<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-WinNat" version="10.0.10586.71" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="Resources">
    <dependentAssembly dependencyType="prerequisite">
      <assemblyIdentity name="Microsoft-Windows-WinNat.Resources" version="10.0.10586.71" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" />
    </dependentAssembly>
  </dependency>
  <file name="winnat.sys" destinationPath="$(runtime.drivers)\" sourceName="winnat.sys" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">azSfgzDKOwe9yRGh2iLIOjAvRx2s7x8JUzgKewyiH5k=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <memberships>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories.Services" version="10.0.10586.71" publicKeyToken="31bf3856ad364e35" typeName="Service" />
      <categoryInstance>
        <serviceData name="WinNat" displayName="@%SystemRoot%\system32\drivers\winnat.sys,-10001" errorControl="normal" imagePath="system32\drivers\winnat.sys" start="demand" type="kernelDriver" description="@%SystemRoot%\system32\drivers\winnat.sys,-10002" dependOnService="Tcpip">
          <securityDescriptor name="WinnatServiceACL" />
        </serviceData>
      </categoryInstance>
    </categoryMembership>
    <categoryMembership>
      <id name="Microsoft.Windows.Categories" version="1.0.0.0" publicKeyToken="365143bb27e7ac8b" typeName="BootCritical" />
    </categoryMembership>
  </memberships>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\WinNat">
      <registryValue name="TypesSupported" valueType="REG_DWORD" value="0x00000007" />
      <registryValue name="EventMessageFile" valueType="REG_EXPAND_SZ" value="%SystemRoot%\System32\netevent.dll" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WinnatServiceACL" sddl="D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="description" value="This component provides network address translation functionality" />
        <string id="displayName0" value="Windows NAT Driver" />
        <string id="WINNAT_ADDRESS_FAMILY_TYPE_ValueMap.2.Message" value="IPV4" />
        <string id="WINNAT_ADDRESS_FAMILY_TYPE_ValueMap.23.Message" value="IPV6" />
        <string id="WINNAT_FILTERING_BEHAVIOR_ValueMap.0.Message" value="Endpoint independent" />
        <string id="WINNAT_FILTERING_BEHAVIOR_ValueMap.1.Message" value="Adress dependent" />
        <string id="WINNAT_OBJECT_ACTION_ValueMap.0.Message" value="modify" />
        <string id="WINNAT_OBJECT_ACTION_ValueMap.1.Message" value="create" />
        <string id="WINNAT_OBJECT_ACTION_ValueMap.2.Message" value="createandmodify" />
        <string id="WINNAT_OBJECT_ACTION_ValueMap.3.Message" value="delete" />
        <string id="WINNAT_OPERATION_LOG.ChannelMessage" value="Operational" />
        <string id="WINNAT_STATIC_MAPPING_TYPE_ValueMap.1.Message" value="one-to-one" />
        <string id="WINNAT_STATIC_MAPPING_TYPE_ValueMap.2.Message" value="one-to-many with remote IP prefix" />
        <string id="WINNAT_TCPSTATE_ValueMap.0.Message" value="Closed/NA" />
        <string id="WINNAT_TCPSTATE_ValueMap.1.Message" value="Internal SYN received" />
        <string id="WINNAT_TCPSTATE_ValueMap.2.Message" value="External SYN received" />
        <string id="WINNAT_TCPSTATE_ValueMap.3.Message" value="Established" />
        <string id="WINNAT_TCPSTATE_ValueMap.4.Message" value="Internal FIN received" />
        <string id="WINNAT_TCPSTATE_ValueMap.5.Message" value="External FIN received" />
        <string id="WINNAT_TCPSTATE_ValueMap.6.Message" value="Both FIN received" />
        <string id="WINNAT_TCPSTATE_ValueMap.7.Message" value="4 minute timewait" />
        <string id="WINNAT_TRANSPORT_PROTOCOL_ValueMap.1.Message" value="ICMPv4" />
        <string id="WINNAT_TRANSPORT_PROTOCOL_ValueMap.17.Message" value="UDP" />
        <string id="WINNAT_TRANSPORT_PROTOCOL_ValueMap.58.Message" value="ICMPv6" />
        <string id="WINNAT_TRANSPORT_PROTOCOL_ValueMap.6.Message" value="TCP" />
        <string id="WinNatAddressChangeNotify.EventMessage" value="Address %6 notification. Address: %2, InterfaceLuid: %5 " />
        <string id="WinNatAddressPoolConfig.EventMessage" value="Address pool %6 Status: %7. Instance: %1, Address: %2, StartingPort: %3, EndingPort: %4, InterfaceLuid: %5 " />
        <string id="WinNatBindingCreate.EventMessage" value="%5 binding created. Internal transport addr: %2 (CompartmentId %8), External transport addr %4, SessionCount: %6, Configured: %7" />
        <string id="WinNatBindingCreateV0.EventMessage" value="%5 binding created. Internal transport addr: %2, External transport addr %4, SessionCount: %6, Configured: %7" />
        <string id="WinNatBindingDelete.EventMessage" value="%5 binding deleted. Internal transport addr: %2 (CompartmentId %8), External transport addr %4, SessionCount: %6, Configured: %7" />
        <string id="WinNatBindingDeleteV0.EventMessage" value="%5 binding deleted. Internal transport addr: %2, External transport addr %4, SessionCount: %6, Configured: %7" />
        <string id="WinNatBindingSessionCount.EventMessage" value="%5 binding session count updated. Internal transport addr: %2 (CompartmentId %8), External transport addr %4, SessionCount: %6, Configured: %7" />
        <string id="WinNatBindingSessionCountV0.EventMessage" value="%5 binding session count updated. Internal transport addr: %2, External transport addr %4, SessionCount: %6, Configured: %7" />
        <string id="WinNatInstanceEvent.EventMessage" value="Nat Instance %1 %11 Status: %10.UdpIdleSessionTimeout: %2 sec, TcpTransientConnectionTimeout: %3, TcpEstablishedConnectionTimeout: %4, IcmpQueryTimeout: %5, TcpFilteringBehavior: %6, UdpFilteringBehavior: %7, UdpInboundRefresh: %8, Enabled: %9" />
        <string id="WinNatIPxlatInstanceCreation.EventMessage" value="Added IPxlat instance for interface %1" />
        <string id="WinNatIPxlatInstanceDeletion.EventMessage" value="Deleted IPxlat instance for interface %1" />
        <string id="WinNatIPxlatInstanceModification.EventMessage" value="Modified IPxlat instance for interface %1" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.0.Message" value="None" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.1.Message" value="Parsing failure" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.10.Message" value="Hop limit exceeded" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.11.Message" value="Packet is larger than nexthop MTU and cannot be fragmented" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.12.Message" value="Unexpected route look-up failure" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.13.Message" value="No route to the packet's (translated) destination was found" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.14.Message" value="Failed to create a session object" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.15.Message" value="The interface over which the packet is to be routed is not a NAT external interface" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.16.Message" value="The interface over which the packet is to be routed does not have a matching NAT instance" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.17.Message" value="NAT device itself is not allowed to be an internal host at the same time" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.18.Message" value="Packet is routable in its own arrival compartment" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.19.Message" value="Packet's transport protocol is not supported by NAT" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.2.Message" value="First packet for the fragmented datagram is not at offset 0" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.20.Message" value="Packet is destined to NAT itself" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.21.Message" value="Packet's destination address and port do not fall within any NAT external address port range" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.22.Message" value="Winnat MUX rejected the packet" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.23.Message" value="Winnat MUX failed to find the VIP/DIP configuration" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.24.Message" value="Winnat MUX failed to send the encapsulated packet" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.3.Message" value="Failed to parse or validate the IP packet contained in the ICMP error message payload" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.4.Message" value="IP packet contained in the ICMP error message payload does not match any existing session" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.5.Message" value="Failed to find a nexthop for external hairpinning" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.6.Message" value="No matching static mapping exists to let the packet in" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.7.Message" value="Failed to acquire a reference on the nexthop object" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.8.Message" value="Failed to clone the packet" />
