windows2012事件管理器,安全日志中频繁报“Windows 筛选平台阻止了数据包。”
+ System
- Provider
[ Name] Microsoft-Windows-Security-Auditing
[ Guid] {54849625-5478-4994-A5BA-3E3B0328C30D}
EventID 5152
Version 0
Level 0
Task 12809
Opcode 0
Keywords 0x8010000000000000
- TimeCreated
[ SystemTime] 2020-06-15T01:15:52.933905400Z
EventRecordID 36197683
Correlation
- Execution
[ ProcessID] 4
[ ThreadID] 7588
Channel Security
Computer FX-LJ-LJGW.corp.sinochem.com
Security
- EventData
ProcessId 0
Application -
Direction %%14592
SourceAddress 10.58.237.237
SourcePort 54915
DestAddress 10.58.239.255
DestPort 54915
Protocol 17
FilterRTID 72366
LayerName %%14597
LayerRTID 13