Microsoft-Windows-NWiFi

117 events across 1 channel

Event	Title	Channel	Sample
10000	OID_DOT11_RESET_REQUEST Complete Status ResetConfirmStatus=ResetStatus.	Diagnostic	N
10001	IOCTL function=Function Status=Status Length=Length bytes.	Diagnostic	N
10002	Reject Scan Request: AdapterGuid.	Diagnostic	N
10003	IOCTL_DOT11_WEP_DEFAULT_KEY_VALUE: There is no association	Diagnostic	N
10004	Unsupported Mcast cipher algorithm AlgorithmId.	Diagnostic	N
10005	Desired SSID List SSIDCount entries.	Diagnostic	N
10006	SetDesiredSSIDList failed, status = Status.	Diagnostic	N
10007	Set DesiredBSSType: AdapterGuid.	Diagnostic	N
10008	Desired BSSID List BSSIDCount entries.	Diagnostic	N
10009	Enabled AuthList AuthCount entries.	Diagnostic	N
10010	Set ExcludeUnencrypted (Value): Status.	Diagnostic	N
10011	Set HiddenNetworkEnabled (Value): Status.	Diagnostic	N
10012	Drop cached M1: there is a pending 802.	Diagnostic	N
10013	Replay detected (our counter ExpectedCounter, received ReceivedCounter), …	Diagnostic	N
10014	Version number ExpectedVer not supported, Expecting ReceivedVer.	Diagnostic	N
10015	Receive 1X packet G1: FrameSeq# FrameSequence: SrcMAC ==> DestMAC.	Diagnostic	N
10016	Receive 1X packet M1 (4 way handshake rekey - secure bit set): FrameSeq# …	Diagnostic	N
10017	Receive 1X packet M1: FrameSeq# FrameSequence: SrcMAC ==> DestMAC.	Diagnostic	N
10018	Receive 1X packet M3: FrameSeq# FrameSequence: SrcMAC ==> DestMAC.	Diagnostic	N
10019	Send 1X packet G2: AdapterGuid ==> SrcMAC.	Diagnostic	N
10020	Dot11ReceiveM1: aborted since the connection has changed	Diagnostic	N
10021	Send 1X packet M2: AdapterGuid ==> SrcMAC.	Diagnostic	N
10022	Dot11ReceiveM1 failed with status Status.	Diagnostic	N
10023	Dot11ReceiveM3 failed with status Status.	Diagnostic	N
10024	Dot11ReceiveM3: aborted since the connection has changed	Diagnostic	N
10025	Send 1X packet M4: AdapterGuid ==> SrcMAC.	Diagnostic	N
10026	Reject request of setting PMK since the caller is not current security endpoint	Diagnostic	N
10027	Receive 1X packet: FrameSeq#FrameSequence: SrcMAC ==> DestMAC, Status Status.	Diagnostic	N
10028	Send 1X packet: AdapterGuid ==> SrcMAC.	Diagnostic	N
10029	Abort OID request OID (low power state): PowerState=PowerState, …	Diagnostic	N
10030	QueryAdapterSync Error: OID OID Adapter.	Diagnostic	N
10031	RequestAdapterSync Error: OID OID Adapter.	Diagnostic	N
10032	CallAdapterSync Error: OID OID Adapter.	Diagnostic	N
10033	All MIC failure reports are sent.	Diagnostic	N
10034	Security endpoint type = EndPointType.	Diagnostic	N
10035	IHV Serialization Enabled: AdapterGuid.	Diagnostic	N
10036	Safe mode = Enabled.	Diagnostic	N
10037	Reset ResetType New MAC address MAC SetDefaultMIB=DefaultMIB.	Diagnostic	N
10038	Reset ResetType SetDefaultMIB=DefaultMIB.	Diagnostic	N
10039	Reject Reset Request: AdapterGuid.	Diagnostic	N
10040	Association Start: AdapterGuid.	Diagnostic	N
10041	Association Completion: AdapterGuid AssocStatus=MAC.	Diagnostic	N
10042	DisAssoc: ContextHandle Reason: AdapterGuid.	Diagnostic	N
10043	Defer roaming timer until system wakeup	Diagnostic	N
10044	Mismatched session ID	Diagnostic	N
10045	PortState: Auth Failed: SessionId.	Diagnostic	N
10046	SetPortState: SessionId: Controlled=MAC Authorized=Controlled.	Diagnostic	N
10047	Post Virtual PortDown Notification (MAC=MAC) to Security Module.	Diagnostic	N
10048	Unable to set OID_DOT11_PRIVACY_EXEMPTION_LIST Status = Status.	Diagnostic	N
10049	Cancel IOCTL_DOT11_CONNECT	Diagnostic	N
10050	OID_DOT11_CONNECT_REQUEST completes Status.	Diagnostic	N
10051	Fail Connect Request: Radio is off	Diagnostic	N
10052	Fail Connect Request in low power state: PowerState.	Diagnostic	N
10053	IOCTL_DOT11_CONNECT	Diagnostic	N
10054	IOCTL_DOT11_DISCONNECT	Diagnostic	N
10055	OID_DOT11_DISCONNECT_REQUEST Status = Status.	Diagnostic	N
10056	OID_DOT11_NIC_POWER_STATE Status = Status.	Diagnostic	N
10057	Old PowerState=OldPowerState, New PowerState=NewPowerState.	Diagnostic	N
10058	Change OpMode Failed: Capability is not supported (Configured = …	Diagnostic	N
10059	Terminate the connection: too many TKIP-MIC countermeasures.	Diagnostic	N
10060	Pairwise Key (Addr): Algo CipherAlgoId, Direction= Direction, Len Len.	Diagnostic	N
10061	Group (Default) Key: Idx Index, Algo CipherAlgoId, Direction= Direction, Len …	Diagnostic	N
10062	Connection Started	Diagnostic	N
10063	Connection Completion Status=Status.	Diagnostic	N
10064	OID_DOT11_NIC_POWER_STATE Request	Diagnostic	N
10066	802.	Diagnostic	N
10067	802.	Diagnostic	N
10068	802.	Diagnostic	N
10069	802.	Diagnostic	N
10070	802.	Diagnostic	N
10071	802.	Diagnostic	N
10072	Results of querying power management mode: current power management mode = …	Diagnostic	N
10073	Adapter going to sleep, adapter guid = AdapterGuid, new …	Diagnostic	N
10074	Adapter resumed from sleep, adapter guid = AdapterGuid.	Diagnostic	N
10075	Direct OID Request Pending: Request=ContextHandle Adapter=AdapterGuid.	Diagnostic	N
10076	Pending Direct OID Request Complete: Request=ContextHandle Adapter=AdapterGuid …	Diagnostic	N
10077	Diagnostic Statistics Difference Adapter Guid RxUnicastCount TxUnicastCount: …	Diagnostic	N
10078	[WiFiDs] Deferred PortDown Notification: Adapter Guid: AdapterGuid, SessionId: …	Diagnostic	N
10079	[WiFiDs] Disconnected standby is enabled: Adapter Guid: AdapterGuid, …	Diagnostic	N
10080	[WiFiDs] Creating deferred PortDown notification: Adapter Guid: AdapterGuid, …	Diagnostic	N
10081	[WiFiDs] Indicating MediaDisconnect on sleep: Adapter Guid: AdapterGuid.	Diagnostic	N
10082	[WiFiDs] Waking from DisconnectedStandby: Adapter Guid: AdapterGuid.	Diagnostic	N
10083	[WiFiDs] Terminating connection since diassoc didn't occur on sleep: Adapter …	Diagnostic	N
10084	[Nwf] [Status]: Nwf_Status: Status = StatusAnnotation , Context1 = Status.	Diagnostic	N
10085	[SAE] FinalState: SAEStatus=.	Diagnostic	N
10086	[DumpBuff] BufferAnnotation (BufferLength bytes).	Diagnostic	N
10087	LogLine.	Diagnostic	N
10088	[SAE] CommitFrameError: Size=CommitFrameSize ?	Diagnostic	N
10089	[SAE] [SAE-Fail]: Status = Status , Context1 = Context1.	Diagnostic	N
10090	[WorkerRequestHandler]: WorkerRequestHandler Context1 = StatusAnnotation, …	Diagnostic	N
10091	*** NwifiNblSendCompletion ERROR - pNwifiNbl is corrupted - pNwifiNbl= …	Diagnostic	N
10092	*** OriginalNblSendCompletion ERROR - pOriginalNBL is currupted - RefCount is 0 …	Diagnostic	N
20000	Resume from low power 1	Diagnostic	N
20001	Resume from low power 2	Diagnostic	N
20002	Port authorized 1	Diagnostic	N
20003	Port authorized 2	Diagnostic	N
20004	Resume from low power (End trailing scenario) 1	Diagnostic	N
20005	Resume from low power (End trailing scenario) 2	Diagnostic	N
20006	Resume from low power 3	Diagnostic	N
20007	Resume from low power 4	Diagnostic	N
20008	Port authorized 3	Diagnostic	N
20009	Resume from low power (End trailing scenario) 3	Diagnostic	N
20010	Resume from low power (End trailing scenario) 4	Diagnostic	N
20011	Resume from low power 5	Diagnostic	N
20012	Resume from low power 6	Diagnostic	N
20013	Resume from low power (End trailing scenario) 5	Diagnostic	N
20014	Resume from low power (End trailing scenario) 6	Diagnostic	N
20015	Port authorized 4	Diagnostic	N
20016	Resume Reconnect to Same/Different netwkr scenario	Diagnostic	N
20017	Connect to same network on resume	Diagnostic	N
60001	Error: Error Location: Location Context: Context.	Diagnostic	N
60002	Warning: Warning Location: Location Context: Context.	Diagnostic	N
60003	Transitioned to State: NextState Context: Context.	Diagnostic	N
60004	Updated Context: Updated_Context Update Reason: Update_Reason.	Diagnostic	N
60101	SourceAddress: SourceAddress SourcePort: SourcePort DestinationAddress: …	Diagnostic	N
60102	SourceAddress: SourceAddress SourcePort: SourcePort DestinationAddress: …	Diagnostic	N
60103	Interface Guid: Interface_Guid IfIndex: IfIndex Interface Luid: Interface_Luid …	Diagnostic	N

Event ID 10000: OID_DOT11_RESET_REQUEST Complete Status ResetConfirmStatus=ResetStatus.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

OID_DOT11_RESET_REQUEST Complete Status ResetConfirmStatus=ResetStatus.

Message #

OID_DOT11_RESET_REQUEST Complete %3 ResetConfirmStatus=%4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference
`ResetStatus` UInt32

Event ID 10001: IOCTL function=Function Status=Status Length=Length bytes.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

IOCTL function=Function Status=Status Length=Length bytes.

Message #

IOCTL function=%3 Status=%4 Length=%5 bytes

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Function` UInt32
`Status` UInt32	NTSTATUS reference
`Length` UInt32

Event ID 10002: Reject Scan Request: AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Reject Scan Request: AdapterGuid.

Message #

Reject Scan Request: %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10003: IOCTL_DOT11_WEP_DEFAULT_KEY_VALUE: There is no association

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

IOCTL_DOT11_WEP_DEFAULT_KEY_VALUE: There is no association.

Message #

IOCTL_DOT11_WEP_DEFAULT_KEY_VALUE: There is no association

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10004: Unsupported Mcast cipher algorithm AlgorithmId.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Unsupported Mcast cipher algorithm AlgorithmId.

Message #

Unsupported Mcast cipher algorithm %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`AlgorithmId` UInt32

Event ID 10005: Desired SSID List SSIDCount entries.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Desired SSID List SSIDCount entries.

Message #

Desired SSID List %3 entries

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`SSIDCount` UInt32
`SSIDList` UInt8

Event ID 10006: SetDesiredSSIDList failed, status = Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

SetDesiredSSIDList failed, status = Status.

Message #

SetDesiredSSIDList failed, status = %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10007: Set DesiredBSSType: AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Set DesiredBSSType: AdapterGuid.

Message #

Set DesiredBSSType: %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`BSSType` UInt32

Event ID 10008: Desired BSSID List BSSIDCount entries.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Desired BSSID List BSSIDCount entries.

Message #

Desired BSSID List %3 entries

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`BSSIDCount` UInt32
`BSSIDList` Binary

Event ID 10009: Enabled AuthList AuthCount entries.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Enabled AuthList AuthCount entries.

Message #

Enabled AuthList %3 entries

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`AuthCount` UInt32
`AuthAlgorithm` UInt32

Event ID 10010: Set ExcludeUnencrypted (Value): Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Set ExcludeUnencrypted (Value): Status.

Message #

Set ExcludeUnencrypted (%3): %4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Value` Boolean
`Status` UInt32	NTSTATUS reference

Event ID 10011: Set HiddenNetworkEnabled (Value): Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Set HiddenNetworkEnabled (Value): Status.

Message #

Set HiddenNetworkEnabled (%3): %4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Value` Boolean
`Status` UInt32	NTSTATUS reference

Event ID 10012: Drop cached M1: there is a pending 802.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Drop cached M1: there is a pending 802.1x exchange.

Message #

Drop cached M1: there is a pending 802.1x exchange

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID

Event ID 10013: Replay detected (our counter ExpectedCounter, received ReceivedCounter), dropping the packet.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Replay detected (our counter ExpectedCounter, received ReceivedCounter), dropping the packet.

Message #

Replay detected (our counter %3, received %4), dropping the packet

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`ExpectedCounter` UInt64
`ReceivedCounter` UInt64

Event ID 10014: Version number ExpectedVer not supported, Expecting ReceivedVer.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Version number ExpectedVer not supported, Expecting ReceivedVer.

Message #

Version number %3 not supported, Expecting %4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`ExpectedVer` UInt32
`ReceivedVer` UInt32

Event ID 10015: Receive 1X packet G1: FrameSeq# FrameSequence: SrcMAC ==> DestMAC.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Receive 1X packet G1: FrameSeq# FrameSequence: SrcMAC ==> DestMAC.

Message #

Receive 1X packet G1: FrameSeq# %3: %4 ==> %5

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`FrameSequence` UInt32
`SrcMAC` Binary
`DestMAC` Binary

Event ID 10016: Receive 1X packet M1 (4 way handshake rekey - secure bit set): FrameSeq# FrameSequence: SrcMAC ==> DestMAC.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Receive 1X packet M1 (4 way handshake rekey - secure bit set): FrameSeq# FrameSequence: SrcMAC ==> DestMAC.

Message #

Receive 1X packet M1 (4 way handshake rekey - secure bit set): FrameSeq# %3: %4 ==> %5

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`FrameSequence` UInt32
`SrcMAC` Binary
`DestMAC` Binary

Event ID 10017: Receive 1X packet M1: FrameSeq# FrameSequence: SrcMAC ==> DestMAC.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Receive 1X packet M1: FrameSeq# FrameSequence: SrcMAC ==> DestMAC.

Message #

Receive 1X packet M1: FrameSeq# %3: %4 ==> %5

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`FrameSequence` UInt32
`SrcMAC` Binary
`DestMAC` Binary

Event ID 10018: Receive 1X packet M3: FrameSeq# FrameSequence: SrcMAC ==> DestMAC.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Receive 1X packet M3: FrameSeq# FrameSequence: SrcMAC ==> DestMAC.

Message #

Receive 1X packet M3: FrameSeq# %3: %4 ==> %5

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`FrameSequence` UInt32
`SrcMAC` Binary
`DestMAC` Binary

Event ID 10019: Send 1X packet G2: AdapterGuid ==> SrcMAC.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Send 1X packet G2: AdapterGuid ==> SrcMAC.

Message #

Send 1X packet G2: %3 ==> %4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`SrcMAC` Binary
`DestMAC` Binary

Event ID 10020: Dot11ReceiveM1: aborted since the connection has changed

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Dot11ReceiveM1: aborted since the connection has changed.

Message #

Dot11ReceiveM1: aborted since the connection has changed

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID

Event ID 10021: Send 1X packet M2: AdapterGuid ==> SrcMAC.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Send 1X packet M2: AdapterGuid ==> SrcMAC.

Message #

Send 1X packet M2: %3 ==> %4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`SrcMAC` Binary
`DestMAC` Binary

Event ID 10022: Dot11ReceiveM1 failed with status Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Dot11ReceiveM1 failed with status Status.

Message #

Dot11ReceiveM1 failed with status %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10023: Dot11ReceiveM3 failed with status Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Dot11ReceiveM3 failed with status Status.

Message #

Dot11ReceiveM3 failed with status %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10024: Dot11ReceiveM3: aborted since the connection has changed

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Dot11ReceiveM3: aborted since the connection has changed.

Message #

Dot11ReceiveM3: aborted since the connection has changed

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID

Event ID 10025: Send 1X packet M4: AdapterGuid ==> SrcMAC.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Send 1X packet M4: AdapterGuid ==> SrcMAC.

Message #

Send 1X packet M4: %3 ==> %4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`SrcMAC` Binary
`DestMAC` Binary

Event ID 10026: Reject request of setting PMK since the caller is not current security endpoint

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Reject request of setting PMK since the caller is not current security endpoint.

Message #

Reject request of setting PMK since the caller is not current security endpoint

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10027: Receive 1X packet: FrameSeq#FrameSequence: SrcMAC ==> DestMAC, Status Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Receive 1X packet: FrameSeq#FrameSequence: SrcMAC ==> DestMAC, Status Status.

Message #

Receive 1X packet: FrameSeq#%1: %2 ==> %3, Status %4

Fields #

Name	Description
`FrameSequence` UInt32
`SrcMAC` Binary
`DestMAC` Binary
`Status` UInt32	NTSTATUS reference

Event ID 10028: Send 1X packet: AdapterGuid ==> SrcMAC.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Send 1X packet: AdapterGuid ==> SrcMAC.

Message #

Send 1X packet: %3 ==> %4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`SrcMAC` Binary
`DestMAC` Binary

Event ID 10029: Abort OID request OID (low power state): PowerState=PowerState, bBlockOidsDueToLowPowerState=bBlockOidsDueToLowPowerState.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Abort OID request OID (low power state): PowerState=PowerState, bBlockOidsDueToLowPowerState=bBlockOidsDueToLowPowerState.

Message #

Abort OID request %2 (low power state): PowerState=%3, bBlockOidsDueToLowPowerState=%4

Fields #

Name	Description
`Adapter` Pointer
`OID` UInt32
`PowerState` UInt32
`bBlockOidsDueToLowPowerState` Boolean

Event ID 10030: QueryAdapterSync Error: OID OID Adapter.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

QueryAdapterSync Error: OID OID Adapter.

Message #

QueryAdapterSync Error: %3 OID %2

Fields #

Name	Description
`Adapter` Pointer
`OID` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 10031: RequestAdapterSync Error: OID OID Adapter.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

RequestAdapterSync Error: OID OID Adapter.

Message #

RequestAdapterSync Error: %3 OID %2

Fields #

Name	Description
`Adapter` Pointer
`OID` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 10032: CallAdapterSync Error: OID OID Adapter.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

CallAdapterSync Error: OID OID Adapter.

Message #

CallAdapterSync Error: %3 OID %2

Fields #

Name	Description
`Adapter` Pointer
`OID` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 10033: All MIC failure reports are sent.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

All MIC failure reports are sent. Notify miniport to disassociate from MAC.

Message #

All MIC failure reports are sent. Notify miniport to disassociate from %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`MAC` Binary

Event ID 10034: Security endpoint type = EndPointType.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Security endpoint type = EndPointType.

Message #

Security endpoint type = %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`EndPointType` UInt8

Event ID 10035: IHV Serialization Enabled: AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

IHV Serialization Enabled: AdapterGuid.

Message #

IHV Serialization Enabled: %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Enabled` Boolean

Event ID 10036: Safe mode = Enabled.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Safe mode = Enabled.

Message #

Safe mode = %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Enabled` Boolean

Event ID 10037: Reset ResetType New MAC address MAC SetDefaultMIB=DefaultMIB.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Reset ResetType New MAC address MAC SetDefaultMIB=DefaultMIB.

Message #

Reset %3 New MAC address %4 SetDefaultMIB=%5

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`ResetType` UInt8
`MAC` Binary
`DefaultMIB` Boolean

Event ID 10038: Reset ResetType SetDefaultMIB=DefaultMIB.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Reset ResetType SetDefaultMIB=DefaultMIB.

Message #

Reset %3 SetDefaultMIB=%5

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`ResetType` UInt8
`MAC` Binary
`DefaultMIB` Boolean

Event ID 10039: Reject Reset Request: AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Reject Reset Request: AdapterGuid.

Message #

Reject Reset Request: %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10040: Association Start: AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Start

Description

Association Start: AdapterGuid.

Message #

Association Start: %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`MAC` Binary

Event ID 10041: Association Completion: AdapterGuid AssocStatus=MAC.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Stop

Description

Association Completion: AdapterGuid AssocStatus=MAC.

Message #

Association Completion: %3 AssocStatus=%4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`MAC` Binary
`Status` UInt32	NTSTATUS reference

Event ID 10042: DisAssoc: ContextHandle Reason: AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

DisAssoc: ContextHandle Reason: AdapterGuid.

Message #

DisAssoc: %3 Reason: %4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`MAC` Binary
`Reason` UInt32

Event ID 10043: Defer roaming timer until system wakeup

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Defer roaming timer until system wakeup.

Message #

Defer roaming timer until system wakeup

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID

Event ID 10044: Mismatched session ID

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Mismatched session ID.

Message #

Mismatched session ID

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`SessionId` UInt32

Event ID 10045: PortState: Auth Failed: SessionId.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

PortState: Auth Failed: SessionId.

Message #

PortState: Auth Failed: %4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`SessionId` UInt32
`MAC` Binary

Event ID 10046: SetPortState: SessionId: Controlled=MAC Authorized=Controlled.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

SetPortState: SessionId: Controlled=MAC Authorized=Controlled.

Message #

SetPortState: %4: Controlled=%5 Authorized=%6

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`SessionId` UInt32
`MAC` Binary
`Controlled` Boolean
`Authorized` Boolean

Event ID 10047: Post Virtual PortDown Notification (MAC=MAC) to Security Module.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Post Virtual PortDown Notification (MAC=MAC) to Security Module.

Message #

Post Virtual PortDown Notification (MAC=%4) to Security Module

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`SessionId` UInt32
`MAC` Binary

Event ID 10048: Unable to set OID_DOT11_PRIVACY_EXEMPTION_LIST Status = Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Unable to set OID_DOT11_PRIVACY_EXEMPTION_LIST Status = Status.

Message #

Unable to set OID_DOT11_PRIVACY_EXEMPTION_LIST Status = %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10049: Cancel IOCTL_DOT11_CONNECT

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Cancel IOCTL_DOT11_CONNECT.

Message #

Cancel IOCTL_DOT11_CONNECT

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Irp` Pointer

Event ID 10050: OID_DOT11_CONNECT_REQUEST completes Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

OID_DOT11_CONNECT_REQUEST completes Status.

Message #

OID_DOT11_CONNECT_REQUEST completes %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10051: Fail Connect Request: Radio is off

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Fail Connect Request: Radio is off.

Message #

Fail Connect Request: Radio is off

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`PowerState` UInt32

Event ID 10052: Fail Connect Request in low power state: PowerState.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Fail Connect Request in low power state: PowerState.

Message #

Fail Connect Request in low power state: %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`PowerState` UInt32

Event ID 10053: IOCTL_DOT11_CONNECT

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

IOCTL_DOT11_CONNECT.

Message #

IOCTL_DOT11_CONNECT

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Irp` Pointer

Event ID 10054: IOCTL_DOT11_DISCONNECT

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

IOCTL_DOT11_DISCONNECT.

Message #

IOCTL_DOT11_DISCONNECT

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID

Event ID 10055: OID_DOT11_DISCONNECT_REQUEST Status = Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

OID_DOT11_DISCONNECT_REQUEST Status = Status.

Message #

OID_DOT11_DISCONNECT_REQUEST Status = %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10056: OID_DOT11_NIC_POWER_STATE Status = Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

OID_DOT11_NIC_POWER_STATE Status = Status.

Message #

OID_DOT11_NIC_POWER_STATE Status = %3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10057: Old PowerState=OldPowerState, New PowerState=NewPowerState.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Old PowerState=OldPowerState, New PowerState=NewPowerState.

Message #

Old PowerState=%3, New PowerState=%4

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`OldPowerState` UInt32
`NewPowerState` UInt32
`Halting` Boolean

Event ID 10058: Change OpMode Failed: Capability is not supported (Configured = ConfiguredOpMode, IM supported = IMSupportedOpModes, MiniPort supported = MiniPortSupportedOpModes).

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Change OpMode Failed: Capability is not supported (Configured = ConfiguredOpMode, IM supported = IMSupportedOpModes, MiniPort supported = MiniPortSupportedOpModes).

Message #

Change OpMode Failed: Capability is not supported (Configured = %3, IM supported = %4, MiniPort supported = %5)

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`ConfiguredOpMode` UInt32
`IMSupportedOpModes` UInt32
`MiniPortSupportedOpModes` UInt32

Event ID 10059: Terminate the connection: too many TKIP-MIC countermeasures.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Terminate the connection: too many TKIP-MIC countermeasures.

Message #

Terminate the connection: too many TKIP-MIC countermeasures.

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID

Event ID 10060: Pairwise Key (Addr): Algo CipherAlgoId, Direction= Direction, Len Len.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Pairwise Key (Addr): Algo CipherAlgoId, Direction= Direction, Len Len.

Message #

Pairwise Key (%1): Algo %2, Direction= %3, Len %4

Fields #

Name	Description
`Addr` Binary
`CipherAlgoId` UInt32
`Direction` UInt8	Known values `%%14592` Inbound `%%14593` Outbound `%%14594` Forward `%%14595` Bidirectional
`Len` UInt32

Event ID 10061: Group (Default) Key: Idx Index, Algo CipherAlgoId, Direction= Direction, Len Len.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Group (Default) Key: Idx Index, Algo CipherAlgoId, Direction= Direction, Len Len.

Message #

Group (Default) Key: Idx %1, Algo %2, Direction= %3, Len %4

Fields #

Name	Description
`Index` UInt32
`CipherAlgoId` UInt32
`Direction` UInt8	Known values `%%14592` Inbound `%%14593` Outbound `%%14594` Forward `%%14595` Bidirectional
`Len` UInt32

Event ID 10062: Connection Started

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Start

Description

Connection Started.

Message #

Connection Started

Fields #

Name	Description
`AdapterGuid` GUID

Event ID 10063: Connection Completion Status=Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Stop

Description

Connection Completion Status=Status.

Message #

Connection Completion Status=%2

Fields #

Name	Description
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10064: OID_DOT11_NIC_POWER_STATE Request

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

OID_DOT11_NIC_POWER_STATE Request.

Message #

OID_DOT11_NIC_POWER_STATE Request

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID

Event ID 10066: 802.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: StartingdevicenetworkatIMdriver
Opcode: Start

Description

802.11 IM driver has begun to start the device network, adapter guid = InterfaceGuid, Local MAC addr = MAC, SSID = SSID.

Message #

802.11 IM driver has begun to start the device network, adapter guid = %1, Local MAC addr = %3, SSID = %4

Fields #

Name	Description
`InterfaceGuid` GUID
`ContextHandle` Pointer
`MAC` AnsiString
`SSID` AnsiString

Event ID 10067: 802.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: StartingdevicenetworkatIMdriver
Opcode: Stop

Description

802.11 IM driver has finished starting the device network, adapter guid = InterfaceGuid, Local MAC addr = MAC, SSID = SSID.

Message #

802.11 IM driver has finished starting the device network, adapter guid = %1, Local MAC addr = %3, SSID = %4

Fields #

Name	Description
`InterfaceGuid` GUID
`ContextHandle` Pointer
`MAC` AnsiString
`SSID` AnsiString

Event ID 10068: 802.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: StartingdevicenetworkatIMdriver
Opcode: Stop

Description

802.11 IM driver has failed to start the device network, error code = ErrorCode, adapter guid = InterfaceGuid, Local MAC addr = MAC, SSID = SSID.

Message #

802.11 IM driver has failed to start the device network, error code = %2, adapter guid = %1, Local MAC addr = %4, SSID = %5

Fields #

Name	Description
`InterfaceGuid` GUID
`ErrorCode` UInt32
`ContextHandle` Pointer
`MAC` AnsiString
`SSID` AnsiString

Event ID 10069: 802.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: StoppingdevicenetworkatIMdriver
Opcode: Start

Description

802.11 IM driver has begun to stop the device network, adapter guid = InterfaceGuid, Local MAC addr = MAC, SSID = SSID.

Message #

802.11 IM driver has begun to stop the device network, adapter guid = %1, Local MAC addr = %3, SSID = %4

Fields #

Name	Description
`InterfaceGuid` GUID
`ContextHandle` Pointer
`MAC` AnsiString
`SSID` AnsiString

Event ID 10070: 802.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: StoppingdevicenetworkatIMdriver
Opcode: Stop

Description

802.11 IM driver has finished stopping the device network, adapter guid = InterfaceGuid, Local MAC addr = MAC, SSID = SSID.

Message #

802.11 IM driver has finished stopping the device network, adapter guid = %1, Local MAC addr = %3, SSID = %4

Fields #

Name	Description
`InterfaceGuid` GUID
`ContextHandle` Pointer
`MAC` AnsiString
`SSID` AnsiString

Event ID 10071: 802.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: StoppingdevicenetworkatIMdriver
Opcode: Stop

Description

802.11 IM driver has failed to stop the device network, error code = ErrorCode, adapter guid = InterfaceGuid, local MAC addr = MAC, SSID = SSID.

Message #

802.11 IM driver has failed to stop the device network, error code = %2, adapter guid = %1, local MAC addr = %4, SSID = %5

Fields #

Name	Description
`InterfaceGuid` GUID
`ErrorCode` UInt32
`ContextHandle` Pointer
`MAC` AnsiString
`SSID` AnsiString

Event ID 10072: Results of querying power management mode: current power management mode = PowerMgmtMode, power management mode supported by AP = PowerMgmtModeSupported, adapter guid = AdapterGuid, AP MA...

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Results of querying power management mode: current power management mode = PowerMgmtMode, power management mode supported by AP = PowerMgmtModeSupported, adapter guid = AdapterGuid, AP MAC addr = MAC, AP SSID = SSID.

Message #

Results of querying power management mode: current power management mode = %1, power management mode supported by AP = %2, adapter guid = %3, AP MAC addr = %4, AP SSID = %5

Fields #

Name	Description
`PowerMgmtMode` UInt32
`PowerMgmtModeSupported` Boolean
`AdapterGuid` GUID
`MAC` Binary
`SSID` AnsiString

Event ID 10073: Adapter going to sleep, adapter guid = AdapterGuid, new PowerState=NewPowerState, halted = Halted.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: EnterLowPowerState

Description

Adapter going to sleep, adapter guid = AdapterGuid, new PowerState=NewPowerState, halted = Halted.

Message #

Adapter going to sleep, adapter guid = %1, new PowerState=%3, halted = %2

Fields #

Name	Description
`AdapterGuid` GUID
`Halted` Boolean
`NewPowerState` UInt32

Event ID 10074: Adapter resumed from sleep, adapter guid = AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: LeaveLowPowerState

Description

Adapter resumed from sleep, adapter guid = AdapterGuid.

Message #

Adapter resumed from sleep, adapter guid = %1

Fields #

Name	Description
`AdapterGuid` GUID

Event ID 10075: Direct OID Request Pending: Request=ContextHandle Adapter=AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Direct OID Request Pending: Request=ContextHandle Adapter=AdapterGuid.

Message #

Direct OID Request Pending: Request=%1 Adapter=%2

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10076: Pending Direct OID Request Complete: Request=ContextHandle Adapter=AdapterGuid Status=Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Pending Direct OID Request Complete: Request=ContextHandle Adapter=AdapterGuid Status=Status.

Message #

Pending Direct OID Request Complete: Request=%1 Adapter=%2 Status=%3

Fields #

Name	Description
`ContextHandle` Pointer
`AdapterGuid` GUID
`Status` UInt32	NTSTATUS reference

Event ID 10077: Diagnostic Statistics Difference Adapter Guid RxUnicastCount TxUnicastCount: TxBroadcastCount RxUnicastCount: RxBroadcastCount TxBroadcastCount: TxMulticastCount RxBroadcastCount: RxMulticastCount ...

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Diagnostic Statistics Difference Adapter Guid RxUnicastCount TxUnicastCount: TxBroadcastCount RxUnicastCount: RxBroadcastCount TxBroadcastCount: TxMulticastCount RxBroadcastCount: RxMulticastCount TxMulticastCount: TimeDiffMs RxMulticastCount: AdapterGuid TimeDiffMs: TxUnicastCount.

Message #

Diagnostic Statistics Difference Adapter Guid %1 TxUnicastCount: %2 RxUnicastCount: %3 TxBroadcastCount: %4 RxBroadcastCount: %5 TxMulticastCount: %6 RxMulticastCount: %7 TimeDiffMs: %8

Fields #

Name	Description
`AdapterGuid` GUID
`TxUnicastCount` Int32
`RxUnicastCount` Int32
`TxBroadcastCount` Int32
`RxBroadcastCount` Int32
`TxMulticastCount` Int32
`RxMulticastCount` Int32
`TimeDiffMs` UInt64

Event ID 10078: [WiFiDs] Deferred PortDown Notification: Adapter Guid: AdapterGuid, SessionId: SessionId, Reason: Reason, StatusCode: StatusCode, SecurityEndpoint: SecurityEndpoint.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

[WiFiDs] Deferred PortDown Notification: Adapter Guid: AdapterGuid, SessionId: SessionId, Reason: Reason, StatusCode: StatusCode, SecurityEndpoint: SecurityEndpoint.

Message #

[WiFiDs] Deferred PortDown Notification: Adapter Guid: %1, SessionId: %2, Reason: %3, StatusCode: %4, SecurityEndpoint: %5

Fields #

Name	Description
`AdapterGuid` GUID
`SessionId` Int32
`Reason` Int32
`StatusCode` Int32	NTSTATUS reference
`SecurityEndpoint` Int32

Event ID 10079: [WiFiDs] Disconnected standby is enabled: Adapter Guid: AdapterGuid, DisconnectInStandby: DisconnectInStandby, EnforceDs: EnforceDs.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

[WiFiDs] Disconnected standby is enabled: Adapter Guid: AdapterGuid, DisconnectInStandby: DisconnectInStandby, EnforceDs: EnforceDs.

Message #

[WiFiDs] Disconnected standby is enabled: Adapter Guid: %1, DisconnectInStandby: %2, EnforceDs: %3

Fields #

Name	Description
`AdapterGuid` GUID
`DisconnectInStandby` Int32
`EnforceDs` Int32

Event ID 10080: [WiFiDs] Creating deferred PortDown notification: Adapter Guid: AdapterGuid, SessionId: SessionId, Reason: Reason, StatusCode: StatusCode, SecurityEndpoint: SecurityEndpoint.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

[WiFiDs] Creating deferred PortDown notification: Adapter Guid: AdapterGuid, SessionId: SessionId, Reason: Reason, StatusCode: StatusCode, SecurityEndpoint: SecurityEndpoint.

Message #

[WiFiDs] Creating deferred PortDown notification: Adapter Guid: %1, SessionId: %2, Reason: %3, StatusCode: %4, SecurityEndpoint: %5

Fields #

Name	Description
`AdapterGuid` GUID
`SessionId` Int32
`Reason` Int32
`StatusCode` Int32	NTSTATUS reference
`SecurityEndpoint` Int32

Event ID 10081: [WiFiDs] Indicating MediaDisconnect on sleep: Adapter Guid: AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

[WiFiDs] Indicating MediaDisconnect on sleep: Adapter Guid: AdapterGuid.

Message #

[WiFiDs] Indicating MediaDisconnect on sleep: Adapter Guid: %1

Fields #

Name	Description
`AdapterGuid` GUID

Event ID 10082: [WiFiDs] Waking from DisconnectedStandby: Adapter Guid: AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

[WiFiDs] Waking from DisconnectedStandby: Adapter Guid: AdapterGuid.

Message #

[WiFiDs] Waking from DisconnectedStandby: Adapter Guid: %1

Fields #

Name	Description
`AdapterGuid` GUID

Event ID 10083: [WiFiDs] Terminating connection since diassoc didn't occur on sleep: Adapter Guid: AdapterGuid.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

[WiFiDs] Terminating connection since diassoc didn't occur on sleep: Adapter Guid: AdapterGuid.

Message #

[WiFiDs] Terminating connection since diassoc didn't occur on sleep: Adapter Guid: %1

Fields #

Name	Description
`AdapterGuid` GUID

Event ID 10084: [Nwf] [Status]: Nwf_Status: Status = StatusAnnotation , Context1 = Status.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

[Nwf] [Status]: Nwf_Status: Status = StatusAnnotation , Context1 = Status.

Message #

[Nwf] [Status]: %1: Status = %2 , Context1 = %3

Fields #

Name	Description
`StatusAnnotation` UnicodeString
`Status` UInt32	NTSTATUS reference
`Context1` UInt32

Event ID 10085: [SAE] FinalState: SAEStatus=.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Message #

[SAE] FinalState: SAEStatus=%1, bInitialized=%2, AuthState=%3, bCounter=%4, LocalSendConfirm=%5, PeerSendConfirm=%6

Fields #

Name	Description
`Status` UInt32 → unsignedInt	NTSTATUS reference
`Initialized` UInt32 → unsignedInt
`State` UInt32 → unsignedInt
`Counter` UInt32 → unsignedInt
`LocalSendConfirm` UInt32 → unsignedInt
`PeerSendConfirm` UInt32 → unsignedInt

Event ID 10086: [DumpBuff] BufferAnnotation (BufferLength bytes).

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

[DumpBuff] BufferAnnotation (BufferLength bytes).

Message #

[DumpBuff] %1 (%2 bytes):

Fields #

Name	Description
`BufferAnnotation` UnicodeString
`BufferLength` UInt32

Event ID 10087: LogLine.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

LogLine

Message #

%1

Fields #

Name	Description
`LogLine` AnsiString

Event ID 10088: [SAE] CommitFrameError: Size=CommitFrameSize ?

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Message #

[SAE] %1: Size=%2 ? %3, AlgorithmNumber= %4 ? %5, TransactionId=%6, ExpectedTransactionId=%7

Fields #

Name	Description
`CommitFrameError` AnsiString → string
`CommitFrameSize` UInt32 → unsignedInt
`MinCommitFrameSize` UInt32 → unsignedInt
`AlgorithmNumber` UInt32 → unsignedInt
`ExpectedAlgorithmNumber` UInt32 → unsignedInt
`TransactionId` UInt32 → unsignedInt
`ExpectedTransactionId` UInt32 → unsignedInt

Event ID 10089: [SAE] [SAE-Fail]: Status = Status , Context1 = Context1.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Message #

[SAE] [SAE-Fail]: Status = %1 , Context1 = %2

Fields #

Name	Description
`Status` UInt32 → unsignedInt	NTSTATUS reference
`Context1` UInt32 → unsignedInt

Event ID 10090: [WorkerRequestHandler]: WorkerRequestHandler Context1 = StatusAnnotation, Context2 = Context1.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

[WorkerRequestHandler]: WorkerRequestHandler Context1 = StatusAnnotation, Context2 = Context1.

Message #

[WorkerRequestHandler]: %1 Context1 = %2, Context2 = %3

Fields #

Name	Description
`StatusAnnotation` UnicodeString
`Context1` UInt32
`Context2` UInt32

Event ID 10091: * NwifiNblSendCompletion ERROR - pNwifiNbl is corrupted - pNwifiNbl= pNwifiNbl, pNwifiNblContext= pNwifiNblContext, Status= Status, pToS= pTOS, pCmplArray= pBOS *.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic

Description

*** NwifiNblSendCompletion ERROR - pNwifiNbl is corrupted - pNwifiNbl= pNwifiNbl, pNwifiNblContext= pNwifiNblContext, Status= Status, pToS= pTOS, pCmplArray= pBOS ***.

Message #

*** NwifiNblSendCompletion ERROR - pNwifiNbl is corrupted - pNwifiNbl= %1, pNwifiNblContext= %2, Status= %3, pToS= %4, pCmplArray= %5 ***

Fields #

Name	Description
`pNwifiNbl` Pointer
`pNwifiNblContext` Pointer
`Status` UInt32	NTSTATUS reference
`pTOS` Pointer
`pBOS` Pointer

Event ID 10092: *** OriginalNblSendCompletion ERROR - pOriginalNBL is currupted - RefCount is 0 - pNwifiNbl= pNwifiNblContext, pOriginalNBL= pOriginalNBL, pOriginalNblContext= pOriginalNblContext, Origina...

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic

Description

*** OriginalNblSendCompletion ERROR - pOriginalNBL is currupted - RefCount is 0 - pNwifiNbl= pNwifiNblContext, pOriginalNBL= pOriginalNBL, pOriginalNblContext= pOriginalNblContext, OriginalNblStatus= Status ***.

Message #

*** OriginalNblSendCompletion ERROR - pOriginalNBL is currupted - RefCount is 0 - pNwifiNbl= %1, pOriginalNBL= %2, pOriginalNblContext= %3, OriginalNblStatus= %4 ***

Fields #

Name	Description
`pNwifiNblContext` Pointer
`pOriginalNBL` Pointer
`pOriginalNblContext` Pointer
`Status` UInt32	NTSTATUS reference

Event ID 20000: Resume from low power 1

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttosamenetworkonresume
Opcode: Start

Description

Resume from low power 1.

Message #

Resume from low power 1

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20001: Resume from low power 2

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttonetworkonresumeafterinterveningdisconnect
Opcode: Start

Description

Resume from low power 2.

Message #

Resume from low power 2

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20002: Port authorized 1

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttosamenetworkonresume
Opcode: Stop

Description

Port authorized 1.

Message #

Port authorized 1

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20003: Port authorized 2

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttonetworkonresumeafterinterveningdisconnect
Opcode: Stop

Description

Port authorized 2.

Message #

Port authorized 2

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20004: Resume from low power (End trailing scenario) 1

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttosamenetworkonresume
Opcode: Stop

Description

Resume from low power (End trailing scenario) 1.

Message #

Resume from low power (End trailing scenario) 1

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20005: Resume from low power (End trailing scenario) 2

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttonetworkonresumeafterinterveningdisconnect
Opcode: Stop

Description

Resume from low power (End trailing scenario) 2.

Message #

Resume from low power (End trailing scenario) 2

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20006: Resume from low power 3

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttosamenetworkonresume
Opcode: Start

Description

Resume from low power 3.

Message #

Resume from low power 3

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20007: Resume from low power 4

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttonetworkonresumeafterinterveningdisconnect
Opcode: Start

Description

Resume from low power 4.

Message #

Resume from low power 4

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20008: Port authorized 3

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttonetworkonresumeafterinterveningdisconnect
Opcode: Stop

Description

Port authorized 3.

Message #

Port authorized 3

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20009: Resume from low power (End trailing scenario) 3

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttosamenetworkonresume
Opcode: Stop

Description

Resume from low power (End trailing scenario) 3.

Message #

Resume from low power (End trailing scenario) 3

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20010: Resume from low power (End trailing scenario) 4

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttonetworkonresumeafterinterveningdisconnect
Opcode: Stop

Description

Resume from low power (End trailing scenario) 4.

Message #

Resume from low power (End trailing scenario) 4

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20011: Resume from low power 5

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttosamenetworkonresume
Opcode: Start

Description

Resume from low power 5.

Message #

Resume from low power 5

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20012: Resume from low power 6

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttonetworkonresumeafterinterveningdisconnect
Opcode: Start

Description

Resume from low power 6.

Message #

Resume from low power 6

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20013: Resume from low power (End trailing scenario) 5

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttosamenetworkonresume
Opcode: Stop

Description

Resume from low power (End trailing scenario) 5.

Message #

Resume from low power (End trailing scenario) 5

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20014: Resume from low power (End trailing scenario) 6

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttonetworkonresumeafterinterveningdisconnect
Opcode: Stop

Description

Resume from low power (End trailing scenario) 6.

Message #

Resume from low power (End trailing scenario) 6

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20015: Port authorized 4

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttonetworkonresumeafterinterveningdisconnect
Opcode: Stop

Description

Port authorized 4.

Message #

Port authorized 4

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20016: Resume Reconnect to Same/Different netwkr scenario

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttosamenetworkonresume
Opcode: Start

Description

Resume Reconnect to Same/Different netwkr scenario.

Message #

Resume Reconnect to Same/Different netwkr scenario

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 20017: Connect to same network on resume

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Task: Connecttosamenetworkonresume
Opcode: Start

Fields #

Name	Description
`InterfaceGuid` GUID

Event ID 60001: Error: Error Location: Location Context: Context.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Error: Error Location: Location Context: Context.

Message #

Error: %1 Location: %2 Context: %3

Fields #

Name	Description
`ErrorCode` UInt32
`Location` UInt32
`Context` UInt32

Event ID 60002: Warning: Warning Location: Location Context: Context.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Warning: Warning Location: Location Context: Context.

Message #

Warning: %1 Location: %2 Context: %3

Fields #

Name	Description
`WarningCode` UInt32
`Location` UInt32
`Context` UInt32

Event ID 60003: Transitioned to State: NextState Context: Context.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Transitioned to State: NextState Context: Context.

Message #

Transitioned to State: %1 Context: %2

Fields #

Name	Description
`NextState` UInt8
`Context` UInt32

Event ID 60004: Updated Context: Updated_Context Update Reason: Update_Reason.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Updated Context: Updated_Context Update Reason: Update_Reason.

Message #

Updated Context: %1 Update Reason: %2

Fields #

Name	Description
`Context` UInt32
`UpdateReasonCode` UInt32

Event ID 60101: SourceAddress: SourceAddress SourcePort: SourcePort DestinationAddress: DestinationAddress DestinationPort: DestinationPort Protocol: Protocol ReferenceContext: ReferenceContext.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

SourceAddress: SourceAddress SourcePort: SourcePort DestinationAddress: DestinationAddress DestinationPort: DestinationPort Protocol: Protocol ReferenceContext: ReferenceContext.

Message #

SourceAddress: %1 SourcePort: %2 DestinationAddress: %3 DestinationPort: %4 Protocol: %5 ReferenceContext: %6

Fields #

Name	Description
`SourceAddress` UInt32
`SourcePort` UInt32
`DestinationAddress` UInt32
`DestinationPort` UInt32
`Protocol` UInt32	Known values `0` HOPOPT `1` ICMP `2` IGMP `6` TCP `17` UDP `41` IPv6 `43` IPv6-Route `44` IPv6-Frag `47` GRE `50` ESP `51` AH `58` ICMPv6 `89` OSPF `103` PIM `132` SCTP
`ReferenceContext` UInt32

Event ID 60102: SourceAddress: SourceAddress SourcePort: SourcePort DestinationAddress: DestinationAddress DestinationPort: DestinationPort Protocol: Protocol ReferenceContext: ReferenceContext.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

SourceAddress: SourceAddress SourcePort: SourcePort DestinationAddress: DestinationAddress DestinationPort: DestinationPort Protocol: Protocol ReferenceContext: ReferenceContext.

Message #

SourceAddress: %1 SourcePort: %2 DestinationAddress: %3 DestinationPort: %4 Protocol: %5 ReferenceContext: %6

Fields #

Name	Description
`SourceAddress` Binary
`SourcePort` UInt32
`DestinationAddress` Binary
`DestinationPort` UInt32
`Protocol` UInt32	Known values `0` HOPOPT `1` ICMP `2` IGMP `6` TCP `17` UDP `41` IPv6 `43` IPv6-Route `44` IPv6-Frag `47` GRE `50` ESP `51` AH `58` ICMPv6 `89` OSPF `103` PIM `132` SCTP
`ReferenceContext` UInt32

Event ID 60103: Interface Guid: Interface_Guid IfIndex: IfIndex Interface Luid: Interface_Luid ReferenceContext: ReferenceContext.

Provider: Microsoft-Windows-NWiFi
Channel: Diagnostic
Opcode: Info

Description

Interface Guid: Interface_Guid IfIndex: IfIndex Interface Luid: Interface_Luid ReferenceContext: ReferenceContext.

Message #

Interface Guid: %1 IfIndex: %2 Interface Luid: %3 ReferenceContext: %4

Fields #

Name	Description
`IfGuid` GUID
`IfIndex` UInt32
`IfLuid` UInt64
`ReferenceContext` UInt32

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID 0bd3506a-9030-4f76-9b88-3e8fe1f7cfb6

Defined in nwifi.sys, the binary that emits these events.

Observed on:

Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02

Downloads

Microsoft-Windows-NWiFi registered manifest XML (in the Win11-26200.6584 manifest pack, 2.0 MB) manifest-xml

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`risk_score`	Numeric comparison on the Elastic risk score (0 to 100): `risk_score>50`, `risk_score<=20`, `risk_score=99` (alias `risk`; Elastic rules only)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)