        <string id="WINNATM_PACKET_ACTION_REASON_ValueMap.9.Message" value="Failed to translate the packet" />
        <string id="WINNATM_PACKET_SOURCE_ValueMap.1.Message" value="INTERNAL" />
        <string id="WINNATM_PACKET_SOURCE_ValueMap.2.Message" value="EXTERNAL" />
        <string id="WinNatMDroppedIPv4Packet.EventMessage" value="NAT dropped IPv4 %5 packet which arrived over %4 interface %3 in compartment %2 with reason: %1." />
        <string id="WinNatMemoryAllocationFailure.EventMessage" value="Memory allocation failure: %1" />
        <string id="WinNatMExternalAddressAddition.EventMessage" value="Added external address %3:%4-%5 to NAT instance %1" />
        <string id="WinNatMExternalAddressRemoval.EventMessage" value="Removed external address %3:%4-%5 from NAT instance %1" />
        <string id="WinNatMExternalAddressRundown.EventMessage" value="NAT instance %1: external address %3:%4-%5" />
        <string id="WinNatMForwardedIPv4Packet.EventMessage" value="NAT translated and forwarded IPv4 %5 packet which arrived over %4 interface %3 in compartment %2 to interface %7 in compartment %6." />
        <string id="WinNatMGeneralError.EventMessage" value="NAT ERROR %1: %2 (%3) Status %4" />
        <string id="WinNatMGenericEvent.EventMessage" value="%1" />
        <string id="WinNatMImproperDefaultRoute.EventMessage" value="NAT detected a default route in compartment %1 interface %2. Default routes in internal compartments will prevent NAT operation for those compartments." />
        <string id="WinNatMInstanceCreation.EventMessage" value="Created NAT instance %1 for RoutingDomainId %2 (CompartmentId %5) with external interface prefix %4/%3" />
        <string id="WinNatMInstanceDeletion.EventMessage" value="Deleted NAT instance %1" />
        <string id="WinNatMInstanceExternalInterfaceAssociation.EventMessage" value="NAT instance %1 external interface index is %6 for prefix %4/%3" />
        <string id="WinNatMInstanceModification.EventMessage" value="Modified NAT instance %1 properties" />
        <string id="WinNatMInstanceRundown.EventMessage" value="NAT instance %1: RoutingDomainId %2 (CompartmentId %5), external interface index %6 (%4/%3)" />
        <string id="WinNatMOutOfPorts.EventMessage" value="NAT instance %1 failed to allocate a %2 port dynamically because all ports in the instance's external address pool are in use." />
        <string id="WinNatMSkippedIPv4Packet.EventMessage" value="NAT left processing of IPv4 %5 packet to the host network stack over %4 interface %3 in compartment %2 with reason: %1." />
        <string id="WinNatMStaticMappingAddition.EventMessage" value="Added static mapping %2 %5 > %6 (CompartmentId %8) to NAT instance %1 (%3 %9/%10)" />
        <string id="WinNatMStaticMappingRemoval.EventMessage" value="Removed static mapping %2 %5 > %6 (CompartmentId %8) from NAT instance %1 (%3 %9/%10)" />
        <string id="WinNatMStaticMappingRundown.EventMessage" value="NAT instance %1: static mapping %2 %5 > %6 (CompartmentId %8) (%3 %9/%10)" />
        <string id="WinNatMUnmatchedPrefix.EventMessage" value="NAT Instance %1 created with no matching prefix %4/%3." />
        <string id="WinNatPacketFilterEvent.EventMessage" value="Packet filter %12 Status: %13. Instance: %1, SrcPrefix: %3, SrcPrefixLength: %4, DstPrefix: %5, DstPrefixLength: %6, Ipv4Prefix: %7, Ipv4PrefixLength: %8, Nat64: %9, InterfaceLuid: %10" />
        <string id="WinNatSessionCreate.EventMessage" value="%7 session created. Internal source transport addr: %2 (CompartmentId %10), Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState:%9" />
        <string id="WinNatSessionCreateOperational.EventMessage" value="%7 session created. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6" />
        <string id="WinNatSessionCreateV0.EventMessage" value="%7 session created. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState:%9" />
        <string id="WinNatSessionDelete.EventMessage" value="%7 session deleted. Internal source transport addr: %2 (CompartmentId %10), Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9" />
        <string id="WinNatSessionDeleteOperational.EventMessage" value="%7 session deleted. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6" />
        <string id="WinNatSessionDeleteV0.EventMessage" value="%7 session deleted. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9" />
        <string id="WinNatSessionTcpStateUpdate.EventMessage" value="%7 session state updated. Internal source transport addr: %2 (CompartmentId %10), Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9" />
        <string id="WinNatSessionTcpStateUpdateV0.EventMessage" value="%7 session state updated. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9" />
        <string id="WinNatSessionTimeout.EventMessage" value="%7 session timedout. Internal source transport addr: %2 (CompartmentId %10), Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9" />
        <string id="WinNatSessionTimeoutV0.EventMessage" value="%7 session timedout. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9" />
        <string id="WinNatSessionTimerUpdate.EventMessage" value="%7 session lifetime updated. Internal source transport addr: %2 (CompartmentId %10), Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9" />
        <string id="WinNatSessionTimerUpdateV0.EventMessage" value="%7 session lifetime updated. Internal source transport addr: %2, Internal dest transport addr: %3, External source transport addr %5, External dest transport addr %6, Lifetime: %8 seconds, TcpState: %9" />
        <string id="WinNatStaticBindingEvent.EventMessage" value="Static binding %6 Status: %7. Internal Source: %2, External Source: %4, Protocol: %5" />
        <string id="WinNatTranslation.EventMessage" value="Translating %8 packet from %2:%3 to %5:%6, IPID:%7. Status: %9, IcmpType: %10, IcmpCode: %11, IcmpErrorPayload: %12" />
        <string id="WinNatWFPFilterEvent.EventMessage" value="WFP filter %12 Status: %13. Instance: %1, FilterId: %11, SrcPrefix: %3, SrcPrefixLength: %4, DstPrefix: %5, DstPrefixLength: %6, Ipv4Prefix: %7, Ipv4PrefixLength: %8, Nat64: %9, InterfaceLuid: %10" />
      </stringTable>
    </resources>
  </localization>
  <instrumentation>
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events">
      <provider guid="{66c07ecd-6667-43fc-93f8-05cf07f446ec}" messageFileName="%WinDir%\system32\drivers\winnat.sys" name="Microsoft-Windows-WinNat" resourceFileName="%WinDir%\system32\drivers\winnat.sys" symbol="MICROSOFT_WINNAT_ETW_PROVIDER">
        <channels>
          <channel chid="CHID_WINNAT" enabled="false" isolation="System" name="Microsoft-Windows-WinNat/Trace" symbol="CHANNEL_WINNAT" type="Analytic">
            <publishing>
              <level>0xFF</level>
            </publishing>
          </channel>
          <channel chid="CHID_WINNAT_OPERATIONAL" enabled="false" isolation="System" message="$(string.WINNAT_OPERATION_LOG.ChannelMessage)" name="Microsoft-Windows-WinNat/Oper" symbol="CHANNEL_WINNAT_OPERATIONAL" type="Operational" />
        </channels>
        <maps>
          <valueMap name="WINNAT_ADDRESS_FAMILY_TYPE_ValueMap">
            <map message="$(string.WINNAT_ADDRESS_FAMILY_TYPE_ValueMap.2.Message)" value="2" />
            <map message="$(string.WINNAT_ADDRESS_FAMILY_TYPE_ValueMap.23.Message)" value="23" />
          </valueMap>
          <valueMap name="WINNAT_FILTERING_BEHAVIOR_ValueMap">
            <map message="$(string.WINNAT_FILTERING_BEHAVIOR_ValueMap.0.Message)" value="0" />
            <map message="$(string.WINNAT_FILTERING_BEHAVIOR_ValueMap.1.Message)" value="1" />
          </valueMap>
          <valueMap name="WINNAT_OBJECT_ACTION_ValueMap">
            <map message="$(string.WINNAT_OBJECT_ACTION_ValueMap.0.Message)" value="0" />
            <map message="$(string.WINNAT_OBJECT_ACTION_ValueMap.1.Message)" value="1" />
            <map message="$(string.WINNAT_OBJECT_ACTION_ValueMap.2.Message)" value="2" />
            <map message="$(string.WINNAT_OBJECT_ACTION_ValueMap.3.Message)" value="3" />
          </valueMap>
          <valueMap name="WINNAT_TRANSPORT_PROTOCOL_ValueMap">
            <map message="$(string.WINNAT_TRANSPORT_PROTOCOL_ValueMap.1.Message)" value="1" />
            <map message="$(string.WINNAT_TRANSPORT_PROTOCOL_ValueMap.6.Message)" value="6" />
            <map message="$(string.WINNAT_TRANSPORT_PROTOCOL_ValueMap.17.Message)" value="17" />
            <map message="$(string.WINNAT_TRANSPORT_PROTOCOL_ValueMap.58.Message)" value="58" />
