Microsoft-Windows-SharedAccess_NAT
Event ID 30001: The DHCP allocator was unable to check whether the IP address param1 is in use on the network for local IP address param2.
#Description
The DHCP allocator was unable to check whether the IP address param1 is in use on the network for local IP address param2. This error may indicate lack of support for address-resolution on the network, or an error condition on the local machine. The data is the error code.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString |
Event ID 30002: The DHCP allocator was unable to bind to the IP address param1.
#Event ID 30003: The DHCP allocator was unable to allocate param1 bytes of memory.
#Event ID 30004: The DHCP allocator received a message containing an unrecognized code (param1).
#Event ID 30005: The DHCP allocator has detected a DHCP server with IP address param1 on the same network as the interface with IP address param2.
#Event ID 30006: The DHCP allocator encountered a network error while attempting to detect existing DHCP servers on the network of the interface with IP address param1.
#Event ID 30007: The DHCP allocator received a message smaller than the minimum message size.
#Description
The DHCP allocator received a message smaller than the minimum message size. The message has been discarded.
Message #
Event ID 30008: The DHCP allocator received a message whose format was invalid.
#Description
The DHCP allocator received a message whose format was invalid. The message has been discarded.
Message #
Event ID 30009: The DHCP allocator encountered a network error while attempting to reply on IP address param1 to a request from a client.
#Event ID 30010: The DHCP allocator received a DHCP message containing an unrecognized message type (param1) in the DHCP message type option field.
#Event ID 30011: The DHCP allocator encountered a network error while attempting to receive messages on the interface with IP address param1.
#Event ID 30012: The DHCP allocator detected network address translation (NAT) enabled on the interface with index 'param1'.
#Event ID 30013: The DHCP allocator has disabled itself on IP address param1, since the IP address is outside the param2/param3 scope from which addresses are being allocated t...
#Description
The DHCP allocator has disabled itself on IP address param1, since the IP address is outside the param2/param3 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString | |
param3 UnicodeString |
Event ID 30999: end.
#Event ID 31001: The DNS proxy agent detected network address translation (NAT) enabled on the interface with index 'param1'.
#Event ID 31002: The DNS proxy agent was unable to bind to the IP address param1.
#Event ID 31003: The DNS proxy agent encountered a network error while attempting to receive messages on the interface with IP address param1.
#Event ID 31004: The DNS proxy agent was unable to allocate param1 bytes of memory.
#Event ID 31005: The DNS proxy agent encountered a network error while attempting to forward a response to a client from a name resolution server on the interface w...
#Event ID 31006: The DNS proxy agent encountered a network error while attempting to forward a query from the client param1 to the server param2 on the interface with IP ad...
#Event ID 31007: The DNS proxy agent was unable to register for notification of changes to the local list of DNS and WINS servers.
#Description
The DNS proxy agent was unable to register for notification of changes to the local list of DNS and WINS servers. This may indicate that system resources are low. The data is the error code.
Message #
Event ID 31008: The DNS proxy agent was unable to read the local list of name resolution servers from the registry.
#Description
The DNS proxy agent was unable to read the local list of name resolution servers from the registry. The data is the error code.
Message #
Event ID 31009: The DNS proxy agent was unable to resolve a query from param1 after consulting all entries in the local list of name resolution servers.
#Event ID 31010: The DNS proxy agent was unable to initiate a demand dial connection on the default interface while trying to resolve a query from param1.
#Event ID 31011: The DNS proxy agent was unable to resolve a query because no list of name resolution servers is configured locally and no interface is configured a...
#Description
The DNS proxy agent was unable to resolve a query because no list of name resolution servers is configured locally and no interface is configured as the default for name resolution.
Message #
Event ID 31012: The DNS proxy agent encountered an error while obtaining the local list of name resolution servers.
#Description
The DNS proxy agent encountered an error while obtaining the local list of name resolution servers. Some DNS or WINS servers may be inaccessible to clients on the local network. The data is the error code.
Message #
Event ID 31013: The DNS proxy agent was unable to register for notification of changes to the ICS Domain suffix string.
#Description
The DNS proxy agent was unable to register for notification of changes to the ICS Domain suffix string. This may indicate that system resources are low. The data is the error code.
Message #
Event ID 31014: The DNS proxy agent was unable to read the ICS Domain suffix string from the registry.
#Description
The DNS proxy agent was unable to read the ICS Domain suffix string from the registry. The data is the error code.
Message #
Event ID 31015: The DNS proxy agent received a message smaller than the minimum message size.
#Description
The DNS proxy agent received a message smaller than the minimum message size. The message has been discarded.
Message #
Event ID 31999: end.
#Event ID 32001: The Network Address Translator (NAT) was unable to update the local address resolution table to respond to requests for IP address param1 and mask param2.
#Description
The Network Address Translator (NAT) was unable to update the local address resolution table to respond to requests for IP address param1 and mask param2. Address resolution may fail to operate for addresses in the given range. This error may indicate a problem with TCP/IP networking, or it may indicate lack of support for address resolution in the underlying network interface. The data is the error code.
Message #
Fields #
| Name | Description |
|---|---|
param1 UnicodeString | |
param2 UnicodeString |
Event ID 32002: The Network Address Translator (NAT) was unable to allocate param1 bytes.
#Event ID 32003: The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module.
#Description
The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.
Message #
Event ID 32004: The Network Address Translator (NAT) was unable to load the kernel-mode translation module.
#Description
The Network Address Translator (NAT) was unable to load the kernel-mode translation module. The data is the error code.
Message #
Event ID 32005: The Network Address Translator (NAT) was unable to unload the kernel-mode translation module.
#Description
The Network Address Translator (NAT) was unable to unload the kernel-mode translation module. The data is the error code.
Message #
Event ID 32006: The Internet Connection Sharing service could not start because another process has taken control of the kernel-mode translation module.
#Event ID 32007: The Connection Sharing component could not start because another process has taken control of the kernel-mode translation module.
#Event ID 32008: The Network Address Translator (NAT) was unable to expand the wildcard mappings.
#Description
The Network Address Translator (NAT) was unable to expand the wildcard mappings. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code.
Message #
Event ID 32999: end.
#Event ID 34001: The ICS_IPV6 failed to configure IPv6 stack.
#Event ID 34002: The ICS_IPV6 was unable to allocate param1 bytes of memory.
#Event ID 34003: The ICS_IPV6 was unable to allocate param1 bytes of memory.
#Event ID 34004: The ICS_IPV6 was unable to allocate param1 bytes of memory.
#Event ID 34005: The ICS_IPV6 was unable to allocate param1 bytes of memory.
#Event ID 34006: The ICS_IPV6 was unable to allocate param1 bytes of memory.
#Event ID 34007: Failed to create registry key "System\\CurrentControlSet\\Services\\Tcpip6\\Parameters".
#Event ID 34999: end.
#Provenance
ETW provider GUID a6f32731-9a38-4159-a220-3d9b7fc5fe5d
Defined in ipnathlp.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB