Microsoft-Windows-WinNat

47 events across 2 channels

Event ID	Title	Channel
1001	%7 session created.	Trace
1002	%7 session lifetime updated.	Trace
1003	%7 session state updated.	Trace
1004	%7 session timedout.	Trace
1005	%7 session deleted.	Trace
1006	%5 binding created.	Trace
1007	%5 binding deleted.	Trace
1008	%5 binding session count updated.	Trace
1009	Translating %8 packet from %2:%3 to %5:%6, IPID:%7.	Trace
1010	Nat Instance %1 %11 Status: %10.	Trace
1011	Packet filter %12 Status: %13.	Trace
1012	WFP filter %12 Status: %13.	Trace
1013	Address pool %6 Status: %7.	Trace
1014	Address %6 notification.	Trace
1015	Static binding %6 Status: %7.	Trace
1016	Memory allocation failure.	Trace
1017	%7 session created.	Oper
1018	%7 session deleted.	Oper
1019	Created NAT instance %1 for RoutingDomainId %2 (CompartmentId %5) with external …	Trace
1020	Modified NAT instance %1 properties.	Trace
1021	NAT instance %1 external interface index is %6 for prefix %4/%3.	Trace
1022	Deleted NAT instance %1.	Trace
1023	NAT instance %1: RoutingDomainId %2 (CompartmentId %5), external interface index …	Trace
1024	Added external address %3:%4-%5 to NAT instance %1.	Trace
1025	Removed external address %3:%4-%5 from NAT instance %1.	Trace
1026	NAT instance %1: external address %3:%4-%5.	Trace
1027	Added static mapping %2 %5 > %6 (CompartmentId %8) to NAT instance %1 (%3 …	Trace
1028	Removed static mapping %2 %5 > %6 (CompartmentId %8) from NAT instance %1 (%3 …	Trace
1029	NAT instance %1: static mapping %2 %5 > %6 (CompartmentId %8) (%3 %9/%10).	Trace
1030	NAT dropped IPv4 %5 packet which arrived over %4 interface %3 in compartment %2 …	Trace
1031	NAT detected a default route in compartment %1 interface %2.	Trace
1032	NAT detected a default route in compartment %1 interface %2.	Oper
1033	NAT instance %1 failed to allocate a %2 port dynamically because all ports in …	Oper
1034	NAT left processing of IPv4 %5 packet to the host network stack over %4 …	Trace
1035	NAT translated and forwarded IPv4 %5 packet which arrived over %4 interface %3 …	Trace
1036	NAT ERROR %1: %2 (%3) Status %4.	Trace
1037	NAT Instance %1 created with no matching prefix %4/%3.	Trace
1038		Trace
1039		Trace
1040		Trace
1041	Added IPxlat instance for interface %1.	Trace
1042	Modified IPxlat instance for interface %1.	Trace
1043	Deleted IPxlat instance for interface %1.	Trace
1044	XLAT.	Trace
1045	Added internal address %3, IfIndex %4 to NAT instance %1.	Trace
1046	Removed internal address %3: IfIndex %4 from NAT instance %1.	Trace
1047	Driver state: PortChunkSize=.	Trace

Event ID 1001 — %7 session created.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%7 session created. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState:%9

Fields

Name	Description
`InternalAddrLen`	—
`InternalSrcAddr`	—
`InternalDstAddr`	—
`ExternalAddrLen`	—
`ExternalSrcAddr`	—
`ExternalDstAddr`	—
`TransportProtocol`	—
`Lifetime`	—
`TcpSessionState`	—
`InternalCompartmentId`	—

Event ID 1002 — %7 session lifetime updated.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%7 session lifetime updated. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9

Fields

Name	Description
`InternalAddrLen`	—
`InternalSrcAddr`	—
`InternalDstAddr`	—
`ExternalAddrLen`	—
`ExternalSrcAddr`	—
`ExternalDstAddr`	—
`TransportProtocol`	—
`Lifetime`	—
`TcpSessionState`	—
`InternalCompartmentId`	—

Event ID 1003 — %7 session state updated.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%7 session state updated. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9

Fields

Name	Description
`InternalAddrLen`	—
`InternalSrcAddr`	—
`InternalDstAddr`	—
`ExternalAddrLen`	—
`ExternalSrcAddr`	—
`ExternalDstAddr`	—
`TransportProtocol`	—
`Lifetime`	—
`TcpSessionState`	—
`InternalCompartmentId`	—

Event ID 1004 — %7 session timedout.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%7 session timedout. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9

Fields

Name	Description
`InternalAddrLen`	—
`InternalSrcAddr`	—
`InternalDstAddr`	—
`ExternalAddrLen`	—
`ExternalSrcAddr`	—
`ExternalDstAddr`	—
`TransportProtocol`	—
`Lifetime`	—
`TcpSessionState`	—
`InternalCompartmentId`	—

Event ID 1005 — %7 session deleted.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%7 session deleted. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9

Fields

Name	Description
`InternalAddrLen`	—
`InternalSrcAddr`	—
`InternalDstAddr`	—
`ExternalAddrLen`	—
`ExternalSrcAddr`	—
`ExternalDstAddr`	—
`TransportProtocol`	—
`Lifetime`	—
`TcpSessionState`	—
`InternalCompartmentId`	—

Event ID 1006 — %5 binding created.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%5 binding created. Internal transport addr: %2, External transport addr %4, SessionCount: %6, Configured: %7

Fields

Name	Description
`InternalAddrLen`	—
`InternalAddr`	—
`ExternalAddrLen`	—
`ExternalAddr`	—
`TransportProtocol`	—
`SessionCount`	—
`Configured`	—
`InternalCompartmentId`	—

Event ID 1007 — %5 binding deleted.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%5 binding deleted. Internal transport addr: %2, External transport addr %4, SessionCount: %6, Configured: %7

Fields

Name	Description
`InternalAddrLen`	—
`InternalAddr`	—
`ExternalAddrLen`	—
`ExternalAddr`	—
`TransportProtocol`	—
`SessionCount`	—
`Configured`	—
`InternalCompartmentId`	—

Event ID 1008 — %5 binding session count updated.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%5 binding session count updated. Internal transport addr: %2, External transport addr %4, SessionCount: %6, Configured: %7

Fields

Name	Description
`InternalAddrLen`	—
`InternalAddr`	—
`ExternalAddrLen`	—
`ExternalAddr`	—
`TransportProtocol`	—
`SessionCount`	—
`Configured`	—
`InternalCompartmentId`	—

Event ID 1009 — Translating %8 packet from %2:%3 to %5:%6, IPID:%7.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Translating %8 packet from %2:%3 to %5:%6, IPID:%7. Status: %9, IcmpType: %10, IcmpCode: %11, IcmpErrorPayload: %12

Fields

Name	Description
`IncomingAddrLen`	—
`IncomingSrcAddr`	—
`IncomingDstAddr`	—
`TranslatedAddrLen`	—
`TranslatedSrcAddr`	—
`TranslatedDstAddr`	—
`Identification`	—
`TransportProtocol`	—
`Status`	—
`IcmpType`	—
`IcmpCode`	—
`IcmpPayload`	—

Event ID 1010 — Nat Instance %1 %11 Status: %10.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Nat Instance %1 %11 Status: %10.UdpIdleSessionTimeout: %2 sec, TcpTransientConnectionTimeout: %3, TcpEstablishedConnectionTimeout: %4, IcmpQueryTimeout: %5, TcpFilteringBehavior: %6, UdpFilteringBehavior: %7, UdpInboundRefresh: %8, Enabled: %9

Fields

Name	Description
`InstanceName`	—
`UdpIdleSessionTimeout`	—
`TcpTransientConnectionTimeout`	—
`TcpEstablishedConnectionTimeout`	—
`IcmpQueryTimeout`	—
`TcpFilteringBehavior`	—
`UdpFilteringBehavior`	—
`UdpInboundRefresh`	—
`Enabled`	—
`Status`	—
`Action`	—

Event ID 1011 — Packet filter %12 Status: %13.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Packet filter %12 Status: %13. Instance: %1, SrcPrefix: %3, SrcPrefixLength: %4, DstPrefix: %5, DstPrefixLength: %6, Ipv4Prefix: %7, Ipv4PrefixLength: %8, Nat64: %9, InterfaceLuid: %10

Fields

Name	Description
`InstanceName`	—
`InternalPrefixAddrLength`	—
`InternalSrcPrefix`	—
`InternalSrcPrefixLength`	—
`InternaDstlPrefix`	—
`InternalDstPrefixLength`	—
`IPv4Prefix`	—
`IPv4PrefixLength`	—
`Nat64`	—
`InterfaceLuid`	—
`FilterId`	—
`Action`	—
`Status`	—

Event ID 1012 — WFP filter %12 Status: %13.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

WFP filter %12 Status: %13. Instance: %1, FilterId: %11, SrcPrefix: %3, SrcPrefixLength: %4, DstPrefix: %5, DstPrefixLength: %6, Ipv4Prefix: %7, Ipv4PrefixLength: %8, Nat64: %9, InterfaceLuid: %10

Fields

Name	Description
`InstanceName`	—
`InternalPrefixAddrLength`	—
`InternalSrcPrefix`	—
`InternalSrcPrefixLength`	—
`InternaDstlPrefix`	—
`InternalDstPrefixLength`	—
`IPv4Prefix`	—
`IPv4PrefixLength`	—
`Nat64`	—
`InterfaceLuid`	—
`FilterId`	—
`Action`	—
`Status`	—

Event ID 1013 — Address pool %6 Status: %7.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Address pool %6 Status: %7. Instance: %1, Address: %2, StartingPort: %3, EndingPort: %4, InterfaceLuid: %5

Fields

Name	Description
`InstanceName`	—
`Address`	—
`StartingPort`	—
`EndingPort`	—
`InterfaceLuid`	—
`Action`	—
`Status`	—

Event ID 1014 — Address %6 notification.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Address %6 notification. Address: %2, InterfaceLuid: %5

Fields

Name	Description
`InstanceName`	—
`Address`	—
`StartingPort`	—
`EndingPort`	—
`InterfaceLuid`	—
`Action`	—
`Status`	—

Event ID 1015 — Static binding %6 Status: %7.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Static binding %6 Status: %7. Internal Source: %2, External Source: %4, Protocol: %5

Fields

Name	Description
`InternalAddrLen`	—
`InternalAddr`	—
`ExternalAddrLen`	—
`ExternalAddr`	—
`TransportProtocol`	—
`Action`	—
`Status`	—

Event ID 1016 — Memory allocation failure.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Memory allocation failure: %1

Fields

Name	Description
`Description`	—

Event ID 1017 — %7 session created.

Provider: Microsoft-Windows-WinNat
Channel: Oper

Message

%7 session created. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6

Fields

Name	Description
`InternalAddrLen`	—
`InternalSrcAddr`	—
`InternalDstAddr`	—
`ExternalAddrLen`	—
`ExternalSrcAddr`	—
`ExternalDstAddr`	—
`TransportProtocol`	—

Event ID 1018 — %7 session deleted.

Provider: Microsoft-Windows-WinNat
Channel: Oper

Message

%7 session deleted. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6

Fields

Name	Description
`InternalAddrLen`	—
`InternalSrcAddr`	—
`InternalDstAddr`	—
`ExternalAddrLen`	—
`ExternalSrcAddr`	—
`ExternalDstAddr`	—
`TransportProtocol`	—

Event ID 1019 — Created NAT instance %1 for RoutingDomainId %2 (CompartmentId %5) with external interface prefix %4/%3.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Created NAT instance %1 for RoutingDomainId %2 (CompartmentId %5) with external interface prefix %4/%3

Fields

Name	Description
`InstanceName`	—
`InternalRoutingDomainId`	—
`PrefixLength`	—
`AddressPrefix`	—
`CompartmentId`	—
`ExternalInterfaceIndex`	—
`UdpIdleSessionTimeout`	—
`TcpTransientConnectionTimeout`	—
`TcpEstablishedConnectionTimeout`	—
`IcmpQueryTimeout`	—
`TcpFilteringBehavior`	—
`UdpFilteringBehavior`	—
`UdpInboundRefresh`	—
`InstanceType`	—

Event ID 1020 — Modified NAT instance %1 properties.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Modified NAT instance %1 properties

Fields

Name	Description
`InstanceName`	—
`InternalRoutingDomainId`	—
`ExternalIPInterfaceAddressPrefixLength`	—
`ExternalIPInterfaceAddressPrefix`	—
`CompartmentId`	—
`ExternalInterfaceIndex`	—
`UdpIdleSessionTimeout`	—
`TcpTransientConnectionTimeout`	—
`TcpEstablishedConnectionTimeout`	—
`IcmpQueryTimeout`	—
`TcpFilteringBehavior`	—
`UdpFilteringBehavior`	—
`UdpInboundRefresh`	—

Event ID 1021 — NAT instance %1 external interface index is %6 for prefix %4/%3.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

NAT instance %1 external interface index is %6 for prefix %4/%3

Fields

Name	Description
`InstanceName`	—
`InternalRoutingDomainId`	—
`ExternalIPInterfaceAddressPrefixLength`	—
`ExternalIPInterfaceAddressPrefix`	—
`CompartmentId`	—
`ExternalInterfaceIndex`	—
`UdpIdleSessionTimeout`	—
`TcpTransientConnectionTimeout`	—
`TcpEstablishedConnectionTimeout`	—
`IcmpQueryTimeout`	—
`TcpFilteringBehavior`	—
`UdpFilteringBehavior`	—
`UdpInboundRefresh`	—

Event ID 1022 — Deleted NAT instance %1.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Deleted NAT instance %1

Fields

Name	Description
`InstanceName`	—
`InternalRoutingDomainId`	—
`ExternalIPInterfaceAddressPrefixLength`	—
`ExternalIPInterfaceAddressPrefix`	—
`CompartmentId`	—
`ExternalInterfaceIndex`	—
`UdpIdleSessionTimeout`	—
`TcpTransientConnectionTimeout`	—
`TcpEstablishedConnectionTimeout`	—
`IcmpQueryTimeout`	—
`TcpFilteringBehavior`	—
`UdpFilteringBehavior`	—
`UdpInboundRefresh`	—

Event ID 1023 — NAT instance %1: RoutingDomainId %2 (CompartmentId %5), external interface index %6 (%4/%3).

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

NAT instance %1: RoutingDomainId %2 (CompartmentId %5), external interface index %6 (%4/%3)

Fields

Name	Description
`InstanceName`	—
`InternalRoutingDomainId`	—
`PrefixLength`	—
`AddressPrefix`	—
`CompartmentId`	—
`ExternalInterfaceIndex`	—
`UdpIdleSessionTimeout`	—
`TcpTransientConnectionTimeout`	—
`TcpEstablishedConnectionTimeout`	—
`IcmpQueryTimeout`	—
`TcpFilteringBehavior`	—
`UdpFilteringBehavior`	—
`UdpInboundRefresh`	—
`InstanceType`	—

Event ID 1024 — Added external address %3:%4-%5 to NAT instance %1.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Added external address %3:%4-%5 to NAT instance %1

Fields

Name	Description
`InstanceName`	—
`AddressLength`	—
`IPAddress`	—
`PortStart`	—
`PortEnd`	—

Event ID 1025 — Removed external address %3:%4-%5 from NAT instance %1.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Removed external address %3:%4-%5 from NAT instance %1

Fields

Name	Description
`InstanceName`	—
`AddressLength`	—
`IPAddress`	—
`PortStart`	—
`PortEnd`	—

Event ID 1026 — NAT instance %1: external address %3:%4-%5.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

NAT instance %1: external address %3:%4-%5

Fields

Name	Description
`InstanceName`	—
`AddressLength`	—
`IPAddress`	—
`PortStart`	—
`PortEnd`	—

Event ID 1027 — Added static mapping %2 %5 > %6 (CompartmentId %8) to NAT instance %1 (%3 %9/%10).

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Added static mapping %2 %5 > %6 (CompartmentId %8) to NAT instance %1 (%3 %9/%10)

Fields

Name	Description
`InstanceName`	—
`TransportProtocol`	—
`MappingType`	—
`AddressLength`	—
`ExternalTransportAddress`	—
`InternalTransportAddress`	—
`InternalRoutingDomainId`	—
`CompartmentId`	—
`RemoteAddressPrefix`	—
`RemoteAddressPrefixLength`	—

Event ID 1028 — Removed static mapping %2 %5 > %6 (CompartmentId %8) from NAT instance %1 (%3 %9/%10).

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Removed static mapping %2 %5 > %6 (CompartmentId %8) from NAT instance %1 (%3 %9/%10)

Fields

Name	Description
`InstanceName`	—
`TransportProtocol`	—
`MappingType`	—
`AddressLength`	—
`ExternalTransportAddress`	—
`InternalTransportAddress`	—
`InternalRoutingDomainId`	—
`CompartmentId`	—
`RemoteAddressPrefix`	—
`RemoteAddressPrefixLength`	—

Event ID 1029 — NAT instance %1: static mapping %2 %5 > %6 (CompartmentId %8) (%3 %9/%10).

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

NAT instance %1: static mapping %2 %5 > %6 (CompartmentId %8) (%3 %9/%10)

Fields

Name	Description
`InstanceName`	—
`TransportProtocol`	—
`MappingType`	—
`AddressLength`	—
`ExternalTransportAddress`	—
`InternalTransportAddress`	—
`InternalRoutingDomainId`	—
`CompartmentId`	—
`RemoteAddressPrefix`	—
`RemoteAddressPrefixLength`	—

Event ID 1030 — NAT dropped IPv4 %5 packet which arrived over %4 interface %3 in compartment %2 with reason: %1.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

NAT dropped IPv4 %5 packet which arrived over %4 interface %3 in compartment %2 with reason: %1.

Fields

Name	Description
`ActionReason`	—
`ArrivalCompartmentId`	—
`ArrivalInterfaceIndex`	—
`ArrivalNetwork`	—
`TransportProtocol`	—
`ForwardCompartmentId`	—
`ForwardInterfaceIndex`	—
`PacketLength`	—
`ContinuousLength`	—
`CapturedIPHeaderLength`	—
`CapturedTransportHeaderLength`	—
`ICMPErrorTransportProtocol`	—
`ICMPErrorCapturedIPHeaderLength`	—
`ICMPErrorCapturedTransportHeaderLength`	—
`IPHeader`	—
`TransportHeader`	—
`ICMPErrorIPHeader`	—
`ICMPErrorTransportHeader`	—

Event ID 1031 — NAT detected a default route in compartment %1 interface %2.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

NAT detected a default route in compartment %1 interface %2. Default routes in internal compartments will prevent NAT operation for those compartments.

Fields

Name	Description
`CompartmentId`	—
`InterfaceIndex`	—

Event ID 1032 — NAT detected a default route in compartment %1 interface %2.

Provider: Microsoft-Windows-WinNat
Channel: Oper

Message

NAT detected a default route in compartment %1 interface %2. Default routes in internal compartments will prevent NAT operation for those compartments.

Fields

Name	Description
`CompartmentId`	—
`InterfaceIndex`	—

Event ID 1033 — NAT instance %1 failed to allocate a %2 port dynamically because all ports in the instance's external address pool are in use.

Provider: Microsoft-Windows-WinNat
Channel: Oper

Message

NAT instance %1 failed to allocate a %2 port dynamically because all ports in the instance's external address pool are in use.

Fields

Name	Description
`InstanceName`	—
`TransportProtocol`	—

Event ID 1034 — NAT left processing of IPv4 %5 packet to the host network stack over %4 interface %3 in compartment %2 with reason: %1.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

NAT left processing of IPv4 %5 packet to the host network stack over %4 interface %3 in compartment %2 with reason: %1.

Fields

Name	Description
`ActionReason`	—
`ArrivalCompartmentId`	—
`ArrivalInterfaceIndex`	—
`ArrivalNetwork`	—
`TransportProtocol`	—
`ForwardCompartmentId`	—
`ForwardInterfaceIndex`	—
`PacketLength`	—
`ContinuousLength`	—
`CapturedIPHeaderLength`	—
`CapturedTransportHeaderLength`	—
`ICMPErrorTransportProtocol`	—
`ICMPErrorCapturedIPHeaderLength`	—
`ICMPErrorCapturedTransportHeaderLength`	—
`IPHeader`	—
`TransportHeader`	—
`ICMPErrorIPHeader`	—
`ICMPErrorTransportHeader`	—

Event ID 1035 — NAT translated and forwarded IPv4 %5 packet which arrived over %4 interface %3 in compartment %2 to interface %7 in compartment %6.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

NAT translated and forwarded IPv4 %5 packet which arrived over %4 interface %3 in compartment %2 to interface %7 in compartment %6.

Fields

Name	Description
`ActionReason`	—
`ArrivalCompartmentId`	—
`ArrivalInterfaceIndex`	—
`ArrivalNetwork`	—
`TransportProtocol`	—
`ForwardCompartmentId`	—
`ForwardInterfaceIndex`	—
`PacketLength`	—
`ContinuousLength`	—
`CapturedIPHeaderLength`	—
`CapturedTransportHeaderLength`	—
`ICMPErrorTransportProtocol`	—
`ICMPErrorCapturedIPHeaderLength`	—
`ICMPErrorCapturedTransportHeaderLength`	—
`IPHeader`	—
`TransportHeader`	—
`ICMPErrorIPHeader`	—
`ICMPErrorTransportHeader`	—

Event ID 1036 — NAT ERROR %1: %2 (%3) Status %4.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

NAT ERROR %1: %2 (%3) Status %4

Fields

Name	Description
`ErrorID`	—
`ErrorContext`	—
`ErrorMisc`	—
`Status`	—

Event ID 1037 — NAT Instance %1 created with no matching prefix %4/%3.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

NAT Instance %1 created with no matching prefix %4/%3.

Fields

Name	Description
`InstanceName`	—
`InternalRoutingDomainId`	—
`PrefixLength`	—
`AddressPrefix`	—
`CompartmentId`	—
`ExternalInterfaceIndex`	—
`UdpIdleSessionTimeout`	—
`TcpTransientConnectionTimeout`	—
`TcpEstablishedConnectionTimeout`	—
`IcmpQueryTimeout`	—
`TcpFilteringBehavior`	—
`UdpFilteringBehavior`	—
`UdpInboundRefresh`	—
`InstanceType`	—

Event ID 1038 —

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%1

Fields

Name	Description
`Info`	—

Event ID 1039 —

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%1

Fields

Name	Description
`Info`	—

Event ID 1040 —

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

%1

Fields

Name	Description
`Info`	—

Event ID 1041 — Added IPxlat instance for interface %1.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Added IPxlat instance for interface %1

Fields

Name	Description
`InterfaceLuid`	—
`FallbackIPv4Address`	—
`SyntheticIPv4Address`	—
`SyntheticIPv6Address`	—
`RemotePrefix`	—
`RemotePrefixLength`	—
`LocalPrefix`	—
`LocalPrefixLength`	—

Event ID 1042 — Modified IPxlat instance for interface %1.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Modified IPxlat instance for interface %1

Fields

Name	Description
`InterfaceLuid`	—
`FallbackIPv4Address`	—
`SyntheticIPv4Address`	—
`SyntheticIPv6Address`	—
`RemotePrefix`	—
`RemotePrefixLength`	—
`LocalPrefix`	—
`LocalPrefixLength`	—

Event ID 1043 — Deleted IPxlat instance for interface %1.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Deleted IPxlat instance for interface %1

Fields

Name	Description
`InterfaceLuid`	—
`FallbackIPv4Address`	—
`SyntheticIPv4Address`	—
`SyntheticIPv6Address`	—
`RemotePrefix`	—
`RemotePrefixLength`	—
`LocalPrefix`	—
`LocalPrefixLength`	—

Event ID 1044 — XLAT.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

XLAT: %1

Fields

Name	Description
`Info`	—

Event ID 1045 — Added internal address %3, IfIndex %4 to NAT instance %1.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Added internal address %3, IfIndex %4 to NAT instance %1

Fields

Name	Description
`InstanceName`	—
`AddressLength`	—
`IPAddress`	—
`IfIndex`	—

Event ID 1046 — Removed internal address %3: IfIndex %4 from NAT instance %1.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Removed internal address %3: IfIndex %4 from NAT instance %1

Fields

Name	Description
`InstanceName`	—
`AddressLength`	—
`IPAddress`	—
`IfIndex`	—

Event ID 1047 — Driver state: PortChunkSize=.

Provider: Microsoft-Windows-WinNat
Channel: Trace

Message

Driver state: PortChunkSize=%1, RSCAware=%2, UROAware=%3, FragmentAware=%4, ForceInternalRoute=%5, UdpSessionTimeout=%6, ClampMssEnabled=%7

Fields

Name	Description
`PortChunkSize`	—
`RSCAware`	—
`UROAware`	—
`FragmentAware`	—
`ForceInternalRoute`	—
`UdpSessionTimeout`	—
`ClampMssEnabled`	—