          </valueMap>
          <valueMap name="WINNAT_TCPSTATE_ValueMap">
            <map message="$(string.WINNAT_TCPSTATE_ValueMap.0.Message)" value="0" />
            <map message="$(string.WINNAT_TCPSTATE_ValueMap.1.Message)" value="1" />
            <map message="$(string.WINNAT_TCPSTATE_ValueMap.2.Message)" value="2" />
            <map message="$(string.WINNAT_TCPSTATE_ValueMap.3.Message)" value="3" />
            <map message="$(string.WINNAT_TCPSTATE_ValueMap.4.Message)" value="4" />
            <map message="$(string.WINNAT_TCPSTATE_ValueMap.5.Message)" value="5" />
            <map message="$(string.WINNAT_TCPSTATE_ValueMap.6.Message)" value="6" />
            <map message="$(string.WINNAT_TCPSTATE_ValueMap.7.Message)" value="7" />
          </valueMap>
          <valueMap name="WINNAT_STATIC_MAPPING_TYPE_ValueMap">
            <map message="$(string.WINNAT_STATIC_MAPPING_TYPE_ValueMap.1.Message)" value="1" />
            <map message="$(string.WINNAT_STATIC_MAPPING_TYPE_ValueMap.2.Message)" value="2" />
          </valueMap>
          <valueMap name="WINNATM_PACKET_ACTION_REASON_ValueMap">
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.0.Message)" value="0" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.1.Message)" value="1" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.2.Message)" value="2" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.3.Message)" value="3" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.4.Message)" value="4" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.5.Message)" value="5" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.6.Message)" value="6" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.7.Message)" value="7" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.8.Message)" value="8" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.9.Message)" value="9" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.10.Message)" value="10" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.11.Message)" value="11" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.12.Message)" value="12" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.13.Message)" value="13" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.14.Message)" value="14" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.15.Message)" value="15" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.16.Message)" value="16" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.17.Message)" value="17" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.18.Message)" value="18" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.19.Message)" value="19" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.20.Message)" value="20" />
            <map message="$(string.WINNATM_PACKET_ACTION_REASON_ValueMap.21.Message)" value="21" />
          </valueMap>
          <valueMap name="WINNATM_PACKET_SOURCE_ValueMap">
            <map message="$(string.WINNATM_PACKET_SOURCE_ValueMap.1.Message)" value="1" />
            <map message="$(string.WINNATM_PACKET_SOURCE_ValueMap.2.Message)" value="2" />
          </valueMap>
        </maps>
        <tasks>
          <task name="WinNatSessionCreate" value="1001" />
          <task name="WinNatSessionTimerUpdate" value="1002" />
          <task name="WinNatSessionTcpStateUpdate" value="1003" />
          <task name="WinNatSessionTimeout" value="1004" />
          <task name="WinNatSessionDelete" value="1005" />
          <task name="WinNatBindingCreate" value="1006" />
          <task name="WinNatBindingDelete" value="1007" />
          <task name="WinNatBindingSessionCount" value="1008" />
          <task name="WinNatTranslation" value="1009" />
          <task name="WinNatInstanceEvent" value="1010" />
          <task name="WinNatPacketFilterEvent" value="1011" />
          <task name="WinNatWFPFilterEvent" value="1012" />
          <task name="WinNatAddressPoolConfig" value="1013" />
          <task name="WinNatAddressChangeNotify" value="1014" />
          <task name="WinNatStaticBindingEvent" value="1015" />
          <task name="WinNatMemoryAllocationFailure" value="1016" />
          <task name="WinNatSessionCreateOperational" value="1017" />
          <task name="WinNatSessionDeleteOperational" value="1018" />
          <task name="WinNatMInstanceCreation" value="1019" />
          <task name="WinNatMInstanceModification" value="1020" />
          <task name="WinNatMInstanceExternalInterfaceAssociation" value="1021" />
          <task name="WinNatMInstanceDeletion" value="1022" />
          <task name="WinNatMInstanceRundown" value="1023" />
          <task name="WinNatMExternalAddressAddition" value="1024" />
          <task name="WinNatMExternalAddressRemoval" value="1025" />
          <task name="WinNatMExternalAddressRundown" value="1026" />
          <task name="WinNatMStaticMappingAddition" value="1027" />
          <task name="WinNatMStaticMappingRemoval" value="1028" />
          <task name="WinNatMStaticMappingRundown" value="1029" />
          <task name="WinNatMDroppedIPv4Packet" value="1030" />
          <task name="WinNatMImproperDefaultRoute" value="1031" />
          <task name="WinNatMImproperDefaultRouteOper" value="1032" />
          <task name="WinNatMOutOfPortsOper" value="1033" />
          <task name="WinNatMSkippedIPv4Packet" value="1034" />
          <task name="WinNatMForwardedIPv4Packet" value="1035" />
          <task name="WinNatMGeneralError" value="1036" />
          <task name="WinNatMInstanceCreationWithNoMatchingPrefix" value="1037" />
          <task name="WinNatMTaskGenericEventInformational" value="1038" />
          <task name="WinNatMTaskGenericEventError" value="1039" />
          <task name="WinNatMTaskGenericEventWarning" value="1040" />
          <task name="WinNatIPxlatInstanceCreate" value="1041" />
          <task name="WinNatIPxlatInstanceModify" value="1042" />
          <task name="WinNatIPxlatInstanceDelete" value="1043" />
        </tasks>
        <templates>
          <template tid="tid_WINNAT_SESSION_V0">
            <data inType="win:UInt32" name="InternalAddrLen" />
            <data inType="win:Binary" length="InternalAddrLen" name="InternalSrcAddr" outType="win:SocketAddress" />
            <data inType="win:Binary" length="InternalAddrLen" name="InternalDstAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="ExternalAddrLen" />
            <data inType="win:Binary" length="ExternalAddrLen" name="ExternalSrcAddr" outType="win:SocketAddress" />
            <data inType="win:Binary" length="ExternalAddrLen" name="ExternalDstAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="TransportProtocol" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="Lifetime" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNAT_TCPSTATE_ValueMap" name="TcpSessionState" outType="win:unsignedInt" />
          </template>
          <template tid="tid_WINNAT_SESSION">
            <data inType="win:UInt32" name="InternalAddrLen" />
            <data inType="win:Binary" length="InternalAddrLen" name="InternalSrcAddr" outType="win:SocketAddress" />
            <data inType="win:Binary" length="InternalAddrLen" name="InternalDstAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="ExternalAddrLen" />
            <data inType="win:Binary" length="ExternalAddrLen" name="ExternalSrcAddr" outType="win:SocketAddress" />
            <data inType="win:Binary" length="ExternalAddrLen" name="ExternalDstAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="TransportProtocol" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="Lifetime" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNAT_TCPSTATE_ValueMap" name="TcpSessionState" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="InternalCompartmentId" outType="win:unsignedInt" />
          </template>
          <template tid="tid_WINNAT_BINDING_V0">
            <data inType="win:UInt32" name="InternalAddrLen" />
            <data inType="win:Binary" length="InternalAddrLen" name="InternalAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="ExternalAddrLen" />
            <data inType="win:Binary" length="ExternalAddrLen" name="ExternalAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="TransportProtocol" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="SessionCount" />
            <data inType="win:Boolean" name="Configured" />
          </template>
          <template tid="tid_WINNAT_BINDING">
            <data inType="win:UInt32" name="InternalAddrLen" />
            <data inType="win:Binary" length="InternalAddrLen" name="InternalAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="ExternalAddrLen" />
            <data inType="win:Binary" length="ExternalAddrLen" name="ExternalAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="TransportProtocol" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="SessionCount" />
