Event ID 5146 - The Windows filtering platform has blocked a packet.
||This event is generated when Windows Filtering Platform has blocked a network packet.This event is generated for every received network packet.
||Advanced Security audit policy settings
||Filtering platform packet drop
- Source address
- Source port
- Filter run-time ID
- Layer name
- Layer run-time ID
Event 5146 applies to the following operating systems:
- Windows Server 2008 R2 and 7
- Windows Server 2012 R2 and 8.1
- Windows Server 2016 and 10
Explore Active Directory auditing and reporting with ADAudit Plus.
Account Management Auditing
Active Directory Auditing
Windows Server Auditing