Internet Information Services (IIS) 6 Resource Kit

HTTP.sys Error Log Files

For the W3C Extended, IIS, and NCSA Common log file formats and for centralized binary logging, the log data is generated from the worker processes, passed to HTTP.sys through APIs, and then recorded in log files. However, because of the separation of the HTTP protocol stack in kernel mode and the worker processes in user mode, HTTP.sys-initiated error responses are not recognized by the user mode and are, therefore, not passed back to HTTP.sys for logging. To record these error responses, HTTP.sys needs its own error logging scheme that comes directly from the kernel mode. This is accomplished with HTTP.sys error logging. By default, HTTP.sys error logging is turned on.

Common HTTP.sys Error Log File Entries

There are ...