            <data inType="win:Boolean" name="Configured" />
            <data inType="win:UInt32" name="InternalCompartmentId" outType="win:unsignedInt" />
          </template>
          <template tid="tid_WINNAT_TRANSLATION">
            <data inType="win:UInt32" name="IncomingAddrLen" />
            <data inType="win:Binary" length="IncomingAddrLen" name="IncomingSrcAddr" outType="win:SocketAddress" />
            <data inType="win:Binary" length="IncomingAddrLen" name="IncomingDstAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="TranslatedAddrLen" />
            <data inType="win:Binary" length="TranslatedAddrLen" name="TranslatedSrcAddr" outType="win:SocketAddress" />
            <data inType="win:Binary" length="TranslatedAddrLen" name="TranslatedDstAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="Identification" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="TransportProtocol" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="Status" outType="win:NTSTATUS" />
            <data inType="win:UInt32" name="IcmpType" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="IcmpCode" outType="win:unsignedInt" />
            <data inType="win:Boolean" name="IcmpPayload" />
          </template>
          <template tid="tid_WINNAT_INSTANCE">
            <data inType="win:UnicodeString" name="InstanceName" outType="xs:string" />
            <data inType="win:UInt32" name="UdpIdleSessionTimeout" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="TcpTransientConnectionTimeout" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="TcpEstablishedConnectionTimeout" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="IcmpQueryTimeout" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNAT_FILTERING_BEHAVIOR_ValueMap" name="TcpFilteringBehavior" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNAT_FILTERING_BEHAVIOR_ValueMap" name="UdpFilteringBehavior" outType="win:unsignedInt" />
            <data inType="win:Boolean" name="UdpInboundRefresh" />
            <data inType="win:Boolean" name="Enabled" />
            <data inType="win:UInt32" name="Status" outType="win:NTSTATUS" />
            <data inType="win:UInt32" map="WINNAT_OBJECT_ACTION_ValueMap" name="Action" outType="win:unsignedInt" />
          </template>
          <template tid="tid_WINNAT_PACKET_FILTER">
            <data inType="win:UnicodeString" name="InstanceName" outType="xs:string" />
            <data inType="win:UInt32" name="InternalPrefixAddrLength" />
            <data inType="win:Binary" length="InternalPrefixAddrLength" name="InternalSrcPrefix" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="InternalSrcPrefixLength" />
            <data inType="win:Binary" length="InternalPrefixAddrLength" name="InternaDstlPrefix" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="InternalDstPrefixLength" />
            <data inType="win:UInt32" name="IPv4Prefix" outType="win:IPv4" />
            <data inType="win:UInt32" name="IPv4PrefixLength" />
            <data inType="win:Boolean" name="Nat64" />
            <data inType="win:UInt64" name="InterfaceLuid" />
            <data inType="win:UInt64" name="FilterId" />
            <data inType="win:UInt32" map="WINNAT_OBJECT_ACTION_ValueMap" name="Action" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="Status" outType="win:NTSTATUS" />
          </template>
          <template tid="tid_WINNAT_ADDRESS_POOL">
            <data inType="win:UnicodeString" name="InstanceName" outType="xs:string" />
            <data inType="win:UInt32" name="Address" outType="win:IPv4" />
            <data inType="win:UInt16" name="StartingPort" />
            <data inType="win:UInt16" name="EndingPort" />
            <data inType="win:UInt64" name="InterfaceLuid" />
            <data inType="win:UInt32" map="WINNAT_OBJECT_ACTION_ValueMap" name="Action" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="Status" outType="win:NTSTATUS" />
          </template>
          <template tid="tid_WINNAT_MEMORY_ALLOCATION_FAILURE">
            <data inType="win:UnicodeString" name="Description" outType="xs:string" />
          </template>
          <template tid="tid_WINNAT_STATIC_BINDING">
            <data inType="win:UInt32" name="InternalAddrLen" />
            <data inType="win:Binary" length="InternalAddrLen" name="InternalAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="ExternalAddrLen" />
            <data inType="win:Binary" length="ExternalAddrLen" name="ExternalAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="TransportProtocol" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNAT_OBJECT_ACTION_ValueMap" name="Action" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="Status" outType="win:NTSTATUS" />
          </template>
          <template tid="tid_WINNAT_SESSION_OPERATIONAL">
            <data inType="win:UInt32" name="InternalAddrLen" />
            <data inType="win:Binary" length="InternalAddrLen" name="InternalSrcAddr" outType="win:SocketAddress" />
            <data inType="win:Binary" length="InternalAddrLen" name="InternalDstAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="ExternalAddrLen" />
            <data inType="win:Binary" length="ExternalAddrLen" name="ExternalSrcAddr" outType="win:SocketAddress" />
            <data inType="win:Binary" length="ExternalAddrLen" name="ExternalDstAddr" outType="win:SocketAddress" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="TransportProtocol" outType="win:unsignedInt" />
          </template>
          <template tid="tid_WINNATM_INSTANCE">
            <data inType="win:UnicodeString" name="InstanceName" outType="xs:string" />
            <data inType="win:GUID" name="InternalRoutingDomainId" />
            <data inType="win:UInt32" name="ExternalIPInterfaceAddressPrefixLength" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="ExternalIPInterfaceAddressPrefix" outType="win:IPv4" />
            <data inType="win:UInt32" name="CompartmentId" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="ExternalInterfaceIndex" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="UdpIdleSessionTimeout" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="TcpTransientConnectionTimeout" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="TcpEstablishedConnectionTimeout" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="IcmpQueryTimeout" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNAT_FILTERING_BEHAVIOR_ValueMap" name="TcpFilteringBehavior" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNAT_FILTERING_BEHAVIOR_ValueMap" name="UdpFilteringBehavior" outType="win:unsignedInt" />
            <data inType="win:Boolean" name="UdpInboundRefresh" />
          </template>
          <template tid="tid_WINNATM_EXTERNAL_ADDRESS">
            <data inType="win:UnicodeString" name="InstanceName" outType="xs:string" />
            <data inType="win:UInt32" name="AddressLength" />
            <data inType="win:Binary" length="AddressLength" name="IPAddress" outType="win:SocketAddress" />
            <data inType="win:UInt16" name="PortStart" />
            <data inType="win:UInt16" name="PortEnd" />
          </template>
          <template tid="tid_WINNATM_STATIC_MAPPING">
            <data inType="win:UnicodeString" name="InstanceName" outType="xs:string" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="TransportProtocol" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNAT_STATIC_MAPPING_TYPE_ValueMap" name="MappingType" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="AddressLength" />
            <data inType="win:Binary" length="AddressLength" name="ExternalTransportAddress" outType="win:SocketAddress" />
            <data inType="win:Binary" length="AddressLength" name="InternalTransportAddress" outType="win:SocketAddress" />
            <data inType="win:GUID" name="InternalRoutingDomainId" />
            <data inType="win:UInt32" name="CompartmentId" outType="win:unsignedInt" />
            <data inType="win:Binary" length="AddressLength" name="RemoteAddressPrefix" outType="win:SocketAddress" />
            <data inType="win:UInt32" name="RemoteAddressPrefixLength" />
          </template>
          <template tid="tid_WINNATM_IPV4_PACKET_ACTION">
            <data inType="win:UInt32" map="WINNATM_PACKET_ACTION_REASON_ValueMap" name="ActionReason" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="ArrivalCompartmentId" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="ArrivalInterfaceIndex" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNATM_PACKET_SOURCE_ValueMap" name="ArrivalNetwork" outType="win:unsignedInt" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="TransportProtocol" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="ForwardCompartmentId" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="ForwardInterfaceIndex" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="PacketLength" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="ContinuousLength" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="CapturedIPHeaderLength" />
