Windows Security Log Event ID 5155

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Category
 • Subcategory
Object Access
 • Filtering Platform Connection
Type Success
Corresponding events
in Windows 2003
and before
861  
Discussions on Event ID 5155
reproducing Event ID 5155
is 5155 EventID in 2008 is corresponding to 861 EventID in 2003 ?

5155: The Windows Filtering Platform has blocked an application or service from listening on a port for incoming connections

On this page

I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.

Free Security Log Resources by Randy

Description Fields in 5155

Application Information:

  •  Process ID:  %1
  •  Application Name: %2

Network Information:

  •  Source Address:  %3
  •  Source Port:  %4
  •  Protocol:  %5

Filter Information:

  •  Filter Run-Time ID: %6
  •  Layer Name:  %7
  •  Layer Run-Time ID: %8

Supercharger Free Edition

 

Supercharger's built-in Xpath filters leave the noise behind.

Free.

 

Examples of 5155

The Windows Filtering Platform has blocked an application or service from listening on a port for incoming connections.

Application Information:

   Process ID:  %1
   Application Name: %2

Network Information:

   Source Address:  %3
   Source Port:  %4
   Protocol:  %5

Filter Information:

   Filter Run-Time ID: %6
   Layer Name:  %7
   Layer Run-Time ID: %8

Keep me up-to-date on the Windows Security Log.
Email*:
*We will NOT share this

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection



 

Additional Resources