客户咨询概括：

客户发现NLB集群有问题希望起用ETW log 来进行进一步排错，需要提供咨询。

建议内容：

1.确认客户环境为Server 2008R2版本NLB。

2. 保存以下xml名称为: networkloadbalancing-core-diagnostic.events.man
3. 拷贝以上文本到NLB节点.
4. 命令行导入以上xml:
5. wevtutil im networkloadbalancing-core-diagnostic.events.man

xmlns=”urn:schemas-microsoft-com:asm.v3″
xmlns:win=”http://manifests.microsoft.com/win/2004/08/windows/events”
xmlns:xsd=”http://www.w3.org/2001/XMLSchema”
xmlns:xsi=”http://www.w3.org/2001/XMLSchema-instance”
manifestVersion=”1.0″

buildType=”$(build.buildType)”
language=”neutral”
name=”Microsoft-Windows-NetworkLoadBalancing-Core-Diagnostic-Events”
processorArchitecture=”$(build.processorArchitecture)”
publicKeyToken=”$(Build.WindowsPublicKeyToken)”
version=”$(build.version)”
versionScope=”nonSxS”
/>


guid=”{DEF02E30-3290-4b2d-BC28-D2B0EDADF411}”
message=”$(string.NLB.Diagnostics.ProviderName)”
messageFileName=”%SystemRoot%System32driversnlb.sys”
name=”Microsoft-Windows-NLB-Diagnostic”
resourceFileName=”%SystemRoot%System32driversnlb.sys”
symbol=”MICROSOFT_NETWORK_LOAD_BALANCING_DIAGNOSTIC_PUBLISHER”

chid=”NlbTrace”
enabled=”false”
isolation=”System”
message=”$(string.NLB.Diagnostics.DiagnosticChannel)”
name=”Microsoft-Windows-NLB/Diagnostic”
symbol=”NLB_TRACE_CHANNEL”
type=”Analytic”

false
104857600


QPC




message=”$(string.FilteringTaskMsg.1)”
name=”Task.Filtering.SendAccept”
symbol=”TaskFilteringSendAccept”
value=”101″
/>
message=”$(string.FilteringTaskMsg.2)”
name=”Task.Filtering.SendDrop”
symbol=”TaskFilteringSendDrop”
value=”102″
/>
message=”$(string.FilteringTaskMsg.3)”
name=”Task.Filtering.ReceiveAccept”
symbol=”TaskFilteringReceiveAccept”
value=”103″
/>
message=”$(string.FilteringTaskMsg.4)”
name=”Task.Filtering.ReceiveDrop”
symbol=”TaskFilteringReceiveDrop”
value=”104″
/>



mask=”0x0000000000000001″
message=”$(string.Keyword.NLB)”
name=”NLB”
/>
mask=”0x0000000000000002″
message=”$(string.Keyword.Filtering)”
name=”Filtering”
/>
mask=”0x0000000000000004″
message=”$(string.Keyword.Hook)”
name=”Hook”
/>
mask=”0x0000000000000008″
message=”$(string.Keyword.Send)”
name=”Send”
/>
mask=”0x0000000000000010″
message=”$(string.Keyword.Receive)”
name=”Receive”
/>
mask=”0x0000000000000020″
message=”$(string.Keyword.Accept)”
name=”Accept”
/>
mask=”0x0000000000000040″
message=”$(string.Keyword.Drop)”
name=”Drop”
/>



message=”$(string.NLB_ACCEPT_DROP_REASON.0)”
value=”0″
/>
message=”$(string.NLB_ACCEPT_DROP_REASON.1)”
value=”1″
&nb