Microsoft-Windows-TunnelDriver

28 events across 1 channel

Event ID	Title	Channel
1000	Tunnel Driver of type %1 successfully initialized with index %2.	Microsoft-Windows-TunnelDriver
1001	Tunnel Driver of type %1 could not initialize.	Microsoft-Windows-TunnelDriver
1002	Tunnel Driver Load.	Microsoft-Windows-TunnelDriver
1003	Tunnel Updated flag for Interface with index %1, interface forwarding is%2set, …	Microsoft-Windows-TunnelDriver
1004	Tunnel received packet with incomplete inner IP header	Microsoft-Windows-TunnelDriver
1005	Could not find tunnel interface for packet.	Microsoft-Windows-TunnelDriver
1006	Packet filter on tunnel interface %1 is off.	Microsoft-Windows-TunnelDriver
1007	Packet failed integrity check on interface type %1 with index %2.	Microsoft-Windows-TunnelDriver
1008	Non IPv6 Packet received on interface %1.	Microsoft-Windows-TunnelDriver
1009	Could not find tunnel interface for truncated ICMP message.	Microsoft-Windows-TunnelDriver
1010	Could not find the source of the ICMP message on tunnel interface %1.	Microsoft-Windows-TunnelDriver
1011	Failed to copy Buffer into MDL while generating ICMPv6 message on tunnel …	Microsoft-Windows-TunnelDriver
1012	Completing the pause for tunnel interface %1.	Microsoft-Windows-TunnelDriver
1013	Completing power notification for tunnel interface %1.	Microsoft-Windows-TunnelDriver
1014	Tunnel interface %1 has media status set to %2.	Microsoft-Windows-TunnelDriver
1015	Tunnel interface %1 %3 could not be read.	Microsoft-Windows-TunnelDriver
1016	Tunnel interface %1 has unknown type %2.	Microsoft-Windows-TunnelDriver
1017	Tunnel interface of type %1 with index %2 has been %3.	Microsoft-Windows-TunnelDriver
1018	Teredo Tunnel offload %1 flow entry freed.	Microsoft-Windows-TunnelDriver
1019	Teredo WFP receive path worker has NULL clone list.	Microsoft-Windows-TunnelDriver
1020	Skipped offload flow creation for non-Teredo address pair.	Microsoft-Windows-TunnelDriver
1021	Teredo Wfp created IPv4 flow with following parameters.	Microsoft-Windows-TunnelDriver
1022	Teredo Wfp registration occured with status %1.	Microsoft-Windows-TunnelDriver
1023	Teredo Wfp created V6 flow with status %6 following parameters.	Microsoft-Windows-TunnelDriver
1024	Tunnel type %1 with index %2 has IPv4 address %3 now %4 associated with physical …	Microsoft-Windows-TunnelDriver
1025	Tunnel type %1 offloaded %2 NBLs, Could not offload %3 NBLs.	Microsoft-Windows-TunnelDriver
1026	Tunnel Type %1 with index %2 is in an invalid device state such as not opened or …	Microsoft-Windows-TunnelDriver
1027	Teredo tunnel callout wasn't allowed to modify a packet.	Microsoft-Windows-TunnelDriver

Event ID 1000 — Tunnel Driver of type %1 successfully initialized with index %2.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel Driver of type %1 successfully initialized with index %2.

Fields

Name	Description
`TunnelType`	—
`Index`	—

Event ID 1001 — Tunnel Driver of type %1 could not initialize.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel Driver of type %1 could not initialize.
 Windows Status Code %2, Tunnel Status Code %3.

Fields

Name	Description
`TunnelType`	—
`ErrorCode`	—
`TunnelReasonCode`	—

Event ID 1002 — Tunnel Driver Load.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel Driver Load: %1. Status %2

Fields

Name	Description
`TunnelType`	—
`ErrorCode`	—

Event ID 1003 — Tunnel Updated flag for Interface with index %1, interface forwarding is%2set, weakhostreceive is%3set.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel Updated flag for Interface with index %1, interface forwarding is%2set, weakhostreceive is%3set.

Fields

Name	Description
`InterfaceIndex`	—
`Forwarding`	—
`WeakHostReceive`	—

Event ID 1004 — Tunnel received packet with incomplete inner IP header

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel received packet with incomplete inner IP header

Event ID 1005 — Could not find tunnel interface for packet.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Could not find tunnel interface for packet.

Event ID 1006 — Packet filter on tunnel interface %1 is off.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Packet filter on tunnel interface %1 is off. Dropping Packet.

Fields

Name	Description
`InterfaceIndex`	—

Event ID 1007 — Packet failed integrity check on interface type %1 with index %2.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Packet failed integrity check on interface type %1 with index %2.

Fields

Name	Description
`TunnelType`	—
`InterfaceIndex`	—

Event ID 1008 — Non IPv6 Packet received on interface %1.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Non IPv6 Packet received on interface %1.

Fields

Name	Description
`InterfaceIndex`	—

Event ID 1009 — Could not find tunnel interface for truncated ICMP message.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Could not find tunnel interface for truncated ICMP message.

Event ID 1010 — Could not find the source of the ICMP message on tunnel interface %1.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Could not find the source of the ICMP message on tunnel interface %1.

Fields

Name	Description
`InterfaceIndex`	—

Event ID 1011 — Failed to copy Buffer into MDL while generating ICMPv6 message on tunnel interface %1.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Failed to copy Buffer into MDL while generating ICMPv6 message on tunnel interface %1.

Fields

Name	Description
`InterfaceIndex`	—

Event ID 1012 — Completing the pause for tunnel interface %1.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Completing the pause for tunnel interface %1.

Fields

Name	Description
`InterfaceIndex`	—

Event ID 1013 — Completing power notification for tunnel interface %1.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Completing power notification for tunnel interface %1.

Fields

Name	Description
`InterfaceIndex`	—

Event ID 1014 — Tunnel interface %1 has media status set to %2.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel interface %1 has media status set to %2.

Fields

Name	Description
`InterfaceIndex`	—
`MediaStatus`	—

Event ID 1015 — Tunnel interface %1 %3 could not be read.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel interface %1 %3 could not be read.
NDIS returned status %2.

Fields

Name	Description
`InterfaceIndex`	—
`ErrorCode`	—
`ReadError`	—

Event ID 1016 — Tunnel interface %1 has unknown type %2.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel interface %1 has unknown type %2.

Fields

Name	Description
`Index`	—
`TunnelType`	—

Event ID 1017 — Tunnel interface of type %1 with index %2 has been %3.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel interface of type %1 with index %2 has been %3.

Fields

Name	Description
`TunnelType`	—
`Index`	—
`InterfaceOperation`	—

Event ID 1018 — Teredo Tunnel offload %1 flow entry freed.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Teredo Tunnel offload %1 flow entry freed.

Fields

Name	Description
`TeredoFlowTuple`	—

Event ID 1019 — Teredo WFP receive path worker has NULL clone list.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Teredo WFP receive path worker has NULL clone list.

Event ID 1020 — Skipped offload flow creation for non-Teredo address pair.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Skipped offload flow creation for non-Teredo address pair.
Local %2 Remote %3.

Fields

Name	Description
`IpAddrV6Length`	—
`LocalIpv6Address`	—
`RemoteIPv6Address`	—

Event ID 1021 — Teredo Wfp created IPv4 flow with following parameters.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Teredo Wfp created IPv4 flow with following parameters.
LocalV4:%1 RemoteV4:%2 
LocalPort:%3 RemotePort:%4.

Fields

Name	Description
`SourceIPv4Address`	—
`DestinationIPv4Address`	—
`SourcePort`	—
`DestinationPort`	—

Event ID 1022 — Teredo Wfp registration occured with status %1.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Teredo Wfp registration occured with status %1.

Fields

Name	Description
`NTStatus`	—

Event ID 1023 — Teredo Wfp created V6 flow with status %6 following parameters.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Teredo Wfp created V6 flow with status %6 following parameters.
LocalV4:%2 RemoteV4:%3 
LocalV6:%4 RemoteV6:%5.

Fields

Name	Description
`IpAddrV6Length`	—
`LocalIPv4Address`	—
`RemoteIPv4Address`	—
`LocalIPv6`	—
`RemoteIPv6`	—
`NTStatus`	—

Event ID 1024 — Tunnel type %1 with index %2 has IPv4 address %3 now %4 associated with physical interface with index %5.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel type %1 with index %2 has IPv4 address %3 now %4 associated with physical interface with index %5.

Fields

Name	Description
`TunnelType`	—
`TunnelInterfaceIndex`	—
`IPv4Address`	—
`YesorNo`	—
`InterfaceIndex`	—

Event ID 1025 — Tunnel type %1 offloaded %2 NBLs, Could not offload %3 NBLs.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel type %1 offloaded %2 NBLs, Could not offload %3 NBLs

Fields

Name	Description
`TunnelType`	—
`OffloadedNblCount`	—
`ReturnedNblCount`	—

Event ID 1026 — Tunnel Type %1 with index %2 is in an invalid device state such as not opened or being closed.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Tunnel Type %1 with index %2 is in an invalid device state such as not opened or being closed.
%3 NBLs could not be sent.

Fields

Name	Description
`TunnelType`	—
`InterfaceIndex`	—
`DroppedNblCount`	—

Event ID 1027 — Teredo tunnel callout wasn't allowed to modify a packet.

Provider: Microsoft-Windows-TunnelDriver
Channel: Microsoft-Windows-TunnelDriver

Message

Teredo tunnel callout wasn't allowed to modify a packet. PID: %1. FilterID: %2. Flow handle %3.

Fields

Name	Description
`ProcessID`	—
`FilterID`	—
`FlowHandle`	—