Microsoft-Windows-RasRoutingProtocols-IPRIP2
57 events across 1 channel
Event ID 30001: IPRIPv2 was unable to initialize a critical section.
#Description
IPRIPv2 was unable to initialize a critical section. The data is the exception code.
Message #
Event ID 30002: IPRIPv2 was unable to create a heap.
#Description
IPRIPv2 was unable to create a heap. The data is the error code.
Message #
Event ID 30003: IPRIPv2 was unable to allocate memory from its heap.
#Description
IPRIPv2 was unable to allocate memory from its heap. The data is the error code.
Message #
Event ID 30004: IPRIPv2 received a start request when it was already running.
#Description
IPRIPv2 received a start request when it was already running.
Message #
Event ID 30005: IPRIPv2 was unable to start Windows Sockets.
#Description
IPRIPv2 was unable to start Windows Sockets. The data is the error code.
Message #
Event ID 30006: IPRIPv2 was unable to create a synchronization object.
#Description
IPRIPv2 was unable to create a synchronization object. The data is the error code.
Message #
Event ID 30007: IPRIPv2 was unable to create an event.
#Description
IPRIPv2 was unable to create an event. The data is the error code.
Message #
Event ID 30008: IPRIPv2 was unable to initialize a table to hold information about configured network interfaces.
#Description
IPRIPv2 was unable to initialize a table to hold information about configured network interfaces. The data is the error code.
Message #
Event ID 30009: IPRIPv2 was unable to initialize a table to hold information about neighboring IPRIP routers.
#Description
IPRIPv2 was unable to initialize a table to hold information about neighboring IPRIP routers. The data is the error code.
Message #
Event ID 30010: IPRIPv2 was unable to initialize a table to hold information about local IP addresses.
#Description
IPRIPv2 was unable to initialize a table to hold information about local IP addresses. The data is the error code.
Message #
Event ID 30011: IPRIPv2 was unable to create a semaphore.
#Description
IPRIPv2 was unable to create a semaphore. The data is the error code.
Message #
Event ID 30012: IPRIPv2 was unable to create a socket.
#Description
IPRIPv2 was unable to create a socket. The data is the error code.
Message #
Event ID 30013: IPRIPv2 was unable to register with the Routing Table Manager.
#Description
IPRIPv2 was unable to register with the Routing Table Manager. The data is the error code.
Message #
Event ID 30014: IPRIPv2 was unable to create a thread.
#Description
IPRIPv2 was unable to create a thread. The data is the error code.
Message #
Event ID 30015: IPRIPv2 has started successfully.
#Description
IPRIPv2 has started successfully.
Message #
Event ID 30016: IPRIPv2 could not bind to IP address param1.
#Event ID 30017: IPRIPv2 could not schedule a task to be executed.
#Description
IPRIPv2 could not schedule a task to be executed. This may have been caused by a memory allocation failure. The data is the error code.
Message #
Event ID 30018: IPRIPv2 was unable to add a route to the Routing Table Manager.
#Event ID 30019: IPRIPv2 received an error in a call to select().
#Description
IPRIPv2 received an error in a call to select(). This may indicate underlying network problems. The data is the error code.
Message #
Event ID 30020: IPRIPv2 was unable to receive an incoming message on the local interface with IP address param1.
#Event ID 30021: IPRIPv2 received a packet which was smaller than the minimum size allowed for IPRIP packets.
#Event ID 30022: IPRIPv2 received a packet with an invalid version in its header.
#Event ID 30023: IPRIPv2 received a packet with an invalid header.
#Event ID 30024: IPRIPv2 was unable to send a packet from the interface with IP address param1 to the IP address param2.
#Event ID 30025: IPRIPv2 discarded a response packet from a neighbor with IP address param1.
#Event ID 30026: IPRIPv2 discarded a version param1 packet received on the interface with IP address param2 from a neighbor with IP address param3.
#Description
IPRIPv2 discarded a version param1 packet received on the interface with IP address param2 from a neighbor with IP address param3. The above interface is configured to accept only version param4 packets.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString | |
param3 UnicodeString | |
param4 UnicodeString |
Event ID 30027: IPRIPv2 discarded a packet received on the interface with IP address param1 from a neighboring router with IP address param2, because the packet failed aut...
#Event ID 30028: IPRIPv2 is ignoring a route to param1 with next-hop param2 which was advertised by a neighbor with IP address param3.
#Event ID 30029: IPRIPv2 is ignoring a route to the loopback network param1 with next-hop param2 which was advertised by a neighbor with IP address param3.
#Event ID 30030: IPRIPv2 is ignoring a route to the broadcast network param1 with next-hop param2 which was advertised by a neighbor with IP address param3.
#Event ID 30031: IPRIPv2 is ignoring a host route to param1 with next-hop param2 which was advertised by a neighbor with IP address param3, because the interface on which the r...
#Event ID 30032: IPRIPv2 is ignoring a default route with next-hop param2 which was advertised by a neighbor with IP address param3, because the interface on which the rout...
#Event ID 30033: IPRIPv2 is ignoring a route to param1 with next-hop param2 which was advertised by a neighbor with IP address param3, because the interface on which the route ...
#Event ID 30034: IPRIPv2 was unable to add a route to the Routing Table Manager.
#Event ID 30035: IPRIPv2 was unable to enumerate the routes in the Routing Table Manager.
#Description
IPRIPv2 was unable to enumerate the routes in the Routing Table Manager. The data is the error code.
Message #
Event ID 30037: IPRIPv2 has learnt of a new route.
#Event ID 30038: IPRIPv2 has changed the next-hop of the route to param1.
#Event ID 30039: IPRIPv2 has learnt of a change in metric for its route to param1 with next-hop param2.
#Event ID 30040: IPRIPv2 has learnt of a new route.
#Event ID 30041: IPRIPv2 has timed-out its route to param1 with next-hop param2, since no neighboring routers announced the route.
#Event ID 30042: IPRIPv2 has deleted its route to param1 with next-hop param2, since the route timed-out and no neighboring routers announced the route.
#Event ID 30043: IPRIPv2 is ignoring a route on the local interface with IP address param1.
#Event ID 30044: IPRIPv2 is ignoring a route to param1 with next-hop param2 which was advertised by a neighbor with IP address param3, since the route was advertised with an in...
#Event ID 30045: IPRIPv2 was unable to enumerate network events on the local interface with IP address param1.
#Event ID 30046: IPRIPv2 detected an error on the local interface with IP address param1.
#Event ID 30047: IPRIPv2 was unable to request notification of events on the socket for the local interface with IP address param1.
#Event ID 30048: IPRIPv2 was unable to create a socket for the local interface with IP address param1.
#Event ID 30049: IPRIPv2 could not enable broadcasting on the socket for the local interface with IP address param1.
#Event ID 30050: IPRIPv2 could not bind to port 520 on the socket for the local interface with IP address param1.
#Event ID 30051: IPRIPv2 could not request multicasting on the local interface with IP address param1.
#Event ID 30052: IPRIPv2 could not join the multicast group 224.
#Event ID 30053: IPRIPv2 discarded a response packet from a neighbor with IP address param1.
#Event ID 30054: IPRIPv2 could not register an event with the Ntdll wait thread.
#Description
IPRIPv2 could not register an event with the Ntdll wait thread. The data is the error code.
Message #
Event ID 30055: IPRIPv2 could not register a timer queue with the Ntdll thread.
#Description
IPRIPv2 could not register a timer queue with the Ntdll thread. The data is the error code.
Message #
Event ID 30056: IPRIPV2 could not be enabled on the interface.
#Event ID 30057: Peer with IP address param1 was unable to receive RIP message sent out from interface with IP address param2.
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 2191cd11-a6c7-43dd-998d-59c77607cde1
Defined in iprip2.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02