cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Farbar Recovery Scan Tool (x64) Version:07-06-2015
Ran by user at 2015-06-07 19:10:15
Running from C:\Users\user\Desktop
Boot Mode: Normal

================== Search Registry: "history" ===========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00BB2764-6A77-11D0-A535-00C04FD7D062}]
""="Microsoft History AutoComplete List"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}]
""="IE History and Feeds Shell Data Source for Windows Search"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}]
""="Microsoft Url History Service"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6038EF75-ABFC-4e59-AB6F-12D397F6568D}]
""="IE Microsoft History AutoComplete List"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7febaf7c-18cf-11d2-993f-00a0c91f3880}]
""="DefView Persistent history"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C64B9B66-E53D-4c56-B9AE-FEDE4EE95DB1}]
""="Condition History Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE0BDDFA-8373-4cc4-85D8-0618E453187C}]
""="IE History Search Protocol Handler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE0BDDFA-8373-4cc4-85D8-0618E453187C}\ProgID]
""="IEPH.HistoryHandler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}]
""="History"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IE.AssocFile.URL]
"PreviewDetails"="prop:System.Link.TargetUrl;System.Rating;System.History.VisitCount;System.History.DateChanged;System.Link.DateVisited;System.Link.Description;System.Link.Comment"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\iehistory]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\iehistory]
""="IE History and Feeds Shell Data Source for Windows Search"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEPH.HistoryHandler]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\IEPH.HistoryHandler]
""="IE History Search Protocol Handler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ierss]
""="IE History and Feeds Shell Data Source for Windows Search"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3050F549-98B5-11CF-BB82-00AA00BDCE0B}]
""="DispHTMLHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3C374A41-BAE4-11CF-BF7D-00AA006946EE}]
""="IUrlHistoryStg"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{86445657-F50D-11E0-9240-18A905C16311}]
""="IDownloadHistoryEnum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8A445657-F50D-11E0-9240-18A905C16311}]
""="IDownloadHistoryDatabase"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{91A565C1-E38F-11D0-94BF-00A0C9055CBF}]
""="IPersistHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{933ACAAB-227A-4DAE-81FB-E6A2D4A0CDB1}]
""="ITipInkHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A7F04F3C-A290-435B-AADF-A116C3357A5C}]
""="IUpdateHistoryEntryCollection"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{AFA0DC11-C313-11D0-831A-00C04FD5AE38}]
""="IUrlHistoryStg2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BC40BEC1-C493-11D0-831B-00C04FD5AE38}]
""="IUrlHistoryNotify"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BE56A644-AF0E-4E0E-A311-C1D8E695CBFF}]
""="IUpdateHistoryEntry"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C2BFB780-4539-4132-AB8C-0A8772013AB6}]
""="IUpdateHistoryEntry2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{FECEAAA2-8405-11CF-8BA1-00AA00476DA6}]
""="IOmHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut]
"PreviewDetails"="prop:System.Link.TargetUrl;System.Rating;System.History.VisitCount;System.History.DateChanged;System.Link.DateVisited;System.Link.Description;System.Link.Comment"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{00BB2764-6A77-11D0-A535-00C04FD7D062}]
""="Microsoft History AutoComplete List"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{11016101-E366-4D22-BC06-4ADA335C892B}]
""="IE History and Feeds Shell Data Source for Windows Search"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{3C374A40-BAE4-11CF-BF7D-00AA006946EE}]
""="Microsoft Url History Service"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{6038EF75-ABFC-4e59-AB6F-12D397F6568D}]
""="IE Microsoft History AutoComplete List"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7febaf7c-18cf-11d2-993f-00a0c91f3880}]
""="DefView Persistent history"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{C64B9B66-E53D-4c56-B9AE-FEDE4EE95DB1}]
""="Condition History Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E07A1EB4-B9EA-3D7D-AC50-2BA0548188AC}]
""="Microsoft.CLRAdmin.CCommandHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E07A1EB4-B9EA-3D7D-AC50-2BA0548188AC}\InprocServer32]
"Class"="Microsoft.CLRAdmin.CCommandHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E07A1EB4-B9EA-3D7D-AC50-2BA0548188AC}\InprocServer32\1.0.3300.0]
"Class"="Microsoft.CLRAdmin.CCommandHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E07A1EB4-B9EA-3D7D-AC50-2BA0548188AC}\ProgId]
""="Microsoft.CLRAdmin.CCommandHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{EE0BDDFA-8373-4cc4-85D8-0618E453187C}]
""="IE History Search Protocol Handler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{EE0BDDFA-8373-4cc4-85D8-0618E453187C}\ProgID]
""="IEPH.HistoryHandler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FECEAAA3-8405-11CF-8BA1-00AA00476DA6}\InprocServer32]
"Class"="mshtml.HTMLHistoryClass"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}]
""="History"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{3050F549-98B5-11CF-BB82-00AA00BDCE0B}]
""="DispHTMLHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{36E59B05-2FC3-4782-B3C9-7D5DDDBE25B4}]
""="IUccHistoryInfoEntry"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{3C374A41-BAE4-11CF-BF7D-00AA006946EE}]
""="IUrlHistoryStg"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{3DEBDC7E-811F-4304-BDD7-7D98C732026C}]
""="IHistoryInfo"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{464D5228-9F68-4B1F-B430-156A104E2B85}]
""="IPreviousHistoryRetrievalStateChangedEventData"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{4C675532-6D55-49DD-8C8E-3C1CC5624CF2}]
""="IConversationHistoryItemAddedEventData"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{5FA92EA7-6E6E-4A82-8F0D-107FEAF5A75D}]
""="_IConversationHistoryCallback"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{86445657-F50D-11E0-9240-18A905C16311}]
""="IDownloadHistoryEnum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{8A445657-F50D-11E0-9240-18A905C16311}]
""="IDownloadHistoryDatabase"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{91A565C1-E38F-11D0-94BF-00A0C9055CBF}]
""="IPersistHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{933ACAAB-227A-4DAE-81FB-E6A2D4A0CDB1}]
""="ITipInkHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{9397FF55-EE06-4F02-8F2A-BE3AE249D4BB}]
""="IConversationHistoryActionAvailabilityEventData"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{A7F04F3C-A290-435B-AADF-A116C3357A5C}]
""="IUpdateHistoryEntryCollection"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{AFA0DC11-C313-11D0-831A-00C04FD5AE38}]
""="IUrlHistoryStg2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BC40BEC1-C493-11D0-831B-00C04FD5AE38}]
""="IUrlHistoryNotify"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BE56A644-AF0E-4E0E-A311-C1D8E695CBFF}]
""="IUpdateHistoryEntry"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{C2BFB780-4539-4132-AB8C-0A8772013AB6}]
""="IUpdateHistoryEntry2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{F5996C71-77AB-4020-9776-C2C270FEF2AE}]
""="IConversationHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{FA7971EF-1E41-429F-8C79-DAC5F88D444B}]
""="_IConversationHistoryEvents"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{FECEAAA2-8405-11CF-8BA1-00AA00476DA6}]
""="IOmHistory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 1\CryptDllDecodeObjectEx\1.2.840.113549.1.9.16.2.3]
"FuncName"="EssMLHistoryDecodeEx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\OID\EncodingType 1\CryptDllEncodeObjectEx\1.2.840.113549.1.9.16.2.3]
"FuncName"="EssMLHistoryEncodeEx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\BROWSE\NSCSINGLEEXPAND]
"Text"="Close unused folders in History and Favorites"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Capabilities\Roaming\WinInet]
"InitialApplyCommandLine"=""C:\Windows\System32\ie4uinit.exe" -InitHistoryRoaming"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\History]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Capabilities\SearchSuggestions\History]
"Protocol"="iehistory:"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Sysprep]
"SidsGeneratedHistory"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{11016101-E366-4D22-BC06-4ADA335C892B}]
""="IE History and Feeds Shell Data Source for Windows Search"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D9DC8A3B-B784-432E-A781-5A1130A75963}]
"Name"="History"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{D9DC8A3B-B784-432E-A781-5A1130A75963}]
"RelativePath"="Microsoft\Windows\History"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SearchFolder\Connectors\StartMenu]
"History"="{00bb2764-6a77-11d0-a535-00c04fd7d062}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\History]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Special Paths\History]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Special Paths\History]
""="Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\P3P\History]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Url History]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Url History]
"Directory"="C:\Windows\History"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability\RunHistory]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony\Locations]
"KeyRenameHistory"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009]
"Counter"="1
1847
2
System
4
Memory
6
% Processor Time
10
File Read Operations/sec
12
File Write Operations/sec
14
File Control Operations/sec
16
File Read Bytes/sec
18
File Write Bytes/sec
20
File Control Bytes/sec
24
Available Bytes
26
Committed Bytes
28
Page Faults/sec
30
Commit Limit
32
Write Copies/sec
34
Transition Faults/sec
36
Cache Faults/sec
38
Demand Zero Faults/sec
40
Pages/sec
42
Page Reads/sec
44
Processor Queue Length
46
Thread State
48
Pages Output/sec
50
Page Writes/sec
52
Browser
54
Announcements Server/sec
56
Pool Paged Bytes
58
Pool Nonpaged Bytes
60
Pool Paged Allocs
64
Pool Nonpaged Allocs
66
Pool Paged Resident Bytes
68
System Code Total Bytes
70
System Code Resident Bytes
72
System Driver Total Bytes
74
System Driver Resident Bytes
76
System Cache Resident Bytes
78
Announcements Domain/sec
80
Election Packets/sec
82
Mailslot Writes/sec
84
Server List Requests/sec
86
Cache
88
Data Maps/sec
90
Sync Data Maps/sec
92
Async Data Maps/sec
94
Data Map Hits %
96
Data Map Pins/sec
98
Pin Reads/sec
100
Sync Pin Reads/sec
102
Async Pin Reads/sec
104
Pin Read Hits %
106
Copy Reads/sec
108
Sync Copy Reads/sec
110
Async Copy Reads/sec
112
Copy Read Hits %
114
MDL Reads/sec
116
Sync MDL Reads/sec
118
Async MDL Reads/sec
120
MDL Read Hits %
122
Read Aheads/sec
124
Fast Reads/sec
126
Sync Fast Reads/sec
128
Async Fast Reads/sec
130
Fast Read Resource Misses/sec
132
Fast Read Not Possibles/sec
134
Lazy Write Flushes/sec
136
Lazy Write Pages/sec
138
Data Flushes/sec
140
Data Flush Pages/sec
142
% User Time
144
% Privileged Time
146
Context Switches/sec
148
Interrupts/sec
150
System Calls/sec
152
Level 1 TLB Fills/sec
154
Level 2 TLB Fills/sec
156
Enumerations Server/sec
158
Enumerations Domain/sec
160
Enumerations Other/sec
162
Missed Server Announcements
164
Missed Mailslot Datagrams
166
Missed Server List Requests
168
Server Announce Allocations Failed/sec
170
Mailslot Allocations Failed
172
Virtual Bytes Peak
174
Virtual Bytes
178
Working Set Peak
180
Working Set
182
Page File Bytes Peak
184
Page File Bytes
186
Private Bytes
188
Announcements Total/sec
190
Enumerations Total/sec
198
Current Disk Queue Length
200
% Disk Time
202
% Disk Read Time
204
% Disk Write Time
206
Avg. Disk sec/Transfer
208
Avg. Disk sec/Read
210
Avg. Disk sec/Write
212
Disk Transfers/sec
214
Disk Reads/sec
216
Disk Writes/sec
218
Disk Bytes/sec
220
Disk Read Bytes/sec
222
Disk Write Bytes/sec
224
Avg. Disk Bytes/Transfer
226
Avg. Disk Bytes/Read
228
Avg. Disk Bytes/Write
230
Process
232
Thread
234
PhysicalDisk
236
LogicalDisk
238
Processor
240
% Total Processor Time
242
% Total User Time
244
% Total Privileged Time
246
Total Interrupts/sec
248
Processes
250
Threads
252
Events
254
Semaphores
256
Mutexes
258
Sections
260
Objects
262
Redirector
264
Bytes Received/sec
266
Packets Received/sec
268
Read Bytes Paging/sec
270
Read Bytes Non-Paging/sec
272
Read Bytes Cache/sec
274
Read Bytes Network/sec
276
Bytes Transmitted/sec
278
Packets Transmitted/sec
280
Write Bytes Paging/sec
282
Write Bytes Non-Paging/sec
284
Write Bytes Cache/sec
286
Write Bytes Network/sec
288
Read Operations/sec
290
Read Operations Random/sec
292
Read Packets/sec
294
Reads Large/sec
296
Read Packets Small/sec
298
Write Operations/sec
300
Write Operations Random/sec
302
Write Packets/sec
304
Writes Large/sec
306
Write Packets Small/sec
308
Reads Denied/sec
310
Writes Denied/sec
312
Network Errors/sec
314
Server Sessions
316
Server Reconnects
318
Connects Core
320
Connects Lan Manager 2.0
322
Connects Lan Manager 2.1
324
Connects Windows NT
326
Server Disconnects
328
Server Sessions Hung
330
Server
336
Thread Wait Reason
340
Sessions Timed Out
342
Sessions Errored Out
344
Sessions Logged Off
346
Sessions Forced Off
348
Errors Logon
350
Errors Access Permissions
352
Errors Granted Access
354
Errors System
356
Blocking Requests Rejected
358
Work Item Shortages
360
Files Opened Total
362
Files Open
366
File Directory Searches
370
Pool Nonpaged Failures
372
Pool Nonpaged Peak
376
Pool Paged Failures
378
Pool Paged Peak
388
Bytes Total/sec
392
Current Commands
398
NWLink NetBIOS
400
Packets/sec
404
Context Blocks Queued/sec
406
File Data Operations/sec
408
% Free Space
410
Free Megabytes
412
Connections Open
414
Connections No Retries
416
Connections With Retries
418
Disconnects Local
420
Disconnects Remote
422
Failures Link
424
Failures Adapter
426
Connection Session Timeouts
428
Connections Canceled
430
Failures Resource Remote
432
Failures Resource Local
434
Failures Not Found
436
Failures No Listen
438
Datagrams/sec
440
Datagram Bytes/sec
442
Datagrams Sent/sec
444
Datagram Bytes Sent/sec
446
Datagrams Received/sec
448
Datagram Bytes Received/sec
452
Packets Sent/sec
456
Frames/sec
458
Frame Bytes/sec
460
Frames Sent/sec
462
Frame Bytes Sent/sec
464
Frames Received/sec
466
Frame Bytes Received/sec
468
Frames Re-Sent/sec
470
Frame Bytes Re-Sent/sec
472
Frames Rejected/sec
474
Frame Bytes Rejected/sec
476
Expirations Response
478
Expirations Ack
480
Window Send Maximum
482
Window Send Average
484
Piggyback Ack Queued/sec
486
Piggyback Ack Timeouts
488
NWLink IPX
490
NWLink SPX
492
NetBEUI
494
NetBEUI Resource
496
Used Maximum
498
Used Average
500
Times Exhausted
502
NBT Connection
506
Bytes Sent/sec
508
Total Bytes/sec
510
Network Interface
512
Bytes/sec
520
Current Bandwidth
524
Packets Received Unicast/sec
526
Packets Received Non-Unicast/sec
528
Packets Received Discarded
530
Packets Received Errors
532
Packets Received Unknown
536
Packets Sent Unicast/sec
538
Packets Sent Non-Unicast/sec
540
Packets Outbound Discarded
542
Packets Outbound Errors
544
Output Queue Length
546
IPv4
548
IPv6
552
Datagrams Received Header Errors
554
Datagrams Received Address Errors
556
Datagrams Forwarded/sec
558
Datagrams Received Unknown Protocol
560
Datagrams Received Discarded
562
Datagrams Received Delivered/sec
566
Datagrams Outbound Discarded
568
Datagrams Outbound No Route
570
Fragments Received/sec
572
Fragments Re-assembled/sec
574
Fragment Re-assembly Failures
576
Fragmented Datagrams/sec
578
Fragmentation Failures
580
Fragments Created/sec
582
ICMP
584
Messages/sec
586
Messages Received/sec
588
Messages Received Errors
590
Received Dest. Unreachable
592
Received Time Exceeded
594
Received Parameter Problem
596
Received Source Quench
598
Received Redirect/sec
600
Received Echo/sec
602
Received Echo Reply/sec
604
Received Timestamp/sec
606
Received Timestamp Reply/sec
608
Received Address Mask
610
Received Address Mask Reply
612
Messages Sent/sec
614
Messages Outbound Errors
616
Sent Destination Unreachable
618
Sent Time Exceeded
620
Sent Parameter Problem
622
Sent Source Quench
624
Sent Redirect/sec
626
Sent Echo/sec
628
Sent Echo Reply/sec
630
Sent Timestamp/sec
632
Sent Timestamp Reply/sec
634
Sent Address Mask
636
Sent Address Mask Reply
638
TCPv4
640
Segments/sec
642
Connections Established
644
Connections Active
646
Connections Passive
648
Connection Failures
650
Connections Reset
652
Segments Received/sec
654
Segments Sent/sec
656
Segments Retransmitted/sec
658
UDPv4
660
% Total DPC Time
662
% Total Interrupt Time
664
Datagrams No Port/sec
666
Datagrams Received Errors
670
Disk Storage Unit
672
Allocation Failures
674
System Up Time
676
System Handle Count
678
Free System Page Table Entries
680
Thread Count
682
Priority Base
684
Elapsed Time
686
Alignment Fixups/sec
688
Exception Dispatches/sec
690
Floating Emulations/sec
692
Logon/sec
694
Priority Current
696
% DPC Time
698
% Interrupt Time
700
Paging File
702
% Usage
704
% Usage Peak
706
Start Address
708
User PC
710
Mapped Space No Access
712
Mapped Space Read Only
714
Mapped Space Read/Write
716
Mapped Space Write Copy
718
Mapped Space Executable
720
Mapped Space Exec Read Only
722
Mapped Space Exec Read/Write
724
Mapped Space Exec Write Copy
726
Reserved Space No Access
728
Reserved Space Read Only
730
Reserved Space Read/Write
732
Reserved Space Write Copy
734
Reserved Space Executable
736
Reserved Space Exec Read Only
738
Reserved Space Exec Read/Write
740
Image
742
Reserved Space Exec Write Copy
744
Unassigned Space No Access
746
Unassigned Space Read Only
748
Unassigned Space Read/Write
750
Unassigned Space Write Copy
752
Unassigned Space Executable
754
Unassigned Space Exec Read Only
756
Unassigned Space Exec Read/Write
758
Unassigned Space Exec Write Copy
760
Image Space No Access
762
Image Space Read Only
764
Image Space Read/Write
766
Image Space Write Copy
768
Image Space Executable
770
Image Space Exec Read Only
772
Image Space Exec Read/Write
774
Image Space Exec Write Copy
776
Bytes Image Reserved
778
Bytes Image Free
780
Bytes Reserved
782
Bytes Free
784
ID Process
786
Process Address Space
788
No Access
790
Read Only
792
Read/Write
794
Write Copy
796
Executable
798
Exec Read Only
800
Exec Read/Write
802
Exec Write Copy
804
ID Thread
806
Mailslot Receives Failed
808
Mailslot Writes Failed
810
Mailslot Opens Failed/sec
812
Duplicate Master Announcements
814
Illegal Datagrams/sec
816
Thread Details
818
Cache Bytes
820
Cache Bytes Peak
822
Pages Input/sec
824
Transition Pages RePurposed/sec
872
Bytes Transmitted
874
Bytes Received
876
Frames Transmitted
878
Frames Received.
880
Percent Compression Out
882
Percent Compression In
884
CRC Errors
886
Timeout Errors
888
Serial Overrun Errors
890
Alignment Errors
892
Buffer Overrun Errors
894
Total Errors
896
Bytes Transmitted/Sec
898
Bytes Received/Sec
900
Frames Transmitted/Sec
902
Frames Received/Sec
904
Total Errors/Sec
908
Total Connections
920
WINS Server
922
Unique Registrations/sec
924
Group Registrations/sec
926
Total Number of Registrations/sec
928
Unique Renewals/sec
930
Group Renewals/sec
932
Total Number of Renewals/sec
934
Releases/sec
936
Queries/sec
938
Unique Conflicts/sec
940
Group Conflicts/sec
942
Total Number of Conflicts/sec
944
Successful Releases/sec
946
Failed Releases/sec
948
Successful Queries/sec
950
Failed Queries/sec
952
Handle Count
1000
MacFile Server
1002
Max Paged Memory
1004
Current Paged Memory
1006
Max NonPaged Memory
1008
Current NonPaged memory
1010
Current Sessions
1012
Maximum Sessions
1014
Current Files Open
1016
Maximum Files Open
1018
Failed Logons
1020
Data Read/sec
1022
Data Written/sec
1024
Data Received/sec
1026
Data Transmitted/sec
1028
Current Queue Length
1030
Maximum Queue Length
1032
Current Threads
1034
Maximum Threads
1050
AppleTalk
1052
Packets In/sec
1054
Packets Out/sec
1056
Bytes In/sec
1058
Bytes Out/sec
1060
Average Time/DDP Packet
1062
DDP Packets/sec
1064
Average Time/AARP Packet
1066
AARP Packets/sec
1068
Average Time/ATP Packet
1070
ATP Packets/sec
1072
Average Time/NBP Packet
1074
NBP Packets/sec
1076
Average Time/ZIP Packet
1078
ZIP Packets/sec
1080
Average Time/RTMP Packet
1082
RTMP Packets/sec
1084
ATP Retries Local
1086
ATP Response Timouts
1088
ATP XO Response/Sec
1090
ATP ALO Response/Sec
1092
ATP Recvd Release/Sec
1094
Current NonPaged Pool
1096
Packets Routed In/Sec
1098
Packets dropped
1100
ATP Retries Remote
1102
Packets Routed Out/Sec
1110
Network Segment
1112
Total frames received/second
1114
Total bytes received/second
1116
Broadcast frames received/second
1118
Multicast frames received/second
1120
% Network utilization
1124
% Broadcast Frames
1126
% Multicast Frames
1150
Telephony
1152
Lines
1154
Telephone Devices
1156
Active Lines
1158
Active Telephones
1160
Outgoing Calls/sec
1162
Incoming Calls/sec
1164
Client Apps
1166
Current Outgoing Calls
1168
Current Incoming Calls
1232
Packet Burst Read NCP Count/sec
1234
Packet Burst Read Timeouts/sec
1236
Packet Burst Write NCP Count/sec
1238
Packet Burst Write Timeouts/sec
1240
Packet Burst IO/sec
1260
Logon Total
1262
Total Durable Handles
1264
Reconnected Durable Handles
1266
SMB BranchCache Hash Header Requests
