!ndiskd.ndisevent
Note Third party network driver developers are not expected to manually use this extension command. You can run it to see the information it displays but you are not able to reuse the details it provides in your driver.
The !ndiskd.ndisevent extension displays an NDIS debug event log.
!ndiskd.ndisevent -handle <x> [-tagtype <str>]
Parameters
-handle
Required. Handle of the event log.
-tagtype
Enum type of the tags.
DLL
Ndiskd.dll
Examples
To see the output of the event log for a network adapter, !ndiskd provides a link to it in the State section of the !ndiskd.netadapter output. This is easier than the manual method of finding an event log's handle from a miniport block and using that to run the !ndiskd.ndisevent extension.
First, enter the !ndiskd.netadapter command with no parameters to see a list of network adapters and miniport drivers on the system. In the following example, look for the handle for the Marvell AVASTAR Wireless-AC Network Controller, ffffc804b9e6f1a0.
1: kd> !ndiskd.netadapter
Driver NetAdapter Name
ffffc804af2e3710 ffffc804b9e6f1a0 Marvell AVASTAR Wireless-AC Network Controller
ffffc804b99b9020 ffffc804b9c301a0 WAN Miniport (Network Monitor)
ffffc804b99b9020 ffffc804b9c2a1a0 WAN Miniport (IPv6)
ffffc804b99b9020 ffffc804b8a8a1a0 WAN Miniport (IP)
ffffc804ae9d7020 ffffc804b9ceb1a0 WAN Miniport (PPPOE)
ffffc804b9ca5900 ffffc804b9e601a0 WAN Miniport (PPTP)
ffffc804b99dc720 ffffc804b99b01a0 WAN Miniport (L2TP)
ffffc804b86581b0 ffffc804b9c6c1a0 WAN Miniport (IKEv2)
ffffc804ad4a7250 ffffc804b99651a0 WAN Miniport (SSTP)
ffffc804b11c4020 ffffc804b85821a0 Microsoft ISATAP Adapter
ffffc804b11c4020 ffffc804b71731a0 Microsoft ISATAP Adapter #2
ffffc804ad725020 ffffc804b05e71a0 Surface Ethernet Adapter #2
ffffc804b0bf0020 ffffc804b0c011a0 Bluetooth Device (Personal Area Network)
ffffc804aef695e0 ffffc804aed331a0 TAP-Windows Adapter V9
Now, click on the link for that NetAdapter or enter the !ndiskd.netadapter -handle command to see its details. Look for the "Show state history" link to the right of the Device PnP field, in the State section.
1: kd> !ndiskd.netadapter ffffc804b9e6f1a0
MINIPORT
Marvell AVASTAR Wireless-AC Network Controller
Ndis handle ffffc804b9e6f1a0
Ndis API version v6.50
Adapter context ffffc804af3b1100
Driver ffffc804af2e3710 - mrvlpcie8897 v1.0
Network interface ffffc804aea60a20
Media type 802.3
Physical medium NdisPhysicalMediumUnspecified
Device instance PCI\VEN_11AB&DEV_2B38&SUBSYS_045E0001&REV_00\4&379f07b2&0&00E0
Device object ffffc804b9e6f050 More information
MAC address c0-33-5e-13-22-f7
STATE
Miniport INITIALIZING
Device PnP ADDED Show state history
Datapath Normal
Operational status DOWN
Operational flags [No flags set]
Admin status ADMIN_UP
Media MediaConnectUnknown
Power D0
References 1 Show detail
Total resets 0
Pending OID None
Flags IN_INITIALIZE, NOT_BUS_MASTER, DEFAULT_PORT_ACTIVATED,
NOT_SUPPORTS_MEDIA_SENSE, DOES_LOOPBACK, MEDIA_CONNECTED
PnP flags PM_SUPPORTED, RECEIVED_START, HARDWARE_DEVICE
WDI
This system supports WDI.
Learn more about the associated WDI state
BINDINGS
Protocol list Driver Open Context
No protocols are bound to this miniport
Filter list Driver Module Context
No filters are bound to this miniport
MORE INFORMATION
Driver handlers Task offloads
Power management PM protocol offloads
Pending OIDs Timers
Pending NBLs Receive side throttling
Wake-on-LAN (WoL) Packet filter
Receive queues Receive filtering
RSS NIC switch
Hardware resources Selective suspend
NDIS ports WMI guids
Diagnostic log
Now you can click the "Show state history" link or use the net adapter's handle to enter the !ndiskd.netadapter -handle -log command, which will show you the PnP event log for this miniport's miniport driver.
1: kd> !ndiskd.netadapter ffffc804b9e6f1a0 -log
MINIPORT PM & PNP EVENTS
Event Timestamp (most recent event at bottom)
DeviceAdded
13 ms later
DeviceStart
Mon Mar 20 21:27:07.106 2017 (UTC - 7:00) Now?
Set a breakpoint on the next event