detection.wiki

Microsoft-Windows-Hyper-V-Netvsc

EventTitleChannelSampleRule
1The VM and host networking components successfully negotiated protocol version …SystemNN
2The VM and host networking components failed to negotiate protocol version …SystemNN
3The miniport 'MiniportName' was successfully initialized.SystemNN
4Failed to initialize miniport 'MiniportName', Status = 'Status'.SystemNN
5Failed to set config parameters on miniport NIC 'MiniportName', Status = …SystemNN
6Miniport NIC 'MiniportName' is halting.SystemNN
7Miniport NIC 'MiniportName' reset.SystemNN
8Miniport NIC 'MiniportName' hung.SystemNN
9Miniport NIC 'MiniportName' halted.SystemNN
10Miniport NIC 'MiniportName' paused.SystemNN
11Miniport NIC 'MiniportName' restarted.SystemNN
12Miniport NIC 'MiniportName' connected.SystemNN
13Miniport NIC 'MiniportName' disconnected.SystemNN
14Miniport NIC 'MiniportName' network has changed.SystemNN
15Failed to initialize microport for miniport 'MiniportName', Status = 'Status'.SystemNN
16NBL Operation miniport NIC 'MiniportName' is dropped.DiagnosticNN
17Failed to send packet at the microport.DiagnosticNN
18NBL Pointer CorrelationID CorrelationId on IfIndex IfIndex direction Direction …DiagnosticNN
19NBL Pointer CorrelationID CorrelationId on IfIndex IfIndex direction Direction …DiagnosticNN
20NBL Pointer CorrelationID CorrelationId on IfIndex IfIndex direction Direction …DiagnosticNN
21SFA cleanup succeeded.SystemNN
22SFA GetMeterData succeeded.SystemNN
23SFA RemoveRule succeeded.SystemNN
24SFA AddRule succeeded.SystemNN
25SFA DeleteContext succeeded.SystemNN
26SFA CreateContext succeeded.SystemNN
27SFA StatusChangedNotification SfaEnabled: {SfaEnabled} ClientContext: …SystemNN
28SFA register optional handler succeeded.SystemNN
29SFA GetMeterData failed.SystemNN
30SFA RemoveRule failed.SystemNN
31SFA AddRule failed.SystemNN
32SFA DeleteContext failed.SystemNN
33SFA CreateContext failed.SystemNN
34PD initialization succeeded.SystemNN
35PD initialization failed.SystemNN
36PD cleanup succeeded.SystemNN
37Open NDK adapter failed on Miniport 'MiniportName'.SystemNN
38NDK PnP event failed.SystemNN
39VF adapter bind failed.SystemNN
40Task, Task, failed because of low memory.SystemNN
41Sending Interface Index (IfIndex IfIndex)of RNDIS miniport 'MiniportName' to VF …SystemNN
42Sending Interface Index (IfIndex IfIndex)of RNDIS miniport 'MiniportName' to VF …SystemNN
43NDK PnP event succeeded.SystemNN
44Miniport 'MiniportName' reported NDK capabilities.SystemNN
45Miniport 'MiniportName' failed to report NDK capabilities.SystemNN
46VF adapter 'VfAdapterName' did not report NDK capabilities.SystemNN
47VF adapter 'VfAdapterName' reported NDK capabilities in enabled operational …SystemNN
48VF adapter 'VfAdapterName' reported NDK capabilities in disabled operational …SystemNN
49A VF connection failed due to isolated VM restriction.SystemNN
50Successfully bind NetVsc to VfAdapter (MiniportName) with VfSerialNumber …SystemNN
51Failed NetVsc VF association with VfSerialNumber (VfSerialNumber) FailureReason …SystemNN
52Successfully NetVsc (VfAdapterName) VF association with VfSerialNumber …SystemNN
53Failed NetVsc (VfAdapterName) send VmBus Packet to Host for Data Path Switch …SystemNN
54Successfully NetVsc (VfAdapterName) send VmBus Packet to Host for Data Path …SystemNN
55Failed NetVsc VF deassociation with VfSerialNumber (VfSerialNumber) Status …SystemNN
56Successfully NetVsc (VfAdapterName) VF deassociation with VfSerialNumber …SystemNN
57Failed VF adapter (MiniportName) unbind with VfSerialNumber (VfSerialNumber) …SystemNN
58Successfully VF adapter (MiniportName) unbind with VfSerialNumber …SystemNN
59Successfully sent status indication for VF adapter MiniportName (Serial number: …SystemNN
60Failed to change datapath for VF with MAC address VfMacAddress, requested VF …SystemNN
61Netvsc IOCTL failed, IOCTL code: IoctlControlCode, Status: Status.SystemNN
62Netvsc IOCTL succeeded, IOCTL code: IoControlCode.SystemNN
63ManagementVfListIoctl(opcode: IoControlCode, version: IoctlVersion) completed …SystemNN
64Failed to register control device for NetVSC!SystemNN
65The NetVSC driver object block was not found in RNDISMP list or its signature is …SystemNN
66Ioctl IoctlCode completed with status: Status.SystemNN
67Loading of the PCIP driver for reassignable VF with MAC address: VfMacAddress …SystemNN
68Loading of the PCIP driver for reassignable VF with MAC address: VfMacAddress …SystemNN
69Failed to retrieve the VF location path, status: Status.SystemNN
70Successfully retrieved VF location path: VfLocationPath, status: Status.SystemNN
71Unloading PCIP driver for reassignable VF with MAC address: VfMacAddress …SystemNN
72Unloading the PCIP driver for reassignable VF with MAC address: VfMacAddress …SystemNN
73The list of management VFs was successfully updated and all the VF status …SystemNN
74Failure during updating the management VF list, status: Status, …SystemNN

