I am creating Ipsec tunnel using Windows Filtering Platform API in the process. Code is on the line of example provided at https://learn.microsoft.com/en-us/windows/win32/fwp/using-transport-mode Code works 95% percent of the times But for some random 5%, it fails with return code 31( ERROR_GEN_FAILURE ) when API FwpmFilterAdd0 is called General failure doesn't provide any useful info on what has happened or how I can make the code more robust. My platform in Windows Server 2019 I have checked the System event logs and cannot find any useful trace there. My questions is how to get better diagnostic information to debug this error? Any other tips would be useful.

FwpmFilterAdd occasionally fails with return code 31

Pankaj Mehta 0

I am creating Ipsec tunnel using Windows Filtering Platform API in the process. Code is on the line of example provided at https://learn.microsoft.com/en-us/windows/win32/fwp/using-transport-mode

Code works 95% percent of the times
But for some random 5%, it fails with return code 31(ERROR_GEN_FAILURE) when API FwpmFilterAdd0 is called
General failure doesn't provide any useful info on what has happened or how I can make the code more robust.
My platform in Windows Server 2019
I have checked the System event logs and cannot find any useful trace there.

My questions is how to get better diagnostic information to debug this error? Any other tips would be useful.

Jeanine Zhang-MSFT 9,661 Reputation points Microsoft Vendor

2024-08-23T02:35:02.1866667+00:00

ERROR_GEN_FAILURE: A device attached to the system is not functioning.

Whether you could reproduce the issue on the windows platform?

You could try to create a minidump to debug this error.
Roy Li - MSFT 33,001 Reputation points Microsoft Vendor

2024-08-27T09:12:40.8733333+00:00

Hope you've been well. Any updates about your question?
Pankaj Mehta 0 Reputation points

2024-08-27T13:01:52.25+00:00

@Roy Li Not much. The component creating IPSec security associations in running as a service in an environment that is continuously being used. Not sure how beneficial creating a minidump would be. The API has already failed and it has returned an error code. It has not raised an exception; there won't be any call stack information. do you still think minidump is the correct approach?
Jeanine Zhang-MSFT 9,661 Reputation points Microsoft Vendor

2024-09-02T00:56:33.44+00:00

As this issue is complex, to resolve this issue as soon as possible, you can open an incident via Contact us tab at link below: https://developer.microsoft.com/en-us/windows/support/

Please choose the Technical Support - Coding/Debugging for Windows SDK for this issue. In-addition, if the support engineer determines that the issue is the result of a bug the service request will be a no-charge case and you won't be charged.