Microsoft-Windows-Time-Service-PTP-Provider
12 events across 1 channel
Event ID 512: PTP provider started receiving announcements from the PTP Master Name with IP Address Address on local IfIndex:LocalIfIndex and the following PTP parameters: Clock...
#Description
PTP provider started receiving announcements from the PTP Master Name with IP Address Address on local IfIndex:LocalIfIndex and the following PTP parameters.
Message #
Fields #
| Name | Description |
|---|---|
Name UnicodeString | |
Address UnicodeString | |
MasterClockId UnicodeString | |
MasterPortNum UInt32 | |
DomainNumber UInt32 | |
UTCValid UInt32 | |
CurrentUTCOffset UInt32 | |
Flags UnicodeString | |
GrandMasterClockId UnicodeString | |
StepsRemovedFromGrandMaster UInt32 | |
TimeSourceCode UnicodeString | |
LogAnnounceInterval Int32 | |
ActiveMasterCount UInt32 | |
TickCount UInt64 | |
LocalIfIndex UInt32 |
Event ID 513: PTP provider has chosen the PTP Master BestMasterName with IP Address MasterAddress on local IfIndex:LocalIfIndex as the best master and the source of time.
#Description
PTP provider has chosen the PTP Master BestMasterName with IP Address MasterAddress on local IfIndex:LocalIfIndex as the best master and the source of time. This master is announcing the following PTP parameters.
Message #
Fields #
| Name | Description |
|---|---|
BestMasterName UnicodeString | |
MasterAddress UnicodeString | |
MasterClockId UnicodeString | |
MasterPortNum UInt32 | |
DomainNumber UInt32 | |
UTCValid UInt32 | |
CurrentUTCOffset UInt32 | |
Flags UnicodeString | |
GrandMasterClockId UnicodeString | |
StepsRemovedFromGrandMaster UInt32 | |
TimeSourceCode UnicodeString | |
LogAnnounceInterval Int32 | |
TickCount UInt64 | |
LocalIfIndex UInt32 |
Event ID 514: PTP Master Name with IP Address Address has made no announcements in the last announce timeout window (AnnounceTimeoutMsec milliseconds).
#Description
PTP Master with IP Address has made no announcements in the last announce timeout window ( milliseconds). It is excluded from being considered as a (potential) time source. PTP Master parameters.
Message #
Fields #
| Name | Description |
|---|---|
Name UnicodeString | |
Address UnicodeString | |
AnnounceTimeoutMsec UInt32 | |
MasterClockId UnicodeString | |
MasterPortNum UInt32 | |
LogAnnounceInterval Int32 | |
ActiveMasterCount UInt32 | |
TickCount UInt64 | |
DomainNumber UInt32 |
Event ID 515: Ptp Provider Configuration.
#Description
Ptp Provider Configuration.
Message #
Fields #
| Name | Description |
|---|---|
AllowedMastersList UnicodeString | |
AnnounceIntervalMsec UInt32 | |
DelayPollIntervalMsec UInt32 | |
IfTstmp UInt32 | |
BestMasterName UnicodeString | |
BMAddress UnicodeString | |
BMClockId UnicodeString | |
BMPortNum UInt32 | |
BMLastTimeSampleTickCount UInt64 | |
ActiveMasterCount UInt32 | |
MulticastRxEnabled UInt32 | |
TickCount UInt64 | |
E2ECorrectionEnabled UInt32 | |
HWTstmpingIfIndex UInt32 | |
MulticastOnlyTxEnabled UInt32 | |
MulticastIfIndex UInt32 | |
AllowAnyMaster UInt32 | |
LocalDomainNumber UInt32 | |
MasterDomainNumber UInt32 |
Event ID 516: Messages from PTP Master will be ignored because the master is not allowed.
#Description
Messages from PTP Master will be ignored because the master is not allowed.
Message #
Fields #
| Name | Description |
|---|---|
Address UnicodeString | |
MasterClockId UnicodeString | |
MasterPortNum UInt32 | |
DomainNumber UInt32 | |
UTCValid UInt32 | |
CurrentUTCOffset UInt32 | |
Flags UnicodeString | |
GrandMasterClockId UnicodeString | |
StepsRemovedFromGrandMaster UInt32 | |
TimeSourceCode UnicodeString | |
LogAnnounceInterval Int32 | |
ActiveMasterCount UInt32 | |
TickCount UInt64 |
Event ID 517: PTP provider has detected the following timestamping capabilities (IF_INDEX values printed): Hardware timestamping available on network interfaces:...
#Event ID 518: PTP provider can translate hardware timestamps from the NIC with IfIndex IfIndex.
#Event ID 519: PTP provider is unable to translate hardware timestamps from the NIC with IfIndex IfIndex.
#Event ID 520: PTP provider is configured to accept announcements from any master on the network.
#Event ID 521: PTP provider is receiving timestamps from the network stack.
#Description
PTP provider is receiving timestamps from the network stack. These typically help reduce the jitter in time error calculations and improve time sync accuracy.Some timestamps need to be translated before use. Look for other events for more information on timestamp translation. Current Tick Count:TickCount For more information, see https://go.microsoft.com/fwlink/?linkid=873491.
Message #
Fields #
| Name | Description |
|---|---|
TickCount UInt64 |
Event ID 522: PTP provider is not receiving any timestamps from the network stack, which may result in lowered time sync accuracy.
#Description
PTP provider is not receiving any timestamps from the network stack, which may result in lowered time sync accuracy. This is the default configuration and the behavior on service startup. This can also occur if there are conflicting settings for a NIC or due to actual runtime issues. Current Tick Count:TickCount For more information, see https://go.microsoft.com/fwlink/?linkid=873491.
Message #
Fields #
| Name | Description |
|---|---|
TickCount UInt64 |
Event ID 523: The timestamp settings on the NICs in this system are ambiguous, with a combination of different kinds of timestamping enabled.
#Description
The timestamp settings on the NICs in this system are ambiguous, with a combination of different kinds of timestamping enabled. The resulting timestamps may not be translated correctly, resulting in sub-optimal time sync accuracy. There could also be path asymmetry due to the use of different kinds of timestamp types on different NICs in the system. For best results, enable a single kind of timestamping on all NICs in the system. Current Tick Count:TickCount For more information, see https://go.microsoft.com/fwlink/?linkid=873491.
Message #
Fields #
| Name | Description |
|---|---|
TickCount UInt64 |
Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID cffb980e-327c-5b87-19c6-62c4c3be2290
Defined in ptpprov.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02