Event ID 1: The VM and host networking components successfully negotiated protocol version 'Version'.

#
Channel
System
Task
ProtocolNegotiate

Message #

The VM and host networking components successfully negotiated protocol version '%2'

Fields #

NameDescription
VersionLen UInt32
Version UnicodeString
Status UInt32NTSTATUS reference

Event ID 2: The VM and host networking components failed to negotiate protocol version 'Version'.

#
Channel
System
Task
ProtocolNegotiate

Message #

The VM and host networking components failed to negotiate protocol version '%2'

Fields #

NameDescription
VersionLen UInt32
Version UnicodeString
Status UInt32NTSTATUS reference

Event ID 3: The miniport 'MiniportName' was successfully initialized.

#
Channel
System
Task
RndisMPInit

Message #

The miniport '%2' was successfully initialized

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 4: Failed to initialize miniport 'MiniportName', Status = 'Status'.

#
Channel
System
Task
RndisMPInit

Message #

Failed to initialize miniport '%2', Status = '%3'

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString
Status UInt32NTSTATUS reference
UniqueEventValue UInt32

Event ID 5: Failed to set config parameters on miniport NIC 'MiniportName', Status = 'Status'.

#
Channel
System
Task
RndisMPInit

Message #

Failed to set config parameters on miniport NIC '%2', Status = '%5'

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString
SubkeyNameLen UInt32
SubkeyName UnicodeString
Status UInt32NTSTATUS reference

Event ID 6: Miniport NIC 'MiniportName' is halting.

#
Channel
System
Task
RndisStatusChange

Message #

Miniport NIC '%2' is halting

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 7: Miniport NIC 'MiniportName' reset.

#
Channel
System
Task
RndisStatusChange

Message #

Miniport NIC '%2' reset

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 8: Miniport NIC 'MiniportName' hung.

#
Channel
System
Task
RndisStatusChange

Message #

Miniport NIC '%2' hung

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 9: Miniport NIC 'MiniportName' halted.

#
Channel
System
Task
RndisStatusChange

Message #

Miniport NIC '%2' halted

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 10: Miniport NIC 'MiniportName' paused.

#
Channel
System
Task
RndisStatusChange

Message #

Miniport NIC '%2' paused

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 11: Miniport NIC 'MiniportName' restarted.

#
Channel
System
Task
RndisStatusChange

Message #

Miniport NIC '%2' restarted

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 12: Miniport NIC 'MiniportName' connected.

#
Channel
System
Task
RndisStatusChange

Message #

Miniport NIC '%2' connected

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 13: Miniport NIC 'MiniportName' disconnected.

#
Channel
System
Task
RndisStatusChange

Message #

Miniport NIC '%2' disconnected

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 14: Miniport NIC 'MiniportName' network has changed.

#
Channel
System
Task
RndisStatusChange

Message #

Miniport NIC '%2' network has changed

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 15: Failed to initialize microport for miniport 'MiniportName', Status = 'Status'.

#
Channel
System
Task
MicroportInit

Message #

Failed to initialize microport for miniport '%2', Status = '%3'

Fields #

NameDescription
MiniportNameLen UInt32
MiniportName UnicodeString
Status UInt32NTSTATUS reference
UniqueEventValue UInt32

Event ID 16: NBL Operation miniport NIC 'MiniportName' is dropped.

#
Channel
Diagnostic

Description

NBL Operation miniport NIC 'MiniportName' is dropped. Reason: DropReason. Status - Status.

Message #

NBL %2 miniport NIC '%5' is dropped. Reason: %3. Status - %1.

Fields #

NameDescription
Status UInt32NTSTATUS reference
Operation UInt32
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
DropReason UInt32
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 17: Failed to send packet at the microport.

#
Channel
Diagnostic

Description

Failed to send packet at the microport. Reason: DropReason. Status - Status.

Message #

Failed to send packet at the microport. Reason: %2. Status - %1.

Fields #

NameDescription
Status UInt32NTSTATUS reference
DropReason UInt32

Event ID 18: NBL Pointer CorrelationID CorrelationId on IfIndex IfIndex direction Direction dropped reason DropReason status Status.

#
Channel
Diagnostic

Message #

NBL %4 CorrelationID %5 on IfIndex %6 direction %2 dropped reason %3 status %1

Fields #

NameDescription
Status UInt32NTSTATUS reference
Direction UInt32
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
DropReason UInt32
Pointer Pointer
CorrelationId UInt64
IfIndex UInt32

Event ID 19: NBL Pointer CorrelationID CorrelationId on IfIndex IfIndex direction Direction Synthetic.

#
Channel
Diagnostic

Message #

NBL %2 CorrelationID %3 on IfIndex %4 direction %1 Synthetic

Fields #

NameDescription
Direction UInt32
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Pointer Pointer
CorrelationId UInt64
IfIndex UInt32

Event ID 20: NBL Pointer CorrelationID CorrelationId on IfIndex IfIndex direction Direction VF.

#
Channel
Diagnostic

Message #

NBL %2 CorrelationID %3 on IfIndex %4 direction %1 VF

Fields #

NameDescription
Direction UInt32
Known values
%%14592
Inbound
%%14593
Outbound
%%14594
Forward
%%14595
Bidirectional
Pointer Pointer
CorrelationId UInt64
IfIndex UInt32

Event ID 21: SFA cleanup succeeded.

#
Channel
System

Event ID 22: SFA GetMeterData succeeded.

#
Channel
System

Description

SFA GetMeterData succeeded. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: {RuleId} Flags: {Flags}.

Message #

SFA GetMeterData succeeded. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: {RuleId} Flags: {Flags}.

Fields #

NameDescription
ClientContext
ContextId
RuleId
Flags

Event ID 23: SFA RemoveRule succeeded.

#
Channel
System

Description

SFA RemoveRule succeeded. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: {RuleId}.

Message #

SFA RemoveRule succeeded. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: {RuleId}.

Fields #

NameDescription
ClientContext
ContextId
RuleId

Event ID 24: SFA AddRule succeeded.

#
Channel
System

Description

SFA AddRule succeeded. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: {RuleId} ForwardToPortId: {ForwardToPortId}.

Message #

SFA AddRule succeeded. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: {RuleId} ForwardToPortId: {ForwardToPortId}.

Fields #

NameDescription
ClientContext
ContextId
RuleId
ForwardToPortId

Event ID 25: SFA DeleteContext succeeded.

#
Channel
System

Description

SFA DeleteContext succeeded. ClientContext: {ClientContext} ContextId: {ContextId} LastContext: {LastContext}.

Message #

SFA DeleteContext succeeded. ClientContext: {ClientContext} ContextId: {ContextId} LastContext: {LastContext}.

Fields #

NameDescription
ClientContext
ContextId
LastContext

Event ID 26: SFA CreateContext succeeded.

#
Channel
System

Description

SFA CreateContext succeeded. ClientContext: {ClientContext} ContextId: {ContextId}.

Message #

SFA CreateContext succeeded. ClientContext: {ClientContext} ContextId: {ContextId}.

Fields #

NameDescription
ClientContext
ContextId

Event ID 27: SFA StatusChangedNotification SfaEnabled: {SfaEnabled} ClientContext: {ClientContext}.

#
Channel
System

Fields #

NameDescription
SfaEnabled
ClientContext

Event ID 28: SFA register optional handler succeeded.

#
Channel
System

Event ID 29: SFA GetMeterData failed.

#
Channel
System

Description

SFA GetMeterData failed. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: {RuleId} Flags: {Flags} FailureReason: {FailureReason} MsgStatus: {MsgStatus}.

Message #

SFA GetMeterData failed. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: {RuleId} Flags: {Flags} FailureReason: {FailureReason} MsgStatus: {MsgStatus}.

Fields #

NameDescription
ClientContext
ContextId
RuleId
Flags
FailureReason
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
MsgStatus

Event ID 30: SFA RemoveRule failed.

#
Channel
System

Description

SFA RemoveRule failed. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: FailureReason: {FailureReason} MsgStatus: {MsgStatus}.

Message #

SFA RemoveRule failed. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: FailureReason: {FailureReason} MsgStatus: {MsgStatus}.

Fields #

NameDescription
ClientContext
ContextId
FailureReason
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
MsgStatus

Event ID 31: SFA AddRule failed.

#
Channel
System

Description

SFA AddRule failed. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: {RuleId} ForwardToPortId: {ForwardToPortId} FailureReason: {FailureReason} MsgStatus: {MsgStatus}.

Message #

SFA AddRule failed. ClientContext: {ClientContext} ContextId: {ContextId} RuleId: {RuleId} ForwardToPortId: {ForwardToPortId} FailureReason: {FailureReason} MsgStatus: {MsgStatus}.

Fields #

NameDescription
ClientContext
ContextId
RuleId
ForwardToPortId
FailureReason
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
MsgStatus

Event ID 32: SFA DeleteContext failed.

#
Channel
System

Description

SFA DeleteContext failed. ClientContext: {ClientContext} ContextId: {ContextId} LastContext: {LastContext} FailureReason: {FailureReason} MsgStatus: {MsgStatus}.

Message #

SFA DeleteContext failed. ClientContext: {ClientContext} ContextId: {ContextId} LastContext: {LastContext} FailureReason: {FailureReason} MsgStatus: {MsgStatus}.

Fields #

NameDescription
ClientContext
ContextId
LastContext
FailureReason
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
MsgStatus

Event ID 33: SFA CreateContext failed.

#
Channel
System

Description

SFA CreateContext failed. ClientContext: {ClientContext} ContextId: {ContextId} FailureReason: {FailureReason} MsgStatus: {MsgStatus}.

Message #

SFA CreateContext failed. ClientContext: {ClientContext}  ContextId: {ContextId} FailureReason: {FailureReason} MsgStatus: {MsgStatus}.

Fields #

NameDescription
ClientContext
ContextId
FailureReason
Known values
%%2304
An Error occured during Logon.
%%2305
The specified user account has expired.
%%2306
The NetLogon component is not active.
%%2307
Account locked out.
%%2308
The user has not been granted the requested logon type at this machine.
%%2309
The specified account's password has expired.
%%2310
Account currently disabled.
%%2311
Account logon time restriction violation.
%%2312
User not allowed to logon at this computer.
%%2313
Unknown user name or bad password.
%%2314
Domain sid inconsistent.
%%2315
Smartcard logon is required and was not used.
MsgStatus

Event ID 34: PD initialization succeeded.

