detection.wiki

Microsoft-Windows-USB-USBPORT

EventTitleChannelSampleRule
1Host Controller AddDiagnosticNN
2Host Controller RemovalDiagnosticNN
3Host Controller InformationDiagnosticYN
4Host Controller StartDiagnosticNN
5Host Controller StopDiagnosticNN
6Host Controller SuspendDiagnosticNN
7Host Controller ResumeDiagnosticNN
8Host Controller Async Schedule EnableDiagnosticNN
9Host Controller Async Schedule DisableDiagnosticNN
10Host Controller Periodic Schedule EnableDiagnosticNN
11Host Controller Periodic Schedule DisableDiagnosticNN
12Device CreateDiagnosticNN
13Device InitializeDiagnosticNN
14Device RemovalDiagnosticNN
15Device InformationDiagnosticYN
16Device Idle State SetDiagnosticYN
17Device Idle State ClearDiagnosticYN
18Endpoint OpenDiagnosticNN
19Endpoint CloseDiagnosticNN
20Endpoint InformationDiagnosticYN
21Dispatch URB_FUNCTION_SELECT_CONFIGURATIONDiagnosticNN
22Dispatch URB_FUNCTION_SELECT_INTERFACEDiagnosticNN
23Dispatch URB_FUNCTION_GET_CURRENT_FRAME_NUMBERDiagnosticNN
24Dispatch URB_FUNCTION_CONTROL_TRANSFERDiagnosticNN
25Dispatch URB_FUNCTION_CONTROL_TRANSFER_EXDiagnosticYN
26Dispatch URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFERDiagnosticYN
27Dispatch URB_FUNCTION_ISOCH_TRANSFERDiagnosticNN
28Dispatch URB_FUNCTION_GET_DESCRIPTOR_FROM_DEVICEDiagnosticNN
29Dispatch URB_FUNCTION_SET_DESCRIPTOR_TO_DEVICEDiagnosticNN
30Dispatch URB_FUNCTION_GET_DESCRIPTOR_FROM_ENDPOINTDiagnosticNN
31Dispatch URB_FUNCTION_SET_DESCRIPTOR_TO_ENDPOINTDiagnosticNN
32Dispatch URB_FUNCTION_GET_DESCRIPTOR_FROM_INTERFACEDiagnosticNN
33Dispatch URB_FUNCTION_SET_DESCRIPTOR_TO_INTERFACEDiagnosticNN
34Dispatch URB_FUNCTION_SET_FEATURE_TO_DEVICEDiagnosticNN
35Dispatch URB_FUNCTION_SET_FEATURE_TO_INTERFACEDiagnosticNN
36Dispatch URB_FUNCTION_SET_FEATURE_TO_ENDPOINTDiagnosticNN
37Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_DEVICEDiagnosticNN
38Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_INTERFACEDiagnosticNN
39Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_ENDPOINTDiagnosticNN
40Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_OTHERDiagnosticNN
41Dispatch URB_FUNCTION_SET_FEATURE_TO_OTHERDiagnosticNN
42Dispatch URB_FUNCTION_GET_STATUS_FROM_DEVICEDiagnosticNN
43Dispatch URB_FUNCTION_GET_STATUS_FROM_INTERFACEDiagnosticNN
44Dispatch URB_FUNCTION_GET_STATUS_FROM_ENDPOINTDiagnosticNN
45Dispatch URB_FUNCTION_GET_STATUS_FROM_OTHERDiagnosticNN
46Dispatch URB_FUNCTION_VENDOR_DEVICEDiagnosticNN
47Dispatch URB_FUNCTION_VENDOR_INTERFACEDiagnosticNN
48Dispatch URB_FUNCTION_VENDOR_ENDPOINTDiagnosticNN
49Dispatch URB_FUNCTION_CLASS_DEVICEDiagnosticNN
50Dispatch URB_FUNCTION_CLASS_INTERFACEDiagnosticYN
51Dispatch URB_FUNCTION_CLASS_ENDPOINTDiagnosticNN
52Dispatch URB_FUNCTION_CLASS_OTHERDiagnosticNN
53Dispatch URB_FUNCTION_VENDOR_OTHERDiagnosticNN
54Dispatch URB_FUNCTION_ABORT_PIPEDiagnosticNN
55Dispatch URB_FUNCTION_SYNC_RESET_PIPE_AND_CLEAR_STALLDiagnosticNN
56Dispatch URB_FUNCTION_SYNC_RESET_PIPEDiagnosticNN
57Dispatch URB_FUNCTION_SYNC_CLEAR_STALLDiagnosticNN
58Dispatch URB_FUNCTION_GET_CONFIGURATIONDiagnosticNN
59Dispatch URB_FUNCTION_GET_INTERFACEDiagnosticNN
60Dispatch URB_FUNCTION_GET_MS_FEATURE_DESCRIPTORDiagnosticNN
61Dispatch URB_FUNCTION_TAKE_FRAME_LENGTH_CONTROLDiagnosticNN
62Dispatch URB_FUNCTION_RELEASE_FRAME_LENGTH_CONTROLDiagnosticNN
63Dispatch URB_FUNCTION_GET_FRAME_LENGTHDiagnosticNN
64Dispatch URB_FUNCTION_SET_FRAME_LENGTHDiagnosticNN
65Dispatch URB_FUNCTION_RESERVEDDiagnosticNN
66Complete URB_FUNCTION_CONTROL_TRANSFERDiagnosticYN
67Complete URB_FUNCTION_CONTROL_TRANSFER_EXDiagnosticYN
68Complete URB_FUNCTION_CONTROL_TRANSFER with DataDiagnosticNN
69Complete URB_FUNCTION_CONTROL_TRANSFER_EX with DataDiagnosticNN
70Complete URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFERDiagnosticYN
71Complete URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER with DataDiagnosticNN
72Complete COMPLETE_URB_FUNCTION_ISOCH_TRANSFERDiagnosticNN
73Complete COMPLETE_URB_FUNCTION_ISOCH_TRANSFER with DataDiagnosticNN
74Internal URB_FUNCTION_CONTROL_TRANSFERDiagnosticNN
75Complete Internal URB_FUNCTION_CONTROL_TRANSFERDiagnosticNN
76Complete Internal URB_FUNCTION_CONTROL_TRANSFER with DataDiagnosticNN
77Complete URB_FUNCTION_ABORT_PIPEDiagnosticNN
78Dispatch URB INVALID_HEADER_LENGTH_WARNINGDiagnosticNN
79Dispatch URB INVALID_FUNCTIONDiagnosticNN
80Dispatch URB INVALID_HEADER_LENGTHDiagnosticNN
81Dispatch URB INVALID_DEVICE_HANDLEDiagnosticNN
82Dispatch URB INVALID_FUNCTION_NOT_SUPPORTEDDiagnosticNN
83Dispatch URB INVALID_FUNCTION_RESERVEDDiagnosticNN
84Dispatch URB INVALID_DUE_TO_HC_SUSPENDDiagnosticNN
85Dispatch URB INVALID_URB_LINKDiagnosticNN
86Dispatch URB INVALID_PIPE_HANDLEDiagnosticNN
87Dispatch URB INVALID_ZERO_BW_PIPE_HANDLEDiagnosticNN
88Dispatch URB NOP_ZERO_BW_PIPE_HANDLE_REQUESTDiagnosticNN
89Dispatch URB INVALID_CONTROL_TRANSFER_ENDPOINTDiagnosticNN
90Dispatch URB INVALID_CONTROL_TRANSFER_BUFFER_LENGTHDiagnosticNN
91Dispatch URB INVALID_BULK_OR_INTERRUPT_TRANSFER_ENDPOINTDiagnosticNN
92Dispatch URB INVALID_BULK_OR_INTERRUPT_TRANSFER_BUFFER_LENGTHDiagnosticNN
93Dispatch URB INVALID_ISOCHRONOUS_TRANSFER_ENDPOINTDiagnosticNN
94Dispatch URB INVALID_NULL_TRANSFER_BUFFER_AND_MDLDiagnosticNN
95Dispatch URB INVALID_NON_NULL_TRANSFER_BUFFER_MDLDiagnosticNN
96Dispatch URB ALLOCATE_MDL_FAILUREDiagnosticNN
97Dispatch URB ALLOCATE_TRANSFER_CONTEXT_FAILUREDiagnosticNN
98Dispatch URB NOP_ROOTHUB_PIPE_HANDLE_REQUESTDiagnosticNN
99Dispatch URB INVALID_ISOCHRONOUS_ZERO_LENGTHDiagnosticNN
100Dispatch URB INVALID_ISOCHRONOUS_NUM_PACKETSDiagnosticNN
101Dispatch URB INVALID_ISOCHRONOUS_START_FRAMEDiagnosticNN
102Irp CancelDiagnosticYN
103USBUSER_OP_RAW_RESET_PORT DispatchDiagnosticNN
104USBUSER_OP_RAW_RESET_PORT GetPortStatus after SetFeaturePortPowerDiagnosticNN
105USBUSER_OP_RAW_RESET_PORT GetPortStatus after SetFeaturePortResetDiagnosticNN
106USBUSER_OP_RAW_RESET_PORT GetPortStatus after ClearFeaturePortResetChangeDiagnosticNN
107USBUSER_OP_RAW_RESET_PORT CompleteDiagnosticNN
108USBUSER_OP_SEND_ONE_PACKET DispatchDiagnosticNN
109USBUSER_OP_SEND_ONE_PACKET Dispatch with DataDiagnosticNN
110USBUSER_OP_SEND_ONE_PACKET TimeoutDiagnosticNN
111USBUSER_OP_SEND_ONE_PACKET CompleteDiagnosticNN
112USBUSER_OP_SEND_ONE_PACKET Complete with DataDiagnosticNN
113Code Execution time in Micro SecondsDiagnosticNN
114Code Execution time for PutScatterGatherList in Micro SecondsDiagnosticNN
115Code Execution time for BuildScatterGatherList in Micro SecondsDiagnosticNN
1024EHCI Miniport Start DispatchDiagnosticNN
1025EHCI Miniport Start CompleteDiagnosticNN
1026EHCI Miniport Start Complete Error - Invalid ResourcesDiagnosticNN
1027EHCI Miniport Start Complete Error - Hardware GoneDiagnosticNN
1028EHCI Miniport Start Complete Error - Stop BIOSDiagnosticNN
1029EHCI Miniport Start Complete Error - Initialize HardwareDiagnosticNN
1030EHCI Miniport Start Complete Error - Initialize ScheduleDiagnosticNN
1031EHCI Miniport Stop DispatchDiagnosticNN
1032EHCI Miniport Stop CompleteDiagnosticNN
1033EHCI Miniport Suspend DispatchDiagnosticNN
1034EHCI Miniport Suspend CompleteDiagnosticNN
1035EHCI Miniport Resume DispatchDiagnosticNN
1036EHCI Miniport Resume CompleteDiagnosticNN
1037EHCI Miniport Resume Complete Error - Hardware GoneDiagnosticNN
1038EHCI Miniport Resume Complete Error - HcHaltedDiagnosticNN
1039EHCI Miniport Resume Complete Error - ConfigFlagDiagnosticNN
1040EHCI Miniport Resume Complete Error - PortPowerDiagnosticNN
1041EHCI Miniport Resume Complete Error - PortOwnedByCCDiagnosticNN
1042EHCI Miniport Resume Complete Error - OvercurrentChangeDiagnosticNN
1043EHCI Miniport Device DataDiagnosticNN
2048OHCI Miniport Start DispatchDiagnosticNN
2049OHCI Miniport Start CompleteDiagnosticNN
2050OHCI Miniport Start Complete Error - Invalid ResourcesDiagnosticNN
2051OHCI Miniport Start Complete Error - Hardware GoneDiagnosticNN
2052OHCI Miniport Start Complete Error - Stop BIOSDiagnosticNN
2053OHCI Miniport Start Complete Error - Initialize ScheduleDiagnosticNN
2054OHCI Miniport Start Complete Error - Initialize HardwareDiagnosticNN
2055OHCI Miniport Stop DispatchDiagnosticNN
2056OHCI Miniport Stop CompleteDiagnosticNN
2057OHCI Miniport Suspend DispatchDiagnosticNN
2058OHCI Miniport Suspend CompleteDiagnosticNN
2059OHCI Miniport Resume DispatchDiagnosticNN
2060OHCI Miniport Resume CompleteDiagnosticNN
2061OHCI Miniport Resume Complete Error - Hardware GoneDiagnosticNN
2062OHCI Miniport Resume Complete Error - HcControlDiagnosticNN
2063OHCI Miniport Resume Complete Error - HcHCCADiagnosticNN
2064OHCI Miniport Resume Complete Error - HcRhS_OverCurrentIndicatorChangeDiagnosticNN
2065OHCI Miniport Resume Complete Error - HcRhPS_OverCurrentIndicatorChangeDiagnosticNN
3072UHCI Miniport Start DispatchDiagnosticNN
3073UHCI Miniport Start CompleteDiagnosticNN
3074UHCI Miniport Start Complete Error - Invalid ResourcesDiagnosticNN
3075UHCI Miniport Start Complete Error - Stop BIOSDiagnosticNN
3076UHCI Miniport Start Complete Error - Initialize HardwareDiagnosticNN
3077UHCI Miniport Start Complete Error - Initialize ScheduleDiagnosticNN
3078UHCI Miniport Stop DispatchDiagnosticNN
3079UHCI Miniport Stop CompleteDiagnosticNN
3080UHCI Miniport Suspend DispatchDiagnosticYN
3081UHCI Miniport Suspend CompleteDiagnosticYN
3082UHCI Miniport Resume DispatchDiagnosticYN
3083UHCI Miniport Resume CompleteDiagnosticYN
3084UHCI Miniport Resume Complete Error - Hardware GoneDiagnosticNN
3085UHCI Miniport Resume Complete Error - EnterGlobalSuspendModeDiagnosticNN
3086UHCI Miniport Resume Complete Error - ForceGlobalResumeDiagnosticNN
3087UHCI Miniport Resume Complete Error - FrameNumberDiagnosticNN
3088UHCI Miniport Resume Complete Error - OvercurrentChangeDiagnosticNN
3089Run Time Power Management TransitionDiagnosticNN
3090Dispatch IRP_MN_WAIT_WAKEDiagnosticNN
3091Complete IRP_MN_WAIT_WAKEDiagnosticNN
3092Host Controller Open Bulk Or Control EndpointDiagnosticNN