            <data inType="win:UInt32" name="CapturedTransportHeaderLength" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="ICMPErrorTransportProtocol" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="ICMPErrorCapturedIPHeaderLength" />
            <data inType="win:UInt32" name="ICMPErrorCapturedTransportHeaderLength" />
            <data inType="win:Binary" length="CapturedIPHeaderLength" name="IPHeader" />
            <data inType="win:Binary" length="CapturedTransportHeaderLength" name="TransportHeader" />
            <data inType="win:Binary" length="ICMPErrorCapturedIPHeaderLength" name="ICMPErrorIPHeader" />
            <data inType="win:Binary" length="ICMPErrorCapturedTransportHeaderLength" name="ICMPErrorTransportHeader" />
          </template>
          <template tid="tid_WINNATM_IMPROPER_DEFAULT_ROUTE">
            <data inType="win:UInt32" name="CompartmentId" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="InterfaceIndex" outType="win:unsignedInt" />
          </template>
          <template tid="tid_WINNATM_OUT_OF_PORTS">
            <data inType="win:UnicodeString" name="InstanceName" outType="xs:string" />
            <data inType="win:UInt32" map="WINNAT_TRANSPORT_PROTOCOL_ValueMap" name="TransportProtocol" outType="win:unsignedInt" />
          </template>
          <template tid="tid_WINNAT_IPXLAT_INSTANCE">
            <data inType="win:UInt64" name="InterfaceLuid" outType="win:HexInt64" />
            <data inType="win:UInt32" name="FallbackIPv4Address" outType="win:IPv4" />
            <data inType="win:UInt32" name="SyntheticIPv4Address" outType="win:IPv4" />
            <data inType="win:Binary" length="16" name="SyntheticIPv6Address" outType="win:IPv6" />
            <data inType="win:Binary" length="16" name="RemotePrefix" outType="win:IPv6" />
            <data inType="win:UInt32" name="RemotePrefixLength" />
            <data inType="win:Binary" length="16" name="LocalPrefix" outType="win:IPv6" />
            <data inType="win:UInt32" name="LocalPrefixLength" />
          </template>
          <template tid="tid_WINNATM_GENERAL_ERROR">
            <data inType="win:UInt32" name="ErrorID" outType="win:unsignedInt" />
            <data inType="win:UnicodeString" name="ErrorContext" outType="xs:string" />
            <data inType="win:UInt32" name="ErrorMisc" outType="win:unsignedInt" />
            <data inType="win:UInt32" name="Status" outType="win:NTSTATUS" />
          </template>
          <template tid="tid_WINNATM_GENERIC_EVENT">
            <data inType="win:UnicodeString" name="Info" outType="xs:string" />
          </template>
        </templates>
        <keywords>
          <keyword mask="0x0000000000000001" name="ut:Session" symbol="KW_WINNAT_SESSION" />
          <keyword mask="0x0000000000000002" name="ut:Binding" symbol="KW_WINNAT_BINDING" />
          <keyword mask="0x0000000000000004" name="ut:Translation" symbol="KW_WINNAT_TRANSLATION" />
          <keyword mask="0x0000000000000008" name="ut:Configuration" symbol="KW_WINNAT_CONFIGURATION" />
          <keyword mask="0x0000000000000010" name="ut:NatDrop" symbol="KW_WINNAT_DROP" />
          <keyword mask="0x0000000000000020" name="ut:NatSkip" symbol="KW_WINNAT_SKIP" />
          <keyword mask="0x0000000000000040" name="ut:NatForward" symbol="KW_WINNAT_FORWARD" />
          <keyword mask="0x0000000000000080" name="ut:NatGeneralError" symbol="KW_WINNAT_GENERAL_ERROR" />
          <keyword mask="0x0000000000000100" name="ut:NatGeneric" symbol="KW_WINNAT_GENERIC" />
          <keyword mask="0x0000010000000000" name="ut:Dropped" symbol="KW_DROPPED" />
        </keywords>
        <events>
          <event channel="CHID_WINNAT" keywords="ut:Session" level="win:Informational" message="$(string.WinNatSessionCreateV0.EventMessage)" notLogged="true" opcode="win:Info" symbol="WINNAT_SESSION_CREATE_V0" task="WinNatSessionCreate" template="tid_WINNAT_SESSION_V0" value="1001" version="0" />
          <event channel="CHID_WINNAT" keywords="ut:Session" level="win:Informational" message="$(string.WinNatSessionCreate.EventMessage)" opcode="win:Info" symbol="WINNAT_SESSION_CREATE" task="WinNatSessionCreate" template="tid_WINNAT_SESSION" value="1001" version="1" />
          <event channel="CHID_WINNAT" keywords="ut:Session" level="win:Verbose" message="$(string.WinNatSessionTimerUpdateV0.EventMessage)" notLogged="true" opcode="win:Info" symbol="WINNAT_SESSION_TIMER_UPDATE_V0" task="WinNatSessionTimerUpdate" template="tid_WINNAT_SESSION_V0" value="1002" version="0" />
          <event channel="CHID_WINNAT" keywords="ut:Session" level="win:Verbose" message="$(string.WinNatSessionTimerUpdate.EventMessage)" opcode="win:Info" symbol="WINNAT_SESSION_TIMER_UPDATE" task="WinNatSessionTimerUpdate" template="tid_WINNAT_SESSION" value="1002" version="1" />
          <event channel="CHID_WINNAT" keywords="ut:Session" level="win:Informational" message="$(string.WinNatSessionTcpStateUpdateV0.EventMessage)" notLogged="true" opcode="win:Info" symbol="WINNAT_SESSION_TCPSTATE_UPDATE_V0" task="WinNatSessionTcpStateUpdate" template="tid_WINNAT_SESSION_V0" value="1003" version="0" />
          <event channel="CHID_WINNAT" keywords="ut:Session" level="win:Informational" message="$(string.WinNatSessionTcpStateUpdate.EventMessage)" opcode="win:Info" symbol="WINNAT_SESSION_TCPSTATE_UPDATE" task="WinNatSessionTcpStateUpdate" template="tid_WINNAT_SESSION" value="1003" version="1" />
          <event channel="CHID_WINNAT" keywords="ut:Session" level="win:Informational" message="$(string.WinNatSessionTimeoutV0.EventMessage)" notLogged="true" opcode="win:Info" symbol="WINNAT_SESSION_TIMEOUT_V0" task="WinNatSessionTimeout" template="tid_WINNAT_SESSION_V0" value="1004" version="0" />
          <event channel="CHID_WINNAT" keywords="ut:Session" level="win:Informational" message="$(string.WinNatSessionTimeout.EventMessage)" opcode="win:Info" symbol="WINNAT_SESSION_TIMEOUT" task="WinNatSessionTimeout" template="tid_WINNAT_SESSION" value="1004" version="1" />
          <event channel="CHID_WINNAT" keywords="ut:Session" level="win:Informational" message="$(string.WinNatSessionDeleteV0.EventMessage)" notLogged="true" opcode="win:Info" symbol="WINNAT_SESSION_DELETE_V0" task="WinNatSessionDelete" template="tid_WINNAT_SESSION_V0" value="1005" version="0" />
          <event channel="CHID_WINNAT" keywords="ut:Session" level="win:Informational" message="$(string.WinNatSessionDelete.EventMessage)" opcode="win:Info" symbol="WINNAT_SESSION_DELETE" task="WinNatSessionDelete" template="tid_WINNAT_SESSION" value="1005" version="1" />
          <event channel="CHID_WINNAT" keywords="ut:Binding" level="win:Informational" message="$(string.WinNatBindingCreateV0.EventMessage)" notLogged="true" opcode="win:Info" symbol="WINNAT_BINDING_CREATE_V0" task="WinNatBindingCreate" template="tid_WINNAT_BINDING_V0" value="1006" version="0" />
          <event channel="CHID_WINNAT" keywords="ut:Binding" level="win:Informational" message="$(string.WinNatBindingCreate.EventMessage)" opcode="win:Info" symbol="WINNAT_BINDING_CREATE" task="WinNatBindingCreate" template="tid_WINNAT_BINDING" value="1006" version="1" />
          <event channel="CHID_WINNAT" keywords="ut:Binding" level="win:Informational" message="$(string.WinNatBindingDeleteV0.EventMessage)" notLogged="true" opcode="win:Info" symbol="WINNAT_BINDING_DELETE_V0" task="WinNatBindingDelete" template="tid_WINNAT_BINDING_V0" value="1007" version="0" />
          <event channel="CHID_WINNAT" keywords="ut:Binding" level="win:Informational" message="$(string.WinNatBindingDelete.EventMessage)" opcode="win:Info" symbol="WINNAT_BINDING_DELETE" task="WinNatBindingDelete" template="tid_WINNAT_BINDING" value="1007" version="1" />
          <event channel="CHID_WINNAT" keywords="ut:Binding" level="win:Informational" message="$(string.WinNatBindingSessionCountV0.EventMessage)" notLogged="true" opcode="win:Info" symbol="WINNAT_BINDING_SESSION_COUNT_V0" task="WinNatBindingSessionCount" template="tid_WINNAT_BINDING_V0" value="1008" version="0" />
          <event channel="CHID_WINNAT" keywords="ut:Binding" level="win:Informational" message="$(string.WinNatBindingSessionCount.EventMessage)" opcode="win:Info" symbol="WINNAT_BINDING_SESSION_COUNT" task="WinNatBindingSessionCount" template="tid_WINNAT_BINDING" value="1008" version="1" />