#
Channel
System
Task
PdApi

Fields #

NameDescription
ClientContext Pointer

Event ID 35: PD initialization failed.

#
Channel
System
Task
PdApi

Fields #

NameDescription
Status UInt32NTSTATUS reference
ClientContext Pointer

Event ID 36: PD cleanup succeeded.

#
Channel
System
Task
PdApi

Fields #

NameDescription
ClientContext Pointer

Event ID 37: Open NDK adapter failed on Miniport 'MiniportName'.

#
Channel
System
Task
NdkOpenAdapter

Description

Open NDK adapter failed on Miniport 'MiniportName'. FailureReason: failureReason Status: Status.

Message #

Open NDK adapter failed on Miniport '%4'. FailureReason: %2 Status: %1.

Fields #

NameDescription
Status UInt32NTSTATUS reference
failureReason UInt32
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 38: NDK PnP event failed.

#
Channel
System
Task
NdkPnPEvent

Description

NDK PnP event failed. PnPEvent: NDK_PnP_event_failed_PnPEvent Miniport: 'MiniportNameLen' FailureReason: NetEvent Status: Status.

Message #

NDK PnP event failed. PnPEvent: %2 Miniport: '%5' FailureReason: %3 Status: %1.

Fields #

NameDescription
Status UInt32NTSTATUS reference
NetEvent UInt32
failureReason UInt32
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 39: VF adapter bind failed.

#
Channel
System
Task
VfBindAdapter

Description

VF adapter bind failed. FailureReason: VF_adapter_bind_failed_FailureReason MsgStatus: MsgStatus.

Message #

VF adapter bind failed. FailureReason: %2 MsgStatus: %1.

Fields #

NameDescription
Status UInt32NTSTATUS reference
failureReason UInt32
VfSerialNumber UInt32
LowestIfIndex UInt32
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 40: Task, Task, failed because of low memory.

#
Channel
System

Description

Task, Task, failed because of low memory. MemoryRequired bytes of memory was required.

Message #

Task, %1, failed because of low memory. %2 bytes of memory was required

Fields #

NameDescription
Task UInt32
MemoryRequired UInt32

Event ID 41: Sending Interface Index (IfIndex IfIndex)of RNDIS miniport 'MiniportName' to VF adapter 'VfAdapterName' succeeded.

#
Channel
System

Message #

Sending Interface Index (IfIndex %3)of RNDIS miniport '%5' to VF adapter '%7' succeeded.

Fields #

NameDescription
Status UInt32NTSTATUS reference
RequestHandled Boolean
IfIndex UInt32
MiniportNameLen UInt32
MiniportName UnicodeString
VfAdapterNameLen UInt32
VfAdapterName UnicodeString

Event ID 42: Sending Interface Index (IfIndex IfIndex)of RNDIS miniport 'MiniportName' to VF adapter 'VfAdapterName' failed.

#
Channel
System

Description

Sending Interface Index (IfIndex IfIndex)of RNDIS miniport 'MiniportName' to VF adapter 'VfAdapterName' failed. Status = Status. RequestHandled = RequestHandled. RDMA cannot be enabled on the adapter.

Message #

Sending Interface Index (IfIndex %3)of RNDIS miniport '%5' to VF adapter '%7' failed. Status = %1. RequestHandled = %2. RDMA cannot be enabled on the adapter

Fields #

NameDescription
Status UInt32NTSTATUS reference
RequestHandled Boolean
IfIndex UInt32
MiniportNameLen UInt32
MiniportName UnicodeString
VfAdapterNameLen UInt32
VfAdapterName UnicodeString

Event ID 43: NDK PnP event succeeded.

#
Channel
System

Description

NDK PnP event succeeded. PnPEvent: Status Miniport: 'MiniportNameLen'.

Message #

NDK PnP event succeeded. PnPEvent: %2 Miniport: '%5'

Fields #

NameDescription
Status UInt32NTSTATUS reference
NetEvent UInt32
failureReason UInt32
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 44: Miniport 'MiniportName' reported NDK capabilities.

#
Channel
System

Description

Miniport 'MiniportName' reported NDK capabilities. Operation NDK enabled - NdkEnabled.

Message #

Miniport '%4' reported NDK capabilities. Operation NDK enabled - %2.

Fields #

NameDescription
Status UInt32NTSTATUS reference
NdkEnabled Boolean
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 45: Miniport 'MiniportName' failed to report NDK capabilities.

#
Channel
System

Description

Miniport 'MiniportName' failed to report NDK capabilities. Operation NDK enabled - NdkEnabled.

Message #

Miniport '%4' failed to report NDK capabilities. Operation NDK enabled - %2.

Fields #

NameDescription
Status UInt32NTSTATUS reference
NdkEnabled Boolean
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 46: VF adapter 'VfAdapterName' did not report NDK capabilities.

#
Channel
System

Message #

VF adapter '%2' did not report NDK capabilities.

Fields #

NameDescription
VfAdapterNameLen UInt32
VfAdapterName UnicodeString

Event ID 47: VF adapter 'VfAdapterName' reported NDK capabilities in enabled operational state.

#
Channel
System

Message #

VF adapter '%2' reported NDK capabilities in enabled operational state.

Fields #

NameDescription
VfAdapterNameLen UInt32
VfAdapterName UnicodeString

Event ID 48: VF adapter 'VfAdapterName' reported NDK capabilities in disabled operational state.

#
Channel
System

Message #

VF adapter '%2' reported NDK capabilities in disabled operational state.

Fields #

NameDescription
VfAdapterNameLen UInt32
VfAdapterName UnicodeString

Event ID 49: A VF connection failed due to isolated VM restriction.

#
Channel
System

Description

A VF connection failed due to isolated VM restriction. Status: Status.

Message #

A VF connection failed due to isolated VM restriction. Status: %1

Fields #

NameDescription
Status UInt32NTSTATUS reference

Event ID 50: Successfully bind NetVsc to VfAdapter (MiniportName) with VfSerialNumber (VfSerialNumber) LowestIfIndex (LowestIfIndex) NdkState (NdkState).

#
Channel
System
Task
VfBindAdapter

Message #

Successfully bind NetVsc to VfAdapter (%5) with VfSerialNumber (%1) LowestIfIndex (%2) NdkState (%3)

Fields #

NameDescription
VfSerialNumber UInt32
LowestIfIndex UInt32
NdkState UInt32
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 51: Failed NetVsc VF association with VfSerialNumber (VfSerialNumber) FailureReason (failureReason) Status (Status).

#
Channel
System

Message #

Failed NetVsc VF association with VfSerialNumber (%2) FailureReason (%3) Status (%1)

Fields #

NameDescription
Status UInt32NTSTATUS reference
VfSerialNumber UInt32
failureReason UInt32

Event ID 52: Successfully NetVsc (VfAdapterName) VF association with VfSerialNumber (VfSerialNumber).

#
Channel
System

Message #

Successfully NetVsc (%3) VF association with VfSerialNumber (%1)

Fields #

NameDescription
VfSerialNumber UInt32
VfAdapterNameLen UInt32
VfAdapterName UnicodeString

Event ID 53: Failed NetVsc (VfAdapterName) send VmBus Packet to Host for Data Path Switch with VM Active (VmDataPathActive) VfAdapter (MiniportName) VfSerialNumber (VfSerialNumber) Status (Status).

#
Channel
System

Message #

Failed NetVsc (%5) send VmBus Packet to Host for Data Path Switch with VM Active (%3) VfAdapter (%7) VfSerialNumber (%2) Status (%1)

Fields #

NameDescription
Status UInt32NTSTATUS reference
VfSerialNumber UInt32
VmDataPathActive UInt8
VfAdapterNameLen UInt32
VfAdapterName UnicodeString
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 54: Successfully NetVsc (VfAdapterName) send VmBus Packet to Host for Data Path Switch with VM Active (VmDataPathActive) VfAdapter (MiniportName) VfSerialNumber (VfSerialNumber).

#
Channel
System

Message #

Successfully NetVsc (%4) send VmBus Packet to Host for Data Path Switch with VM Active (%2) VfAdapter (%6) VfSerialNumber (%1)

Fields #

NameDescription
VfSerialNumber UInt32
VmDataPathActive UInt8
VfAdapterNameLen UInt32
VfAdapterName UnicodeString
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 55: Failed NetVsc VF deassociation with VfSerialNumber (VfSerialNumber) Status (Status).

#
Channel
System

Message #

Failed NetVsc VF deassociation with VfSerialNumber (%2) Status (%1)

Fields #

NameDescription
Status UInt32NTSTATUS reference
VfSerialNumber UInt32

Event ID 56: Successfully NetVsc (VfAdapterName) VF deassociation with VfSerialNumber (VfSerialNumber).

#
Channel
System

Message #

Successfully NetVsc (%3) VF deassociation with VfSerialNumber (%1)

Fields #

NameDescription
VfSerialNumber UInt32
VfAdapterNameLen UInt32
VfAdapterName UnicodeString

Event ID 57: Failed VF adapter (MiniportName) unbind with VfSerialNumber (VfSerialNumber) LowestIfIndex (LowestIfIndex) Status (Status).

#
Channel
System

Message #

Failed VF adapter (%5) unbind with VfSerialNumber (%2) LowestIfIndex (%3) Status (%1)

Fields #

NameDescription
Status UInt32NTSTATUS reference
VfSerialNumber UInt32
LowestIfIndex UInt32
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 58: Successfully VF adapter (MiniportName) unbind with VfSerialNumber (VfSerialNumber) LowestIfIndex (LowestIfIndex).

#
Channel
System

Message #

Successfully VF adapter (%4) unbind with VfSerialNumber (%1) LowestIfIndex (%2)

Fields #

NameDescription
VfSerialNumber UInt32
LowestIfIndex UInt32
MiniportNameLen UInt32
MiniportName UnicodeString

Event ID 59: Successfully sent status indication for VF adapter MiniportName (Serial number: VfSerialNumber) VF associated=VfAssociated, Datapath active=VfDatapathActive, VF MAC address: VfMacAddress.

#
Channel
System

Message #

Successfully sent status indication for VF adapter %1 (Serial number: %2) VF associated=%3, Datapath active=%4, VF MAC address: %5

Fields #

NameDescription
MiniportName UnicodeString
VfSerialNumber UInt32
VfAssociated Boolean
VfDatapathActive Boolean
VfMacAddress Binary

Event ID 60: Failed to change datapath for VF with MAC address VfMacAddress, requested VF datapath state: VfDatapathActive.

#
Channel
System

Description

Failed to change datapath for VF with MAC address VfMacAddress, requested VF datapath state: VfDatapathActive. Failure reason: wrong MAC address in the request: RequestMacAddress, Status: Status.

Message #

Failed to change datapath for VF with MAC address %1, requested VF datapath state: %2. Failure reason: wrong MAC address in the request: %3,  Status: %4

Fields #

NameDescription
VfMacAddress Binary
VfDatapathActive Boolean
RequestMacAddress Binary
Status UInt32NTSTATUS reference

Event ID 61: Netvsc IOCTL failed, IOCTL code: IoctlControlCode, Status: Status.

#
Channel
System

Message #

Netvsc IOCTL failed, IOCTL code: %1, Status: %2

Fields #

NameDescription
IoctlControlCode UInt32
Status UInt32NTSTATUS reference

Event ID 62: Netvsc IOCTL succeeded, IOCTL code: IoControlCode.

#
Channel
System

Message #

Netvsc IOCTL succeeded, IOCTL code: %1

Fields #

NameDescription
IoControlCode UInt32

Event ID 63: ManagementVfListIoctl(opcode: IoControlCode, version: IoctlVersion) completed with status: Status.

#
Channel
System

Description

ManagementVfListIoctl(opcode: IoControlCode, version: IoctlVersion) completed with status: Status. Number of management VFs: IoctlInputElementCount.

Message #

ManagementVfListIoctl(opcode: %1, version: %2) completed with status: %3. Number of management VFs: %4

Fields #

NameDescription
IoControlCode UInt32
IoctlVersion UInt32
Status UInt32NTSTATUS reference
IoctlInputElementCount UInt32

Event ID 64: Failed to register control device for NetVSC!

#
Channel
System

Description

Failed to register control device for NetVSC! Driver object: Pointer, status: Status.

Message #

Failed to register control device for NetVSC! Driver object: %1, status: %2

Fields #

NameDescription
Pointer Pointer
Status UInt32NTSTATUS reference

Event ID 65: The NetVSC driver object block was not found in RNDISMP list or its signature is invalid.

#
Channel
System

Description

The NetVSC driver object block was not found in RNDISMP list or its signature is invalid. Miniport driver handle: Pointer, status: Status.

Message #

The NetVSC driver object block was not found in RNDISMP list or its signature is invalid. Miniport driver handle: %1, status: %2

Fields #

NameDescription
Pointer Pointer
Status UInt32NTSTATUS reference

Event ID 66: Ioctl IoctlCode completed with status: Status.

#
Channel
System

Message #

Ioctl %1 completed with status: %2

Fields #

NameDescription
IoctlCode UInt32
Status UInt32NTSTATUS reference

Event ID 67: Loading of the PCIP driver for reassignable VF with MAC address: VfMacAddress completed with status: Status.

#
Channel
System

Message #

Loading of the PCIP driver for reassignable VF with MAC address: %1 completed with status: %2

Fields #

NameDescription
VfMacAddress Binary
Status UInt32NTSTATUS reference

Event ID 68: Loading of the PCIP driver for reassignable VF with MAC address: VfMacAddress failed with status: Status.

#
Channel
System

Message #

Loading of the PCIP driver for reassignable VF with MAC address: %1 failed with status: %2

Fields #

NameDescription
VfMacAddress Binary
Status UInt32NTSTATUS reference

Event ID 69: Failed to retrieve the VF location path, status: Status.

#
Channel
System

Message #

Failed to retrieve the VF location path, status: %1

Fields #

NameDescription
Status UInt32NTSTATUS reference

Event ID 70: Successfully retrieved VF location path: VfLocationPath, status: Status.

#
Channel
System

Message #

Successfully retrieved VF location path: %1, status: %2

Fields #

NameDescription
VfLocationPath UnicodeString
Status UInt32NTSTATUS reference

Event ID 71: Unloading PCIP driver for reassignable VF with MAC address: VfMacAddress completed with status: Status.

#
Channel
System

Message #

Unloading PCIP driver for reassignable VF with MAC address: %1 completed with status: %2

Fields #

NameDescription
VfMacAddress Binary
Status UInt32NTSTATUS reference

Event ID 72: Unloading the PCIP driver for reassignable VF with MAC address: VfMacAddress failed with status: Status.

#
Channel
System

Message #

Unloading the PCIP driver for reassignable VF with MAC address: %1 failed with status: %2

Fields #

NameDescription
VfMacAddress Binary
Status UInt32NTSTATUS reference

Event ID 73: The list of management VFs was successfully updated and all the VF status changes are completed, status: Status.

#
Channel
System

Message #

The list of management VFs was successfully updated and all the VF status changes are completed, status: %1

Fields #

NameDescription
Status UInt32NTSTATUS reference

Event ID 74: Failure during updating the management VF list, status: Status, uniqueEventValue: UniqueEventValue.

#
Channel
System

Message #

Failure during updating the management VF list, status: %1, uniqueEventValue: %2

Fields #

NameDescription
Status UInt32NTSTATUS reference
UniqueEventValue UInt32

Provenance

ETW provider GUID 152fbe4b-c7ad-4f68-bada-a4fcc1464f6c

Defined in netvsc.sys, the binary that emits these events.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB