question

CBKKSA-9288 avatar image
0 Votes"
CBKKSA-9288 asked DSPatrick answered

Microsoft-Windows-Kernel-EventTracing ID2 Windows Server 2012

Good morning
M$ WS 2012
For me, the problem is that for some time, when the updates crashed my server, after fixing many bugs, I can not deal with this error:

  • <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">;

  • <System>
    <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{B675EC37-BDB6-4648-BC92-F3FDC74D3CA2}" />
    <EventID>2</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>2</Task>
    <Opcode>12</Opcode>
    <Keywords>0x8000000000000010</Keywords>
    <TimeCreated SystemTime="2021-07-01T09:24:34.897026100Z" />
    <EventRecordID>925643</EventRecordID>
    <Correlation />
    <Execution ProcessID="5844" ThreadID="206132" />
    <Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel>
    <Computer>XXX*Domian*XXX</Computer>
    <Security UserID="S-1-5-18" />
    </System>

  • <EventData>
    <Data Name="SessionName" />
    <Data Name="FileName" />
    <Data Name="ErrorCode">3221225489</Data>
    <Data Name="LoggingMode">276824069</Data>
    </EventData>
    </Event>

Please about any substantive help, these errors are flying after 4000 on the day ...

greetings
SW

windows-server-2012
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

Checking the name of ProcessID="5844" may provide some clues.

--please don't forget to upvote and Accept as answer if the reply is helpful--



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Miles-MSFT avatar image
0 Votes"
Miles-MSFT answered

Hi

According to your description, the event id is 2. Always lots of threads have the same event and it should be harmless and can be safely ignored.
But for the information :<Data Name="SessionName" /><Data Name="FileName" />
It may be related to your file name. It may have given you this prompt when you started.
Here is a link wich may be helpful to solve your problem.
https://docs.microsoft.com/en-US/troubleshoot/windows-server/networking/kernel-event-id-2-msft-netLbfoteamnic-class

Best Regards


If the Answer is helpful, please click "Accept Answer" and upvote it.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.