Where we can find information about events info from wi-fi drivers?

[ddbug2]

I have AC-9642 wi-fi on win11, with netwtw08 driver v.21.90.3.2,  updated via Windows update.

Every few minutes it logs events "7003 - Roam Complete" and "7021 - Connection telemetry fields and analysis usage".  It is permanently connected to the same router and the PC mostly does not move and on AC power.  So, seeing is roaming so often looks suspicious. Is this symptom of attack?

Questions: where we can find technical description of events 7003 and 7021, including details of the "telemetry fields"?

Also, periodically warnings "6062 - Lso was triggered"  are logged. Why this is a warning? Should we reconfigure or disable LSO?

In the adapter settings roaming aggressiveness = "3. medium", transmit power = medium. No options for LSO are available in the Advanced tab.

[JeanetteC_Intel]

Hello ddbug2,

Thank you for posting in Intel Communities.

I will look into this query internally and provide an update as soon as possible.

Best regards,

JeanetteC.

Intel® Customer Support Technician

[JeanetteC_Intel]

Hello ddbug2,

Regarding the "6062 - LSO was triggered" event, please see the explanation below:

The 6000 series or 6xxx events generated by the Intel WiFi driver are logged in the Windows Event Viewer (System). These events are informational (even if Windows may label some as "Warning" level) and are not cause for concern. Event 6062, LSO was triggered, refers to Large Send Offload. This event indicates that a large packet was split into smaller packets and offloaded to the firmware. When logged in the event viewer, it simply shows that this process occurred. There should be no functional impact from these events, and they are not error events, so they can be ignored.

For the other event logs, 7003 and 7021, including details of the telemetry fields, please note that I need to investigate this matter further.

To assist us in resolving this issue, I would appreciate it if you could provide the following information:

• Are you experiencing any wireless connection issues, or is this message simply appearing in the event viewer?
• What is the make and model of your system device?
• When did you first notice this error message?
• What troubleshooting steps have you already attempted?

If possible, could you share the SSU logs with us so we can thoroughly examine the system configuration? You can do this by downloading the Intel® System Support Utility for Windows* software. Once the download is complete, launch SSU.exe.

• Scan: Check the box for Everything.
• Click Scan.
• Review: When the scan is finished, click Next.
• Click Save (.txt).
• Attach the log file in your reply.

I will wait for your reply.

Best regards,

JeanetteC.

Intel® Customer Support Technician

[JeanetteC_Intel]

Hello ddbug2,

Were you able to check the previous post? 

Let us know if you have any questions. 

Best regards,

JeanetteC.

Intel® Customer Support Technician

[ddbug2]

Jeanette,

Apologize for the delay. 

Understood about the LSO. However, if this is a normal operating message, not an error, would like to disable it. Are there options to adjust logging settings to hide info messages?

The wi-fi connection seems to be good, though I have not gone into details.

My concerns about the "roaming" messages are mainly about security. I suspect attempts to switch the PC to a rogue AP.

The PC and router are stationary so I don't expect roaming among several APs at all. The router is dual band. Can switching bands or channels cause these messages? 

The log is attached.

Thanks.

[JeanetteC_Intel]

Hello ddbug2,

Thank you for providing these additional details. I will look into this further and update you as soon as possible.

Best regards,

JeanetteC.

Intel Customer Support Technician