IIS Tracer web site monitoring tool

ActiveX/VBSScript registry editor  ActiveX NT User account manager  Export MDB/DBF from ASP
Url replacer, IIS url rewrite Active LogFile  Email export  ActiveX/ASP Scripting Dictionary object
 IISTracer, real-time IIS monitor
 Huge ASP upload - upload files with progress.
IIS ISAPI filter
License and ordering info>>
Version history>>
Configuration of IIS Tracer web site monitoring tool>>
Interesting captures (CodeRed attack) with IIS Tracer web site monitoring tool>>
Frequetly Asked Questions>>
Description
IISTracer is a real-time internet web site monitoring tool for Microsoft IIS (all versions). The software lets you show what is happenning on IIS server right now. You can see or log state of each request, incomming/outgoing bytes, http headers and several request running times.
IISTracer shows a state of running scripts (.asp, .aspx, asp.net, .cfm, .php, .cgi, ...), applications (.dll, .exe, ..) and a big downloads (.mp3, .zip, ...).
It lets you also monitor what script or which client (IP) hangs-up your server.
New - You can stop long running requests (uploads/downloads).
Reviews
Keep an Eye on Your Web Site in Real Time
Souping Up Your IIS Server
Links

Download latest version, v 2.8.0  
The version works with all IIS versions from IIS1 to IIS6 (7). It is fully functional time-limitted demo (60 days). See IIS6 notes and Version history.

Download 2.50 version (IIS 1-5)
The version does not work with IIS6 (7). See version history.

IIS Tracer web site monitoring tool home page.
Download this help.
Features
 New - stop of long running request function 

IIS state logging

Configuration

  • User friendly configuration application to install IISTracer to local/remote IIS
  • Works with all versions of IIS (from IIS1 to IIS6)

Monitoring functions and values

  • Real-time monitoring of running ISAPI scripts (.asp, .cgi, .idc, .idq ...) 
  • Real-time monitoring of big downloads
  • Info about last long-running scripts
Values and views
  • Current number of running requests (scripts/downloads)
  • Current state of the request
  • Script start time and running time with precision up to milisecond.
  • Request and response content-length.
  • Current script incomming and outgoing bytes.
  • Complette URL, method, http header data and Client IP address.
  • Mixed/separated view of active/completted requests ordered by time

Interface and configuration

      To monitor web-site uptime and response times and get a notification when your site is on problems or down please see WebChecker - up-time web site monitoring and problem notification.
Sample views of IISTracer interface
Sample 1: upload a file, some image downloads.
Select view:ActiveActive/CompletedAllSort order:DescendingOther:
ConfigurationAboutFull version.
Actualstate:Time:12:58:17.411Activerequests:5CompletedRequests:25AllRequests:30
XStart
Time
Running
[ms]
StateClientInraw
[B]
InContent
length[B]
Outraw
[B]
OutContent
length[B]
URL
X12:58:09.5287883Senddata194.228.134.1120ns6576368783GEThttp://tady.cz/annak/images/gal4/girardin14.jpg
X12:58:11.4185992Senddata194.228.134.1120ns2480351188GEThttp://tady.cz/annak/images/gal4/girardin11.jpg
X12:58:14.6242786Readdata217.11.235.133175205139189nsPOSThttp://www.multiweb.cz/e/default.asp?UploadID=11&Action=UP
X12:58:15.2682143Senddata212.47.11.830ns2480484201GEThttp://www.hok.cz/praha_povoden9/voda023.jpg
X12:58:15.5141896Senddata194.25.40.40ns4938084201GEThttp://www.hok.cz/praha_povoden9/voda023.jpg


Sample 2: Typical problematic long-running script (.asp)
XStart
Time
Resp.
Time
Running
[ms]
StateClientInraw
[B]
InContent
length[B]
Outraw
[B]
OutContent
length[B]
URL
X8:20:16.532213189271Senddata198.141.197.30ns34499unGEThttp://www.fin.cz/katalog/financni.asp?A=D&IDS=17&S=13810
X8:23:18.60307200Senddata160.218.40.1310ns24804unGEThttp://r.kde.cz/NEWS/autoimg/5/2939.jpg
X8:23:20.5341635269Senddata152.66.10.600ns57947unGEThttp://www.fin.cz/nazory/defaultpg_T768_PR57029.htm
X8:23:24.71201091Senddata80.188.201.1580ns40175unGEThttp://x.kde.cz/new/css/alia.css

      The script http://www.fin.cz/katalog/financni.asp is a typical problematic script, which may your server rapidly slow down. The script already sent all data to a client (Out raw data are 34499B and the number do not grow), but it is still working. Running time of the script is more than 3 minutes. The script probably contains some endless do-loop, but the do-loop is placed at the end of code, after client receives all required data. Or there may be some problematic code working with database at the end of script (some cross-locking SQL commands). The script ends after Server.ScriptTimeout.

      You cannot see a problem as a client - everything looks well from client side and your clients do not report problem. But you can usually see the problem at server-side.

      You can see that other scripts are rapidly slow-down. You can see that CPU Usage is at 100% at the time, if you monitor your server using performance monitor or other tool (task manager). The problematic process is usually dllhost.exe (.asp), aspnet_wp.exe (.aspx asp.net pages) or inetinfo.exe (if you run scripts in Low/IIS process application protection or in older versions of IIS). IISTracer is exactly designed to reveal such kind of problematic scripts. See also Monitor extremly slow or problematic scripts (ASP hangs, not responding web)



Sample 3: Scripts processing POST data
XStart
Time
Resp.
Time
Running
[ms]
StateClientInraw
[B]
InContent
length[B]
Outraw
[B]
OutContent
length[B]
URL
X9:03:10.756065154Readdata194.228.94.24256056089unPOSThttp://www.fin.cz/nazory/default.asp
X9:04:08.533407378Senddata195.39.45.1380ns66926unGEThttp://www.fin.cz/kurzy/kurzy.asp?A=ON
X9:04:13.43502476Readdata212.71.153.1005412541089unPOSThttp://www.zpravodaj.cz/m.asp
X9:04:15.062-849Preprocheaders212.71.128.660ns0unGEThttp://diskuze.fin.cz/nazory/defaultpg_T80_PR125562.htm
X9:04:15.155-755Preprocheaders62.168.13.2020ns0unGEThttp://oh2004.zpravodaj.cz/
X9:04:15.820-91Preprocheaders195.70.148.660ns0unGEThttp://kurzy.fin.cz/kurzy/kurzy.asp?A=P&M=SKK

      The scripts http://www.fin.cz/nazory/default.asp and http://www.zpravodaj.cz/m.asp received all POST data, [In raw] = [In Content length], but they still did not send a response to a client. Client for '/nazory/default.asp' cannot see response for more than one minute.

      This situation is usually not so critical, but the script /nazory/default.asp is strong adept for time/performance optimization.



Sample 4: Another long-running ASP requests (cat.dat, default.asp)
Select view:ActiveActive/CompletedAllSort order:DescendingOther:
ConfigurationAboutFull version.
Actualstate:Time:13:01:17.813Activerequests:13CompletedRequests:25AllRequests:38
XStart
Time
Running
[ms]
StateClientInraw
[B]
InContent
length[B]
Outraw
[B]
OutContent
length[B]
URL
X13:00:56.71521098Preprocheaders194.108.51.1550ns0unGEThttp://www.multiweb.cz/e/cat.dat?h=1
X13:00:56.89820915Authentication194.108.51.1550ns0unGEThttp://www.multiweb.cz/e/default.asp?lv=2&Action=NF
X13:01:11.5676246Preprocheaders62.168.18.10ns0unGEThttp://www.multiweb.cz/e/cat.dat?h=1
X13:01:12.1915622Senddata212.90.230.870ns2480448642GEThttp://www.multiweb.cz/passat/nejhezci.jpg
X13:01:13.6214192Preprocheaders147.32.80.90ns0unGEThttp://www.multiweb.cz/e/cat.dat?h=1
X13:01:13.6444169Authentication147.32.80.90ns0unGEThttp://www.multiweb.cz/e/default.asp?Action=PNF
X13:01:14.6963117Senddata212.90.230.870ns1661264125GEThttp://www.multiweb.cz/passat/decentlimuzine.jpg
X13:01:15.9531859Preprocheaders62.24.91.2390ns0unGEThttp://www.multiweb.cz/e/cat.dat?h=1
X13:01:15.9871826Authentication62.24.91.2390ns0unGEThttp://www.multiweb.cz/e/default.asp?Action=PNF
X13:01:16.0701743Preprocheaders62.168.18.1900ns0unGEThttp://www.multiweb.cz/e/cat.dat?h=1
X13:01:16.3181495Authentication62.168.18.1900ns0unGEThttp://www.multiweb.cz/e/default.asp?lv=2&Action=NF
X13:01:16.7871025Authentication193.86.241.13002270unPROPFINDhttp://www.multiweb.cz/citrusy/obecne.rtf
X13:01:16.884929Authentication217.11.235.670ns0unGEThttp://www.multiweb.cz/e/u.dat?o
Instalation
IIS Tracer ISAPI filter is loaded. You can try /iistracer http interface on your IIS server.1. Download and install IISTracer DLL
2. Run Configuration application - basic setup and install filter to IIS to add IISTracer as IIS filter DLL (or see instructions on Configuration application - basic setup and install filter to IIS page).
3. Restart W3SVC service to load IISTracer to IIS
4. See what people are doing on your website RIGHT NOW using IISTracer http interface! You can find the interface on http://yourserver/iistracer
5. Be sure you have changed /iistracer script to your custom value to hide IISTracer http interface to other users. See Protect http interface using Username/Password, Client IP and certificates

© 1996 2007 Antonin Foller, Motobit Software, help@pstruh.cz
Motobit.com