1268
SMB BranchCache Hash Generation Requests
1270
SMB BranchCache Hash Requests Received
1272
SMB BranchCache Hash Responses Sent
1274
SMB BranchCache Hash Bytes Sent
1276
Total Resilient Handles
1278
Reconnected Resilient Handles
1300
Server Work Queues
1302
Queue Length
1304
Active Threads
1306
Available Threads
1308
Available Work Items
1310
Borrowed Work Items
1312
Work Item Shortages
1314
Current Clients
1320
Bytes Transferred/sec
1324
Read Bytes/sec
1328
Write Bytes/sec
1332
Total Operations/sec
1334
DPCs Queued/sec
1336
DPC Rate
1342
Total DPCs Queued/sec
1344
Total DPC Rate
1350
% Registry Quota In Use
1360
VL Memory
1362
VLM % Virtual Size In Use
1364
VLM Virtual Size
1366
VLM Virtual Size Peak
1368
VLM Virtual Size Available
1370
VLM Commit Charge
1372
VLM Commit Charge Peak
1374
System VLM Commit Charge
1376
System VLM Commit Charge Peak
1378
System VLM Shared Commit Charge
1380
Available KBytes
1382
Available MBytes
1400
Avg. Disk Queue Length
1402
Avg. Disk Read Queue Length
1404
Avg. Disk Write Queue Length
1406
% Committed Bytes In Use
1408
Full Image
1410
Creating Process ID
1412
IO Read Operations/sec
1414
IO Write Operations/sec
1416
IO Data Operations/sec
1418
IO Other Operations/sec
1420
IO Read Bytes/sec
1422
IO Write Bytes/sec
1424
IO Data Bytes/sec
1426
IO Other Bytes/sec
1450
Print Queue
1452
Total Jobs Printed
1454
Bytes Printed/sec
1456
Total Pages Printed
1458
Jobs
1460
References
1462
Max References
1464
Jobs Spooling
1466
Max Jobs Spooling
1468
Out of Paper Errors
1470
Not Ready Errors
1472
Job Errors
1474
Enumerate Network Printer Calls
1476
Add Network Printer Calls
1478
Working Set - Private
1480
Working Set - Shared
1482
% Idle Time
1484
Split IO/Sec
1500
Job Object
1502
Current % Processor Time
1504
Current % User Mode Time
1506
Current % Kernel Mode Time
1508
This Period mSec - Processor
1510
This Period mSec - User Mode
1512
This Period mSec - Kernel Mode
1514
Pages/Sec
1516
Process Count - Total
1518
Process Count - Active
1520
Process Count - Terminated
1522
Total mSec - Processor
1524
Total mSec - User Mode
1526
Total mSec - Kernel Mode
1530
TCPv6
1532
UDPv6
1534
ICMPv6
1536
Received Packet Too Big
1538
Received Membership Query
1540
Received Membership Report
1542
Received Membership Reduction
1544
Received Router Solicit
1546
Received Router Advert
1548
Job Object Details
1550
Received Neighbor Solicit
1552
Received Neighbor Advert
1554
Sent Packet Too Big
1556
Sent Membership Query
1558
Sent Membership Report
1560
Sent Membership Reduction
1562
Sent Router Solicit
1564
Sent Router Advert
1566
Sent Neighbor Solicit
1568
Sent Neighbor Advert
1570
Security System-Wide Statistics
1572
NTLM Authentications
1574
Kerberos Authentications
1576
KDC AS Requests
1578
KDC TGS Requests
1580
Schannel Session Cache Entries
1582
Active Schannel Session Cache Entries
1584
SSL Client-Side Full Handshakes
1586
SSL Client-Side Reconnect Handshakes
1588
SSL Server-Side Full Handshakes
1590
SSL Server-Side Reconnect Handshakes
1592
Digest Authentications
1594
Forwarded Kerberos Requests
1596
Offloaded Connections
1670
Security Per-Process Statistics
1672
Credential Handles
1674
Context Handles
1676
Free & Zero Page List Bytes
1678
Modified Page List Bytes
1680
Standby Cache Reserve Bytes
1682
Standby Cache Normal Priority Bytes
1684
Standby Cache Core Bytes
1746
% Idle Time
1748
% C1 Time
1750
% C2 Time
1752
% C3 Time
1754
C1 Transitions/sec
1756
C2 Transitions/sec
1758
C3 Transitions/sec
1760
Heap
1762
Committed Bytes
1764
Reserved Bytes
1766
Virtual Bytes
1768
Free Bytes
1770
Free List Length
1772
Avg. alloc rate
1774
Avg. free rate
1776
Uncommitted Ranges Length
1778
Allocs - Frees
1780
Cached Allocs/sec
1782
Cached Frees/sec
1784
Allocs <1K/sec
1786
Frees <1K/sec
1788
Allocs 1-8K/sec
1790
Frees 1-8K/sec
1792
Allocs over 8K/sec
1794
Frees over 8K/sec
1796
Total Allocs/sec
1798
Total Frees/sec
1800
Blocks in Heap Cache
1802
Largest Cache Depth
1804
% Fragmentation
1806
% VAFragmentation
1808
Heap Lock contention
1810
Dirty Pages
1812
Dirty Page Threshold
1846
End Marker
2156
BITS Net Utilization
2158
Remote Server Speed (Bits/Sec)
2160
Netcard Speed (Bits/Sec)
2162
Percent Netcard Free
2164
IGD Speed (Bits/Sec)
2166
Percent IGD Free
2168
BITS Download BlockSize (Bytes)
2170
BITS Download Response Interval (msec)
2172
Estimated bandwidth available to the remote system (Bits/sec)
2186
Telephony
2188
Number of Lines
2190
Number of Telephone devices
2192
Number of Active Lines
2194
Number of Active Telephones
2196
Outgoing calls/sec
2198
Incoming calls/sec
2200
Number of Client Apps
2202
Current Outgoing Calls
2204
Current Incoming Calls
2206
RAS Port
2208
Bytes Transmitted
2210
Bytes Received
2212
Frames Transmitted
2214
Frames Received
2216
Percent Compression Out
2218
Percent Compression In
2220
CRC Errors
2222
Timeout Errors
2224
Serial Overrun Errors
2226
Alignment Errors
2228
Buffer Overrun Errors
2230
Total Errors
2232
Bytes Transmitted/Sec
2234
Bytes Received/Sec
2236
Frames Transmitted/Sec
2238
Frames Received/Sec
2240
Total Errors/Sec
2242
RAS Total
2244
Total Connections
3206
Database
3208
Pages Converted/sec
3210
Pages Converted
3212
Records Converted/sec
3214
Records Converted
3216
Defragmentation Tasks
3218
Defragmentation Tasks Pending
3220
Defragmentation Tasks Discarded
3222
Defragmentation Tasks Scheduled/sec
3224
Defragmentation Tasks Completed/sec
3226
Heap Allocs/sec
3228
Heap Frees/sec
3230
Heap Allocations
3232
Heap Bytes Allocated
3234
Page Bytes Reserved
3236
Page Bytes Committed
3238
FCB Asynchronous Scan/sec
3240
FCB Asynchronous Purge/sec
3242
FCB Asynchronous Threshold-Scan/sec
3244
FCB Asynchronous Threshold-Purge/sec
3246
FCB Asynchronous Purge Conflicts/sec
3248
FCB Synchronous Purge/sec
3250
FCB Synchronous Purge Stalls/sec
3252
FCB Allocations Wait For Version Cleanup/sec
3254
FCB Purge On Cursor Close/sec
3256
FCB Cache % Hit
3258
No name
3260
FCB Cache Stalls/sec
3262
FCB Cache Maximum
3264
FCB Cache Preferred
3266
FCB Cache Allocated
3268
FCB Cache Available
3270
Sessions In Use
3272
Sessions % Used
3274
No name
3276
Table Open Cache % Hit
3278
No name
3280
Table Open Cache Hits/sec
3282
Table Open Cache Misses/sec
3284
Table Opens/sec
3286
Log Bytes Write/sec
3288
Log Bytes Generated/sec
3290
Log Buffer Bytes Used
3292
Log Buffer Bytes Free
3294
Log Threads Waiting
3296
Log Checkpoint Depth
3298
Log Generation Checkpoint Depth
3300
User Read Only Transaction Commits to Level 0/sec
3302
User Read/Write Transaction Commits to Level 0/sec
3304
User Transaction Commits to Level 0/sec
3306
User Read Only Transaction Rollbacks to Level 0/sec
3308
User Read/Write Transaction Rollbacks to Level 0/sec
3310
User Transaction Rollbacks to Level 0/sec
3312
System Read Only Transaction Commits to Level 0/sec
3314
System Read/Write Transaction Commits to Level 0/sec
3316
System Transaction Commits to Level 0/sec
3318
System Read Only Transaction Rollbacks to Level 0/sec
3320
System Read/Write Transaction Rollbacks to Level 0/sec
3322
System Transaction Rollbacks to Level 0/sec
3324
Database Page Allocation File Extension Async Consumed/sec
3326
Database Page Allocation File Extension Stalls/sec
3328
Log Records/sec
3330
Log Buffer Capacity Flushes/sec
3332
Log Buffer Commit Flushes/sec
3334
Log Buffer Flushes/sec
3336
Log Writes/sec
3338
Log Record Stalls/sec
3340
Version buckets allocated
3342
Version buckets allocated for deletes
3344
VER Bucket Allocations Wait For Version Cleanup/sec
3346
Version store average RCE bookmark length
3348
Version store unnecessary calls/sec
3350
Version store cleanup tasks asynchronously dispatched/sec
3352
Version store cleanup tasks synchronously dispatched/sec
3354
Version store cleanup tasks discarded/sec
3356
Version store cleanup tasks failures/sec
3358
Record Inserts/sec
3360
Record Deletes/sec
3362
Record Replaces/sec
3364
Record Unnecessary Replaces/sec
3366
Record Redundant Replaces/sec
3368
Record Escrow-Updates/sec
3370
Secondary Index Inserts/sec
3372
Secondary Index Deletes/sec
3374
False Index Column Updates/sec
3376
False Tuple Index Column Updates/sec
3378
Record Intrinsic Long-Values Updated/sec
3380
Record Separated Long-Values Added/sec
3382
Record Separated Long-Values Forced/sec
3384
Record Separated Long-Values All Forced/sec
3386
Record Separated Long-Values Reference All/sec
3388
Record Separated Long-Values Dereference All/sec
3390
Separated Long-Value Seeks/sec
3392
Separated Long-Value Retrieves/sec
3394
Separated Long-Value Creates/sec
3396
Separated Long-Value Updates/sec
3398
Separated Long-Value Deletes/sec
3400
Separated Long-Value Copies/sec
3402
Separated Long-Value Chunk Seeks/sec
3404
Separated Long-Value Chunk Retrieves/sec
3406
Separated Long-Value Chunk Appends/sec
3408
Separated Long-Value Chunk Replaces/sec
3410
Separated Long-Value Chunk Deletes/sec
3412
Separated Long-Value Chunk Copies/sec
3414
B+ Tree Append Splits/sec
3416
B+ Tree Right Splits/sec
3418
B+ Tree Right Hotpoint Splits/sec
3420
B+ Tree Vertical Splits/sec
3422
B+ Tree Splits/sec
3424
B+ Tree Empty Page Merges/sec
3426
B+ Tree Right Merges/sec
3428
B+ Tree Partial Merges/sec
3430
B+ Tree Left Merges/sec
3432
B+ Tree Partial Left Merges/sec
3434
B+ Tree Page Moves/sec
3436
B+ Tree Merges/sec
3438
B+ Tree Failed Simple Page Cleanup Attempts/sec
3440
B+ Tree Seek Short Circuits/sec
3442
B+ Tree Opportune Prereads/sec
3444
B+ Tree Unnecessary Sibling Latches/sec
3446
B+ Tree Move Nexts/sec
3448
B+ Tree Move Nexts (Non-Visible Nodes Skipped)/sec
3450
B+ Tree Move Prevs/sec
3452
B+ Tree Move Prevs (Non-Visible Nodes Skipped)/sec
3454
B+ Tree Seeks/sec
3456
B+ Tree Inserts/sec
3458
B+ Tree Replaces/sec
3460
B+ Tree Flag Deletes/sec
3462
B+ Tree Deletes/sec
3464
B+ Tree Appends/sec
3466
B+ Tree Creates/sec
3468
B+ Tree Creates (Total)
3470
B+ Tree Destroys/sec
3472
B+ Tree Destroys (Total)
3474
Database Cache Misses/sec
3476
Database Cache % Hit
3478
No name
3480
Database Cache Requests/sec
3482
Database Cache % Pinned
3484
No name
3486
Database Cache % Clean
3488
No name
3490
Database Pages Read Async/sec
3492
Database Pages Read Sync/sec
3494
Database Pages Written/sec
3496
Database Clean Pages Written/sec
3498
Database Opportune Write Issued (Total)
3500
Database Pages Transferred/sec
3502
Database Page Latches/sec
3504
Database Page Fast Latches/sec
3506
Database Page Bad Latch Hints/sec
3508
Database Cache % Fast Latch
3510
No name
3512
Database Page Latch Conflicts/sec
3514
Database Page Latch Stalls/sec
3516
Database Cache % Available
3518
No name
3520
Database Page Faults/sec
3522
Database Page Evictions/sec
3524
Database Page Fault Stalls/sec
3526
Database Cache Size (MB)
3528
Database Cache Size
3530
Database Cache Size Min
3532
Database Cache Size Max
3534
Database Cache Size Resident
