Elastic Windows Event Explorer


Publisher - Microsoft-Windows-Ras-NdisWanPacketCapture

Event ID 5001

Message:

Sending NDIS Wan Packet (%{FragmentSize} bytes)

Event Data:

# Name In Type
Out Type
1 RoutingDomainID win:UnicodeString xs:string
2 RRASUserName win:UnicodeString xs:string
3 FragmentSize win:UInt32 xs:unsignedInt
4 Fragment win:Binary xs:hexBinary

Observed Windows Versions:

Version: 0

Fingerprint: VKTI5NWVK3FDU