Where we can find information about events info from wi-fi drivers?

[ddbug2]

I have AC-9642 wi-fi on win11, with netwtw08 driver v.21.90.3.2,  updated via Windows update.

Every few minutes it logs events "7003 - Roam Complete" and "7021 - Connection telemetry fields and analysis usage".  It is permanently connected to the same router and the PC mostly does not move and on AC power.  So, seeing is roaming so often looks suspicious. Is this symptom of attack?

Questions: where we can find technical description of events 7003 and 7021, including details of the "telemetry fields"?

Also, periodically warnings "6062 - Lso was triggered"  are logged. Why this is a warning? Should we reconfigure or disable LSO?

In the adapter settings roaming aggressiveness = "3. medium", transmit power = medium. No options for LSO are available in the Advanced tab.

[JeanetteC_Intel]

Hello ddbug2,

Thank you for posting in Intel Communities.

I will look into this query internally and provide an update as soon as possible.

Best regards,

JeanetteC.

Intel® Customer Support Technician

[JeanetteC_Intel]

Hello ddbug2,

Regarding the "6062 - LSO was triggered" event, please see the explanation below:

The 6000 series or 6xxx events generated by the Intel WiFi driver are logged in the Windows Event Viewer (System). These events are informational (even if Windows may label some as "Warning" level) and are not cause for concern. Event 6062, LSO was triggered, refers to Large Send Offload. This event indicates that a large packet was split into smaller packets and offloaded to the firmware. When logged in the event viewer, it simply shows that this process occurred. There should be no functional impact from these events, and they are not error events, so they can be ignored.

For the other event logs, 7003 and 7021, including details of the telemetry fields, please note that I need to investigate this matter further.

To assist us in resolving this issue, I would appreciate it if you could provide the following information:

• Are you experiencing any wireless connection issues, or is this message simply appearing in the event viewer?
• What is the make and model of your system device?
• When did you first notice this error message?
• What troubleshooting steps have you already attempted?

If possible, could you share the SSU logs with us so we can thoroughly examine the system configuration? You can do this by downloading the Intel® System Support Utility for Windows* software. Once the download is complete, launch SSU.exe.

• Scan: Check the box for Everything.
• Click Scan.
• Review: When the scan is finished, click Next.
• Click Save (.txt).
• Attach the log file in your reply.

I will wait for your reply.

Best regards,

JeanetteC.

Intel® Customer Support Technician

[JeanetteC_Intel]

Hello ddbug2,

Were you able to check the previous post? 

Let us know if you have any questions. 

Best regards,

JeanetteC.

Intel® Customer Support Technician

[ddbug2]

Jeanette,

Apologize for the delay. 

Understood about the LSO. However, if this is a normal operating message, not an error, would like to disable it. Are there options to adjust logging settings to hide info messages?

The wi-fi connection seems to be good, though I have not gone into details.

My concerns about the "roaming" messages are mainly about security. I suspect attempts to switch the PC to a rogue AP.

The PC and router are stationary so I don't expect roaming among several APs at all. The router is dual band. Can switching bands or channels cause these messages? 

The log is attached.

Thanks.

[JeanetteC_Intel]

Hello ddbug2,

Thank you for providing these additional details. I will look into this further and update you as soon as possible.

Best regards,

JeanetteC.

Intel Customer Support Technician

[JeanetteC_Intel]

Hello ddbug2,

If the event IDs are generated by Windows OS WLAN-Autoconfig, they are informational messages indicating a successful connection to a wireless network. The name might refer to the network adapter, DNS server, Windows network configuration, or possibly the security authentication between Windows and the profile name from the access point (AP).

If the component responsible for generating this event is not installed on your computer or if the installation is corrupted, you can install or repair the component locally.

Additionally, the log shows that the Wi-Fi driver version 21.90.0.3 and BIOS date back to 2020. It's recommended to update to the latest OEM BIOS, Wi-Fi driver, and apply the suggested 802.11ac settings for the AC 9462. According to the OEM website, this laptop's compatible operating system was Windows 10 (64-bit). It's advisable to update to the latest driver version for optimal performance, after confirming with the laptop OEM and OS support for Windows 11 drivers.

For more information, you can refer to Windows Event IDs here: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/appendix-l--events-to-monitor

I hope this information is helpful.

Best regards,

JeanetteC.

Intel Customer Support

[JeanetteC_Intel]

Hello ddbug2,

I have not received any response in the past few days. I hope that the information I shared previously has answered your question. I highly suggest contacting your system manufacturer support to get assistance in updating to the latest OEM BIOS, Wi-Fi driver, and apply the suggested 802.11ac settings for the AC 9462. You may as well confirm if this laptop's compatible operating system was Windows 10 (64-bit). It's advisable to update to the latest driver version for optimal performance, after confirming with the laptop OEM and OS support for Windows 11 drivers.

I will now proceed in closing this thread. Should you need assistance in the future, please submit a new question as this thread will no longer be monitored.

Sincerely,

JeanetteC.

Intel Customer Support