Event ID 1: Host Controller Add

#
Channel
Diagnostic
Task
HostController
Opcode
Add

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 2: Host Controller Removal

#
Channel
Diagnostic
Task
HostController
Opcode
Removal

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 3: Host Controller Information

#
Channel
Diagnostic
Also via
realtime ETW trace
Level
Informational
Task
HostController
Opcode
Information

Fields #

NameDescription
fid_USBPORT_HC UInt16
fid_USBPORT_HC_Idle_Status Double
fid_USBPORT_HC_Pdo_Name UnicodeString
fid_RunTimePmSetupStatus UInt32
fid_DevicePowerState UInt32
fid_AcpiInstanceId AnsiString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-USB-USBPORT",
    "guid": "{C88A4EF5-D048-4013-9408-E04B7DB2814A}",
    "event_source_name": "",
    "event_id": 3,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 14,
    "keywords": "0x0000400000000003",
    "time_created": "2026-06-02T05:32:14.406+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 20896,
      "thread_id": 19908
    },
    "channel": "ETW Trace",
    "computer": "JD-DC01-2022",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "fid_AcpiInstanceId": "",
    "fid_DevicePowerState": 0,
    "fid_RunTimePmSetupStatus": 2,
    "fid_USBPORT_HC": "50A02DB38D87FFFF000000000100020086802070",
    "fid_USBPORT_HC_Idle_Status": "00000000",
    "fid_USBPORT_HC_Pdo_Name": "\\Device\\NTPNP_PCI0003"
  },
  "message": "USBPORT_HOST_CONTROLLER"
}

