The Windows Filtering Platform has blocked a packet.
This event is documented as appearing new to Windows 2008 Release 2 and Windows 7. But we've never seen it logged. See event ID 5152 instead.
Network Information:
Direction: %1
Source Address: %2
Destination Address: %3
EtherType: %4
EncapMethod: %5
SnapControl: %6
SnapOui: %7
VlanTag: %8
Filter Information:
Filter Run-Time ID: %9
Layer Name: %10
Layer Run-Time ID: %11