srvnet

Provenance

Defined in srvnet.sys, the binary that emits these events.

• Win11-26200.6584, schema recovered from debug symbols, binary version 10.0.26100.6584, PDB signature 04950181DF8EA3FACC49ABDBA20796041, captured 2026-06-02 — srvnet WPP/TMF statements (in the Win11-26200.6584 TMF pack) — TMF corpus provenance and drift model (Win11-26200.6584)

  srvnet.sys was recovered from Microsoft's public symbol server. These are low-level developer trace messages whose internal identifiers Windows renumbers on every build, so a capture decodes correctly only against the exact binary it came from. Match the PDB signature above to the srvnet.sys on your own host before decoding a captured trace.