—
`AppName` UnicodeString	—

Event ID 2006 — Socket Broker: BIEnableEvent is called for event id BrokerEventId, application AppName and call reason CallReason.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: BIEnableEvent is called for event id BrokerEventId, application AppName and call reason CallReason.

Message #

Socket Broker: BIEnableEvent is called for event id %1, application %2 and call reason %3

Fields #

Name	Description
`BrokerEventId` GUID	—
`AppName` UnicodeString	—
`CallReason` Int32	—

Event ID 2007 — Socket Broker: BIDisableEvent is called for event id BrokerEventId, application AppName and call reason CallReason.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: BIDisableEvent is called for event id BrokerEventId, application AppName and call reason CallReason.

Message #

Socket Broker: BIDisableEvent is called for event id %1, application %2 and call reason %3

Fields #

Name	Description
`BrokerEventId` GUID	—
`AppName` UnicodeString	—
`CallReason` Int32	—

Event ID 2008 — Socket Broker: BIDeleteEvent is called for event id BrokerEventId, application AppName and call reason CallReason.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: BIDeleteEvent is called for event id BrokerEventId, application AppName and call reason CallReason.

Message #

Socket Broker: BIDeleteEvent is called for event id %1, application %2 and call reason %3

Fields #

Name	Description
`BrokerEventId` GUID	—
`AppName` UnicodeString	—
`CallReason` Int32	—

Event ID 2009 — Socket Broker: Notifying background task for event id BrokerEventId, socket id SocketId, socket type SocketType, trigger reason TriggerReason and status Status.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: Notifying background task for event id BrokerEventId, socket id SocketId, socket type SocketType, trigger reason TriggerReason and status Status.

Message #

Socket Broker: Notifying background task for event id %1, socket id %2, socket type %3, trigger reason %4 and status %5

Fields #

Name	Description
`BrokerEventId` GUID	—
`SocketId` UnicodeString	—
`SocketType` Int32	—
`TriggerReason` Int32	—
`Status` Int32	— NTSTATUS reference

Event ID 2010 — Socket Broker: CreatePushEnabledContext for event id BrokerEventId returned Status.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: CreatePushEnabledContext for event id BrokerEventId returned Status.

Message #

Socket Broker: CreatePushEnabledContext for event id %1 returned %2

Fields #

Name	Description
`BrokerEventId` GUID	—
`Status` Int32	— NTSTATUS reference

Event ID 2011 — Socket Broker: RetrieveContext for event id BrokerEventId and socket id SocketId returned Status.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: RetrieveContext for event id BrokerEventId and socket id SocketId returned Status.

Message #

Socket Broker: RetrieveContext for event id %1 and socket id %2 returned %3

Fields #

Name	Description
`BrokerEventId` GUID	—
`SocketId` UnicodeString	—
`Status` Int32	— NTSTATUS reference

Event ID 2012 — Socket Broker: EnumerateSockets for application name AppName returned status Status with sockets NumSockets.

Provider: Microsoft-Windows-Network-Connection-Broker
Channel: Microsoft-Windows-Network-Connection-Broker

Description

Socket Broker: EnumerateSockets for application name AppName returned status Status with sockets NumSockets.

Message #

Socket Broker: EnumerateSockets for application name %1 returned status %2 with sockets %3

Fields #

Name	Description
`AppName` UnicodeString	—
`Status` Int32	— NTSTATUS reference
`NumSockets` Int32	—