henrypp / simplewall

Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
GNU General Public License v3.0
6.3k stars 487 forks source link

Errors in `Event Viewer` #526

Closed savchenko closed 5 years ago

savchenko commented 5 years ago

Stumbled upon the series of events logged:

2019-09-01 12_45_47-

- 
<Event
    xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- 
    <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2019-08-31T10:44:26.591089500Z" />
        <EventRecordID>23324</EventRecordID>
        <Channel>Application</Channel>
        <Computer>win</Computer>
        <Security />
    </System>
- 
    <EventData>
        <Data>simplewall.exe</Data>
        <Data>2.4.6.0</Data>
        <Data>5c9b9cf0</Data>
        <Data>ntdll.dll</Data>
        <Data>10.0.18362.267</Data>
        <Data>c00f8a30</Data>
        <Data>c0000374</Data>
        <Data>00000000000f9269</Data>
        <Data>20c8</Data>
        <Data>01d55fe566b769b2</Data>
        <Data>C:\Program Files\simplewall\simplewall.exe</Data>
        <Data>C:\Windows\SYSTEM32\ntdll.dll</Data>
        <Data>33dbe3c4-8f89-420e-81c8-915edb56209f</Data>
        <Data />
        <Data />
    </EventData>
</Event>

Each event record has different Faulting process ID and timestamp, rest of the properties are the same.

henrypp commented 5 years ago

https://github.com/henrypp/simplewall/issues/391#issuecomment-491314105