          <event channel="CHID_WINNAT" keywords="ut:Translation" level="win:Verbose" message="$(string.WinNatTranslation.EventMessage)" opcode="win:Info" symbol="WINNAT_TRANSLATION" task="WinNatTranslation" template="tid_WINNAT_TRANSLATION" value="1009" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatInstanceEvent.EventMessage)" opcode="win:Info" symbol="WINNAT_INSTANCE_EVENT" task="WinNatInstanceEvent" template="tid_WINNAT_INSTANCE" value="1010" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatPacketFilterEvent.EventMessage)" opcode="win:Info" symbol="WINNAT_PACKET_FILTER_EVENT" task="WinNatPacketFilterEvent" template="tid_WINNAT_PACKET_FILTER" value="1011" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatWFPFilterEvent.EventMessage)" opcode="win:Info" symbol="WINNAT_WFP_FILTER_EVENT" task="WinNatWFPFilterEvent" template="tid_WINNAT_PACKET_FILTER" value="1012" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatAddressPoolConfig.EventMessage)" opcode="win:Info" symbol="WINNAT_ADDRESS_POOL_CONFIG" task="WinNatAddressPoolConfig" template="tid_WINNAT_ADDRESS_POOL" value="1013" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatAddressChangeNotify.EventMessage)" opcode="win:Info" symbol="WINNAT_ADDRESS_CHANGE_NOTIFY" task="WinNatAddressChangeNotify" template="tid_WINNAT_ADDRESS_POOL" value="1014" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatStaticBindingEvent.EventMessage)" opcode="win:Info" symbol="WINNAT_STATIC_BINDING_EVENT" task="WinNatStaticBindingEvent" template="tid_WINNAT_STATIC_BINDING" value="1015" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration ut:Binding ut:Session ut:Translation ut:NatDrop ut:NatSkip ut:NatForward" level="win:Error" message="$(string.WinNatMemoryAllocationFailure.EventMessage)" opcode="win:Info" symbol="WINNAT_MEMORY_ALLOCATION_FAILURE" task="WinNatMemoryAllocationFailure" template="tid_WINNAT_MEMORY_ALLOCATION_FAILURE" value="1016" />
          <event channel="CHID_WINNAT_OPERATIONAL" level="win:Informational" message="$(string.WinNatSessionCreateOperational.EventMessage)" symbol="WINNAT_SESSION_CREATE_OPERATIONAL" task="WinNatSessionCreateOperational" template="tid_WINNAT_SESSION_OPERATIONAL" value="1017" />
          <event channel="CHID_WINNAT_OPERATIONAL" level="win:Informational" message="$(string.WinNatSessionDeleteOperational.EventMessage)" symbol="WINNAT_SESSION_DELETE_OPERATIONAL" task="WinNatSessionDeleteOperational" template="tid_WINNAT_SESSION_OPERATIONAL" value="1018" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMInstanceCreation.EventMessage)" opcode="win:Info" symbol="WINNATM_INSTANCE_CREATION" task="WinNatMInstanceCreation" template="tid_WINNATM_INSTANCE" value="1019" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMInstanceModification.EventMessage)" opcode="win:Info" symbol="WINNATM_INSTANCE_MODIFICATION" task="WinNatMInstanceModification" template="tid_WINNATM_INSTANCE" value="1020" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMInstanceExternalInterfaceAssociation.EventMessage)" opcode="win:Info" symbol="WINNATM_INSTANCE_EXTERNAL_INTERFACE_ASSOCIATION" task="WinNatMInstanceExternalInterfaceAssociation" template="tid_WINNATM_INSTANCE" value="1021" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMInstanceDeletion.EventMessage)" opcode="win:Info" symbol="WINNATM_INSTANCE_DELETION" task="WinNatMInstanceDeletion" template="tid_WINNATM_INSTANCE" value="1022" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMInstanceRundown.EventMessage)" opcode="win:Info" symbol="WINNATM_INSTANCE_RUNDOWN" task="WinNatMInstanceRundown" template="tid_WINNATM_INSTANCE" value="1023" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMExternalAddressAddition.EventMessage)" opcode="win:Info" symbol="WINNATM_EXTERNAL_ADDRESS_ADDITION" task="WinNatMExternalAddressAddition" template="tid_WINNATM_EXTERNAL_ADDRESS" value="1024" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMExternalAddressRemoval.EventMessage)" opcode="win:Info" symbol="WINNATM_EXTERNAL_ADDRESS_REMOVAL" task="WinNatMExternalAddressRemoval" template="tid_WINNATM_EXTERNAL_ADDRESS" value="1025" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMExternalAddressRundown.EventMessage)" opcode="win:Info" symbol="WINNATM_EXTERNAL_ADDRESS_RUNDOWN" task="WinNatMExternalAddressRundown" template="tid_WINNATM_EXTERNAL_ADDRESS" value="1026" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMStaticMappingAddition.EventMessage)" opcode="win:Info" symbol="WINNATM_STATIC_MAPPING_ADDITION" task="WinNatMStaticMappingAddition" template="tid_WINNATM_STATIC_MAPPING" value="1027" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMStaticMappingRemoval.EventMessage)" opcode="win:Info" symbol="WINNATM_STATIC_MAPPING_REMOVAL" task="WinNatMStaticMappingRemoval" template="tid_WINNATM_STATIC_MAPPING" value="1028" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatMStaticMappingRundown.EventMessage)" opcode="win:Info" symbol="WINNATM_STATIC_MAPPING_RUNDOWN" task="WinNatMStaticMappingRundown" template="tid_WINNATM_STATIC_MAPPING" value="1029" />
          <event channel="CHID_WINNAT" keywords="ut:NatDrop ut:Dropped" level="win:Warning" message="$(string.WinNatMDroppedIPv4Packet.EventMessage)" opcode="win:Info" symbol="WINNATM_DROPPED_IPV4_PACKET" task="WinNatMDroppedIPv4Packet" template="tid_WINNATM_IPV4_PACKET_ACTION" value="1030" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Warning" message="$(string.WinNatMImproperDefaultRoute.EventMessage)" opcode="win:Info" symbol="WINNATM_IMPROPER_DEFAULT_ROUTE" task="WinNatMImproperDefaultRoute" template="tid_WINNATM_IMPROPER_DEFAULT_ROUTE" value="1031" />
          <event channel="CHID_WINNAT_OPERATIONAL" level="win:Warning" message="$(string.WinNatMImproperDefaultRoute.EventMessage)" symbol="WINNATM_IMPROPER_DEFAULT_ROUTE_OPERATIONAL" task="WinNatMImproperDefaultRouteOper" template="tid_WINNATM_IMPROPER_DEFAULT_ROUTE" value="1032" />
          <event channel="CHID_WINNAT_OPERATIONAL" level="win:Warning" message="$(string.WinNatMOutOfPorts.EventMessage)" symbol="WINNATM_OUT_OF_PORTS_OPERATIONAL" task="WinNatMOutOfPortsOper" template="tid_WINNATM_OUT_OF_PORTS" value="1033" />
          <event channel="CHID_WINNAT" keywords="ut:NatSkip" level="win:Verbose" message="$(string.WinNatMSkippedIPv4Packet.EventMessage)" opcode="win:Info" symbol="WINNATM_SKIPPED_IPV4_PACKET" task="WinNatMSkippedIPv4Packet" template="tid_WINNATM_IPV4_PACKET_ACTION" value="1034" />
          <event channel="CHID_WINNAT" keywords="ut:NatForward" level="win:Verbose" message="$(string.WinNatMForwardedIPv4Packet.EventMessage)" opcode="win:Info" symbol="WINNATM_FORWARDED_IPV4_PACKET" task="WinNatMForwardedIPv4Packet" template="tid_WINNATM_IPV4_PACKET_ACTION" value="1035" />
          <event channel="CHID_WINNAT" keywords="ut:NatGeneralError" level="win:Error" message="$(string.WinNatMGeneralError.EventMessage)" opcode="win:Info" symbol="WINNATM_GENERAL_ERROR" task="WinNatMGeneralError" template="tid_WINNATM_GENERAL_ERROR" value="1036" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Warning" message="$(string.WinNatMUnmatchedPrefix.EventMessage)" opcode="win:Info" symbol="WINNATM_INSTANCE_CREATION_WITH_NO_MATCHING_PREFIX" task="WinNatMInstanceCreationWithNoMatchingPrefix" template="tid_WINNATM_INSTANCE" value="1037" />
          <event channel="CHID_WINNAT" keywords="ut:NatGeneric" level="win:Informational" message="$(string.WinNatMGenericEvent.EventMessage)" opcode="win:Info" symbol="WINNATM_GENERIC_EVENT_INFORMATIONAL" task="WinNatMTaskGenericEventInformational" template="tid_WINNATM_GENERIC_EVENT" value="1038" />
          <event channel="CHID_WINNAT" keywords="ut:NatGeneric" level="win:Error" message="$(string.WinNatMGenericEvent.EventMessage)" opcode="win:Info" symbol="WINNATM_GENERIC_EVENT_ERROR" task="WinNatMTaskGenericEventError" template="tid_WINNATM_GENERIC_EVENT" value="1039" />
          <event channel="CHID_WINNAT" keywords="ut:NatGeneric" level="win:Warning" message="$(string.WinNatMGenericEvent.EventMessage)" opcode="win:Info" symbol="WINNATM_GENERIC_EVENT_WARNING" task="WinNatMTaskGenericEventError" template="tid_WINNATM_GENERIC_EVENT" value="1040" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatIPxlatInstanceCreation.EventMessage)" opcode="win:Info" symbol="WINNAT_IPXLAT_INSTANCE_CREATION" task="WinNatIPxlatInstanceCreate" template="tid_WINNAT_IPXLAT_INSTANCE" value="1041" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatIPxlatInstanceModification.EventMessage)" opcode="win:Info" symbol="WINNAT_IPXLAT_INSTANCE_MODIFICATION" task="WinNatIPxlatInstanceModify" template="tid_WINNAT_IPXLAT_INSTANCE" value="1042" />
          <event channel="CHID_WINNAT" keywords="ut:Configuration" level="win:Informational" message="$(string.WinNatIPxlatInstanceDeletion.EventMessage)" opcode="win:Info" symbol="WINNAT_IPXLAT_INSTANCE_DELETION" task="WinNatIPxlatInstanceDelete" template="tid_WINNAT_IPXLAT_INSTANCE" value="1043" />
        </events>
      </provider>
    </events>
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events" />
    <counters xmlns="http://schemas.microsoft.com/win/2005/12/counters" schemaVersion="2.0">
      <provider applicationIdentity="%SystemRoot%\system32\drivers\winnat.sys" callback="custom" providerGuid="{62706b23-4f66-4c53-b6cc-c6600ccc2752}" providerName="WinNatCounters" providerType="kernelMode">
        <counterSet description="WinNat TCP counter set measures network activity for network address translated TCP packets." descriptionID="3" guid="{60aa43c9-c1b7-41bf-9b4c-b7f6cc1d93b9}" instances="single" name="WinNAT TCP" nameID="1" symbol="TcpGlobalCounterSet" uri="Microsoft.Windows.System.PerfCounters.WinNat.TCPCounters">
          <structs>
            <struct name="TCPGlobalCounterSet" type="WINNAT_TCP_TRANSLATION_COUNTERS" />
          </structs>
          <counter description="Total number of TCP sessions." descriptionID="25" detailLevel="standard" field="NumberOfSessions" id="2" name="NumberOfSessions" nameID="5" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.TCPCounters.NumberOfSessions" />
          <counter description="Total number of TCP bindings." descriptionID="27" detailLevel="standard" field="NumberOfBindings" id="3" name="NumberOfBindings" nameID="7" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.TCPCounters.NumberOfBindings" />
          <counter description="Total number of TCP packets translated from internal to external." descriptionID="29" detailLevel="standard" field="NumIntToExtTranslations" id="4" name="NumIntToExtTranslations" nameID="9" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.TCPCounters.NumIntToExtTranslations" />
          <counter description="Total number of TCP packets translated from external to internal." descriptionID="31" detailLevel="standard" field="NumExtToIntTranslations" id="5" name="NumExtToIntTranslations" nameID="11" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.TCPCounters.NumExtToIntTranslations" />
          <counter description="Total number of TCP packets dropped due to absence of binding." descriptionID="33" detailLevel="standard" field="NumPacketsDropped" id="6" name="NumPacketsDropped" nameID="13" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.TCPCounters.NumPacketsDropped" />
          <counter description="Total number of TCP sessions timed out due to inactivity." descriptionID="37" detailLevel="standard" field="NumSessionsTimedOut" id="8" name="NumSessionsTimedOut" nameID="17" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.TCPCounters.NumSessionsTimedOut" />
        </counterSet>
        <counterSet description="WinNat UDP counter set measures network activity for network address translated UDP packets." descriptionID="39" guid="{c0df9671-a0ea-4576-9f81-853127cf8d28}" instances="single" name="WinNAT UDP" nameID="69" symbol="UdpGlobalCounterSet" uri="Microsoft.Windows.System.PerfCounters.WinNat.UDPCounters">
          <structs>
            <struct name="UDPGlobalCounterSet" type="WINNAT_UDP_TRANSLATION_COUNTERS" />
          </structs>
          <counter description="Total number of UDP sessions." descriptionID="41" detailLevel="standard" field="NumberOfSessions" id="2" name="NumberOfSessions" nameID="43" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.UDPCounters.NumberOfSessions" />
          <counter description="Total number of UDP bindings." descriptionID="45" detailLevel="standard" field="NumberOfBindings" id="3" name="NumberOfBindings" nameID="47" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.UDPCounters.NumberOfBindings" />
          <counter description="Total number of UDP packets translated from internal to external." descriptionID="49" detailLevel="standard" field="NumIntToExtTranslations" id="4" name="NumIntToExtTranslations" nameID="51" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.UDPCounters.NumIntToExtTranslations" />
          <counter description="Total number of UDP packets translated from external to internal." descriptionID="53" detailLevel="standard" field="NumExtToIntTranslations" id="5" name="NumExtToIntTranslations" nameID="55" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.UDPCounters.NumExtToIntTranslations" />
          <counter description="Total number of UDP packets dropped due to absence of binding." descriptionID="57" detailLevel="standard" field="NumPacketsDropped" id="6" name="NumPacketsDropped" nameID="59" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.UDPCounters.NumPacketsDropped" />
          <counter description="Total number of UDP sessions timed out due to inactivity." descriptionID="65" detailLevel="standard" field="NumSessionsTimedOut" id="8" name="NumSessionsTimedOut" nameID="67" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.UDPCounters.NumSessionsTimedOut" />
        </counterSet>
        <counterSet description="WinNat ICMP counter set measures network activity for network address translated ICMP packets." descriptionID="99" guid="{08fb768b-1e55-4040-b153-e0ddbedd8042}" instances="single" name="WinNAT ICMP" nameID="101" symbol="IcmpGlobalCounterSet" uri="Microsoft.Windows.System.PerfCounters.WinNat.ICMPCounters">
          <structs>
            <struct name="ICMPGlobalCounterSet" type="WINNAT_ICMP_TRANSLATION_COUNTERS" />
          </structs>
          <counter description="Total number of ICMP sessions." descriptionID="71" detailLevel="standard" field="NumberOfSessions" id="2" name="NumberOfSessions" nameID="73" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.ICMPCounters.NumberOfSessions" />
          <counter description="Total number of ICMP bindings." descriptionID="75" detailLevel="standard" field="NumberOfBindings" id="3" name="NumberOfBindings" nameID="77" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.ICMPCounters.NumberOfBindings" />
          <counter description="Total number of ICMP packets translated from internal to external." descriptionID="79" detailLevel="standard" field="NumIntToExtTranslations" id="4" name="NumIntToExtTranslations" nameID="81" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.ICMPCounters.NumIntToExtTranslations" />
          <counter description="Total number of ICMP packets translated from external to internal." descriptionID="83" detailLevel="standard" field="NumExtToIntTranslations" id="5" name="NumExtToIntTranslations" nameID="85" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.ICMPCounters.NumExtToIntTranslations" />
          <counter description="Total number of ICMP packets dropped due to absence of binding." descriptionID="87" detailLevel="standard" field="NumPacketsDropped" id="6" name="NumPacketsDropped" nameID="89" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.ICMPCounters.NumPacketsDropped" />
          <counter description="Total number of ICMP sessions timed out due to inactivity." descriptionID="95" detailLevel="standard" field="NumSessionsTimedOut" id="8" name="NumSessionsTimedOut" nameID="97" struct="GlobalCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.ICMPCounters.NumSessionsTimedOut" />
        </counterSet>
        <counterSet description="WinNAT general counter set measures network activity for all network address translated packets." descriptionID="105" guid="{21a64f86-6cbe-47e1-a497-261226ca12f7}" instances="single" name="WinNAT" nameID="103" symbol="GeneralCounterSet" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet">
          <structs>
            <struct name="GeneralCounterSet" type="WINNAT_GENERAL_COUNTERS" />
          </structs>
          <counter description="Number of new sessions established per second" descriptionID="109" detailLevel="standard" field="SessionsCreated" id="0" name="Sessions/sec" nameID="107" struct="GeneralCounterSet" type="perf_counter_counter" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.SessionsPerSecond" />
          <counter description="Total number of current sessions" descriptionID="113" detailLevel="standard" field="CurrentSessions" id="1" name="Current Session Count" nameID="111" struct="GeneralCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.CurrentSessions" />
          <counter description="Number of packets translated per second from internal to external" descriptionID="117" detailLevel="standard" field="PacketsIntToExt" id="2" name="Packets/sec Internal to External" nameID="115" struct="GeneralCounterSet" type="perf_counter_counter" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.PacketsPerSecondInternalToExternal" />
          <counter description="Total number of packets translated from internal to external" descriptionID="121" detailLevel="standard" field="PacketsIntToExt" id="3" name="Packets Internal to External" nameID="119" struct="GeneralCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.PacketsInternalToExternal" />
          <counter description="Number of packets translated per second from external to internal" descriptionID="125" detailLevel="standard" field="PacketsExtToInt" id="4" name="Packets/sec External to Internal" nameID="123" struct="GeneralCounterSet" type="perf_counter_counter" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.PacketsPerSecondExternalToInternal" />
          <counter description="Total number of packets translated from external to internal" descriptionID="129" detailLevel="standard" field="PacketsExtToInt" id="5" name="Packets External to Internal" nameID="127" struct="GeneralCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.PacketsExternalToInternal" />
          <counter description="Number of packets dropped per second" descriptionID="133" detailLevel="standard" field="DroppedPackets" id="6" name="Dropped Packets/sec" nameID="131" struct="GeneralCounterSet" type="perf_counter_counter" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.DroppedPacketsPerSecond" />
          <counter description="Total number of dropped packets" descriptionID="137" detailLevel="standard" field="DroppedPackets" id="7" name="Dropped Packets" nameID="135" struct="GeneralCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.DroppedPackets" />
          <counter description="Number of ICMP error packets dropped per second due to inner IP packet parsing or validation failure" descriptionID="141" detailLevel="standard" field="DroppedIcmpErrorPackets" id="8" name="Dropped ICMP error packets/sec" nameID="139" struct="GeneralCounterSet" type="perf_counter_counter" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.DroppedIcmpErrorPacketsPerSecond" />
          <counter description="Total number of ICMP error packets dropped due to inner IP packet parsing or validation failure" descriptionID="145" detailLevel="standard" field="DroppedIcmpErrorPackets" id="9" name="Dropped ICMP error packets" nameID="143" struct="GeneralCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.DroppedIcmpErrorPackets" />
          <counter description="Number of packets hairpinned per second between different routing domains" descriptionID="149" detailLevel="standard" field="InterRDHairpinnedPackets" id="10" name="Inter-RoutingDomain Hairpinned Packets/sec" nameID="147" struct="GeneralCounterSet" type="perf_counter_counter" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.InterRDHairpinnedPacketsPerSecond" />
          <counter description="Total number of packets hairpinned between different routing domains" descriptionID="153" detailLevel="standard" field="InterRDHairpinnedPackets" id="11" name="Inter-RoutingDomain Hairpinned Packets" nameID="151" struct="GeneralCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.InterRDHairpinnedPackets" />
          <counter description="Number of packets hairpinned per second back to originating routing domains" descriptionID="157" detailLevel="standard" field="IntraRDHairpinnedPackets" id="12" name="Intra-RoutingDomain Hairpinned Packets/sec" nameID="155" struct="GeneralCounterSet" type="perf_counter_counter" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.IntraRDHairpinnedPacketsPerSecond" />
          <counter description="Total number of packets hairpinned back to originating routing domains" descriptionID="161" detailLevel="standard" field="IntraRDHairpinnedPackets" id="13" name="Intra-RoutingDomain Hairpinned Packets" nameID="159" struct="GeneralCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.GeneralCounterSet.IntraRDHairpinnedPackets" />
        </counterSet>
        <counterSet description="WinNAT instance counterset provides resource usage information per NAT instance." descriptionID="165" guid="{65faa5f0-141d-4f38-acf0-c79bb0c7be2d}" instances="multiple" name="WinNAT Instance" nameID="163" symbol="InstanceCounterSet" uri="Microsoft.Windows.System.PerfCounters.WinNat.InstanceCounterSet">
          <structs>
            <struct name="InstanceCounterSet" type="WINNAT_INSTANCE_COUNTERS" />
          </structs>
          <counter description="Number of TCP ports in use" descriptionID="169" detailLevel="standard" field="TCPPortsInUse" id="0" name="TCP Ports In Use" nameID="167" struct="InstanceCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.InstanceCounterSet.TCPPortsInUse" />
          <counter description="Number of TCP ports available" descriptionID="173" detailLevel="standard" field="TCPPortsAvailable" id="1" name="TCP Ports Available" nameID="171" struct="InstanceCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.InstanceCounterSet.TCPPortsAvailable" />
          <counter description="Number of UDP ports in use" descriptionID="177" detailLevel="standard" field="UDPPortsInUse" id="2" name="UDP Ports In Use" nameID="175" struct="InstanceCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.InstanceCounterSet.UDPPortsInUse" />
          <counter description="Number of UDP ports available" descriptionID="181" detailLevel="standard" field="UDPPortsAvailable" id="3" name="UDP Ports Available" nameID="179" struct="InstanceCounterSet" type="perf_counter_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.InstanceCounterSet.UDPPortsAvailable" />
        </counterSet>
        <counterSet description="Windows Software Load Balancer per Vip usage" descriptionID="183" guid="{a0fd7c09-ad46-4d62-8c8a-ac459b94ee9d}" instances="multiple" name="WinNAT SLB" nameID="185" symbol="VipInstanceCounterSet" uri="Microsoft.Windows.System.PerfCounters.WinNat.VipUsageCounters">
          <structs>
            <struct name="VipInstanceCounterSet" type="WINNAT_VIP_INSTANCE_COUNTERS" />
          </structs>
          <counter description="Sessions/sec" descriptionID="187" detailLevel="standard" field="Sessions" id="1" name="Sessions/sec" nameID="189" struct="VipInstanceCounterSet" type="perf_counter_counter" uri="Microsoft.Windows.System.PerfCounters.WinNat.VipUsageCounters.SessionsPerSecond" />
          <counter description="Sessions" descriptionID="191" detailLevel="standard" field="Sessions" id="2" name="Sessions" nameID="193" struct="VipInstanceCounterSet" type="perf_counter_large_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.VipUsageCounters.Sessions" />
          <counter description="ProcessedPackets/sec" descriptionID="195" detailLevel="standard" field="ProcessedPackets" id="3" name="ProcessedPackets/sec" nameID="197" struct="VipInstanceCounterSet" type="perf_counter_counter" uri="Microsoft.Windows.System.PerfCounters.WinNat.VipUsageCounters.ProcessedPacketsPerSecond" />
          <counter description="ProcessedPackets" descriptionID="199" detailLevel="standard" field="ProcessedPackets" id="4" name="ProcessedPackets" nameID="201" struct="VipInstanceCounterSet" type="perf_counter_large_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.VipUsageCounters.ProcessedPackets" />
          <counter description="DroppedPackets/sec" descriptionID="203" detailLevel="standard" field="DroppedPackets" id="5" name="DroppedPackets/sec" nameID="205" struct="VipInstanceCounterSet" type="perf_counter_counter" uri="Microsoft.Windows.System.PerfCounters.WinNat.VipUsageCounters.DroppedPacketsPerSecond" />
          <counter description="Dropped packets" descriptionID="207" detailLevel="standard" field="DroppedPackets" id="6" name="DroppedPackets" nameID="209" struct="VipInstanceCounterSet" type="perf_counter_large_rawcount" uri="Microsoft.Windows.System.PerfCounters.WinNat.VipUsageCounters.DroppedPackets" />
        </counterSet>
      </provider>
    </counters>
  </instrumentation>
  <migration settingsVersion="0">
    <supportedComponents>
      <supportedComponent>
        <assemblyIdentity name="_" version="1.0.0.0" />
        <supportedComponentIdentity xmlns="urn:schemas-microsoft-com:asm.v3" buildType="release" language="*" name="Microsoft-Windows-WinNat" processorArchitecture="*" publicKeyToken="31bf3856ad364e35" settingsVersionRange="0" versionScope="nonSxS" />
        <migXml xmlns="">
          <rules context="System">
            <merge script="MigXmlHelper.SourcePriority()">
              <objectSet>
                <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Winnat\ [Start]</pattern>
              </objectSet>
            </merge>
          </rules>
        </migXml>
      </supportedComponent>
    </supportedComponents>
    <migXml xmlns="">
      <rules context="System">
        <include>
          <objectSet>
            <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Winnat\ [Start]</pattern>
          </objectSet>
        </include>
        <merge script="MigXmlHelper.SourcePriority()">
          <objectSet>
            <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\Winnat\ [Start]</pattern>
          </objectSet>
        </merge>
      </rules>
    </migXml>
  </migration>
</assembly>