Event ID 4: Host Controller Start

#
Channel
Diagnostic
Task
HostController
Opcode
Start

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 5: Host Controller Stop

#
Channel
Diagnostic
Task
HostController
Opcode
Stop

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 6: Host Controller Suspend

#
Channel
Diagnostic
Task
HostController
Opcode
Suspend

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 7: Host Controller Resume

#
Channel
Diagnostic
Task
HostController
Opcode
Resume

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 8: Host Controller Async Schedule Enable

#
Channel
Diagnostic
Task
HostControllerAsyncSchedule
Opcode
Enable

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 9: Host Controller Async Schedule Disable

#
Channel
Diagnostic
Task
HostControllerAsyncSchedule
Opcode
Disable

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 10: Host Controller Periodic Schedule Enable

#
Channel
Diagnostic
Task
HostControllerPeriodicSchedule
Opcode
Enable

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 11: Host Controller Periodic Schedule Disable

#
Channel
Diagnostic
Task
HostControllerPeriodicSchedule
Opcode
Disable

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 12: Device Create

#
Channel
Diagnostic
Task
Device
Opcode
Create

Fields #

NameDescription
fid_USBPORT_HC Int8
fid_USBPORT_Device Int64
fid_USBPORT_Device_Descriptor Pointer

Event ID 13: Device Initialize

#
Channel
Diagnostic
Task
Device
Opcode
Initialize

Fields #

NameDescription
fid_USBPORT_HC Int8
fid_USBPORT_Device Int64
fid_USBPORT_Device_Descriptor Pointer

Event ID 14: Device Removal

#
Channel
Diagnostic
Task
Device
Opcode
Removal

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_USBPORT_Device UInt32

Event ID 15: Device Information

#
Channel
Diagnostic
Also via
realtime ETW trace
Level
Informational
Task
Device
Opcode
Information

Fields #

NameDescription
fid_USBPORT_HC UInt16
fid_USBPORT_Device Double
fid_USBPORT_Device_Descriptor SID
fid_USBPORT_Device_Driver_Name UnicodeString
fid_USBPORT_Device_Idle_State UInt32
fid_USBPORT_Device_Pdo_Name UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-USB-USBPORT",
    "guid": "{C88A4EF5-D048-4013-9408-E04B7DB2814A}",
    "event_source_name": "",
    "event_id": 15,
    "version": 0,
    "level": 4,
    "task": 4,
    "opcode": 14,
    "keywords": "0x0000000000000003",
    "time_created": "2026-06-02T05:32:14.406+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 20896,
      "thread_id": 19908
    },
    "channel": "ETW Trace",
    "computer": "JD-DC01-2022",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "fid_USBPORT_Device": "706D1EB38D87FFFF86802070000000000000000000000000000000000000000000000000000000000100000000000000",
    "fid_USBPORT_Device_Descriptor": "120100010901000886802070010000000001",
    "fid_USBPORT_Device_Driver_Name": "",
    "fid_USBPORT_Device_Idle_State": 0,
    "fid_USBPORT_Device_Pdo_Name": "",
    "fid_USBPORT_HC": "50A02DB38D87FFFF000000000100020086802070"
  },
  "message": "USBPORT_DEVICE"
}

Event ID 16: Device Idle State Set

#
Channel
Diagnostic
Level
Informational
Task
DeviceIdleState
Opcode
Set

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_USBPORT_Device UInt64
fid_USBPORT_Device_Idle_Previous_State UInt32
fid_USBPORT_Device_Idle_New_State UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 16,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 16
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 21,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:07.057Z",
    "version": 0
  },
  "event_data": {
    "fid_USBPORT_Device": "B01D7FB607C8FFFF27060100010000000100000000000000000000000000000000000000000000000100000001000000",
    "fid_USBPORT_Device_Idle_New_State": 1,
    "fid_USBPORT_Device_Idle_Previous_State": 0,
    "fid_USBPORT_HC": "500048B607C8FFFF000000000100020086802070"
  },
  "message": ""
}

Event ID 17: Device Idle State Clear

#
Channel
Diagnostic
Level
Informational
Task
DeviceIdleState
Opcode
Clear

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_USBPORT_Device UInt64
fid_USBPORT_Device_Idle_Previous_State UInt32
fid_USBPORT_Device_Idle_New_State UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 17,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 9712
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 22,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:01.986Z",
    "version": 0
  },
  "event_data": {
    "fid_USBPORT_Device": "40AC21B607C8FFFF86802070000000000000000000000000000000000000000000000000000000000100000000000000",
    "fid_USBPORT_Device_Idle_New_State": 0,
    "fid_USBPORT_Device_Idle_Previous_State": 1,
    "fid_USBPORT_HC": "500048B607C8FFFF000000000100020086802070"
  },
  "message": ""
}

Event ID 18: Endpoint Open

#
Channel
Diagnostic
Task
Endpoint
Opcode
Open

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_USBPORT_Device UInt64
fid_USBPORT_Endpoint FILETIME
fid_USBPORT_Endpoint_Descriptor HexInt32

Event ID 19: Endpoint Close

#
Channel
Diagnostic
Task
Endpoint
Opcode
Close

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_USBPORT_Device UInt64
fid_USBPORT_Endpoint FILETIME
fid_USBPORT_Endpoint_Descriptor HexInt32

Event ID 20: Endpoint Information

#
Channel
Diagnostic
Also via
realtime ETW trace
Level
Informational
Task
Endpoint
Opcode
Information

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_USBPORT_Device UInt64
fid_USBPORT_Endpoint FILETIME
fid_USBPORT_Endpoint_Descriptor HexInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-USB-USBPORT",
    "guid": "{C88A4EF5-D048-4013-9408-E04B7DB2814A}",
    "event_source_name": "",
    "event_id": 20,
    "version": 0,
    "level": 4,
    "task": 6,
    "opcode": 14,
    "keywords": "0x0000000000000003",
    "time_created": "2026-06-02T05:32:14.406+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 20896,
      "thread_id": 19908
    },
    "channel": "ETW Trace",
    "computer": "JD-DC01-2022",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "fid_USBPORT_Device": "706D1EB38D87FFFF86802070000000000000000000000000000000000000000000000000000000000100000000000000",
    "fid_USBPORT_Endpoint": "A01956B38D87FFFFC06D1EB38D87FFFF706D1EB38D87FFFF",
    "fid_USBPORT_Endpoint_Descriptor": "07050000400000",
    "fid_USBPORT_HC": "50A02DB38D87FFFF000000000100020086802070"
  },
  "message": "USBPORT_ENDPOINT"
}

Event ID 21: Dispatch URB_FUNCTION_SELECT_CONFIGURATION

#
Channel
Diagnostic
Task
URB_FUNCTION_SELECT_CONFIGURATION
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UInt32
fid_USBPORT_Device Binary
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_URB_Length UInt16
fid_URB UInt8
fid_Configuration_Descriptor_Length UInt16
fid_Configuration_Descriptor UInt8

Event ID 22: Dispatch URB_FUNCTION_SELECT_INTERFACE

#
Channel
Diagnostic
Task
URB_FUNCTION_SELECT_INTERFACE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UInt16
fid_USBPORT_Device Double
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_URB_Length UInt16
fid_URB UInt8

Event ID 23: Dispatch URB_FUNCTION_GET_CURRENT_FRAME_NUMBER

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_CURRENT_FRAME_NUMBER
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_USBPORT_Device Float
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_URB_FrameNumber UInt32

Event ID 24: Dispatch URB_FUNCTION_CONTROL_TRANSFER

#
Channel
Diagnostic
Task
URB_FUNCTION_CONTROL_TRANSFER
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 25: Dispatch URB_FUNCTION_CONTROL_TRANSFER_EX

#
Channel
Diagnostic
Level
Informational
Task
URB_FUNCTION_CONTROL_TRANSFER_EX
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 25,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 14320
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 25,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:01.986Z",
    "version": 0
  },
  "event_data": {
    "fid_IRP_Ptr": "0xFFFFC807C1C46B60",
    "fid_URB_Ptr": "0xFFFFC807BAF429B0",
    "fid_USBPORT_Device": false,
    "fid_USBPORT_Endpoint": "506B48B607C8FFFF90AC21B607C8FFFF40AC21B607C8FFFF",
    "fid_USBPORT_Endpoint_Descriptor": "07050000400000",
    "fid_USBPORT_HC": "500048B607C8FFFF000000000100020086802070",
    "fid_USBPORT_URB_CONTROL_TRANSFER": "880032000000000040AC21B607C8FFFFA20000000000000090AC21B607C8FFFF0B00000004000000B0F3DFC107C8FFFF10BE2AC007C8FFFFD007000000000000ACD9F9BA07C8FFFF0DF0ADDE0DF0ADDE000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000A300000001000400"
  },
  "message": ""
}

Event ID 26: Dispatch URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER

#
Channel
Diagnostic
Level
Informational
Task
URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_BULK_OR_INTERRUPT_TRANSFER 29

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 26,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 9712
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 25,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:01.986Z",
    "version": 0
  },
  "event_data": {
    "fid_IRP_Ptr": "0xFFFFC807B6485560",
    "fid_URB_Ptr": "0xFFFFC807B709E340",
    "fid_USBPORT_Device": false,
    "fid_USBPORT_Endpoint": "D0C36CB607C8FFFFD84CBDB707C8FFFF40AC21B607C8FFFF",
    "fid_USBPORT_Endpoint_Descriptor": "0705810301000A",
    "fid_USBPORT_HC": "500048B607C8FFFF000000000100020086802070",
    "fid_USBPORT_URB_BULK_OR_INTERRUPT_TRANSFER": "800009000000000040AC21B607C8FFFFA200000000000000D84CBDB707C8FFFF0300000001000000F02918B607C8FFFF001D82C107C8FFFF0000000000000000AC09EEBC07C8FFFF0DF0ADDE0DF0ADDE000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
  },
  "message": ""
}

Event ID 27: Dispatch URB_FUNCTION_ISOCH_TRANSFER

#
Channel
Diagnostic
Task
URB_FUNCTION_ISOCH_TRANSFER
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int64
fid_USBPORT_Device GUID
fid_USBPORT_Endpoint CountedUtf16String
fid_USBPORT_Endpoint_Descriptor 25
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_NumberOfPackets UInt16
fid_USBPORT_URB_ISOCH_TRANSFER 31
fid_USBPORT_URB_ISO_PACKETS 46

Event ID 28: Dispatch URB_FUNCTION_GET_DESCRIPTOR_FROM_DEVICE

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_DESCRIPTOR_FROM_DEVICE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 29: Dispatch URB_FUNCTION_SET_DESCRIPTOR_TO_DEVICE

#
Channel
Diagnostic
Task
URB_FUNCTION_SET_DESCRIPTOR_TO_DEVICE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 30: Dispatch URB_FUNCTION_GET_DESCRIPTOR_FROM_ENDPOINT

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_DESCRIPTOR_FROM_ENDPOINT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 31: Dispatch URB_FUNCTION_SET_DESCRIPTOR_TO_ENDPOINT

#
Channel
Diagnostic
Task
URB_FUNCTION_SET_DESCRIPTOR_TO_ENDPOINT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 32: Dispatch URB_FUNCTION_GET_DESCRIPTOR_FROM_INTERFACE

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_DESCRIPTOR_FROM_INTERFACE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 33: Dispatch URB_FUNCTION_SET_DESCRIPTOR_TO_INTERFACE

#
Channel
Diagnostic
Task
URB_FUNCTION_SET_DESCRIPTOR_TO_INTERFACE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 34: Dispatch URB_FUNCTION_SET_FEATURE_TO_DEVICE

#
Channel
Diagnostic
Task
URB_FUNCTION_SET_FEATURE_TO_DEVICE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 35: Dispatch URB_FUNCTION_SET_FEATURE_TO_INTERFACE

#
Channel
Diagnostic
Task
URB_FUNCTION_SET_FEATURE_TO_INTERFACE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 36: Dispatch URB_FUNCTION_SET_FEATURE_TO_ENDPOINT

#
Channel
Diagnostic
Task
URB_FUNCTION_SET_FEATURE_TO_ENDPOINT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 37: Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_DEVICE

#
Channel
Diagnostic
Task
URB_FUNCTION_CLEAR_FEATURE_TO_DEVICE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 38: Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_INTERFACE

#
Channel
Diagnostic
Task
URB_FUNCTION_CLEAR_FEATURE_TO_INTERFACE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 39: Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_ENDPOINT

#
Channel
Diagnostic
Task
URB_FUNCTION_CLEAR_FEATURE_TO_ENDPOINT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 40: Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_OTHER

#
Channel
Diagnostic
Task
URB_FUNCTION_CLEAR_FEATURE_TO_OTHER
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 41: Dispatch URB_FUNCTION_SET_FEATURE_TO_OTHER

#
Channel
Diagnostic
Task
URB_FUNCTION_SET_FEATURE_TO_OTHER
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 42: Dispatch URB_FUNCTION_GET_STATUS_FROM_DEVICE

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_STATUS_FROM_DEVICE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 43: Dispatch URB_FUNCTION_GET_STATUS_FROM_INTERFACE

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_STATUS_FROM_INTERFACE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 44: Dispatch URB_FUNCTION_GET_STATUS_FROM_ENDPOINT

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_STATUS_FROM_ENDPOINT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 45: Dispatch URB_FUNCTION_GET_STATUS_FROM_OTHER

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_STATUS_FROM_OTHER
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 46: Dispatch URB_FUNCTION_VENDOR_DEVICE

#
Channel
Diagnostic
Task
URB_FUNCTION_VENDOR_DEVICE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 47: Dispatch URB_FUNCTION_VENDOR_INTERFACE

#
Channel
Diagnostic
Task
URB_FUNCTION_VENDOR_INTERFACE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 48: Dispatch URB_FUNCTION_VENDOR_ENDPOINT

#
Channel
Diagnostic
Task
URB_FUNCTION_VENDOR_ENDPOINT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 49: Dispatch URB_FUNCTION_CLASS_DEVICE

#
Channel
Diagnostic
Task
URB_FUNCTION_CLASS_DEVICE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 50: Dispatch URB_FUNCTION_CLASS_INTERFACE

#
Channel
Diagnostic
Level
Informational
Task
URB_FUNCTION_CLASS_INTERFACE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 50,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 4520
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 25,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:02.021Z",
    "version": 0
  },
  "event_data": {
    "fid_IRP_Ptr": "0xFFFFC807C494E010",
    "fid_URB_Ptr": "0xFFFFC807BED0C940",
    "fid_USBPORT_Device": false,
    "fid_USBPORT_Endpoint": "10C06CB607C8FFFF001E7FB607C8FFFFB01D7FB607C8FFFF",
    "fid_USBPORT_Endpoint_Descriptor": "07050000400000",
    "fid_USBPORT_HC": "500048B607C8FFFF000000000100020086802070",
    "fid_USBPORT_URB_CONTROL_TRANSFER": "88001B0000000000B01D7FB607C8FFFF2000000000000000001E7FB607C8FFFF0A00000000000000000000000000000000000000000000000000000000000000ACB927C407C8FFFF0DF0ADDE0DF0ADDE000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210A000000000000"
  },
  "message": ""
}

Event ID 51: Dispatch URB_FUNCTION_CLASS_ENDPOINT

#
Channel
Diagnostic
Task
URB_FUNCTION_CLASS_ENDPOINT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 52: Dispatch URB_FUNCTION_CLASS_OTHER

#
Channel
Diagnostic
Task
URB_FUNCTION_CLASS_OTHER
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 53: Dispatch URB_FUNCTION_VENDOR_OTHER

#
Channel
Diagnostic
Task
URB_FUNCTION_VENDOR_OTHER
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 54: Dispatch URB_FUNCTION_ABORT_PIPE

#
Channel
Diagnostic
Task
URB_FUNCTION_ABORT_PIPE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_URB_PIPE_REQUEST 29

Event ID 55: Dispatch URB_FUNCTION_SYNC_RESET_PIPE_AND_CLEAR_STALL

#
Channel
Diagnostic
Task
URB_FUNCTION_SYNC_RESET_PIPE_AND_CLEAR_STALL
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_URB_PIPE_REQUEST 29

Event ID 56: Dispatch URB_FUNCTION_SYNC_RESET_PIPE

#
Channel
Diagnostic
Task
URB_FUNCTION_SYNC_RESET_PIPE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_URB_PIPE_REQUEST 29

Event ID 57: Dispatch URB_FUNCTION_SYNC_CLEAR_STALL

#
Channel
Diagnostic
Task
URB_FUNCTION_SYNC_CLEAR_STALL
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_URB_PIPE_REQUEST 29

Event ID 58: Dispatch URB_FUNCTION_GET_CONFIGURATION

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_CONFIGURATION
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 59: Dispatch URB_FUNCTION_GET_INTERFACE

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_INTERFACE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 60: Dispatch URB_FUNCTION_GET_MS_FEATURE_DESCRIPTOR

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_MS_FEATURE_DESCRIPTOR
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 61: Dispatch URB_FUNCTION_TAKE_FRAME_LENGTH_CONTROL

#
Channel
Diagnostic
Task
URB_FUNCTION_TAKE_FRAME_LENGTH_CONTROL
Opcode
Dispatch

Event ID 62: Dispatch URB_FUNCTION_RELEASE_FRAME_LENGTH_CONTROL

#
Channel
Diagnostic
Task
URB_FUNCTION_RELEASE_FRAME_LENGTH_CONTROL
Opcode
Dispatch

Event ID 63: Dispatch URB_FUNCTION_GET_FRAME_LENGTH

#
Channel
Diagnostic
Task
URB_FUNCTION_GET_FRAME_LENGTH
Opcode
Dispatch

Event ID 64: Dispatch URB_FUNCTION_SET_FRAME_LENGTH

#
Channel
Diagnostic
Task
URB_FUNCTION_SET_FRAME_LENGTH
Opcode
Dispatch

Event ID 65: Dispatch URB_FUNCTION_RESERVED

#
Channel
Diagnostic
Task
URB_FUNCTION_RESERVED
Opcode
Dispatch

Event ID 66: Complete URB_FUNCTION_CONTROL_TRANSFER

#
Channel
Diagnostic
Level
Informational
Task
URB_FUNCTION_CONTROL_TRANSFER
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 66,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 0,
      "thread_id": 0
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 26,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:02.023Z",
    "version": 0
  },
  "event_data": {
    "fid_IRP_Ptr": "0xFFFFC807C494E010",
    "fid_URB_Ptr": "0xFFFFC807BED0C940",
    "fid_USBPORT_Device": false,
    "fid_USBPORT_Endpoint": "10C06CB607C8FFFF001E7FB607C8FFFFB01D7FB607C8FFFF",
    "fid_USBPORT_Endpoint_Descriptor": "07050000400000",
    "fid_USBPORT_HC": "500048B607C8FFFF000000000100020086802070",
    "fid_USBPORT_URB_CONTROL_TRANSFER": "8800080000000000B01D7FB607C8FFFF2000000000000000001E7FB607C8FFFF0A00000000000000000000000000000000000000000000000000000000000000ACB927C407C8FFFF0DF0ADDE0DF0ADDE000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210A000000000000"
  },
  "message": ""
}

Event ID 67: Complete URB_FUNCTION_CONTROL_TRANSFER_EX

#
Channel
Diagnostic
Level
Informational
Task
URB_FUNCTION_CONTROL_TRANSFER_EX
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 67,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 14320
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 26,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:01.986Z",
    "version": 0
  },
  "event_data": {
    "fid_IRP_Ptr": "0xFFFFC807C1C46B60",
    "fid_URB_Ptr": "0xFFFFC807BAF429B0",
    "fid_USBPORT_Device": false,
    "fid_USBPORT_Endpoint": "506B48B607C8FFFF90AC21B607C8FFFF40AC21B607C8FFFF",
    "fid_USBPORT_Endpoint_Descriptor": "07050000400000",
    "fid_USBPORT_HC": "500048B607C8FFFF000000000100020086802070",
    "fid_USBPORT_URB_CONTROL_TRANSFER": "880032000000000040AC21B607C8FFFFA20000000000000090AC21B607C8FFFF0B00000004000000B0F3DFC107C8FFFF10BE2AC007C8FFFFD007000000000000ACD9F9BA07C8FFFF0DF0ADDE0DF0ADDE000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000A300000001000400"
  },
  "message": ""
}

Event ID 68: Complete URB_FUNCTION_CONTROL_TRANSFER with Data

#
Channel
Diagnostic
Task
URB_FUNCTION_CONTROL_TRANSFER
Opcode
CompletewithData

Fields #

NameDescription
fid_USBPORT_HC Int64
fid_USBPORT_Device GUID
fid_USBPORT_Endpoint CountedUtf16String
fid_USBPORT_Endpoint_Descriptor 25
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 31
fid_URB_TransferDataLength UInt16
fid_URB_TransferData UInt8

Event ID 69: Complete URB_FUNCTION_CONTROL_TRANSFER_EX with Data

#
Channel
Diagnostic
Task
URB_FUNCTION_CONTROL_TRANSFER_EX
Opcode
CompletewithData

Fields #

NameDescription
fid_USBPORT_HC Int64
fid_USBPORT_Device GUID
fid_USBPORT_Endpoint CountedUtf16String
fid_USBPORT_Endpoint_Descriptor 25
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 31
fid_URB_TransferDataLength UInt16
fid_URB_TransferData UInt8

Event ID 70: Complete URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER

#
Channel
Diagnostic
Level
Informational
Task
URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_BULK_OR_INTERRUPT_TRANSFER 29

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 70,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 0,
      "thread_id": 0
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 26,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:02.007Z",
    "version": 0
  },
  "event_data": {
    "fid_IRP_Ptr": "0xFFFFC807B6485560",
    "fid_URB_Ptr": "0xFFFFC807B709E340",
    "fid_USBPORT_Device": false,
    "fid_USBPORT_Endpoint": "D0C36CB607C8FFFFD84CBDB707C8FFFF40AC21B607C8FFFF",
    "fid_USBPORT_Endpoint_Descriptor": "0705810301000A",
    "fid_USBPORT_HC": "500048B607C8FFFF000000000100020086802070",
    "fid_USBPORT_URB_BULK_OR_INTERRUPT_TRANSFER": "800009000000000040AC21B607C8FFFFA200000000000000D84CBDB707C8FFFF0300000001000000F02918B607C8FFFF001D82C107C8FFFF0000000000000000AC09EEBC07C8FFFF0DF0ADDE0DF0ADDE000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
  },
  "message": ""
}

Event ID 71: Complete URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER with Data

#
Channel
Diagnostic
Task
URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER
Opcode
CompletewithData

Fields #

NameDescription
fid_USBPORT_HC Int64
fid_USBPORT_Device GUID
fid_USBPORT_Endpoint CountedUtf16String
fid_USBPORT_Endpoint_Descriptor 25
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_BULK_OR_INTERRUPT_TRANSFER 31
fid_URB_TransferDataLength UInt16
fid_URB_TransferData UInt8

Event ID 72: Complete COMPLETE_URB_FUNCTION_ISOCH_TRANSFER

#
Channel
Diagnostic
Task
URB_FUNCTION_ISOCH_TRANSFER
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int64
fid_USBPORT_Device GUID
fid_USBPORT_Endpoint CountedUtf16String
fid_USBPORT_Endpoint_Descriptor 25
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_NumberOfPackets UInt16
fid_USBPORT_URB_ISOCH_TRANSFER 31
fid_USBPORT_URB_ISO_PACKETS 46

