Stop error 0xD5 when you use Network Monitor on Windows 8.1 or Windows Server 2012 R2


Consider the following scenario:
  • You have a computer is running Windows 8.1 or Windows Server 2012 R2.
  • A wireless network adapter (WLAN) or a wired network adapter is disabled and then enabled. Or you run the "DF –PNP Disable and Enable Device Test" Windows Hardware Certification Kit (HCK) test.
  • The Microsoft Network Monitor 3.4 filter driver (NM3.SYS) is loaded.
In this scenario, the computer may encounter the following Stop error:


When you disable a WLAN network adapter while the OID_DOT11_DELETE_MAC request is being processed, the NM3.SYS filter driver releases the object identifier (also known as OID) request buffer too soon. This causes a Stop error to occur when the network stack references the request buffer. 


If you experience this problem, you should uninstall Microsoft Network Monitor. This also removes the NM3.SYS filter driver. Be aware that the Microsoft Network Monitor tool and its NM3.SYS filter driver were deprecated and were replaced by Microsoft Message Analyzer. Message Analyzer uses the new in-box NdisCap filter driver. Message Analyzer can be downloaded from the following Microsoft website: 

More information

More information about the WHCK test is available at the following Microsoft Developer Network (MSDN) website:

Article ID: 3115861 - Last Review: ಫೆಬ್ರ 14, 2017 - Revision: 1

Windows 8.1, Windows 8.1 Enterprise, Windows 8.1 Pro, Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard