Microsoft-Windows-Runtime-Networking
76 events across 1 channel
Event ID 1: asyncOperation at asyncObject started.
#Event ID 2: asyncOperation at asyncObject failed to start.
#Event ID 3: asyncOperation at asyncObject completed successfully.
#Event ID 4: asyncOperation at asyncObject failed with error code errorCode: hresult.
#Event ID 5: asyncOperation at asyncObject was cancelled.
#Event ID 6: asyncOperation at asyncObject was closed.
#Event ID 7: Failed to parse URI 'uri'.
#Event ID 8: Failed to create URI with base URI 'str1' and relative URI 'str2'.
#Event ID 9: Add HTTP header 'str1: str2'.
#Event ID 10: Start connect request to 'str1' with credential of 'str2'.
#Event ID 11: Start connect request to 'uri' with default credential.
#Event ID 12: Failed connect request to 'uri' at port port.
#Event ID 13: Opening request to 'str1' to 'str2' with flags flags.
#Event ID 14: Failed open request to 'uri'.
#Event ID 15: Request context obj1 has request handle obj2 to 'uri'.
#Event ID 16: Set HTTP send and receive timeout to lengthms on request handle obj.
#Event ID 17: Start send to request handle obj with content length length.
#Event ID 18: Request handle obj completed synchronously.
#Event ID 19: Request context obj completed send asynchronously.
#Event ID 20: Writing length bytes to request handle obj.
#Event ID 21: Failed to send entity body to request handle obj.
#Event ID 22: Sent HTTP request at request handle obj: statusDescription.
#Event ID 23: Start to receive response from request handle obj.
#Event ID 24: Received HTTP response from request handle obj with status code statusCode and status description 'statusDescription'.
#Event ID 25: Receive HTTP response from request handle obj: statusDescription.
#Event ID 26: Failed to receive HTTP response from request handle obj.
#Event ID 27: Request context obj received HTTP response of length bytes, which is over the limit limit.
#Event ID 28: Request context obj resubmitting the request.
#Event ID 29: Reusing the request handle obj for server 'statusDescription'.
#Event ID 30: Request context obj was aborted.
#Event ID 31: Progress to 'statusDescription': int1 bytes sent; int2 total bytes to send; int3 bytes received; int4 total bytes to receive.
#Event ID 32: HTTP request to 'uri' completed.
#Event ID 33: asyncOperation at asyncObject failed to process HTTP response 'response'.
#Event ID 34: runtimeClass::api is called.
#Event ID 35: runtimeClass::api returned successfully.
#Event ID 36: runtimeClass::api failed with HRESULT hresult: errorMessage.
#Event ID 37: Win32 API win32Api failed with error code error: errorMessage.
#Event ID 38: Unable to cancel GetAddrInfoEx with handle obj.
#Event ID 39: Unable to cancel DnsQueryEx with handle obj.
#Event ID 40: DatagramSocket obj failed to deliver event and stopped receiving due to error hresult: errorMessage.
#Event ID 41: DatagramSocket obj is raising event with bytesRead bytes received from sender 'address'.
#Event ID 42: DatagramSocket obj started receiving message at socket handle.
#Event ID 43: DatagramSocket obj failed to start receiving.
#Event ID 44: asyncOperation at obj is trying to receive length bytes at socket handle.
#Event ID 45: asyncOperation at obj has received read bytes and continues to receive the remaining length bytes.
#Event ID 46: asyncOperation at obj received length bytes.
#Event ID 47: TCP socket obj is connected: local port = port1; remote IP address: ip; remote port = port2.
#Event ID 48: UDP socket obj is connected to remote address: address.
#Event ID 49: The datagram received by socket obj from sender 'address' does not contain IP packet information.
#Event ID 50: asyncOperation at obj sent length bytes.
#Event ID 51: asyncOperation at obj is trying to send length bytes at socket handle.
#Event ID 52: MessageWebSocket obj received the close frame from the server.
#Event ID 53: MessageWebSocket obj is raising event with length bytes received.
#Event ID 54: MessageWebSocket obj failed to start receiving.
#Event ID 55: MessageWebSocket obj failed to deliver event and stopped receiving due to error hresult: errorMessage.
#Event ID 57: WebSocket obj is sending the close frame.
#Event ID 58: WebSocket Reason is receiving the close frame.
#Event ID 59: WebSocket obj I/O operation completed with error.
#Event ID 60: WebSocket asyncOperation at obj sent length bytes.
#Event ID 61: WebSocket asyncOperation at obj is trying to send length bytes at WebSocket handle.
#Event ID 62: runtimeClass is already closed and CompleteDelivery is pending with: outstanding read operations: pendingOperations.
#Event ID 63: pending_Winsock_requests.
#Description
pending_Winsock_requests.CompleteDelivery is pending with: outstanding read operations: data_available, pending Winsock requests: runtimeClass, data available: pendingOperations.
Message #
Fields #
| Name | Description |
|---|---|
runtimeClass UInt32 | |
pendingOperations UInt32 | |
winsockPendingOperations UInt32 | |
winsockDataAvailable Boolean |
Event ID 64: runtimeClass.
#Event ID 65: runtimeClass.
#Event ID 66: Socket connection established: Socket_connection_established.
#Event ID 67: Proxy lookup for socket connection to 'value' completed successfully: resolutionResult.
#Event ID 68: Proxy lookup for socket connection to 'value' completed with error errorCode: errorMessage.
#Event ID 69: Ignored server certificate error count: Ignored_server_certificate_error_count.
#Event ID 70: Server certificate thumbprint: 'contains_fatal_certificate_errors', certificate error count: certificateThumbprint, contains fatal certificate errors: intermediate_certificate_count, intermediate c...
#Description
Server certificate thumbprint: 'contains_fatal_certificate_errors', certificate error count: certificateThumbprint, contains fatal certificate errors: intermediate_certificate_count, intermediate certificate count: errorCount.
Message #
Fields #
| Name | Description |
|---|---|
certificateThumbprint UnicodeString | |
hasFatalError Boolean | |
errorCount UInt32 | |
errorList UInt32 | |
intermediateCertificatesCount UInt32 | |
intermediateCertificatesList UnicodeString |
Event ID 71: Failed to flush reads and wait for pending I/O to complete with context obj.
#Event ID 72: Handle obj: HTTP/2 enabled.
#Event ID 73: Status - Line: functionName Status: lineNumber.
#Description
Status - Line: functionName Status: lineNumber.
Message #
Fields #
| Name | Description |
|---|---|
functionName AnsiString | |
lineNumber Int32 | |
status Int32 | NTSTATUS reference |
Event ID 74: Async operation asyncOperation at asyncObject started server custom validation.
#Event ID 75: Async operation asyncOperation at asyncObject waiting for completion of server custom validation.
#Event ID 76: Async operation asyncOperation at asyncObject failed server custom validation.
#Event ID 77: Async operation asyncOperation at asyncObject successfully completed server custom validation.
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 6eb875eb-8f4a-4800-a00b-e484c97d7561
Defined in Windows.Networking.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1000, captured 2026-06-02