detection.wiki

Microsoft-Windows-RasRoutingProtocols-IGMPv2

EventTitleChannelSampleRule
41001IGMP was unable to initialize a critical section.OperationalNN
41002IGMP was unable to create a heap.OperationalNN
41003IGMP was unable to allocate memory from its heap.OperationalNN
41004IGMP received a start request when it was already running.OperationalNN
41005IGMP was unable to start Windows Sockets.OperationalNN
41006IGMP was unable to create a synchronization object.OperationalNN
41007IGMP was unable to create an event.OperationalNN
41008IGMP was unable to create a semaphore.OperationalNN
41009IGMP was unable to create a socket.OperationalNN
41010IGMP has started successfully.OperationalNN
41011IGMP could not schedule a task to be executed.OperationalNN
41012IGMP was unable to receive an incoming message on the local interface with IP …OperationalNN
41013IGMP received a packet which was smaller than the minimum size allowed for IGMP …OperationalNN
41014IGMP received a packet with an invalid version in its header.OperationalNN
41015IGMP received a packet with an invalid header.OperationalNN
41016Router received a general query from RAS Client(param1) on interface with IP …OperationalNN
41017Different version router with IP Address param1 exists on the interface with IP …OperationalNN
41019IGMP was unable to send a packet from the interface with IP address param1 to …OperationalNN
41020IGMP discarded a version param1 packet received on the interface with IP address …OperationalNN
41021Igmpv2 was unable to enumerate network events on the local interface with IP …OperationalNN
41022Igmpv2 detected an error on the local interface with IP address param1.OperationalNN
41023Igmpv2 was unable to request notification of events on the socket for the local …OperationalNN
41024IGMP was unable to create a socket for the local interface with IP address …OperationalNN
41025IGMP could not bind to port 520 on the socket for the local interface with IP …OperationalNN
41026IGMP could not be configured on Ras Client param1 on interface with index …OperationalNN
41027Unable to disable IGMP on Ras Client param1 on the interface with index param2.OperationalNN
41028IGMP could not request multicasting on the local interface with IP address …OperationalNN
41029IGMP could not set router alert option on the local interface with IP address …OperationalNN
41030IGMP could not set the IP header include option on interface with IP address …OperationalNN
41031IGMP could not join the multicast group param1 on the local interface with IP …OperationalNN
41032IGMP could not leave the multicast group param1 on the local interface with IP …OperationalNN
41033StopProtocol() called to stop Igmp when it is already being stopped.OperationalNN
41034AddInterface() called to add an Igmp Proxy interface.OperationalNN
41035AddInterface() called to add an Igmp Ras interface.OperationalNN
41036IGMP Router failed to register with MGM.OperationalNN
41037IGMP Proxy failed to register with MGM.OperationalNN
41038MgmTakeInterfaceOwnership() failed.OperationalNN
41039The robustness variable is being set to 1 for Igmp router on Interface param1.OperationalNN
41040One of the values passed to Igmp is invalid.OperationalNN
41041The wait-events-timers could not be registered with the wait server thread.OperationalNN
41042IGMP has stopped.OperationalNN
41043Fatal error.OperationalNN
41044The version field in the IGMP config field is incorrect.OperationalNN
41045IGMP Protocol type for interface param1 has invalid value param2.OperationalNN
41046Cannot configure Proxy on RAS server interface param1.OperationalNN
41047Static group param1 configured on Interfaceparam2 not a valid MCast address.OperationalNN
41048Static group param1 configured on Interface:param2 does not have valid mode.OperationalNN
41049Static group param1 configured on Interface:param2 has invalid filter.OperationalNN
41050Invalid robustness variable:InvalidRobustnessVariable configured on …OperationalNN
41051Invalid Startup Query Count:InvalidStartupQueryCount configured on …OperationalNN
41052IGMP-Rtr-Vparam1 activated on Interface:param2.OperationalNN
41053IGMP Proxy activated on Interface:IGMPProxyActivatedOnInterface.OperationalNN
41054Failed to install IGMP Proxy on interface:param1.OperationalNN
41055Failed to install IGMP Rtr-V-param1 on interface:param2.OperationalNN
41056Failed to install IGMP Rtr-V-param1 on interface:param2.OperationalNN
41057Failed to install IGMP Rtr-V-param1 on interface:param2.OperationalNN

Event ID 41001: IGMP was unable to initialize a critical section.

#
Channel
Operational

Description

IGMP was unable to initialize a critical section. The data is the exception code.

Message #

IGMP was unable to initialize a critical section. The data is the exception code.

Event ID 41002: IGMP was unable to create a heap.

#
Channel
Operational

Description

IGMP was unable to create a heap. The data is the error code.

Message #

IGMP was unable to create a heap. The data is the error code.

Event ID 41003: IGMP was unable to allocate memory from its heap.

#
Channel
Operational

Description

IGMP was unable to allocate memory from its heap. The data is the error code.

Message #

IGMP was unable to allocate memory from its heap. The data is the error code.

Event ID 41004: IGMP received a start request when it was already running.

#
Channel
Operational

Event ID 41005: IGMP was unable to start Windows Sockets.

#
Channel
Operational

Description

IGMP was unable to start Windows Sockets. The data is the error code.

Message #

IGMP was unable to start Windows Sockets. The data is the error code.

Event ID 41006: IGMP was unable to create a synchronization object.

#
Channel
Operational

Description

IGMP was unable to create a synchronization object. The data is the error code.

Message #

IGMP was unable to create a synchronization object. The data is the error code.

Event ID 41007: IGMP was unable to create an event.

#
Channel
Operational

Description

IGMP was unable to create an event. The data is the error code.

Message #

IGMP was unable to create an event. The data is the error code.

Event ID 41008: IGMP was unable to create a semaphore.

#
Channel
Operational

Description

IGMP was unable to create a semaphore. The data is the error code.

Message #

IGMP was unable to create a semaphore. The data is the error code.

Event ID 41009: IGMP was unable to create a socket.

#
Channel
Operational

Description

IGMP was unable to create a socket. The data is the error code.

Message #

IGMP was unable to create a socket. The data is the error code.

Event ID 41010: IGMP has started successfully.

#
Channel
Operational

Event ID 41011: IGMP could not schedule a task to be executed.

#
Channel
Operational

Description

IGMP could not schedule a task to be executed. This may have been caused by a memory allocation failure. The data is the error code.

Message #

IGMP could not schedule a task to be executed. This may have been caused by a memory allocation failure. The data is the error code.

Event ID 41012: IGMP was unable to receive an incoming message on the local interface with IP address param1.

#
Channel
Operational

Description

IGMP was unable to receive an incoming message on the local interface with IP address param1. The data is the error code.

Message #

IGMP was unable to receive an incoming message on the local interface with IP address %1. The data is the error code.

Fields #

NameDescription
param1 UnicodeString

Event ID 41013: IGMP received a packet which was smaller than the minimum size allowed for IGMP packets.

#
Channel
Operational

Message #

IGMP received a packet which was smaller than the minimum size allowed for IGMP packets. The packet has been discarded. It was received on the local interface with IP address %1, and it came from the neighboring router with IP address %2.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41014: IGMP received a packet with an invalid version in its header.

#
Channel
Operational

Message #

IGMP received a packet with an invalid version in its header. The packet has been discarded. It was received on the local interface with IP address %1, and it came from the neighboring router with IP address %2.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41015: IGMP received a packet with an invalid header.

#
Channel
Operational

Description

IGMP received a packet with an invalid header. The packet has been discarded. It was received on the local interface with IP address param1, and it came from the neighboring router with IP address param2.

Message #

IGMP received a packet with an invalid header. The packet has been discarded. It was received on the local interface with IP address %1, and it came from the neighboring router with IP address %2.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41016: Router received a general query from RAS Client(param1) on interface with IP address param2.

#
Channel
Operational

Description

Router received a general query from RAS Client(param1) on interface with IP address param2. RAS clients are not supposed to send queries.

Message #

Router received a general query from RAS Client(%1) on interface with IP address %2. RAS clients are not supposed to send queries.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41017: Different version router with IP Address param1 exists on the interface with IP address param2.

#
Channel
Operational

Message #

Different version router with IP Address %1 exists on the interface with IP address %2.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41019: IGMP was unable to send a packet from the interface with IP address param1 to the IP address param2.

#
Channel
Operational

Description

IGMP was unable to send a packet from the interface with IP address param1 to the IP address param2. The data is the error code.

Message #

IGMP was unable to send a packet from the interface with IP address %1 to the IP address %2. The data is the error code.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41020: IGMP discarded a version param1 packet received on the interface with IP address param2 from a neighbor with IP address param3.

#
Channel
Operational

Description

IGMP discarded a version param1 packet received on the interface with IP address param2 from a neighbor with IP address param3. The above interface is configured to accept only version param4 packets.

Message #

IGMP discarded a version %1 packet received on the interface with IP address %2 from a neighbor with IP address %3. The above interface is configured to accept only version %4 packets.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString
param3 UnicodeString
param4 UnicodeString

Event ID 41021: Igmpv2 was unable to enumerate network events on the local interface with IP address param1.

#
Channel
Operational

Description

Igmpv2 was unable to enumerate network events on the local interface with IP address param1. The data is the error code.

Message #

Igmpv2 was unable to enumerate network events on the local interface with IP address %1. The data is the error code.

Fields #

NameDescription
param1 UnicodeString

Event ID 41022: Igmpv2 detected an error on the local interface with IP address param1.

#
Channel
Operational

Description

Igmpv2 detected an error on the local interface with IP address param1. The error occurred while the interface was receiving packets. The data is the error code.

Message #

Igmpv2 detected an error on the local interface with IP address %1. The error occurred while the interface was receiving packets. The data is the error code.

Fields #

NameDescription
param1 UnicodeString

Event ID 41023: Igmpv2 was unable to request notification of events on the socket for the local interface with IP address param1.

#
Channel
Operational

Description

Igmpv2 was unable to request notification of events on the socket for the local interface with IP address param1. The data is the error code.

Message #

Igmpv2 was unable to request notification of events on the socket for the local interface with IP address %1. The data is the error code.

Fields #

NameDescription
param1 UnicodeString

Event ID 41024: IGMP was unable to create a socket for the local interface with IP address param1.

#
Channel
Operational

Description

IGMP was unable to create a socket for the local interface with IP address param1. The data is the error code.

Message #

IGMP was unable to create a socket for the local interface with IP address %1. The data is the error code.

Fields #

NameDescription
param1 UnicodeString

Event ID 41025: IGMP could not bind to port 520 on the socket for the local interface with IP address param1.

#
Channel
Operational

Description

IGMP could not bind to port 520 on the socket for the local interface with IP address param1. The data is the error code.

Message #

IGMP could not bind to port 520 on the socket for the local interface with IP address %1. The data is the error code.

Fields #

NameDescription
param1 UnicodeString

Event ID 41026: IGMP could not be configured on Ras Client param1 on interface with index param2.

#
Channel
Operational

Description

IGMP could not be configured on Ras Client param1 on interface with index param2. The data is the error code.

Message #

IGMP could not be configured on Ras Client %1 on interface with index %2. The data is the error code.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41027: Unable to disable IGMP on Ras Client param1 on the interface with index param2.

#
Channel
Operational

Description

Unable to disable IGMP on Ras Client param1 on the interface with index param2. The data is the error code.

Message #

Unable to disable IGMP on Ras Client %1 on the interface with index %2. The data is the error code.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41028: IGMP could not request multicasting on the local interface with IP address param1.

#
Channel
Operational

Description

IGMP could not request multicasting on the local interface with IP address param1. The data is the error code.

Message #

IGMP could not request multicasting on the local interface with IP address %1. The data is the error code.

Fields #

NameDescription
param1 UnicodeString

Event ID 41029: IGMP could not set router alert option on the local interface with IP address param1.

#
Channel
Operational

Description

IGMP could not set router alert option on the local interface with IP address param1. The data is the error code.

Message #

IGMP could not set router alert option on the local interface with IP address %1. The data is the error code.

Fields #

NameDescription
param1 UnicodeString

Event ID 41030: IGMP could not set the IP header include option on interface with IP address param1.

#
Channel
Operational

Description

IGMP could not set the IP header include option on interface with IP address param1. The data is the error code.

Message #

IGMP could not set the IP header include option on interface with IP address %1. The data is the error code.

Fields #

NameDescription
param1 UnicodeString

Event ID 41031: IGMP could not join the multicast group param1 on the local interface with IP address param2.

#
Channel
Operational

Description

IGMP could not join the multicast group param1 on the local interface with IP address param2. The data is the error code.

Message #

IGMP could not join the multicast group %1 on the local interface with IP address %2. The data is the error code.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41032: IGMP could not leave the multicast group param1 on the local interface with IP address param2.

#
Channel
Operational

Description

IGMP could not leave the multicast group param1 on the local interface with IP address param2. The data is the error code.

Message #

IGMP could not leave the multicast group %1 on the local interface with IP address %2. The data is the error code.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41033: StopProtocol() called to stop Igmp when it is already being stopped.

#
Channel
Operational

Description

StopProtocol() called to stop Igmp when it is already being stopped. The data is the error code.

Message #

StopProtocol() called to stop Igmp when it is  already being stopped. The data is the error code.

Event ID 41034: AddInterface() called to add an Igmp Proxy interface.

#
Channel
Operational

Description

AddInterface() called to add an Igmp Proxy interface. Igmp proxy already owns another interface. The data is the error code.

Message #

AddInterface() called to add an Igmp Proxy interface. Igmp proxy already owns another interface. The data is the error code.

Event ID 41035: AddInterface() called to add an Igmp Ras interface.

#
Channel
Operational

Description

AddInterface() called to add an Igmp Ras interface. Ras Server cannot exist on multiple interfaces. The data is the error code.

Message #

AddInterface() called to add an Igmp Ras interface. Ras Server cannot exist on multiple interfaces. The data is the error code.

Event ID 41036: IGMP Router failed to register with MGM.

#
Channel
Operational

Description

IGMP Router failed to register with MGM. The data is the error code.

Message #

IGMP Router failed to register with MGM. The data is the error code.

Event ID 41037: IGMP Proxy failed to register with MGM.

#
Channel
Operational

Description

IGMP Proxy failed to register with MGM. The data is the error code.

Message #

IGMP Proxy failed to register with MGM. The data is the error code.

Event ID 41038: MgmTakeInterfaceOwnership() failed.

#
Channel
Operational

Description

MgmTakeInterfaceOwnership() failed. The data is the error code.

Message #

MgmTakeInterfaceOwnership() failed. The data is the error code.

Event ID 41039: The robustness variable is being set to 1 for Igmp router on Interface param1.

#
Channel
Operational

Description

The robustness variable is being set to 1 for Igmp router on Interface param1. You should avoid setting it to 1.

Message #

The robustness variable is being set to 1 for Igmp router  on Interface %1. You should avoid setting it to 1.

Fields #

NameDescription
param1 UnicodeString

Event ID 41040: One of the values passed to Igmp is invalid.

#
Channel
Operational

Description

One of the values passed to Igmp is invalid. param1.

Message #

One of the values passed to Igmp is invalid. %1

Fields #

NameDescription
param1 UnicodeString

Event ID 41041: The wait-events-timers could not be registered with the wait server thread.

#
Channel
Operational

Description

The wait-events-timers could not be registered with the wait server thread. Alertable threads might not have been initialized in Rtutils. The data is the error code.

Message #

The wait-events-timers could not be registered with the  wait server thread. Alertable threads might not have  been initialized in Rtutils. The data is the error code.

Event ID 41042: IGMP has stopped.

#
Channel
Operational

Event ID 41043: Fatal error.

#
Channel
Operational

Description

Fatal error. Could not complete. The data is the error code.

Message #

Fatal error. Could not complete. The data is the error code.

Event ID 41044: The version field in the IGMP config field is incorrect.

#
Channel
Operational

Description

The version field in the IGMP config field is incorrect. Delete and create the IGMP config again.

Message #

The version field in the IGMP config field is incorrect. Delete and create the IGMP config again.

Event ID 41045: IGMP Protocol type for interface param1 has invalid value param2.

#
Channel
Operational

Description

IGMP Protocol type for interface param1 has invalid value param2. The data is the error code.

Message #

IGMP Protocol type for interface %1 has invalid value %2. The data is the error code.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41046: Cannot configure Proxy on RAS server interface param1.

#
Channel
Operational

Message #

Cannot configure Proxy on RAS server interface %1.

Fields #

NameDescription
param1 UnicodeString

Event ID 41047: Static group param1 configured on Interfaceparam2 not a valid MCast address.

#
Channel
Operational

Message #

Static group %1 configured on Interface%2 not a valid MCast address.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41048: Static group param1 configured on Interface:param2 does not have valid mode.

#
Channel
Operational

Message #

Static group %1 configured on Interface:%2 does not have valid mode.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41049: Static group param1 configured on Interface:param2 has invalid filter.

#
Channel
Operational

Message #

Static group %1 configured on Interface:%2 has invalid filter.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41050: Invalid robustness variable:InvalidRobustnessVariable configured on Interface:ConfiguredOnInterface.

#
Channel
Operational

Description

Invalid robustness variable:InvalidRobustnessVariable configured on Interface:ConfiguredOnInterface. Max 7.

Message #

Invalid robustness variable:%1 configured on Interface:%2. Max 7.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41051: Invalid Startup Query Count:InvalidStartupQueryCount configured on Interface:ConfiguredOnInterface.

#
Channel
Operational

Message #

Invalid Startup Query Count:%1 configured on Interface:%2.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41052: IGMP-Rtr-Vparam1 activated on Interface:param2.

#
Channel
Operational

Message #

IGMP-Rtr-V%1 activated on Interface:%2.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41053: IGMP Proxy activated on Interface:IGMPProxyActivatedOnInterface.

#
Channel
Operational

Message #

IGMP Proxy activated on Interface:%1.

Fields #

NameDescription
param1 UnicodeString

Event ID 41054: Failed to install IGMP Proxy on interface:param1.

#
Channel
Operational

Message #

Failed to install IGMP Proxy on interface:%1.

Fields #

NameDescription
param1 UnicodeString

Event ID 41055: Failed to install IGMP Rtr-V-param1 on interface:param2.

#
Channel
Operational

Message #

Failed to install IGMP Rtr-V-%1 on interface:%2.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41056: Failed to install IGMP Rtr-V-param1 on interface:param2.

#
Channel
Operational

Message #

Failed to install IGMP Rtr-V-%1 on interface:%2.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Event ID 41057: Failed to install IGMP Rtr-V-param1 on interface:param2.

#
Channel
Operational

Message #

Failed to install IGMP Rtr-V-%1 on interface:%2.

Fields #

NameDescription
param1 UnicodeString
param2 UnicodeString

Provenance

ETW provider GUID b3d59ad1-c062-495b-bbe5-645c8b24acfd

Defined in igmpv2.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB