4.3 Kernel Fault Example with Request for Error Report Level 2 Data (Level 2 of the Protocol Is Executed)

  1. A kernel-mode fault occurs.

  2. The system creates an error report.

  3. The CER client checks whether a destination server has been configured. The following value is set: testserver.corp.xyz.com.

  4. The CER client creates the error report level 1 data in Unicode.

     <?xml version="1.0" encoding="UTF-16"?>
     <WERREPORT xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
     <MACHINEINFO machinename="client-machine.corp.cliendomain.com" os="6.1.6561.2.0.0.256.1" lcid="1033"/>
     <USERINFO username="Username"/>
     <APPLICATIONINFO appname="Windows" apppath="C:\Windows\System32\WerFault.exe" appcompany="Test Corporation"/>
     <EVENTINFO reporttype="4" eventtime="128496996179046077" eventtype="BlueScreen" friendlyeventname="Shut down unexpectedly"/>
     <SIGNATURE>
     <SECONDARYPARAMETER name="BCCode" value="f4"/>
     <SECONDARYPARAMETER name="BCP1" value="00000003"/>
     <SECONDARYPARAMETER name="BCP2" value="8C387020"/>
     <SECONDARYPARAMETER name="BCP3" value="8C387184"/>
     <SECONDARYPARAMETER name="BCP4" value="81BD1A30"/>
     <SECONDARYPARAMETER name="OS Version" value="6_1_6561"/>
     <SECONDARYPARAMETER name="Service Pack" value="0_0"/>
     <SECONDARYPARAMETER name="Product" value="256_1"/>
     </SIGNATURE>
     <FILES>
     <FILE filetype="2" filename="Mini031108-01.dmp"/>
     <FILE filetype="5" filename="sysdata.xml"/>
     <FILE filetype="5" filename="Version.txt"/>
     </FILES>
     </WERREPORT>
    
  5. The CER client constructs the level 1 destination URL with the host as testserver.corp.xyz.com and the URL path as "/stage2.htm", and does an HTTP POST of the error report level 1 data.

  6. The server returns an HTTP code of 200 with the following ANSI text in the body:

     Bucket = 501
     BucketTable = 5
     iData=1
     WQL=SELECT Family FROM Win32_Processor
     DumpFile=\PersistedCabs\Blue\c2428d43-b50a-4622-9d55-cce4602834b3.cab
    
  7. The CER client creates a cab file with the error reporting data.

  8. The CER client constructs the level 2 destination URL with the host as testserver.corp.xyz.com and the URL path as \PersistedCabs\Blue\c2428d43-b50a-4622-9d55-cce4602834b3.cab, and uploads the cab data by using an HTTP PUT.

  9. The CER server returns an HTTP code of 200.