Microsoft-Windows-Winsock-NameResolution

16 events across 1 channel

Event ID	Title	Channel
1000	GetAddrInfoW is called for queryName %1, serviceName %2, flags %4, family %5, …	Operational
1001	GetAddrInfoW is completed for queryName %1 with status %2 and result %3.	Operational
1002	GetAddrInfoExW is called for queryName %1, serviceName %2, nameSpace %4, …	Operational
1003	GetAddrInfoExW asynchronous query is pending for queryName: %1 with cancel …	Operational
1004	GetAddrInfoExW is completed for queryName %1 with status %2 and result %3.	Operational
1005	GetAddrInfoExCancel is called for query %1 and seq %2.	Operational
1006	NSPLookupServiceBegin is called for provider %1, queryName %2, serviceGUID %3, …	Operational
1007	NSPLookupServiceBegin is completed for provider %1, queryName %2 serviceGUID %3, …	Operational
1008	NSPLookupServiceNext is called for provider %1, control Flags %2 and lookup …	Operational
1009	NSPLookupServiceNext is completed for provider %1, control Flags %2 and lookup …	Operational
1010	NSPLookupServiceEnd is called for provider %1 and lookup handle %2.	Operational
1011	NSPLookupServiceEnd completed for provider %1 and lookup handle %2 with status …	Operational
1012	GetAddrInfoExW info.	Operational
1013	Wsa Startup.	Operational
1014	Wsa Cleanup.	Operational
1015	NSJOB info.	Operational

Event ID 1000 — GetAddrInfoW is called for queryName %1, serviceName %2, flags %4, family %5, socketType %6, protocol %7 and seq %3.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

GetAddrInfoW is called for queryName %1, serviceName %2, flags %4, family %5, socketType %6, protocol %7 and seq %3

Fields

Name	Description
`NodeName`	—
`ServiceName`	—
`Location`	—
`Flags`	—
`Family`	—
`SocketType`	—
`Protocol`	—

Event ID 1001 — GetAddrInfoW is completed for queryName %1 with status %2 and result %3.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

GetAddrInfoW is completed for queryName %1 with status %2 and result %3

Fields

Name	Description
`NodeName`	—
`Status`	—
`Result`	—

Event ID 1002 — GetAddrInfoExW is called for queryName %1, serviceName %2, nameSpace %4, nameSpace GUID %5, flags %6, family %7, socketType %8, protocol %9, interf...

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

GetAddrInfoExW is called for queryName %1, serviceName %2, nameSpace %4, nameSpace GUID %5, flags %6, family %7, socketType %8, protocol %9, interface index %10, timeOut %11, asyncWithCallBack %12, asyncWithOverlapped %13 and seq %3

Fields

Name	Description
`NodeName`	—
`ServiceName`	—
`Location`	—
`NameSpace`	—
`NameSpaceGuid`	—
`Flags`	—
`Family`	—
`SocketType`	—
`protocol`	—
`InterfaceIndex`	—
`TimeOutInSec`	—
`AsyncWithCallback`	—
`AsyncWithOverlapped`	—

Event ID 1003 — GetAddrInfoExW asynchronous query is pending for queryName: %1 with cancel Handle %2.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

GetAddrInfoExW asynchronous query is pending for queryName: %1 with cancel Handle %2

Fields

Name	Description
`NodeName`	—
`CancelHandle`	—

Event ID 1004 — GetAddrInfoExW is completed for queryName %1 with status %2 and result %3.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

GetAddrInfoExW is completed for queryName %1 with status %2 and result %3

Fields

Name	Description
`NodeName`	—
`Status`	—
`Result`	—

Event ID 1005 — GetAddrInfoExCancel is called for query %1 and seq %2.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

GetAddrInfoExCancel is called for  query %1 and seq %2

Fields

Name	Description
`CancelHandle`	—
`Location`	—

Event ID 1006 — NSPLookupServiceBegin is called for provider %1, queryName %2, serviceGUID %3, interface index %4 and control flags %5.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

NSPLookupServiceBegin is called for provider %1, queryName %2, serviceGUID %3, interface index %4 and control flags %5

Fields

Name	Description
`ProviderGUID`	—
`QueryName`	—
`ServiceGUID`	—
`InterfaceIndex`	—
`ControlFlags`	—

Event ID 1007 — NSPLookupServiceBegin is completed for provider %1, queryName %2 serviceGUID %3, interface index %4, control flags %5 and lookup handle %6 with sta...

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

NSPLookupServiceBegin is completed for provider %1, queryName %2 serviceGUID %3, interface index %4, control flags %5 and lookup handle %6 with status %7

Fields

Name	Description
`ProviderGUID`	—
`QueryName`	—
`ServiceGUID`	—
`InterfaceIndex`	—
`ControlFlags`	—
`LookupHandle`	—
`Status`	—

Event ID 1008 — NSPLookupServiceNext is called for provider %1, control Flags %2 and lookup handle %3.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

NSPLookupServiceNext is called for provider %1, control Flags %2 and lookup handle %3

Fields

Name	Description
`ProviderGUID`	—
`ControlFlags`	—
`LookupHandle`	—

Event ID 1009 — NSPLookupServiceNext is completed for provider %1, control Flags %2 and lookup Handle %3 with status %4 and result %5.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

NSPLookupServiceNext is completed for provider %1, control Flags %2 and lookup Handle %3 with status %4 and result %5

Fields

Name	Description
`ProviderGUID`	—
`ControlFlags`	—
`LookupHandle`	—
`Status`	—
`Result`	—

Event ID 1010 — NSPLookupServiceEnd is called for provider %1 and lookup handle %2.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

NSPLookupServiceEnd is called for provider %1 and lookup handle %2

Fields

Name	Description
`ProviderGUID`	—
`LookupHandle`	—

Event ID 1011 — NSPLookupServiceEnd completed for provider %1 and lookup handle %2 with status %3.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

NSPLookupServiceEnd completed for provider %1 and lookup handle %2 with status %3

Fields

Name	Description
`ProviderGUID`	—
`LookupHandle`	—
`Status`	—

Event ID 1012 — GetAddrInfoExW info.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

GetAddrInfoExW info.  queryName %1, serviceName %2, nameSpace %4, nameSpace GUID %5, flags %6, family %7, socketType %8, protocol %9, interface index %10, timeOut %11, asyncWithCallBack %12, asyncWithOverlapped %13, error %14 and seq %3

Fields

Name	Description
`NodeName`	—
`ServiceName`	—
`Location`	—
`NameSpace`	—
`NameSpaceGuid`	—
`Flags`	—
`Family`	—
`SocketType`	—
`protocol`	—
`InterfaceIndex`	—
`TimeOutInSec`	—
`AsyncWithCallback`	—
`AsyncWithOverlapped`	—
`Error`	—

Event ID 1013 — Wsa Startup.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

Wsa Startup. seq: %1.

Fields

Name	Description
`Location`	—

Event ID 1014 — Wsa Cleanup.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

Wsa Cleanup. seq: %1.  Refcount: %2.

Fields

Name	Description
`Location`	—
`RefCount`	—

Event ID 1015 — NSJOB info.

Provider: Microsoft-Windows-Winsock-NameResolution
Channel: Operational

Message

NSJOB info.  seq %1.  Refcount: %2.

Fields

Name	Description
`Location`	—
`RefCount`	—