Event ID 73: Complete COMPLETE_URB_FUNCTION_ISOCH_TRANSFER with Data

#
Channel
Diagnostic
Task
URB_FUNCTION_ISOCH_TRANSFER
Opcode
CompletewithData

Fields #

NameDescription
fid_USBPORT_HC Int64
fid_USBPORT_Device GUID
fid_USBPORT_Endpoint CountedUtf16String
fid_USBPORT_Endpoint_Descriptor 25
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_NumberOfPackets UInt16
fid_USBPORT_URB_ISOCH_TRANSFER 31
fid_USBPORT_URB_ISO_PACKETS 46

Event ID 74: Internal URB_FUNCTION_CONTROL_TRANSFER

#
Channel
Diagnostic
Task
URB_FUNCTION_CONTROL_TRANSFER
Opcode
DispatchInternal

Fields #

NameDescription
fid_USBPORT_HC UInt16
fid_USBPORT_Device Double
fid_USBPORT_Endpoint SID
fid_USBPORT_Endpoint_Descriptor CountedUtf16String
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 28

Event ID 75: Complete Internal URB_FUNCTION_CONTROL_TRANSFER

#
Channel
Diagnostic
Task
URB_FUNCTION_CONTROL_TRANSFER
Opcode
CompleteInternal

Fields #

NameDescription
fid_USBPORT_HC UInt16
fid_USBPORT_Device Double
fid_USBPORT_Endpoint SID
fid_USBPORT_Endpoint_Descriptor CountedUtf16String
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 28

Event ID 76: Complete Internal URB_FUNCTION_CONTROL_TRANSFER with Data

#
Channel
Diagnostic
Task
URB_FUNCTION_CONTROL_TRANSFER
Opcode
CompleteInternalwithData

Fields #

NameDescription
fid_USBPORT_HC UInt32
fid_USBPORT_Device Binary
fid_USBPORT_Endpoint HexInt64
fid_USBPORT_Endpoint_Descriptor Struct
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 30
fid_URB_TransferDataLength UInt16
fid_URB_TransferData UInt8

Event ID 77: Complete URB_FUNCTION_ABORT_PIPE

#
Channel
Diagnostic
Task
URB_FUNCTION_ABORT_PIPE
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_URB_PIPE_REQUEST 29

Event ID 78: Dispatch URB INVALID_HEADER_LENGTH_WARNING

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_HEADER_LENGTH_WARNING
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER UInt64

Event ID 79: Dispatch URB INVALID_FUNCTION

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_FUNCTION
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER UInt64

Event ID 80: Dispatch URB INVALID_HEADER_LENGTH

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_HEADER_LENGTH
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER UInt64

Event ID 81: Dispatch URB INVALID_DEVICE_HANDLE

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_DEVICE_HANDLE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER UInt64

Event ID 82: Dispatch URB INVALID_FUNCTION_NOT_SUPPORTED

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_FUNCTION_NOT_SUPPORTED
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_USBPORT_Device Float
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER SYSTEMTIME

Event ID 83: Dispatch URB INVALID_FUNCTION_RESERVED

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_FUNCTION_RESERVED
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_USBPORT_Device Float
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER SYSTEMTIME

Event ID 84: Dispatch URB INVALID_DUE_TO_HC_SUSPEND

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_DUE_TO_HC_SUSPEND
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_USBPORT_Device Float
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER SYSTEMTIME

Event ID 85: Dispatch URB INVALID_URB_LINK

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_URB_LINK
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_USBPORT_Device Float
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER SYSTEMTIME

Event ID 86: Dispatch URB INVALID_PIPE_HANDLE

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_PIPE_HANDLE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_USBPORT_Device Float
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_INVALID_PIPE_REQUEST SYSTEMTIME

Event ID 87: Dispatch URB INVALID_ZERO_BW_PIPE_HANDLE

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_ZERO_BW_PIPE_HANDLE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_USBPORT_Device Float
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_INVALID_PIPE_REQUEST SYSTEMTIME

Event ID 88: Dispatch URB NOP_ZERO_BW_PIPE_HANDLE_REQUEST

#
Channel
Diagnostic
Task
USBPORT_URB_NOP_ZERO_BW_PIPE_HANDLE_REQUEST
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_USBPORT_Device Float
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_INVALID_PIPE_REQUEST SYSTEMTIME

Event ID 89: Dispatch URB INVALID_CONTROL_TRANSFER_ENDPOINT

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_CONTROL_TRANSFER_ENDPOINT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 90: Dispatch URB INVALID_CONTROL_TRANSFER_BUFFER_LENGTH

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_CONTROL_TRANSFER_BUFFER_LENGTH
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_CONTROL_TRANSFER 29

Event ID 91: Dispatch URB INVALID_BULK_OR_INTERRUPT_TRANSFER_ENDPOINT

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_BULK_OR_INTERRUPT_TRANSFER_ENDPOINT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_BULK_OR_INTERRUPT_TRANSFER 29

Event ID 92: Dispatch URB INVALID_BULK_OR_INTERRUPT_TRANSFER_BUFFER_LENGTH

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_BULK_OR_INTERRUPT_TRANSFER_BUFFER_LENGTH
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_BULK_OR_INTERRUPT_TRANSFER 29

Event ID 93: Dispatch URB INVALID_ISOCHRONOUS_TRANSFER_ENDPOINT

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_ISOCHRONOUS_TRANSFER_ENDPOINT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_ISOCH_TRANSFER 29

Event ID 94: Dispatch URB INVALID_NULL_TRANSFER_BUFFER_AND_MDL

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_NULL_TRANSFER_BUFFER_AND_MDL
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER 29

Event ID 95: Dispatch URB INVALID_NON_NULL_TRANSFER_BUFFER_MDL

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_NON_NULL_TRANSFER_BUFFER_MDL
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER 29

Event ID 96: Dispatch URB ALLOCATE_MDL_FAILURE

#
Channel
Diagnostic
Task
USBPORT_URB_ALLOCATE_MDL_FAILURE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER 29

Event ID 97: Dispatch URB ALLOCATE_TRANSFER_CONTEXT_FAILURE

#
Channel
Diagnostic
Task
USBPORT_URB_ALLOCATE_TRANSFER_CONTEXT_FAILURE
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_HEADER 29

Event ID 98: Dispatch URB NOP_ROOTHUB_PIPE_HANDLE_REQUEST

#
Channel
Diagnostic
Task
USBPORT_URB_NOP_ROOTHUB_PIPE_HANDLE_REQUEST
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_USBPORT_Device Float
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_INVALID_PIPE_REQUEST SYSTEMTIME

Event ID 99: Dispatch URB INVALID_ISOCHRONOUS_ZERO_LENGTH

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_ISOCHRONOUS_ZERO_LENGTH
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_ISOCH_TRANSFER 29

Event ID 100: Dispatch URB INVALID_ISOCHRONOUS_NUM_PACKETS

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_ISOCHRONOUS_NUM_PACKETS
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int32
fid_USBPORT_Device Boolean
fid_USBPORT_Endpoint HexInt32
fid_USBPORT_Endpoint_Descriptor CountedMbcsString
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_ISOCH_TRANSFER 29

Event ID 101: Dispatch URB INVALID_ISOCHRONOUS_START_FRAME

#
Channel
Diagnostic
Task
USBPORT_URB_INVALID_ISOCHRONOUS_START_FRAME
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UInt64
fid_USBPORT_Device Pointer
fid_USBPORT_Endpoint CountedMbcsString
fid_USBPORT_Endpoint_Descriptor 26
fid_IRP_Ptr Pointer
fid_URB_Ptr Pointer
fid_USBPORT_URB_NumberOfPackets UInt16
fid_USBPORT_URB_ISOCH_TRANSFER 32
fid_USBPORT_URB_ISO_PACKETS 47
fid_URB_FrameNumber UInt32

Event ID 102: Irp Cancel

#
Channel
Diagnostic
Level
Informational
Task
Irp
Opcode
Cancel

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_IRP_Ptr Pointer

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 102,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 16
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 31,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:07.052Z",
    "version": 0
  },
  "event_data": {
    "fid_IRP_Ptr": "0xFFFFC807B66CEB50",
    "fid_USBPORT_HC": "P\u0000H\u0007\u0000\u0000\u0000\u0000\u0001\u0000\u0002\u0000 p"
  },
  "message": ""
}

Event ID 103: USBUSER_OP_RAW_RESET_PORT Dispatch

#
Channel
Diagnostic
Task
USBUSER_OP_RAW_RESET_PORT
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_PortNumber UInt16

Event ID 104: USBUSER_OP_RAW_RESET_PORT GetPortStatus after SetFeaturePortPower

#
Channel
Diagnostic
Task
USBUSER_OP_RAW_RESET_PORT
Opcode
Status

Fields #

NameDescription
fid_USBPORT_HC Int8
fid_PortNumber UInt16
fid_PortStatus UInt32

Event ID 105: USBUSER_OP_RAW_RESET_PORT GetPortStatus after SetFeaturePortReset

#
Channel
Diagnostic
Task
USBUSER_OP_RAW_RESET_PORT
Opcode
Status

Fields #

NameDescription
fid_USBPORT_HC Int8
fid_PortNumber UInt16
fid_PortStatus UInt32

Event ID 106: USBUSER_OP_RAW_RESET_PORT GetPortStatus after ClearFeaturePortResetChange

#
Channel
Diagnostic
Task
USBUSER_OP_RAW_RESET_PORT
Opcode
Status

Fields #

NameDescription
fid_USBPORT_HC Int8
fid_PortNumber UInt16
fid_PortStatus UInt32

Event ID 107: USBUSER_OP_RAW_RESET_PORT Complete

#
Channel
Diagnostic
Task
USBUSER_OP_RAW_RESET_PORT
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int8
fid_PortNumber UInt16
fid_UsbStatus UInt32

Event ID 108: USBUSER_OP_SEND_ONE_PACKET Dispatch

#
Channel
Diagnostic
Task
USBUSER_OP_SEND_ONE_PACKET
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_USBPORT_Usbuser_Op_Send_One_Packet UInt32

Event ID 109: USBUSER_OP_SEND_ONE_PACKET Dispatch with Data

#
Channel
Diagnostic
Task
USBUSER_OP_SEND_ONE_PACKET
Opcode
DispatchwithData

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_USBPORT_Usbuser_Op_Send_One_Packet UInt64
fid_PacketDataLength UInt16
fid_PacketData UInt8

Event ID 110: USBUSER_OP_SEND_ONE_PACKET Timeout

#
Channel
Diagnostic
Task
USBUSER_OP_SEND_ONE_PACKET
Opcode
Status

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_USBPORT_Usbuser_Op_Send_One_Packet UInt32

Event ID 111: USBUSER_OP_SEND_ONE_PACKET Complete

#
Channel
Diagnostic
Task
USBUSER_OP_SEND_ONE_PACKET
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int8
fid_USBPORT_Usbuser_Op_Send_One_Packet Int64
fid_UsbStatus UInt32

Event ID 112: USBUSER_OP_SEND_ONE_PACKET Complete with Data

#
Channel
Diagnostic
Task
USBUSER_OP_SEND_ONE_PACKET
Opcode
CompletewithData

Fields #

NameDescription
fid_USBPORT_HC UInt8
fid_USBPORT_Usbuser_Op_Send_One_Packet UInt64
fid_PacketDataLength UInt16
fid_PacketData UInt8

Event ID 113: Code Execution time in Micro Seconds

#
Channel
Diagnostic
Task
CodePerformance
Opcode
Information

Fields #

NameDescription
fid_USBPORT_HC Int8
fid_USBPORT_Execution_Metrics Int64
fid_CodeTag UnicodeString

Event ID 114: Code Execution time for PutScatterGatherList in Micro Seconds

#
Channel
Diagnostic
Task
CodePerformancePutScatterGatherList
Opcode
Information

Fields #

NameDescription
fid_USBPORT_HC Float
fid_USBPORT_Device FILETIME
fid_USBPORT_Endpoint Struct
fid_USBPORT_Endpoint_Descriptor 27
fid_USBPORT_Execution_Metrics 33
fid_AdapterObject Pointer
fid_NumPutScatterGatherList UInt32
fid_WriteData Boolean
fid_FlushLength UInt32
fid_CurrentVA Pointer
fid_CodeTag UnicodeString

Event ID 115: Code Execution time for BuildScatterGatherList in Micro Seconds

#
Channel
Diagnostic
Task
CodePerformanceBuildScatterGatherList
Opcode
Information

Fields #

NameDescription
fid_USBPORT_HC Float
fid_USBPORT_Device FILETIME
fid_USBPORT_Endpoint Struct
fid_USBPORT_Endpoint_Descriptor 27
fid_USBPORT_Execution_Metrics 33
fid_AdapterObject Pointer
fid_TransferBufferLength UInt32
fid_WriteData Boolean
fid_LengthRemaining UInt32
fid_CurrentVA Pointer
fid_CodeTag UnicodeString

Event ID 1024: EHCI Miniport Start Dispatch

#
Channel
Diagnostic
Task
MiniportStart
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 1025: EHCI Miniport Start Complete

#
Channel
Diagnostic
Task
MiniportStart
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 1026: EHCI Miniport Start Complete Error - Invalid Resources

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 1027: EHCI Miniport Start Complete Error - Hardware Gone

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 1028: EHCI Miniport Start Complete Error - Stop BIOS

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 1029: EHCI Miniport Start Complete Error - Initialize Hardware

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 1030: EHCI Miniport Start Complete Error - Initialize Schedule

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 1031: EHCI Miniport Stop Dispatch

#
Channel
Diagnostic
Task
MiniportStop
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 1032: EHCI Miniport Stop Complete

#
Channel
Diagnostic
Task
MiniportStop
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 1033: EHCI Miniport Suspend Dispatch

#
Channel
Diagnostic
Task
MiniportSuspend
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 1034: EHCI Miniport Suspend Complete

#
Channel
Diagnostic
Task
MiniportSuspend
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 1035: EHCI Miniport Resume Dispatch

#
Channel
Diagnostic
Task
MiniportResume
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 1036: EHCI Miniport Resume Complete

#
Channel
Diagnostic
Task
MiniportResume
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 1037: EHCI Miniport Resume Complete Error - Hardware Gone

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 1038: EHCI Miniport Resume Complete Error - HcHalted

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 1039: EHCI Miniport Resume Complete Error - ConfigFlag

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 1040: EHCI Miniport Resume Complete Error - PortPower

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 1041: EHCI Miniport Resume Complete Error - PortOwnedByCC

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 1042: EHCI Miniport Resume Complete Error - OvercurrentChange

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 1043: EHCI Miniport Device Data

#
Channel
Diagnostic
Task
HostControllerDeviceData
Opcode
Information

Fields #

NameDescription
fid_USBPORT_HC 50
fid_HcSuspendedFlag UInt32
fid_SuspendHcNotHalted UInt32
fid_HostSystemErrorCount UInt32
fid_HostSystemErrorResetNeeded UInt32
fid_StatAsyncEnableCount UInt32
fid_StatAsyncDisableCount UInt32
fid_StatPeriodicEnableCount UInt32
fid_StatPeriodicDisableCount UInt32
fid_StatAsyncEnableTimeoutCount UInt32
fid_StatAsyncDisableTimeoutCount UInt32
fid_StatPeriodicEnableTimeoutCount UInt32
fid_StatPeriodicDisableTimeoutCount UInt32
fid_StatRingDoorbellDisabledCount UInt32
fid_StatRingDoorbellDisablingCount UInt32
fid_StatRingDoorbellEnablingCount UInt32
fid_StatRingDoorbellEnabledCount UInt32
fid_StatRingDoorbellHwRemovedCount UInt32
fid_StatAnswerDoorbell UInt32
fid_StatAsyncCacheFlushIdle UInt32
fid_StatAsyncCacheFlushNormal UInt32
fid_StatAsyncCacheFlushRetry UInt32
fid_StatIntOnAsyncAdvancePendingCount UInt32
fid_StatIntOnAsyncAdvanceSyncRoutineCount UInt32
fid_StatRingDoorbellEnabledWithRetryCount UInt32
fid_StatRingDoorbellEnabledWithRetryIgnoredCount UInt32
fid_StatAsyncCacheFlushPrevented UInt32
fid_CurrentRingDoorbellDisablingTimerCount UInt32
fid_CurrentRingDoorbellEnablingTimerCount UInt32
fid_CurrentRingDoorbellEnabledTimerCount UInt32
fid_CurrentIntOnAsyncAdvancePendingCount UInt32
fid_StatResetNeededCount UInt32
fid_ResetNeeded UInt32
fid_ResetRecoveryEnable UInt32
fid_ResetRecoveryBreak UInt32
fid_AsyncScheduleState UInt32
fid_AsyncDoorbellState UInt32
fid_PeriodicScheduleState UInt32
fid_EhciInternalFlags UInt32
fid_PreventCmdChangesWithDoorbellPending UInt8
fid_OptimizeInactiveQhFlush UInt8
fid_DisableTwoDoorbellWorkaround UInt8
fid_StrictTransitionChecksEnabled UInt8
fid_IntegratedTTSupportRegistryOverride UInt8
fid_CurrentAsyncEnableCount UInt32
fid_InitialDoorbellRetryEnableValue UInt32
fid_CurrentDoorbellRetryEnableValue UInt32
fid_DoorbellRetryRequired UInt32
fid_PeriodicEnableChangeWithDoorbellPending UInt32
fid_PeriodicDisableChangeWithDoorbellPending UInt32

Event ID 2048: OHCI Miniport Start Dispatch

#
Channel
Diagnostic
Task
MiniportStart
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 2049: OHCI Miniport Start Complete

#
Channel
Diagnostic
Task
MiniportStart
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 2050: OHCI Miniport Start Complete Error - Invalid Resources

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 2051: OHCI Miniport Start Complete Error - Hardware Gone

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 2052: OHCI Miniport Start Complete Error - Stop BIOS

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 2053: OHCI Miniport Start Complete Error - Initialize Schedule

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 2054: OHCI Miniport Start Complete Error - Initialize Hardware

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 2055: OHCI Miniport Stop Dispatch

#
Channel
Diagnostic
Task
MiniportStop
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 2056: OHCI Miniport Stop Complete

#
Channel
Diagnostic
Task
MiniportStop
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 2057: OHCI Miniport Suspend Dispatch

#
Channel
Diagnostic
Task
MiniportSuspend
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 2058: OHCI Miniport Suspend Complete

#
Channel
Diagnostic
Task
MiniportSuspend
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 2059: OHCI Miniport Resume Dispatch

#
Channel
Diagnostic
Task
MiniportResume
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 2060: OHCI Miniport Resume Complete

#
Channel
Diagnostic
Task
MiniportResume
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 2061: OHCI Miniport Resume Complete Error - Hardware Gone

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 2062: OHCI Miniport Resume Complete Error - HcControl

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 2063: OHCI Miniport Resume Complete Error - HcHCCA

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 2064: OHCI Miniport Resume Complete Error - HcRhS_OverCurrentIndicatorChange

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 2065: OHCI Miniport Resume Complete Error - HcRhPS_OverCurrentIndicatorChange

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 3072: UHCI Miniport Start Dispatch

#
Channel
Diagnostic
Task
MiniportStart
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 3073: UHCI Miniport Start Complete

#
Channel
Diagnostic
Task
MiniportStart
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 3074: UHCI Miniport Start Complete Error - Invalid Resources

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 3075: UHCI Miniport Start Complete Error - Stop BIOS

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 3076: UHCI Miniport Start Complete Error - Initialize Hardware

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 3077: UHCI Miniport Start Complete Error - Initialize Schedule

#
Channel
Diagnostic
Task
MiniportStart
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_MiniportStatus UInt32

Event ID 3078: UHCI Miniport Stop Dispatch

#
Channel
Diagnostic
Task
MiniportStop
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 3079: UHCI Miniport Stop Complete

#
Channel
Diagnostic
Task
MiniportStop
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Event ID 3080: UHCI Miniport Suspend Dispatch

#
Channel
Diagnostic
Level
Informational
Task
MiniportSuspend
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 3080,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 8560
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 25,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:07.193Z",
    "version": 0
  },
  "event_data": {
    "fid_USBPORT_HC": "PH\u0007\u0000\u0000\u0001\u0002 "
  },
  "message": ""
}

Event ID 3081: UHCI Miniport Suspend Complete

#
Channel
Diagnostic
Level
Informational
Task
MiniportSuspend
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 3081,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 8560
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 26,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:07.193Z",
    "version": 0
  },
  "event_data": {
    "fid_USBPORT_HC": "PH\u0007\u0000\u0000\u0001\u0002 "
  },
  "message": ""
}

Event ID 3082: UHCI Miniport Resume Dispatch

#
Channel
Diagnostic
Level
Informational
Task
MiniportResume
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC UnicodeString

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 3082,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 9712
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 25,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:01.959Z",
    "version": 0
  },
  "event_data": {
    "fid_USBPORT_HC": "PH\u0007\u0000\u0000\u0001\u0002 "
  },
  "message": ""
}

Event ID 3083: UHCI Miniport Resume Complete

#
Channel
Diagnostic
Level
Informational
Task
MiniportResume
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Example Event #

{
  "system": {
    "channel": "Microsoft-Windows-USB-USBPORT/Diagnostic",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 3083,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 4,
      "thread_id": 9712
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 26,
    "provider": "Microsoft-Windows-USB-USBPORT",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:44:01.986Z",
    "version": 0
  },
  "event_data": {
    "fid_MiniportStatus": 0,
    "fid_NumberOfPorts": 2,
    "fid_ResumePortStatus": 128,
    "fid_SuspendPortStatus": 4229,
    "fid_USBPORT_HC": "500048B607C8FFFF000000000100020086802070"
  },
  "message": ""
}

Event ID 3084: UHCI Miniport Resume Complete Error - Hardware Gone

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 3085: UHCI Miniport Resume Complete Error - EnterGlobalSuspendMode

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 3086: UHCI Miniport Resume Complete Error - ForceGlobalResume

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 3087: UHCI Miniport Resume Complete Error - FrameNumber

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 3088: UHCI Miniport Resume Complete Error - OvercurrentChange

#
Channel
Diagnostic
Task
MiniportResume
Opcode
CompletewithError

Fields #

NameDescription
fid_USBPORT_HC Int16
fid_MiniportStatus UInt32
fid_NumberOfPorts UInt16
fid_SuspendPortStatus UInt32
fid_ResumePortStatus UInt32

Event ID 3089: Run Time Power Management Transition

#
Channel
Diagnostic
Task
RunTimePowerManagement
Opcode
RunTimePMTransition

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_RunTimePmEvent UInt32

Event ID 3090: Dispatch IRP_MN_WAIT_WAKE

#
Channel
Diagnostic
Task
Armcontrollerforwake
Opcode
Dispatch

Fields #

NameDescription
fid_USBPORT_HC Int8
fid_IRP_Ptr Pointer
fid_Status UInt32

Event ID 3091: Complete IRP_MN_WAIT_WAKE

#
Channel
Diagnostic
Task
Armcontrollerforwake
Opcode
Complete

Fields #

NameDescription
fid_USBPORT_HC Int8
fid_IRP_Ptr Pointer
fid_Status UInt32

Event ID 3092: Host Controller Open Bulk Or Control Endpoint

#
Channel
Diagnostic
Task
HostController
Opcode
Information

Fields #

NameDescription
fid_USBPORT_HC AnsiString
fid_NakReloadCount UInt32

Provenance

ETW provider GUID {C88A4EF5-D048-4013-9408-E04B7DB2814A}

Defined in usbport.sys, the binary that emits these events.

  • WS2022-20348.4893, sample captured from a live trace, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB