Microsoft-Windows-Winsock-AFD

96 events across 1 channel

Event ID	Title	Channel
1	Socket creation: %1 %2 %3 %4 %5.	Operational
2	Socket bind: %1 %2 %3 %4 %5.	Operational
3	Socket bind: %1 %2 %3 %4 %5.	Operational
4	Socket connect: %1 %2 %3 %4.	Operational
5	Socket connect: %1 %2 %3 %4.	Operational
6	Connect completed: %1 %2 %3.	Operational
7	AFD initiated abort: %1 %2 %3.	Operational
8	Transport initiated abort: %1 %2 %3.	Operational
9	Failed send request: %1 %2 %3.	Operational
10	Failed WSASendMsg request: %1 %2 %3.	Operational
11	Failed recv request: %1 %2 %3.	Operational
12	Failed recvfrom request: %1 %2 %3.	Operational
13	Socket close: %1 %2 %3.	Operational
14	Socket cleanup (all references removed): %1 %2 %3.	Operational
15	Socket accept: %1 %2 %3 %4 %5.	Operational
16	Socket accept: %1 %2 %3 %4 %5.	Operational
17	Accept failed: %1 %2 %3.	Operational
18	Send posted: %1 %2 %3 %4 %5 %6.	Operational
19	Receive posted: %1 %2 %3 %4 %5 %6.	Operational
20	RecvFrom posted: %1 %2 %3 %4 %5 %6.	Operational
21	SendTo posted: %1 %2 %3 %4 %5 %6 %7 %8.	Operational
22	SendTo posted: %1 %2 %3 %4 %5 %6 %7 %8.	Operational
23	Recv completed: %1 %2 %3 %4.	Operational
24	Send completed: %1 %2 %3 %4.	Operational
25	SendMsg completed: %1 %2 %3 %4.	Operational
26	RecvFrom completed: %1 %2 %3 %4 %5 %6 %7.	Operational
27	RecvFrom completed: %1 %2 %3 %4 %5 %6 %7.	Operational
28	SendTo completed: %1 %2 %3 %4.	Operational
29	Socket option set: %1 %2 %3 %4.	Operational
30	Select/Poll posted: %1 %2 %3.	Operational
31	Select/Poll completed: %1 %2 %3.	Operational
32	WSAEventSelect: %1 %2 %3.	Operational
33	Datagram dropped: %1 %2 %3 %4 %5 %6.	Operational
34	Datagram dropped: %1 %2 %3 %4 %5 %6.	Operational
35	Connection indicated: %1 %2 %3 %4.	Operational
36	Connection indicated: %1 %2 %3 %4.	Operational
37	Data indicated from transport: %1 %2 %3.	Operational
38	Data indicated from transport: %1 %2 %3 %4 %5.	Operational
39	Data indicated from transport: %1 %2 %3 %4 %5.	Operational
40	Failed bind: %1 %2 %3.	Operational
41	Disconnect indicated from transport: %1 %2.	Operational
1000	socket: %1: Process %3 (%8), Endpoint %4, Family %5, Type %6, Protocol %7, Seq …	Operational
1001	closesocket: %1: Process %3, Endpoint %4, Seq %2, Status %5.	Operational
1002	socket cleanup: %1: Process %3, Endpoint %4, Seq %2, Status %5.	Operational
1003	send: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq …	Operational
1004	recv: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq …	Operational
1005	sendto: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq …	Operational
1006	recvfrom: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, …	Operational
1007	sendto: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Addr …	Operational
1009	recvfrom: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, …	Operational
1011	sendmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq …	Operational
1012	recvmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq …	Operational
1013	sendmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, …	Operational
1015	recvmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, …	Operational
1017	connect: %1: Process %3, Endpoint %4, Seq %2, Status %5.	Operational
1018	connect: %1: Process %3, Endpoint %4, Address %9, Seq %2, Status %7.	Operational
1020	ConnectEx: %1: Process %3, Endpoint %4, Seq %2, Status %5.	Operational
1021	ConnectEx: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %9, Seq …	Operational
1023	accept: %1: Process %3, Endpoint %4, Seq %2, Status %5.	Operational
1024	accept: %1: Process %3, Endpoint %4, Address %9, Accept Endpoint %10, Current …	Operational
1026	AcceptEx: %1: Process %3, Endpoint %4, Seq %2, Status %5.	Operational
1027	AcceptEx: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %9, Accept …	Operational
1029	bind: %1: Process %3, Endpoint %4, Seq %2, Status %5.	Operational
1030	bind: %1: Process %3, Endpoint %4, Address %7, Seq %2, Status %5.	Operational
1032	connection aborted: %1: Process %3, Endpoint %4, Seq %2, Reason %5.	Operational
1033	datagram dropped: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %8, …	Operational
1035	Socket option: %1: Process %3, Endpoint %4, Option %5, Value %6, Seq %2, Status …	Operational
1036	Wait for listen: %1: Process %3, Endpoint %4, Seq %2, Status %5.	Operational
1037	Listen: %1: Process %3, Endpoint %4, Backlog %5, Seq %2, Status %6.	Operational
3000	Connect indication: %1: Process %3, Endpoint %4, Seq %2, Status %5.	Operational
3001	Connect indication: %1: Process %3, Endpoint %4, Address %7, Backlog Count %8, …	Operational
3003	Data indication: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Seq %2.	Operational
3004	Data indication: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %8, …	Operational
3006	disconnect indicated: %1: Process %3, Endpoint %4, Seq %2.	Operational
3007	Transport send backlog: Process %1, Endpoint %2, Send Backlog %5.	Operational
4000	Registration domain %1 create status %2.	Operational
4001	Registration domain %1 closed.	Operational
4002	CQ %1 created with %3 entries, index %7 and notification type %8, status %13.	Operational
4003	CQ %1 closed with %2 commit.	Operational
4004	CQ %1 cleaned up.	Operational
4005	CQ %1 with %5 commit resized from %2 to %6, status %10.	Operational
4006	RQ %2 created on endpoint %1 with %8 receive and %4 send entries, using receive …	Operational
4007	RQ %1 closed, receive = (%2,%3) send = (%4,%5).	Operational
4008	RQ %1 cleaned up.	Operational
4009	RQ %1 resized from (%9,%2) to (%12,%5), status = %16.	Operational
4010	Buffer %1 registered with address %3 and length %5, system address = %4, ID = …	Operational
4011	Buffer %1 deregistered with %2 references.	Operational
4012	Buffer %1 cleaned up.	Operational
4013	RQ %2 using invalid buffer ID %3.	Operational
4014	RQ %2 invalid use of buffer %3, offset = %4, length = %5.	Operational
4015	RQ %1 using invalid buffer size for %2, specified = %3, required = %4.	Operational
4016	NRT Create: Handle = %1 Process = %2 Status = %3.	Operational
4017	NRT Close: Handle = %1 Process = %2.	Operational
4018	CQ %5 notify %1 Seq %2 Status %6.	Operational
4019	accept %1 [1 = Pause, 0 = Unpause] %5 Seq %2 Endpoint %3 Process %4 …	Operational
4020	RQ %2 invalid buffer sharing ID %3 sharing type %4.	Operational

Event ID 1 — Socket creation: %1 %2 %3 %4 %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket creation: %1 %2 %3 %4 %5

Fields

Name	Description
`Process`	—
`Endpoint`	—
`AddressFamily`	—
`SocketType`	—
`Protocol`	—
`UserModePid`	—

Event ID 2 — Socket bind: %1 %2 %3 %4 %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket bind: %1 %2 %3 %4 %5

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Address`	—
`Port`	—
`Status`	—

Event ID 3 — Socket bind: %1 %2 %3 %4 %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket bind: %1 %2 %3 %4 %5

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Address`	—
`Port`	—
`Status`	—

Event ID 4 — Socket connect: %1 %2 %3 %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket connect: %1 %2 %3 %4

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Address`	—
`Port`	—

Event ID 5 — Socket connect: %1 %2 %3 %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket connect: %1 %2 %3 %4

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Address`	—
`Port`	—

Event ID 6 — Connect completed: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Connect completed: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Error`	—

Event ID 7 — AFD initiated abort: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

AFD initiated abort: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Reason`	—

Event ID 8 — Transport initiated abort: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Transport initiated abort: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Reason`	—

Event ID 9 — Failed send request: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Failed send request: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Error`	—

Event ID 10 — Failed WSASendMsg request: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Failed WSASendMsg request: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Error`	—

Event ID 11 — Failed recv request: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Failed recv request: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Error`	—

Event ID 12 — Failed recvfrom request: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Failed recvfrom request: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Error`	—

Event ID 13 — Socket close: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket close: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Error`	—

Event ID 14 — Socket cleanup (all references removed): %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket cleanup (all references removed): %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Error`	—

Event ID 15 — Socket accept: %1 %2 %3 %4 %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket accept: %1 %2 %3 %4 %5

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Address`	—
`Port`	—
`Status`	—

Event ID 16 — Socket accept: %1 %2 %3 %4 %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket accept: %1 %2 %3 %4 %5

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Address`	—
`Port`	—
`Status`	—

Event ID 17 — Accept failed: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Accept failed: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Error`	—

Event ID 18 — Send posted: %1 %2 %3 %4 %5 %6.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Send posted: %1 %2 %3 %4 %5 %6

Fields

Name	Description
`Process`	—
`Endpoint`	—
`FastPath`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—

Event ID 19 — Receive posted: %1 %2 %3 %4 %5 %6.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Receive posted: %1 %2 %3 %4 %5 %6

Fields

Name	Description
`Process`	—
`Endpoint`	—
`FastPath`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—

Event ID 20 — RecvFrom posted: %1 %2 %3 %4 %5 %6.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RecvFrom posted: %1 %2 %3 %4 %5 %6

Fields

Name	Description
`Process`	—
`Endpoint`	—
`FastPath`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—

Event ID 21 — SendTo posted: %1 %2 %3 %4 %5 %6 %7 %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

SendTo posted: %1 %2 %3 %4 %5 %6 %7 %8

Fields

Name	Description
`Process`	—
`Endpoint`	—
`FastPath`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Address`	—
`Port`	—

Event ID 22 — SendTo posted: %1 %2 %3 %4 %5 %6 %7 %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

SendTo posted: %1 %2 %3 %4 %5 %6 %7 %8

Fields

Name	Description
`Process`	—
`Endpoint`	—
`FastPath`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Address`	—
`Port`	—

Event ID 23 — Recv completed: %1 %2 %3 %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Recv completed: %1 %2 %3 %4

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—

Event ID 24 — Send completed: %1 %2 %3 %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Send completed: %1 %2 %3 %4

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—

Event ID 25 — SendMsg completed: %1 %2 %3 %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

SendMsg completed: %1 %2 %3 %4

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—

Event ID 26 — RecvFrom completed: %1 %2 %3 %4 %5 %6 %7.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RecvFrom completed: %1 %2 %3 %4 %5 %6 %7

Fields

Name	Description
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Address`	—
`Port`	—

Event ID 27 — RecvFrom completed: %1 %2 %3 %4 %5 %6 %7.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RecvFrom completed: %1 %2 %3 %4 %5 %6 %7

Fields

Name	Description
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Address`	—
`Port`	—

Event ID 28 — SendTo completed: %1 %2 %3 %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

SendTo completed: %1 %2 %3 %4

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—

Event ID 29 — Socket option set: %1 %2 %3 %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket option set: %1 %2 %3 %4

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Option`	—
`Value`	—

Event ID 30 — Select/Poll posted: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Select/Poll posted: %1 %2 %3

Fields

Name	Description
`Process`	—
`HandleCount`	—
`Timeout`	—

Event ID 31 — Select/Poll completed: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Select/Poll completed: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Error`	—

Event ID 32 — WSAEventSelect: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

WSAEventSelect: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`EventMask`	—

Event ID 33 — Datagram dropped: %1 %2 %3 %4 %5 %6.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Datagram dropped: %1 %2 %3 %4 %5 %6

Fields

Name	Description
`Process`	—
`Endpoint`	—
`PacketSize`	—
`Address`	—
`Port`	—
`Reason`	—

Event ID 34 — Datagram dropped: %1 %2 %3 %4 %5 %6.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Datagram dropped: %1 %2 %3 %4 %5 %6

Fields

Name	Description
`Process`	—
`Endpoint`	—
`PacketSize`	—
`Address`	—
`Port`	—
`Reason`	—

Event ID 35 — Connection indicated: %1 %2 %3 %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Connection indicated: %1 %2 %3 %4

Fields

Name	Description
`Process`	—
`ListenEndpoint`	—
`Address`	—
`Port`	—

Event ID 36 — Connection indicated: %1 %2 %3 %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Connection indicated: %1 %2 %3 %4

Fields

Name	Description
`Process`	—
`ListenEndpoint`	—
`Address`	—
`Port`	—

Event ID 37 — Data indicated from transport: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Data indicated from transport: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`BytesIndicated`	—

Event ID 38 — Data indicated from transport: %1 %2 %3 %4 %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Data indicated from transport: %1 %2 %3 %4 %5

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Address`	—
`Port`	—
`BytesIndicated`	—

Event ID 39 — Data indicated from transport: %1 %2 %3 %4 %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Data indicated from transport: %1 %2 %3 %4 %5

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Address`	—
`Port`	—
`BytesIndicated`	—

Event ID 40 — Failed bind: %1 %2 %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Failed bind: %1 %2 %3

Fields

Name	Description
`Process`	—
`Endpoint`	—
`Error`	—

Event ID 41 — Disconnect indicated from transport: %1 %2.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Disconnect indicated from transport: %1 %2

Fields

Name	Description
`Process`	—
`Endpoint`	—

Event ID 1000 — socket: %1: Process %3 (%8), Endpoint %4, Family %5, Type %6, Protocol %7, Seq %2, Status %9.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

socket: %1: Process %3 (%8), Endpoint %4, Family %5, Type %6, Protocol %7, Seq %2, Status %9

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`AddressFamily`	—
`SocketType`	—
`Protocol`	—
`ProcessId`	—
`Status`	—

Event ID 1001 — closesocket: %1: Process %3, Endpoint %4, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

closesocket: %1: Process %3, Endpoint %4, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—

Event ID 1002 — socket cleanup: %1: Process %3, Endpoint %4, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

socket cleanup: %1: Process %3, Endpoint %4, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—

Event ID 1003 — send: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

send: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Status`	—

Event ID 1004 — recv: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

recv: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Status`	—

Event ID 1005 — sendto: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

sendto: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Status`	—

Event ID 1006 — recvfrom: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

recvfrom: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Status`	—

Event ID 1007 — sendto: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Addr %10, Seq %2, Status %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

sendto: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Addr %10, Seq %2, Status %8

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Status`	—
`AddressLen`	—
`Address`	—

Event ID 1009 — recvfrom: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Addr %10, Seq %2, Status %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

recvfrom: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Addr %10, Seq %2, Status %8

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Status`	—
`AddressLen`	—
`Address`	—

Event ID 1011 — sendmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

sendmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Status`	—

Event ID 1012 — recvmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

recvmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Seq %2, Status %8

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Status`	—

Event ID 1013 — sendmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Addr %10, Seq %2, Status %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

sendmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Addr %10, Seq %2, Status %8

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Status`	—
`AddressLen`	—
`Address`	—

Event ID 1015 — recvmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Addr %10, Seq %2, Status %8.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

recvmsg: %1: Process %3, Endpoint %4, Buffer Count %5, Buffer %6, Length %7, Addr %10, Seq %2, Status %8

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`BufferCount`	—
`Buffer`	—
`BufferLength`	—
`Status`	—
`AddressLen`	—
`Address`	—

Event ID 1017 — connect: %1: Process %3, Endpoint %4, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

connect: %1: Process %3, Endpoint %4, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—

Event ID 1018 — connect: %1: Process %3, Endpoint %4, Address %9, Seq %2, Status %7.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

connect: %1: Process %3, Endpoint %4, Address %9, Seq %2, Status %7

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—
`Status`	—
`AddressLen`	—
`Address`	—

Event ID 1020 — ConnectEx: %1: Process %3, Endpoint %4, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

ConnectEx: %1: Process %3, Endpoint %4, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—

Event ID 1021 — ConnectEx: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %9, Seq %2, Status %7.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

ConnectEx: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %9, Seq %2, Status %7

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—
`Status`	—
`AddressLen`	—
`Address`	—

Event ID 1023 — accept: %1: Process %3, Endpoint %4, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

accept: %1: Process %3, Endpoint %4, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—

Event ID 1024 — accept: %1: Process %3, Endpoint %4, Address %9, Accept Endpoint %10, Current Backlog %11, Seq %2, Status %7.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

accept: %1: Process %3, Endpoint %4, Address %9, Accept Endpoint %10, Current Backlog %11, Seq %2, Status %7

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—
`Status`	—
`AddressLen`	—
`Address`	—
`AcceptEndpoint`	—
`CurrentBacklog`	—

Event ID 1026 — AcceptEx: %1: Process %3, Endpoint %4, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

AcceptEx: %1: Process %3, Endpoint %4, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—

Event ID 1027 — AcceptEx: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %9, Accept Endpoint %10, Current Backlog %11, Seq %2, Status %7.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

AcceptEx: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %9, Accept Endpoint %10, Current Backlog %11, Seq %2, Status %7

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—
`Status`	—
`AddressLen`	—
`Address`	—
`AcceptEndpoint`	—
`CurrentBacklog`	—

Event ID 1029 — bind: %1: Process %3, Endpoint %4, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

bind: %1: Process %3, Endpoint %4, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—

Event ID 1030 — bind: %1: Process %3, Endpoint %4, Address %7, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

bind: %1: Process %3, Endpoint %4, Address %7, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—
`AddressLen`	—
`Address`	—

Event ID 1032 — connection aborted: %1: Process %3, Endpoint %4, Seq %2, Reason %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

connection aborted: %1: Process %3, Endpoint %4, Seq %2, Reason %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Reason`	—

Event ID 1033 — datagram dropped: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %8, Seq %2, Reason %9.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

datagram dropped: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %8, Seq %2, Reason %9

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—
`AddressLen`	—
`Address`	—
`Reason`	—

Event ID 1035 — Socket option: %1: Process %3, Endpoint %4, Option %5, Value %6, Seq %2, Status %7.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Socket option: %1: Process %3, Endpoint %4, Option %5, Value %6, Seq %2, Status %7

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Option`	—
`Value`	—
`Status`	—

Event ID 1036 — Wait for listen: %1: Process %3, Endpoint %4, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Wait for listen: %1: Process %3, Endpoint %4, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—

Event ID 1037 — Listen: %1: Process %3, Endpoint %4, Backlog %5, Seq %2, Status %6.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Listen: %1: Process %3, Endpoint %4, Backlog %5, Seq %2, Status %6

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Backlog`	—
`Status`	—

Event ID 3000 — Connect indication: %1: Process %3, Endpoint %4, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Connect indication: %1: Process %3, Endpoint %4, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—

Event ID 3001 — Connect indication: %1: Process %3, Endpoint %4, Address %7, Backlog Count %8, Seq %2, Status %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Connect indication: %1: Process %3, Endpoint %4, Address %7, Backlog Count %8, Seq %2, Status %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—
`AddressLen`	—
`Address`	—
`CurrentBacklog`	—

Event ID 3003 — Data indication: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Seq %2.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Data indication: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Seq %2

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—

Event ID 3004 — Data indication: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %8, Seq %2.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Data indication: %1: Process %3, Endpoint %4, Buffer %5, Length %6, Address %8, Seq %2

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Buffer`	—
`BufferLength`	—
`AddressLen`	—
`Address`	—

Event ID 3006 — disconnect indicated: %1: Process %3, Endpoint %4, Seq %2.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

disconnect indicated: %1: Process %3, Endpoint %4, Seq %2

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`Status`	—

Event ID 3007 — Transport send backlog: Process %1, Endpoint %2, Send Backlog %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Transport send backlog: Process %1, Endpoint %2, Send Backlog %5

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`SendBacklog`	—

Event ID 4000 — Registration domain %1 create status %2.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Registration domain %1 create status %2

Fields

Name	Description
`RegistrationDomain`	—
`Status`	—

Event ID 4001 — Registration domain %1 closed.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Registration domain %1 closed

Fields

Name	Description
`RegistrationDomain`	—

Event ID 4002 — CQ %1 created with %3 entries, index %7 and notification type %8, status %13.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

CQ %1 created with %3 entries, index %7 and notification type %8, status %13

Fields

Name	Description
`Cq`	—
`RegistrationDomain`	—
`EntryCount`	—
`UserAddress`	—
`SystemAddress`	—
`BufferSize`	—
`CqIndex`	—
`NotificationType`	—
`NotificationHandle`	—
`NotificationObject`	—
`NotificationContext1`	—
`NotificationContext2`	—
`Status`	—

Event ID 4003 — CQ %1 closed with %2 commit.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

CQ %1 closed with %2 commit

Fields

Name	Description
`Cq`	—
`Commit`	—

Event ID 4004 — CQ %1 cleaned up.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

CQ %1 cleaned up

Fields

Name	Description
`Cq`	—

Event ID 4005 — CQ %1 with %5 commit resized from %2 to %6, status %10.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

CQ %1 with %5 commit resized from %2 to %6, status %10

Fields

Name	Description
`Cq`	—
`OriginalEntryCount`	—
`OriginalStart`	—
`OriginalEnd`	—
`Commit`	—
`RequestedEntryCount`	—
`UserAddress`	—
`SystemAddress`	—
`BufferSize`	—
`Status`	—

Event ID 4006 — RQ %2 created on endpoint %1 with %8 receive and %4 send entries, using receive CQ %13 and send CQ %12, status %14.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RQ %2 created on endpoint %1 with %8 receive and %4 send entries, using receive CQ %13 and send CQ %12, status %14

Fields

Name	Description
`Endpoint`	—
`RioState`	—
`RegistrationDomain`	—
`SendEntryCount`	—
`SendUserAddress`	—
`SendSystemAddress`	—
`SendBufferSize`	—
`ReceiveEntryCount`	—
`ReceiveUserAddress`	—
`ReceiveSystemAddress`	—
`ReceiveBufferSize`	—
`SendCqIndex`	—
`ReceiveCqIndex`	—
`Status`	—

Event ID 4007 — RQ %1 closed, receive = (%2,%3) send = (%4,%5).

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RQ %1 closed, receive = (%2,%3) send = (%4,%5)

Fields

Name	Description
`RioState`	—
`ReceiveQueueStart`	—
`ReceiveQueueEnd`	—
`SendQueueStart`	—
`SendQueueEnd`	—

Event ID 4008 — RQ %1 cleaned up.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RQ %1 cleaned up

Fields

Name	Description
`RioState`	—

Event ID 4009 — RQ %1 resized from (%9,%2) to (%12,%5), status = %16.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RQ %1 resized from (%9,%2) to (%12,%5), status = %16

Fields

Name	Description
`RioState`	—
`OriginalSendEntryCount`	—
`OriginalSendQueueStart`	—
`OriginalSendQueueEnd`	—
`RequestedSendEntryCount`	—
`SendUserAddress`	—
`SendSystemAddress`	—
`SendBufferSize`	—
`OriginalReceiveEntryCount`	—
`OriginalReceiveQueueStart`	—
`OriginalReceiveQueueEnd`	—
`RequestedReceiveEntryCount`	—
`ReceiveUserAddress`	—
`ReceiveSystemAddress`	—
`ReceiveBufferSize`	—
`Status`	—

Event ID 4010 — Buffer %1 registered with address %3 and length %5, system address = %4, ID = %6, status = %7.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Buffer %1 registered with address %3 and length %5, system address = %4, ID = %6, status = %7

Fields

Name	Description
`Buffer`	—
`RegistrationDomain`	—
`UserAddress`	—
`SystemAddress`	—
`BufferSize`	—
`BufferId`	—
`Status`	—

Event ID 4011 — Buffer %1 deregistered with %2 references.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Buffer %1 deregistered with %2 references

Fields

Name	Description
`Buffer`	—
`References`	—

Event ID 4012 — Buffer %1 cleaned up.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

Buffer %1 cleaned up

Fields

Name	Description
`Buffer`	—

Event ID 4013 — RQ %2 using invalid buffer ID %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RQ %2 using invalid buffer ID %3

Fields

Name	Description
`RegistrationDomain`	—
`RioState`	—
`BufferId`	—

Event ID 4014 — RQ %2 invalid use of buffer %3, offset = %4, length = %5.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RQ %2 invalid use of buffer %3, offset = %4, length = %5

Fields

Name	Description
`RegistrationDomain`	—
`RioState`	—
`Buffer`	—
`BufferOffset`	—
`BufferLength`	—

Event ID 4015 — RQ %1 using invalid buffer size for %2, specified = %3, required = %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RQ %1 using invalid buffer size for %2, specified = %3, required = %4

Fields

Name	Description
`RioState`	—
`BufferType`	—
`SpecifiedLength`	—
`RequiredLength`	—

Event ID 4016 — NRT Create: Handle = %1 Process = %2 Status = %3.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

NRT Create: Handle = %1 Process = %2 Status = %3

Fields

Name	Description
`NameResolutionHandle`	—
`Process`	—
`Status`	—

Event ID 4017 — NRT Close: Handle = %1 Process = %2.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

NRT Close: Handle = %1 Process = %2

Fields

Name	Description
`NameResolutionHandle`	—
`Process`	—

Event ID 4018 — CQ %5 notify %1 Seq %2 Status %6.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

CQ %5 notify %1 Seq %2 Status %6

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`RegDomain`	—
`Cq`	—
`Status`	—

Event ID 4019 — accept %1 [1 = Pause, 0 = Unpause] %5 Seq %2 Endpoint %3 Process %4 TlBacklogCount %6.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

accept %1 [1 = Pause, 0 = Unpause] %5 Seq %2 Endpoint %3 Process %4 TlBacklogCount %6.

Fields

Name	Description
`EnterExit`	—
`Location`	—
`Process`	—
`Endpoint`	—
`PauseUnPause`	—
`TLBacklogCount`	—

Event ID 4020 — RQ %2 invalid buffer sharing ID %3 sharing type %4.

Provider: Microsoft-Windows-Winsock-AFD
Channel: Operational

Message

RQ %2 invalid buffer sharing ID %3 sharing type %4

Fields

Name	Description
`RegistrationDomain`	—
`RioState`	—
`BufferId`	—
`BufferSharingType`	—