4.3 Kernel Fault Example with Request for Error Report Level 2 Data (Level 2 of the Protocol Is Executed)
A kernel-mode fault occurs.
The system creates an error report.
The CER client checks whether a destination server has been configured. The following value is set: testserver.corp.xyz.com.
The CER client creates the error report level 1 data in Unicode.
<?xml version="1.0" encoding="UTF-16"?> <WERREPORT xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <MACHINEINFO machinename="client-machine.corp.cliendomain.com" os="6.1.6561.2.0.0.256.1" lcid="1033"/> <USERINFO username="Username"/> <APPLICATIONINFO appname="Windows" apppath="C:\Windows\System32\WerFault.exe" appcompany="Test Corporation"/> <EVENTINFO reporttype="4" eventtime="128496996179046077" eventtype="BlueScreen" friendlyeventname="Shut down unexpectedly"/> <SIGNATURE> <SECONDARYPARAMETER name="BCCode" value="f4"/> <SECONDARYPARAMETER name="BCP1" value="00000003"/> <SECONDARYPARAMETER name="BCP2" value="8C387020"/> <SECONDARYPARAMETER name="BCP3" value="8C387184"/> <SECONDARYPARAMETER name="BCP4" value="81BD1A30"/> <SECONDARYPARAMETER name="OS Version" value="6_1_6561"/> <SECONDARYPARAMETER name="Service Pack" value="0_0"/> <SECONDARYPARAMETER name="Product" value="256_1"/> </SIGNATURE> <FILES> <FILE filetype="2" filename="Mini031108-01.dmp"/> <FILE filetype="5" filename="sysdata.xml"/> <FILE filetype="5" filename="Version.txt"/> </FILES> </WERREPORT>
The CER client constructs the level 1 destination URL with the host as testserver.corp.xyz.com and the URL path as "/stage2.htm", and does an HTTP POST of the error report level 1 data.
The server returns an HTTP code of 200 with the following ANSI text in the body:
Bucket = 501 BucketTable = 5 iData=1 WQL=SELECT Family FROM Win32_Processor DumpFile=\PersistedCabs\Blue\c2428d43-b50a-4622-9d55-cce4602834b3.cab
The CER client creates a cab file with the error reporting data.
The CER client constructs the level 2 destination URL with the host as testserver.corp.xyz.com and the URL path as \PersistedCabs\Blue\c2428d43-b50a-4622-9d55-cce4602834b3.cab, and uploads the cab data by using an HTTP PUT.
The CER server returns an HTTP code of 200.