3536
Database Cache Size Resident (MB)
3538
Database Cache % Available Min
3540
No name
3542
Database Cache % Available Max
3544
No name
3546
Database Pages Preread/sec
3548
Database Cached Pages Preread/sec
3550
Database Pages Preread Untouched/sec
3552
Database Pages Versioned/sec
3554
Database Pages Version Copied/sec
3556
Database Cache % Versioned
3558
No name
3560
Database Pages Ordinarily Written/sec
3562
Database Pages Anomalously Written/sec
3564
Database Pages Opportunely Written/sec
3566
Database Pages Repeatedly Written/sec
3568
Database Pages Idly Written/sec
3570
Database Pages Coalesced Written/sec
3572
Database Pages Coalesced Read/sec
3574
Database Page History Records
3576
Database Page History % Hit
3578
No name
3580
Database Page Scans/sec
3582
Database Page Scans Out-of-order/sec
3584
No name
3586
Database Cache % Resident
3588
No name
3590
Streaming Backup Pages Read/sec
3592
Online Defrag Pages Referenced/sec
3594
Online Defrag Pages Read/sec
3596
Online Defrag Pages Preread/sec
3598
Online Defrag Pages Dirtied/sec
3600
Online Defrag Pages Re-Dirtied/sec
3602
Online Defrag Pages Freed/sec
3604
Online Defrag Data Moves/sec
3606
Online Defrag Page Moves/sec
3608
Online Defrag Log Records/sec
3610
Online Defrag Average Log Bytes
3612
No name
3614
Online Maintenance (DB Scan) Pages Read/sec
3616
Online Maintenance (DB Scan) Pages Read
3618
Online Maintenance (DB Scan) Pages Zeroed/sec
3620
Online Maintenance (DB Scan) Pages Zeroed
3622
Database Tasks Pages Referenced/sec
3624
Database Tasks Pages Read/sec
3626
Database Tasks Pages Preread/sec
3628
Database Tasks Pages Dirtied/sec
3630
Database Tasks Pages Re-Dirtied/sec
3632
Database Tasks Log Records/sec
3634
Database Tasks Average Log Bytes
3636
No name
3638
I/O Database Reads/sec
3640
I/O Database Reads Average Latency
3642
No name
3644
I/O Database Reads Average Bytes
3646
No name
3648
I/O Database Reads In Heap
3650
I/O Database Reads Async Pending
3652
I/O Database Reads Abnormal Latency/sec
3654
I/O Log Reads/sec
3656
I/O Log Reads Average Latency
3658
No name
3660
I/O Log Reads Average Bytes
3662
No name
3664
I/O Log Reads In Heap
3666
I/O Log Reads Async Pending
3668
I/O Log Reads Abnormal Latency/sec
3670
I/O Database Writes/sec
3672
I/O Database Writes Average Latency
3674
No name
3676
I/O Database Writes Average Bytes
3678
No name
3680
I/O Database Writes In Heap
3682
I/O Database Writes Async Pending
3684
I/O Database Writes Abnormal Latency/sec
3686
I/O Log Writes/sec
3688
I/O Log Writes Average Latency
3690
No name
3692
I/O Log Writes Average Bytes
3694
No name
3696
I/O Log Writes In Heap
3698
I/O Log Writes Async Pending
3700
I/O Log Writes Abnormal Latency/sec
3702
Threads Blocked/sec
3704
Threads Blocked
3706
Record Failed Compression Bytes/sec
3708
Database ==> TableClasses
3710
Record Inserts/sec
3712
Record Deletes/sec
3714
Record Replaces/sec
3716
Record Unnecessary Replaces/sec
3718
Record Redundant Replaces/sec
3720
Record Escrow-Updates/sec
3722
Secondary Index Inserts/sec
3724
Secondary Index Deletes/sec
3726
False Index Column Updates/sec
3728
False Tuple Index Column Updates/sec
3730
Record Intrinsic Long-Values Updated/sec
3732
Record Separated Long-Values Added/sec
3734
Record Separated Long-Values Forced/sec
3736
Record Separated Long-Values All Forced/sec
3738
Record Separated Long-Values Reference All/sec
3740
Record Separated Long-Values Dereference All/sec
3742
Separated Long-Value Seeks/sec
3744
Separated Long-Value Retrieves/sec
3746
Separated Long-Value Creates/sec
3748
Separated Long-Value Updates/sec
3750
Separated Long-Value Deletes/sec
3752
Separated Long-Value Copies/sec
3754
Separated Long-Value Chunk Seeks/sec
3756
Separated Long-Value Chunk Retrieves/sec
3758
Separated Long-Value Chunk Appends/sec
3760
Separated Long-Value Chunk Replaces/sec
3762
Separated Long-Value Chunk Deletes/sec
3764
Separated Long-Value Chunk Copies/sec
3766
B+ Tree Append Splits/sec
3768
B+ Tree Right Splits/sec
3770
B+ Tree Right Hotpoint Splits/sec
3772
B+ Tree Vertical Splits/sec
3774
B+ Tree Splits/sec
3776
B+ Tree Empty Page Merges/sec
3778
B+ Tree Right Merges/sec
3780
B+ Tree Partial Merges/sec
3782
B+ Tree Left Merges/sec
3784
B+ Tree Partial Left Merges/sec
3786
B+ Tree Page Moves/sec
3788
B+ Tree Merges/sec
3790
B+ Tree Failed Simple Page Cleanup Attempts/sec
3792
B+ Tree Seek Short Circuits/sec
3794
B+ Tree Opportune Prereads/sec
3796
B+ Tree Unnecessary Sibling Latches/sec
3798
B+ Tree Move Nexts/sec
3800
B+ Tree Move Nexts (Non-Visible Nodes Skipped)/sec
3802
B+ Tree Move Prevs/sec
3804
B+ Tree Move Prevs (Non-Visible Nodes Skipped)/sec
3806
B+ Tree Seeks/sec
3808
B+ Tree Inserts/sec
3810
B+ Tree Replaces/sec
3812
B+ Tree Flag Deletes/sec
3814
B+ Tree Deletes/sec
3816
B+ Tree Appends/sec
3818
B+ Tree Creates/sec
3820
B+ Tree Creates (Total)
3822
B+ Tree Destroys/sec
3824
B+ Tree Destroys (Total)
3826
Database Cache Size (MB)
3828
Database Cache Misses/sec
3830
Database Cache % Hit
3832
No name
3834
Database Cache Requests/sec
3836
Database Pages Read Async/sec
3838
Database Pages Read Sync/sec
3840
Database Pages Written/sec
3842
Database Clean Pages Written/sec
3844
Database Pages Transferred/sec
3846
Database Pages Preread/sec
3848
Database Cached Pages Preread/sec
3850
Database Pages Preread Untouched/sec
3852
Database Pages Versioned/sec
3854
Database Pages Version Copied/sec
3856
Database Pages Ordinarily Written/sec
3858
Database Pages Anomalously Written/sec
3860
Database Pages Opportunely Written/sec
3862
Database Pages Repeatedly Written/sec
3864
Database Pages Idly Written/sec
3866
Database Pages Coalesced Written/sec
3868
Database Pages Coalesced Read/sec
3870
Database ==> Instances
3872
Pages Converted/sec
3874
Pages Converted
3876
Records Converted/sec
3878
Records Converted
3880
Defragmentation Tasks
3882
Defragmentation Tasks Pending
3884
Defragmentation Tasks Discarded
3886
Defragmentation Tasks Scheduled/sec
3888
Defragmentation Tasks Completed/sec
3890
FCB Asynchronous Scan/sec
3892
FCB Asynchronous Purge/sec
3894
FCB Asynchronous Threshold-Scan/sec
3896
FCB Asynchronous Threshold-Purge/sec
3898
FCB Asynchronous Purge Conflicts/sec
3900
FCB Synchronous Purge/sec
3902
FCB Synchronous Purge Stalls/sec
3904
FCB Allocations Wait For Version Cleanup/sec
3906
FCB Purge On Cursor Close/sec
3908
FCB Cache % Hit
3910
No name
3912
FCB Cache Stalls/sec
3914
FCB Cache Maximum
3916
FCB Cache Preferred
3918
FCB Cache Allocated
3920
FCB Cache Available
3922
Sessions In Use
3924
Sessions % Used
3926
No name
3928
Table Open Cache % Hit
3930
No name
3932
Table Open Cache Hits/sec
3934
Table Open Cache Misses/sec
3936
Table Opens/sec
3938
Log Bytes Write/sec
3940
Log Bytes Generated/sec
3942
Log Buffer Size
3944
Log Buffer Bytes Used
3946
Log Buffer Bytes Free
3948
Log Threads Waiting
3950
Log File Size
3952
Log Checkpoint Depth
3954
Log Generation Checkpoint Depth
3956
Log Generation Checkpoint Depth Target
3958
Log Checkpoint Depth as a % of Target
3960
No name
3962
Log Generation Checkpoint Depth Max
3964
Log Generation Loss Resiliency Depth
3966
Log Files Generated
3968
Log Files Generated Prematurely
3970
Log File Current Generation
3972
User Read Only Transaction Commits to Level 0/sec
3974
User Read/Write Transaction Commits to Level 0/sec
3976
User Transaction Commits to Level 0/sec
3978
User Read Only Transaction Rollbacks to Level 0/sec
3980
User Read/Write Transaction Rollbacks to Level 0/sec
3982
User Transaction Rollbacks to Level 0/sec
3984
System Read Only Transaction Commits to Level 0/sec
3986
System Read/Write Transaction Commits to Level 0/sec
3988
System Transaction Commits to Level 0/sec
3990
System Read Only Transaction Rollbacks to Level 0/sec
3992
System Read/Write Transaction Rollbacks to Level 0/sec
3994
System Transaction Rollbacks to Level 0/sec
3996
Database Page Allocation File Extension Async Consumed/sec
3998
Database Page Allocation File Extension Stalls/sec
4000
Log Records/sec
4002
Log Buffer Capacity Flushes/sec
4004
Log Buffer Commit Flushes/sec
4006
Log Buffer Flushes/sec
4008
Log Writes/sec
4010
Log Record Stalls/sec
4012
Version buckets allocated
4014
Version buckets allocated for deletes
4016
VER Bucket Allocations Wait For Version Cleanup/sec
4018
Version store average RCE bookmark length
4020
Version store unnecessary calls/sec
4022
Version store cleanup tasks asynchronously dispatched/sec
4024
Version store cleanup tasks synchronously dispatched/sec
4026
Version store cleanup tasks discarded/sec
4028
Version store cleanup tasks failures/sec
4030
Record Inserts/sec
4032
Record Deletes/sec
4034
Record Replaces/sec
4036
Record Unnecessary Replaces/sec
4038
Record Redundant Replaces/sec
4040
Record Escrow-Updates/sec
4042
Secondary Index Inserts/sec
4044
Secondary Index Deletes/sec
4046
False Index Column Updates/sec
4048
False Tuple Index Column Updates/sec
4050
Record Intrinsic Long-Values Updated/sec
4052
Record Separated Long-Values Added/sec
4054
Record Separated Long-Values Forced/sec
4056
Record Separated Long-Values All Forced/sec
4058
Record Separated Long-Values Reference All/sec
4060
Record Separated Long-Values Dereference All/sec
4062
Separated Long-Value Seeks/sec
4064
Separated Long-Value Retrieves/sec
4066
Separated Long-Value Creates/sec
4068
Separated Long-Value Updates/sec
4070
Separated Long-Value Deletes/sec
4072
Separated Long-Value Copies/sec
4074
Separated Long-Value Chunk Seeks/sec
4076
Separated Long-Value Chunk Retrieves/sec
4078
Separated Long-Value Chunk Appends/sec
4080
Separated Long-Value Chunk Replaces/sec
4082
Separated Long-Value Chunk Deletes/sec
4084
Separated Long-Value Chunk Copies/sec
4086
B+ Tree Append Splits/sec
4088
B+ Tree Right Splits/sec
4090
B+ Tree Right Hotpoint Splits/sec
4092
B+ Tree Vertical Splits/sec
4094
B+ Tree Splits/sec
4096
B+ Tree Empty Page Merges/sec
4098
B+ Tree Right Merges/sec
4100
B+ Tree Partial Merges/sec
4102
B+ Tree Left Merges/sec
4104
B+ Tree Partial Left Merges/sec
4106
B+ Tree Page Moves/sec
4108
B+ Tree Merges/sec
4110
B+ Tree Failed Simple Page Cleanup Attempts/sec
4112
B+ Tree Seek Short Circuits/sec
4114
B+ Tree Opportune Prereads/sec
4116
B+ Tree Unnecessary Sibling Latches/sec
4118
B+ Tree Move Nexts/sec
4120
B+ Tree Move Nexts (Non-Visible Nodes Skipped)/sec
4122
B+ Tree Move Prevs/sec
4124
B+ Tree Move Prevs (Non-Visible Nodes Skipped)/sec
4126
B+ Tree Seeks/sec
4128
B+ Tree Inserts/sec
4130
B+ Tree Replaces/sec
4132
B+ Tree Flag Deletes/sec
4134
B+ Tree Deletes/sec
4136
B+ Tree Appends/sec
4138
B+ Tree Creates/sec
4140
B+ Tree Creates (Total)
4142
B+ Tree Destroys/sec
4144
B+ Tree Destroys (Total)
4146
Database Cache Size (MB)
4148
Database Cache Misses/sec
4150
Database Cache % Hit
4152
No name
4154
Database Cache Requests/sec
4156
Database Pages Read Async/sec
4158
Database Pages Read Sync/sec
4160
Database Pages Written/sec
4162
Database Clean Pages Written/sec
4164
Database Pages Transferred/sec
4166
Database Pages Preread/sec
4168
Database Cached Pages Preread/sec
4170
Database Pages Preread Untouched/sec
4172
Database Pages Versioned/sec
4174
Database Pages Version Copied/sec
4176
Database Pages Ordinarily Written/sec
4178
Database Pages Anomalously Written/sec
4180
Database Pages Opportunely Written/sec
4182
Database Pages Repeatedly Written/sec
4184
Database Pages Idly Written/sec
4186
Database Pages Coalesced Written/sec
4188
Database Pages Coalesced Read/sec
4190
Streaming Backup Pages Read/sec
4192
Online Defrag Pages Referenced/sec
4194
Online Defrag Pages Read/sec
4196
Online Defrag Pages Preread/sec
4198
Online Defrag Pages Dirtied/sec
4200
Online Defrag Pages Re-Dirtied/sec
4202
Online Defrag Pages Freed/sec
4204
Online Defrag Data Moves/sec
4206
Online Defrag Page Moves/sec
4208
Online Defrag Log Records/sec
4210
Online Defrag Average Log Bytes
4212
No name
4214
Online Maintenance (DB Scan) Pages Read/sec
4216
Online Maintenance (DB Scan) Pages Read
4218
Online Maintenance (DB Scan) Pages Zeroed/sec
4220
Online Maintenance (DB Scan) Pages Zeroed
4222
Database Tasks Pages Referenced/sec
4224
Database Tasks Pages Read/sec
4226
Database Tasks Pages Preread/sec
4228
Database Tasks Pages Dirtied/sec
4230
Database Tasks Pages Re-Dirtied/sec
4232
Database Tasks Log Records/sec
4234
Database Tasks Average Log Bytes
4236
No name
4238
I/O Database Reads/sec
4240
I/O Database Reads Average Latency
4242
No name
4244
I/O Database Reads Average Bytes
4246
No name
4248
I/O Database Reads In Heap
4250
I/O Database Reads Async Pending
4252
I/O Database Reads Abnormal Latency/sec
4254
I/O Log Reads/sec
4256
I/O Log Reads Average Latency
4258
No name
4260
I/O Log Reads Average Bytes
4262
No name
4264
I/O Log Reads In Heap
4266
I/O Log Reads Async Pending
4268
I/O Log Reads Abnormal Latency/sec
4270
I/O Database Writes/sec
4272
I/O Database Writes Average Latency
4274
No name
4276
I/O Database Writes Average Bytes
4278
No name
4280
I/O Database Writes In Heap
4282
I/O Database Writes Async Pending
4284
I/O Database Writes Abnormal Latency/sec
4286
I/O Log Writes/sec
4288
I/O Log Writes Average Latency
4290
No name
4292
I/O Log Writes Average Bytes
4294
No name
4296
I/O Log Writes In Heap
4298
I/O Log Writes Async Pending
4300
I/O Log Writes Abnormal Latency/sec
4302
Record Failed Compression Bytes/sec
4304
Distributed Transaction Coordinator
4306
Active Transactions
4308
Committed Transactions
4310
Aborted Transactions
4312
In Doubt Transactions
4314
Active Transactions Maximum
4316
Force Committed Transactions
4318
Force Aborted Transactions
4320
Response Time -- Minimum
4322
Response Time -- Average
4324
Response Time -- Maximum
4326
Transactions/sec
4328
Committed Transactions/sec
4330
Aborted Transactions/sec
4332
Terminal Services Session
4334
Input WdBytes
4336
Input WdFrames
4338
Input WaitForOutBuf
4340
Input Frames
4342
Input Bytes
4344
Input Compressed Bytes
4346
Input Compress Flushes
4348
Input Errors
4350
Input Timeouts
4352
Input Async Frame Error
4354
Input Async Overrun
4356
Input Async Overflow
4358
Input Async Parity Error
4360
Input Transport Errors
4362
Output WdBytes
4364
Output WdFrames
4366
Output WaitForOutBuf
4368
Output Frames
4370
Output Bytes
4372
Output Compressed Bytes
4374
Output Compress Flushes
4376
Output Errors
4378
Output Timeouts
4380
Output Async Frame Error
4382
Output Async Overrun
4384
Output Async Overflow
4386
Output Async Parity Error
4388
Output Transport Errors
4390
Total WdBytes
4392
Total WdFrames
4394
Total WaitForOutBuf
4396
Total Frames
4398
Total Bytes
4400
Total Compressed Bytes
4402
Total Compress Flushes
4404
Total Errors
4406
Total Timeouts
4408
Total Async Frame Error
4410
Total Async Overrun
4412
Total Async Overflow
4414
Total Async Parity Error
4416
Total Transport Errors
4418
Total Protocol Cache Reads
4420
Total Protocol Cache Hits
4422
Total Protocol Cache Hit Ratio
4424
Protocol Bitmap Cache Reads
4426
Protocol Bitmap Cache Hits
4428
Protocol Bitmap Cache Hit Ratio
4430
Protocol Glyph Cache Reads
4432
Protocol Glyph Cache Hits
4434
Protocol Glyph Cache Hit Ratio
4436
Protocol Brush Cache Reads
4438
Protocol Brush Cache Hits
4440
Protocol Brush Cache Hit Ratio
4442
Protocol Save Screen Bitmap Cache Reads
4444
Protocol Save Screen Bitmap Cache Hits
4446
Protocol Save Screen Bitmap Cache Hit Ratio
4448
Input Compression Ratio
4450
Output Compression Ratio
4452
Total Compression Ratio
4950
Bulk Bytes/Sec
4952
Isochronous Bytes/Sec
4954
Interrupt Bytes/Sec
4956
Control Data Bytes/Sec
4958
Controller PCI Interrupts/Sec
4960
Controller WorkSignals/Sec
4962
% Total Bandwidth Used for Interrupt
4964
% Total Bandwidth Used for Iso
4966
USB
4968
Avg. Bytes/Transfer
4970
Iso Packet Errors/Sec
4972
Avg ms latency for ISO transfers
4974
Transfer Errors/Sec
4976
Host Controller Idle
4978
Host Controller Async Idle
4980
Host Controller Async Cache Flush Count
4982
Host Controller Periodic Idle
4984
Host Controller Periodic Cache Flush Count
4986
.NET CLR Networking
4988
Connections Established
4990
Bytes Received
4992
Bytes Sent
4994
Datagrams Received
4996
Datagrams Sent
4998
.NET Data Provider for SqlServer
5000
HardConnectsPerSecond
5002
HardDisconnectsPerSecond
5004
SoftConnectsPerSecond
5006
SoftDisconnectsPerSecond
5008
NumberOfNonPooledConnections
5010
NumberOfPooledConnections
5012
NumberOfActiveConnectionPoolGroups
5014
NumberOfInactiveConnectionPoolGroups
5016
NumberOfActiveConnectionPools
5018
NumberOfInactiveConnectionPools
5020
NumberOfActiveConnections
5022
NumberOfFreeConnections
5024
NumberOfStasisConnections
5026
NumberOfReclaimedConnections
5028
.NET CLR Data
5030
SqlClient: Current # pooled and nonpooled connections
5032
SqlClient: Current # pooled connections
5034
SqlClient: Current # connection pools
5036
SqlClient: Peak # pooled connections
5038
SqlClient: Total # failed connects
5040
SqlClient: Total # failed commands
5042
.NET CLR Memory
5044
# Gen 0 Collections
5046
# Gen 1 Collections
5048
# Gen 2 Collections
5050
Promoted Memory from Gen 0
5052
Promoted Memory from Gen 1
5054
Gen 0 Promoted Bytes/Sec
5056
Gen 1 Promoted Bytes/Sec
5058
Promoted Finalization-Memory from Gen 0
5060
Process ID
5062
Gen 0 heap size
5064
Gen 1 heap size
5066
Gen 2 heap size
5068
Large Object Heap size
5070
Finalization Survivors
5072
# GC Handles
5074
Allocated Bytes/sec
5076
# Induced GC
5078
% Time in GC
5080
Not Displayed
5082
# Bytes in all Heaps
5084
# Total committed Bytes
5086
# Total reserved Bytes
5088
# of Pinned Objects
5090
# of Sink Blocks in use
5092
.NET CLR Loading
5094
Total Classes Loaded
5096
% Time Loading
5098
Assembly Search Length
5100
Total # of Load Failures
5102
Rate of Load Failures
5104
Bytes in Loader Heap
5106
Total appdomains unloaded
5108
Rate of appdomains unloaded
5110
Current Classes Loaded
5112
Rate of Classes Loaded
5114
Current appdomains
5116
Total Appdomains
5118
Rate of appdomains
5120
Current Assemblies
5122
Total Assemblies
5124
Rate of Assemblies
5126
.NET CLR Jit
5128
# of Methods Jitted
5130
# of IL Bytes Jitted
5132
Total # of IL Bytes Jitted
5134
IL Bytes Jitted / sec
5136
Standard Jit Failures
5138
% Time in Jit
5140
Not Displayed
5142
.NET CLR Interop
5144
# of CCWs
5146
# of Stubs
5148
# of marshalling
5150
# of TLB imports / sec
5152
# of TLB exports / sec
5154
.NET CLR LocksAndThreads
5156
Total # of Contentions
5158
Contention Rate / sec
5160
Current Queue Length
5162
Queue Length Peak
5164
Queue Length / sec
5166
# of current logical Threads
5168
# of current physical Threads
5170
# of current recognized threads
5172
# of total recognized threads
5174
rate of recognized threads / sec
5176
.NET CLR Security
5178
Total Runtime Checks
5180
% Time Sig. Authenticating
5182
# Link Time Checks
5184
% Time in RT checks
5186
Not Displayed
5188
Stack Walk Depth
5190
.NET CLR Remoting
5192
Remote Calls/sec
5194
Channels
5196
Context Proxies
5198
Context-Bound Classes Loaded
5200
Context-Bound Objects Alloc / sec
5202
Contexts
5204
Total Remote Calls
5206
.NET CLR Exceptions
5208
# of Exceps Thrown
5210
# of Exceps Thrown / sec
5212
# of Filters / sec
5214
# of Finallys / sec
5216
Throw To Catch Depth / sec
5218
.NET Data Provider for Oracle
5220
HardConnectsPerSecond
5222
HardDisconnectsPerSecond
5224
SoftConnectsPerSecond
5226
SoftDisconnectsPerSecond
5228
NumberOfNonPooledConnections
5230
NumberOfPooledConnections
5232
NumberOfActiveConnectionPoolGroups
5234
NumberOfInactiveConnectionPoolGroups
5236
NumberOfActiveConnectionPools
5238
NumberOfInactiveConnectionPools
5240
NumberOfActiveConnections
5242
NumberOfFreeConnections
5244
NumberOfStasisConnections
5246
NumberOfReclaimedConnections
5354
Search Gatherer Projects
5356
Document Additions
5358
Document Add Rate
5360
Document Deletes
5362
Document Delete Rate
5364
Document Modifies
5366
Document Modifies Rate
5368
Waiting Documents
5370
Documents In Progress
5372
Documents On Hold
5374
Delayed Documents
5376
URLs in History
5378
Processed Documents
5380
Processed Documents Rate
5382
Status Success
5384
Success Rate
5386
Status Error
5388
Error Rate
5394
File Errors
5396
File Errors Rate
5402
Accessed Files
5404
Accessed File Rate
5410
Filtered Office
5412
Filtered Office Rate
5414
Filtered Text
5416
Filtered Text Rate
5418
Crawls in progress
5420
Gatherer Paused Flag
5422
Recovery In Progress Flag
5424
Not Modified
5426
Iterating History In Progress Flag
5428
Incremental Crawls
5430
Filtering Documents
5432
Started Documents
5434
Retries
5436
Retries Rate
5444
Adaptive Crawl Errors
5450
Changed Documents
5452
Document Moves/Renames
5454
Document Move and Rename Rate
5456
Unique Documents
5458
History Recovery Progress
5460
Search Gatherer
5462
Notification Sources
5464
Ext. Notifications Received
5466
Ext. Notifications Rate
5468
Admin Clients
5470
Heartbeats
5472
Heartbeats Rate
5474
Filtering Threads
5476
Idle Threads
5478
Document Entries
5480
Performance Level
5482
Active Queue Length
5484
Filter Processes
5486
Filter Processes Max
5488
Filter Process Created
5490
Delayed Documents
5492
Server Objects
5494
Server Objects Created
5496
Filter Objects
5498
Documents Filtered
5500
Documents Filtered Rate
5502
Time Outs
5504
Servers Currently Unavailable
5506
Servers Unavailable
5508
Threads Accessing Network
5510
Threads In Plug-ins
5512
Documents Successfully Filtered
5514
Documents Successfully Filtered Rate
5516
Documents Delayed Retry
5518
Word Breakers Cached
5520
Stemmers Cached
5522
All Notifications Received
5524
Notifications Rate
5526
System IO traffic rate
5528
Reason to back off
5530
Threads blocked due to back off
5532
Search Indexer
5534
Master Index Level.
5536
Master Merges to Date
5538
Master Merge Progress
5540
Shadow Merge Levels
5542
Shadow Merge Levels Threshold
5544
Persistent Indexes
5546
Index Size
5548
Unique Keys
5550
Documents Filtered
5552
Work Items Created
5554
Work Items Deleted
5556
Clean WidSets
5558
Dirty WidSets
5560
Master Merges Now.
5562
Active Connections
5564
Queries
5566
Queries Failed
5568
Queries Succeeded
5570
L0 Indexes (Wordlists)
5572
L0 Merges (flushes) Now.
5574
L0 Merge (Flush) Speed - Average
5576
L0 Merge (Flush) - Count
5578
L0 Merge (Flush) Speed - Last
5580
Persistent Indexes L1
5582
L1 Merges Now.
5584
L1 Merge Speed - average
5586
L1 Merge - Count
5588
L1 Merge Speed - last
5590
Persistent Indexes L2
5592
L2 Merges Now.
5594
L2 Merge Speed - average
5596
L2 Merge - Count
5598
L2 Merge Speed - last
5600
Persistent Indexes L3
5602
L3 Merges Now.
5604
L3 Merge Speed - average
5606
L3 Merge - Count
5608
L3 Merge Speed - last
5610
Persistent Indexes L4
5612
L4 Merges Now.
5614
L4 Merge Speed - average
5616
L4 Merge - Count
5618
L4 Merge Speed - last
5620
Persistent Indexes L5
5622
L5 Merges Now.
5624
L5 Merge Speed - average
5626
L5 Merge - Count
5628
L5 Merge Speed - last
5630
Persistent Indexes L6
5632
L6 Merges Now.
5634
L6 Merge Speed - average
5636
L6 Merge - Count
5638
L6 Merge Speed - last
5640
Persistent Indexes L7
5642
L7 Merges Now.
5644
L7 Merge Speed - average
5646
L7 Merge - Count
5648
L7 Merge Speed - last
5650
Persistent Indexes L8
5652
L8 Merges Now.
5654
L8 Merge Speed - average
5656
L8 Merge - Count
5658
L8 Merge Speed - last
5660
ReadyBoost Cache
5662
Bytes cached
5664
Cache space used
5666
Compression Ratio
5668
Total cache size bytes
5670
Cache reads/sec
5672
Cache read bytes/sec
5674
Skipped reads/sec
5676
Skipped read bytes/sec
5678
Total reads/sec
5680
Total read bytes/sec
5908
Windows Workflow Foundation
5910
Workflows Created
5912
Workflows Created/sec
5914
Workflows Unloaded
5916
Workflows Unloaded/sec
5918
Workflows Loaded
5920
Workflows Loaded/sec
5922
Workflows Completed
5924
Workflows Completed/sec
5926
Workflows Suspended
5928
Workflows Suspended/sec
5930
Workflows Terminated
5932
Workflows Terminated/sec
5934
Workflows In Memory
5936
Workflows Aborted
5938
Workflows Aborted/sec
5940
Workflows Persisted
5942
Workflows Persisted/sec
5944
Workflows Executing
5946
Workflows Idle/sec
5948
Workflows Runnable
5950
Workflows Pending
5952
ServiceModelEndpoint 3.0.0.0
5954
Calls
5956
Calls Per Second
5958
Calls Outstanding
5960
Calls Failed
5962
Calls Failed Per Second
5964
Calls Faulted
5966
Calls Faulted Per Second
5968
Calls Duration
5970
Calls Duration Base
5972
Transactions Flowed
5974
Transactions Flowed Per Second
5976
Security Validation and Authentication Failures
5978
Security Validation and Authentication Failures Per Second
5980
Security Calls Not Authorized
5982
Security Calls Not Authorized Per Second
5984
Reliable Messaging Sessions Faulted
5986
Reliable Messaging Sessions Faulted Per Second
5988
Reliable Messaging Messages Dropped
5990
Reliable Messaging Messages Dropped Per Second
6046
ServiceModelService 3.0.0.0
6048
Calls
6050
Calls Per Second
6052
Calls Outstanding
6054
Calls Failed
6056
Calls Failed Per Second
6058
Calls Faulted
6060
Calls Faulted Per Second
6062
Calls Duration
6064
Calls Duration Base
6066
Transactions Flowed
6068
Transactions Flowed Per Second
6070
Transacted Operations Committed
6072
Transacted Operations Committed Per Second
6074
Transacted Operations Aborted
6076
Transacted Operations Aborted Per Second
6078
Transacted Operations In Doubt
6080
Transacted Operations In Doubt Per Second
6082
Security Validation and Authentication Failures
6084
Security Validation and Authentication Failures Per Second
6086
Security Calls Not Authorized
6088
Security Calls Not Authorized Per Second
6090
Instances
6092
Instances Created Per Second
6094
Reliable Messaging Sessions Faulted
6096
Reliable Messaging Sessions Faulted Per Second
6098
Reliable Messaging Messages Dropped
6100
Reliable Messaging Messages Dropped Per Second
6102
Queued Poison Messages
6104
Queued Poison Messages Per Second
6106
Queued Messages Rejected
6108
Queued Messages Rejected Per Second
6110
Queued Messages Dropped
6112
Queued Messages Dropped Per Second
6114
ServiceModelOperation 3.0.0.0
6116
Calls
6118
Calls Per Second
6120
Calls Outstanding
6122
Calls Failed
6124
Call Failed Per Second
6126
Calls Faulted
6128
Calls Faulted Per Second
6130
Calls Duration
6132
Calls Duration Base
6134
Transactions Flowed
6136
Transactions Flowed Per Second
6138
Security Validation and Authentication Failures
6140
Security Validation and Authentication Failures Per Second
6142
Security Calls Not Authorized
6144
Security Calls Not Authorized Per Second
6146
SMSvcHost 3.0.0.0
6148
Protocol Failures over net.tcp
6150
Protocol Failures over net.pipe
6152
Dispatch Failures over net.tcp
6154
Dispatch Failures over net.pipe
6156
Connections Dispatched over net.tcp
6158
Connections Dispatched over net.pipe
6160
Connections Accepted over net.tcp
6162
Connections Accepted over net.pipe
6164
Registrations Active for net.tcp
6166
Registrations Active for net.pipe
6168
Uris Registered for net.tcp
6170
Uris Registered for net.pipe
6172
Uris Unregistered for net.tcp
6174
Uris Unregistered for net.pipe
6176
MSDTC Bridge 3.0.0.0
6178
Message send failures/sec
6180
Prepare retry count/sec
6182
Commit retry count/sec
6184
Prepared retry count/sec
6186
Replay retry count/sec
6188
Faults received count/sec
6190
Faults sent count/sec
6192
Average participant prepare response time
6194
Average participant prepare response time Base
6196
Average participant commit response time
6198
Average participant commit response time Base
6656
.NET Memory Cache 4.0
6658
Cache Hits
6660
Cache Misses
6662
Cache Hit Ratio
6664
Cache Hit Ratio Base
6666
Cache Trims
6668
Cache Entries
6670
Cache Turnover Rate
6906
ASP.NET v4.0.30319
6908
ASP.NET Apps v4.0.30319
6910
Application Restarts
6912
Applications Running
6914
Requests Disconnected
6916
Request Execution Time
6918
Requests Rejected
6920
Requests Queued
6922
Worker Processes Running
6924
Worker Process Restarts
6926
Request Wait Time
6928
State Server Sessions Active
6930
State Server Sessions Abandoned
6932
State Server Sessions Timed Out
6934
State Server Sessions Total
6936
Requests Current
6938
Audit Success Events Raised
6940
Audit Failure Events Raised
6942
Error Events Raised
6944
Request Error Events Raised
6946
Infrastructure Error Events Raised
6948
Requests In Native Queue
6950
Anonymous Requests
6952
Anonymous Requests/Sec
6954
Cache Total Entries
6956
Cache Total Turnover Rate
6958
Cache Total Hits
6960
Cache Total Misses
6962
Cache Total Hit Ratio
6964
Cache Total Hit Ratio Base
6966
Cache API Entries
6968
Cache API Turnover Rate
6970
Cache API Hits
6972
Cache API Misses
6974
Cache API Hit Ratio
6976
Cache API Hit Ratio Base
6978
Output Cache Entries
6980
Output Cache Turnover Rate
6982
Output Cache Hits
6984
Output Cache Misses
6986
Output Cache Hit Ratio
6988
Output Cache Hit Ratio Base
6990
Compilations Total
6992
Debugging Requests
6994
Errors During Preprocessing
6996
Errors During Compilation
6998
Errors During Execution
7000
Errors Unhandled During Execution
7002
Errors Unhandled During Execution/Sec
7004
Errors Total
7006
Errors Total/Sec
7008
Pipeline Instance Count
7010
Request Bytes In Total
7012
Request Bytes Out Total
7014
Requests Executing
7016
Requests Failed
7018
Requests Not Found
7020
Requests Not Authorized
7022
Requests In Application Queue
7024
Requests Timed Out
7026
Requests Succeeded
7028
Requests Total
7030
Requests/Sec
7032
Sessions Active
7034
Sessions Abandoned
7036
Sessions Timed Out
7038
Sessions Total
7040
Transactions Aborted
7042
Transactions Committed
7044
Transactions Pending
7046
Transactions Total
7048
Transactions/Sec
7050
Session State Server connections total
7052
Session SQL Server connections total
7054
Events Raised
7056
Events Raised/Sec
7058
Application Lifetime Events
7060
Application Lifetime Events/Sec
7062
Error Events Raised
7064
Error Events Raised/Sec
7066
Request Error Events Raised
7068
Request Error Events Raised/Sec
7070
Infrastructure Error Events Raised
7072
Infrastructure Error Events Raised/Sec
7074
Request Events Raised
7076
Request Events Raised/Sec
7078
Audit Success Events Raised
7080
Audit Failure Events Raised
7082
Membership Authentication Success
7084
Membership Authentication Failure
7086
Forms Authentication Success
7088
Forms Authentication Failure
7090
Viewstate MAC Validation Failure
7092
Request Execution Time
7094
Requests Disconnected
7096
Requests Rejected
7098
Request Wait Time
7100
Cache % Machine Memory Limit Used
7102
Cache % Machine Memory Limit Used Base
7104
Cache % Process Memory Limit Used
7106
Cache % Process Memory Limit Used Base
7108
Cache Total Trims
7110
Cache API Trims
7112
Output Cache Trims
7114
% Managed Processor Time (estimated)
7116
% Managed Processor Time Base (estimated)
7118
Managed Memory Used (estimated)
7120
Request Bytes In Total (WebSockets)
7122
Request Bytes Out Total (WebSockets)
7124
Requests Executing (WebSockets)
7126
Requests Failed (WebSockets)
7128
Requests Succeeded (WebSockets)
7130
Requests Total (WebSockets)
7758
SMSvcHost 4.0.0.0
7760
Protocol Failures over net.tcp
7762
Protocol Failures over net.pipe
7764
Dispatch Failures over net.tcp
7766
Dispatch Failures over net.pipe
7768
Connections Dispatched over net.tcp
7770
Connections Dispatched over net.pipe
7772
Connections Accepted over net.tcp
7774
Connections Accepted over net.pipe
7776
Registrations Active for net.tcp
7778
Registrations Active for net.pipe
7780
Uris Registered for net.tcp
7782
Uris Registered for net.pipe
7784
Uris Unregistered for net.tcp
7786
Uris Unregistered for net.pipe
7788
MSDTC Bridge 4.0.0.0
7790
Message send failures/sec
7792
Prepare retry count/sec
7794
Commit retry count/sec
7796
Prepared retry count/sec
7798
Replay retry count/sec
7800
Faults received count/sec
7802
Faults sent count/sec
7804
Average participant prepare response time
7806
Average participant prepare response time Base
7808
Average participant commit response time
7810
Average participant commit response time Base
7812
WF (System.Workflow) 4.0.0.0
7814
Workflows Created
7816
Workflows Created/sec
7818
Workflows Unloaded
7820
Workflows Unloaded/sec
7822
Workflows Loaded
7824
Workflows Loaded/sec
7826
Workflows Completed
7828
Workflows Completed/sec
7830
Workflows Suspended
7832
Workflows Suspended/sec
7834
Workflows Terminated
7836
Workflows Terminated/sec
7838
Workflows In Memory
7840
Workflows Aborted
7842
Workflows Aborted/sec
7844
Workflows Persisted
7846
Workflows Persisted/sec
7848
Workflows Executing
7850
Workflows Idle/sec
7852
Workflows Runnable
7854
Workflows Pending
7856
.NET CLR Networking 4.0.0.0
7858
Connections Established
7860
Bytes Received
7862
Bytes Sent
7864
Datagrams Received
7866
Datagrams Sent
7868
HttpWebRequests Created/Sec
7870
HttpWebRequests Average Lifetime
7872
HttpWebRequests Average Lifetime Base
7874
HttpWebRequests Queued/Sec
7876
HttpWebRequests Average Queue Time
7878
HttpWebRequests Average Queue Time Base
7880
HttpWebRequests Aborted/Sec
7882
HttpWebRequests Failed/Sec
11546
ASP.NET State Service
11772
State Server Sessions Active
11774
State Server Sessions Abandoned
11776
State Server Sessions Timed Out
11778
State Server Sessions Total
11780
ASP.NET
11782
ASP.NET Applications
11784
Application Restarts
11786
Applications Running
11788
Requests Disconnected
11790
Request Execution Time
11792
Requests Rejected
11794
Requests Queued
11796
Worker Processes Running
11798
Worker Process Restarts
11800
Request Wait Time
11802
State Server Sessions Active
11804
State Server Sessions Abandoned
11806
State Server Sessions Timed Out
11808
State Server Sessions Total
11810
Requests Current
11812
Audit Success Events Raised
11814
Audit Failure Events Raised
11816
Error Events Raised
11818
Request Error Events Raised
11820
Infrastructure Error Events Raised
11822
Requests In Native Queue
11824
Anonymous Requests
11826
Anonymous Requests/Sec
11828
Cache Total Entries
11830
Cache Total Turnover Rate
11832
Cache Total Hits
11834
Cache Total Misses
11836
Cache Total Hit Ratio
11838
Cache Total Hit Ratio Base
11840
Cache API Entries
11842
Cache API Turnover Rate
11844
Cache API Hits
11846
Cache API Misses
11848
Cache API Hit Ratio
11850
Cache API Hit Ratio Base
11852
Output Cache Entries
11854
Output Cache Turnover Rate
11856
Output Cache Hits
11858
Output Cache Misses
11860
Output Cache Hit Ratio
11862
Output Cache Hit Ratio Base
11864
Compilations Total
11866
Debugging Requests
11868
Errors During Preprocessing
11870
Errors During Compilation
11872
Errors During Execution
11874
Errors Unhandled During Execution
11876
Errors Unhandled During Execution/Sec
11878
Errors Total
11880
Errors Total/Sec
11882
Pipeline Instance Count
11884
Request Bytes In Total
11886
Request Bytes Out Total
11888
Requests Executing
11890
Requests Failed
11892
Requests Not Found
11894
Requests Not Authorized
11896
Requests In Application Queue
11898
Requests Timed Out
11900
Requests Succeeded
11902
Requests Total
11904
Requests/Sec
11906
Sessions Active
11908
Sessions Abandoned
11910
Sessions Timed Out
11912
Sessions Total
11914
Transactions Aborted
11916
Transactions Committed
11918
Transactions Pending
11920
Transactions Total
11922
Transactions/Sec
11924
Session State Server connections total
11926
Session SQL Server connections total
11928
Events Raised
11930
Events Raised/Sec
11932
Application Lifetime Events
11934
Application Lifetime Events/Sec
11936
Error Events Raised
11938
Error Events Raised/Sec
11940
Request Error Events Raised
11942
Request Error Events Raised/Sec
11944
Infrastructure Error Events Raised
11946
Infrastructure Error Events Raised/Sec
11948
Request Events Raised
11950
Request Events Raised/Sec
11952
Audit Success Events Raised
11954
Audit Failure Events Raised
11956
Membership Authentication Success
11958
Membership Authentication Failure
11960
Forms Authentication Success
11962
Forms Authentication Failure
11964
Viewstate MAC Validation Failure
11966
Request Execution Time
11968
Requests Disconnected
11970
Requests Rejected
11972
Request Wait Time
11974
Cache % Machine Memory Limit Used
11976
Cache % Machine Memory Limit Used Base
11978
Cache % Process Memory Limit Used
11980
Cache % Process Memory Limit Used Base
11982
Cache Total Trims
11984
Cache API Trims
11986
Output Cache Trims
11988
% Managed Processor Time (estimated)
11990
% Managed Processor Time Base (estimated)
11992
Managed Memory Used (estimated)
11994
Request Bytes In Total (WebSockets)
11996
Request Bytes Out Total (WebSockets)
11998
Requests Executing (WebSockets)
12000
Requests Failed (WebSockets)
12002
Requests Succeeded (WebSockets)
12004
Requests Total (WebSockets)
12006
WMI Objects
12008
HiPerf Classes
12010
HiPerf Validity
12012
BatteryStatus
12014
ChargeRate
12016
DischargeRate
12018
RemainingCapacity
12020
Tag
12022
Voltage
12024
MSiSCSI_ConnectionStatistics
12026
BytesReceived
12028
BytesSent
12030
PDUCommandsSent
12032
PDUResponsesReceived
12034
MSiSCSI_InitiatorInstanceStatistics
12036
SessionConnectionTimeoutErrorCount
12038
SessionDigestErrorCount
12040
SessionFailureCount
12042
SessionFormatErrorCount
12044
MSiSCSI_InitiatorLoginStatistics
12046
LoginAcceptRsps
12048
LoginAuthenticateFails
12050
LoginAuthFailRsps
12052
LoginFailures
12054
LoginNegotiateFails
12056
LoginOtherFailRsps
12058
LoginRedirectRsps
12060
LogoutNormals
12062
LogoutOtherCodes
12064
MSiSCSI_MMIPSECStats
12066
AcquireFailures
12068
AcquireHeapSize
12070
ActiveAcquire
12072
ActiveReceive
12074
AuthenticationFailures
12076
ConnectionListSize
12078
GetSPIFailures
12080
InvalidCookiesReceived
12082
InvalidPackets
12084
KeyAdditionFailures
12086
KeyAdditions
12088
KeyUpdateFailures
12090
KeyUpdates
12092
NegotiationFailures
12094
OakleyMainMode
12096
OakleyQuickMode
12098
ReceiveFailures
12100
ReceiveHeapSize
12102
SendFailures
12104
SoftAssociations
12106
TotalGetSPI
12108
MSiSCSI_NICPerformance
12110
BytesReceived
12112
BytesTransmitted
12114
PDUReceived
12116
PDUTransmitted
12118
MSiSCSI_QMIPSECStats
12120
ActiveSA
12122
ActiveTunnels
12124
AuthenticatedBytesReceived
12126
AuthenticatedBytesSent
12128
BadSPIPackets
12130
ConfidentialBytesReceived
12132
ConfidentialBytesSent
12134
KeyAdditions
12136
KeyDeletions
12138
PacketsNotAuthenticated
12140
PacketsNotDecrypted
12142
PacketsWithReplayDetection
12144
PendingKeyOperations
12146
ReKeys
12148
TransportBytesReceived
12150
TransportBytesSent
12152
TunnelBytesReceived
12154
TunnelBytesSent
12156
MSiSCSI_RequestTimeStatistics
12158
AverageProcessingTime
12160
MaximumProcessingTime
12162
MSiSCSI_SessionStatistics
12164
BytesReceived
12166
BytesSent
12168
ConnectionTimeoutErrors
12170
DigestErrors
12172
FormatErrors
12174
PDUCommandsSent
12176
PDUResponsesReceived
12178
ProcessorPerformance
12180
frequency
12182
percentage
12184
power
7662
WorkflowServiceHost 4.0.0.0
7664
Workflows Created
7666
Workflows Created Per Second
7668
Workflows Executing
7670
Workflows Completed
7672
Workflows Completed Per Second
7674
Workflows Aborted
7676
Workflows Aborted Per Second
7678
Workflows In Memory
7680
Workflows Persisted
7682
Workflows Persisted Per Second
7684
Workflows Terminated
7686
Workflows Terminated Per Second
7688
Workflows Loaded
7690
Workflows Loaded Per Second
7692
Workflows Unloaded
7694
Workflows Unloaded Per Second
7696
Workflows Suspended
7698
Workflows Suspended Per Second
7700
Workflows Idle Per Second
7702
Average Workflow Load Time
7704
Average Workflow Load Time Base
7706
Average Workflow Persist Time
7708
Average Workflow Persist Time Base
3198
Terminal Services
3200
Active Sessions
3202
Inactive Sessions
3204
Total Sessions
4454
Pacer Flow
4456
Packets dropped
4458
Packets scheduled
4460
Packets transmitted
4462
Bytes scheduled
4464
Bytes transmitted
4466
Bytes transmitted/sec
4468
Bytes scheduled/sec
4470
Packets transmitted/sec
4472
Packets scheduled/sec
4474
Packets dropped/sec
4476
Nonconforming packets scheduled
4478
Nonconforming packets scheduled/sec
4480
Average packets in shaper
4482
Max packets in shaper
4484
Average packets in sequencer
4486
Max packets in sequencer
4488
Maximum packets in netcard
4490
Average packets in netcard
4492
Nonconforming packets transmitted
4494
Nonconforming packets transmitted/sec
4496
Pacer Pipe
4498
Out of packets
4500
Flows opened
4502
Flows closed
4504
Flows rejected
4506
Flows modified
4508
Flow mods rejected
4510
Max simultaneous flows
4512
Nonconforming packets scheduled
4514
Nonconforming packets scheduled/sec
4516
Average packets in shaper
4518
Max packets in shaper
4520
Average packets in sequencer
4522
Max packets in sequencer
4524
Max packets in netcard
4526
Average packets in netcard
4528
Nonconforming packets transmitted
4530
Nonconforming packets transmitted/sec
2258
WFPv4
2260
Inbound Packets Discarded/sec
2262
Outbound Packets Discarded/sec
2264
Packets Discarded/sec
2266
Blocked Binds
2268
Inbound Connections Blocked/sec
2270
Outbound Connections Blocked/sec
2272
Inbound Connections Allowed/sec
2274
Outbound Connections Allowed/sec
2276
Inbound Connections
2278
Outbound Connections
2280
Active Inbound Connections
2282
Active Outbound Connections
2284
Allowed Classifies/sec
2318
IPsec Driver
2320
Active Security Associations
2322
Pending Security Associations
2324
Incorrect SPI Packets
2326
Incorrect SPI Packets/sec
2328
Bytes Received in Tunnel Mode/sec
2330
Bytes Sent in Tunnel Mode/sec
2332
Bytes Received in Transport Mode/sec
2334
Bytes Sent in Transport Mode/sec
2336
Offloaded Security Associations
2338
Offloaded Bytes Received/sec
2340
Offloaded Bytes Sent/sec
2342
Packets That Failed Replay Detection
2344
Packets That Failed Replay Detection/sec
2346
Packets Not Authenticated
2348
Packets Not Authenticated/sec
2350
Packets Not Decrypted
2352
Packets Not Decrypted/sec
2354
SA Rekeys
2356
Security Associations Added
2358
Packets That Failed ESP Validation
2360
Packets That Failed ESP Validation/sec
2362
Packets That Failed UDP-ESP Validation
2364
Packets That Failed UDP-ESP Validation/sec
2366
Packets Received Over Wrong SA
2368
Packets Received Over Wrong SA/sec
2370
Plaintext Packets Received
2372
Plaintext Packets Received/sec
2374
Total Inbound Packets Received
2376
Inbound Packets Received/sec
2378
Total Inbound Packets Dropped
2380
Inbound Packets Dropped/sec
2314
WFP
2316
Provider Count
2286
WFPv6
2288
Inbound Packets Discarded/sec
2290
Outbound Packets Discarded/sec
2292
Packets Discarded/sec
2294
Blocked Binds
2296
Inbound Connections Blocked/sec
2298
Outbound Connections Blocked/sec
2300
Inbound Connections Allowed/sec
2302
Outbound Connections Allowed/sec
2304
Inbound Connections
2306
Outbound Connections
2308
Active Inbound Connections
2310
Active Outbound Connections
2312
Allowed Classifies/sec
5682
Peer Name Resolution Protocol
5684
Registration
5686
Resolve
5688
Cache Entry
5690
Average bytes sent
5692
Average bytes received
5694
Estimated cloud size
5696
Stale cache entry
5698
Send failures
5700
Receive failures
5702
Solicit sent per second
5704
Solicit received per second
5706
Advertise sent per second
5708
Advertise received per second
5710
Request sent per second
5712
Request received per second
5714
Flood sent per second
5716
Flood received per second
5718
Inquire sent per second
5720
Inquire received per second
5722
Authority sent per second
5724
Authority received per second
5726
Ack sent per second
5728
Ack received per second
5730
Lookup sent per second
5732
Lookup received per second
5734
Unknown message type received
4938
Authorization Manager Applications
4940
Total number of scopes
4942
Number of Scopes loaded in memory
5790
Fax Service
5792
Total minutes sending and receiving
5794
Total pages
5796
Total faxes sent and received
5798
Total bytes
5800
Failed faxes transmissions
5802
Failed outgoing connections
5804
Minutes sending
5806
Pages sent
5808
Faxes sent
5810
Bytes sent
5812
Failed receptions
5814
Minutes receiving
5816
Received pages
5818
Received faxes
5820
Bytes received
6368
Offline Files
6370
Bytes Received
6372
Bytes Transmitted
6374
Bytes Transmitted/sec
6378
Bytes Received/sec
6382
Client Side Caching
6384
SMB BranchCache Bytes Requested
6386
SMB BranchCache Bytes Received
6388
SMB BranchCache Bytes Published
6390
SMB BranchCache Bytes Requested From Server
6392
SMB BranchCache Hashes Requested
6394
SMB BranchCache Hashes Received
6396
SMB BranchCache Hash Bytes Received
6398
Prefetch Operations Queued
6400
Prefetch Bytes Read From Cache
6402
Prefetch Bytes Read From Server
6404
Application Bytes Read From Cache
6406
Application Bytes Read From Server
6408
Application Bytes Read From Server (Not Cached)
2578
Generic IKEv1, AuthIP, and IKEv2
2580
IKEv1 Main Mode Negotiation Time
2582
AuthIP Main Mode Negotiation Time
2584
IKEv1 Quick Mode Negotiation Time
2586
AuthIP Quick Mode Negotiation Time
2588
Extended Mode Negotiation Time
2590
Packets Received/sec
2592
Invalid Packets Received/sec
2594
Successful Negotiations
2596
Successful Negotiations/sec
2598
Failed Negotiations
2600
Failed Negotiations/sec
2602
IKEv2 Main Mode Negotiation Time
2604
IKEv2 Quick Mode Negotiation Time
2606
IPsec IKEv2 IPv4
2608
Active Main Mode SAs
2610
Pending Main Mode Negotiations
2612
Main Mode Negotiations
2614
Main Mode Negotiations/sec
2616
Successful Main Mode Negotiations
2618
Successful Main Mode Negotiations/sec
2620
Failed Main Mode Negotiations
2622
Failed Main Mode Negotiations/sec
2624
Main Mode Negotiation Requests Received
2626
Main Mode Negotiation Requests Received/sec
2628
Active Quick Mode SAs
2630
Pending Quick Mode Negotiations
2632
Quick Mode Negotiations
2634
Quick Mode Negotiations/sec
2636
Successful Quick Mode Negotiations
2638
Successful Quick Mode Negotiations/sec
2640
Failed Quick Mode Negotiations
2642
Failed Quick Mode Negotiations/sec
2458
IPsec AuthIP IPv4
2460
Active Main Mode SAs
2462
Pending Main Mode Negotiations
2464
Main Mode Negotiations
2466
Main Mode Negotiations/sec
2468
Successful Main Mode Negotiations
2470
Successful Main Mode Negotiations/sec
2472
Failed Main Mode Negotiations
2474
Failed Main Mode Negotiations/sec
2476
Main Mode Negotiation Requests Received
2478
Main Mode Negotiation Requests Received/sec
2480
Main Mode SAs That Used Impersonation
2482
Main Mode SAs That Used Impersonation/sec
2484
Active Quick Mode SAs
2486
Pending Quick Mode Negotiations
2488
Quick Mode Negotiations
2490
Quick Mode Negotiations/sec
2492
Successful Quick Mode Negotiations
2494
Successful Quick Mode Negotiations/sec
2496
Failed Quick Mode Negotiations
2498
Failed Quick Mode Negotiations/sec
2500
Active Extended Mode SAs
2502
Pending Extended Mode Negotiations
2504
Extended Mode Negotiations
2506
Extended Mode Negotiations/sec
2508
Successful Extended Mode Negotiations
2510
Successful Extended Mode Negotiations/sec
2512
Failed Extended Mode Negotiations
2514
Failed Extended Mode Negotiations/sec
2516
Extended Mode SAs That Used Impersonation
2518
IPsec AuthIP IPv6
2520
Active Main Mode SAs
2522
Pending Main Mode Negotiations
2524
Main Mode Negotiations
2526
Main Mode Negotiations/sec
2528
Successful Main Mode Negotiations
2530
Successful Main Mode Negotiations/sec
2532
Failed Main Mode Negotiations
2534
Failed Main Mode Negotiations/sec
2536
Main Mode Negotiation Requests Received
2538
Main Mode Negotiation Requests Received/sec
2540
Main Mode SAs That Used Impersonation
2542
Main Mode SAs That Used Impersonation/sec
2544
Active Quick Mode SAs
2546
Pending Quick Mode Negotiations
2548
Quick Mode Negotiations
2550
Quick Mode Negotiations/sec
2552
Successful Quick Mode Negotiations
2554
Successful Quick Mode Negotiations/sec
2556
Failed Quick Mode Negotiations
2558
Failed Quick Mode Negotiations/sec
2560
Active Extended Mode SAs
2562
Pending Extended Mode Negotiations
2564
Extended Mode Negotiations
2566
Extended Mode Negotiations/sec
2568
Successful Extended Mode Negotiations
2570
Successful Extended Mode Negotiations/sec
2572
Failed Extended Mode Negotiations
2574
Failed Extended Mode Negotiations/sec
2576
Extended Mode SAs That Used Impersonation
2644
IPsec IKEv2 IPv6
2646
Active Main Mode SAs
2648
Pending Main Mode Negotiations
2650
Main Mode Negotiations
2652
Main Mode Negotiations/sec
2654
Successful Main Mode Negotiations
2656
Successful Main Mode Negotiations/sec
2658
Failed Main Mode Negotiations
2660
Failed Main Mode Negotiations/sec
2662
Main Mode Negotiation Requests Received
2664
Main Mode Negotiation Requests Received/sec
2666
Active Quick Mode SAs
2668
Pending Quick Mode Negotiations
2670
Quick Mode Negotiations
2672
Quick Mode Negotiations/sec
2674
Successful Quick Mode Negotiations
2676
Successful Quick Mode Negotiations/sec
2678
Failed Quick Mode Negotiations
2680
Failed Quick Mode Negotiations/sec
2382
IPsec IKEv1 IPv4
2384
Active Main Mode SAs
2386
Pending Main Mode Negotiations
2388
Main Mode Negotiations
2390
Main Mode Negotiations/sec
2392
Successful Main Mode Negotiations
2394
Successful Main Mode Negotiations/sec
2396
Failed Main Mode Negotiations
2398
Failed Main Mode Negotiations/sec
2400
Main Mode Negotiation Requests Received
2402
Main Mode Negotiation Requests Received/sec
2404
Active Quick Mode SAs
2406
Pending Quick Mode Negotiations
2408
Quick Mode Negotiations
2410
Quick Mode Negotiations/sec
2412
Successful Quick Mode Negotiations
2414
Successful Quick Mode Negotiations/sec
2416
Failed Quick Mode Negotiations
2418
Failed Quick Mode Negotiations/sec
2420
IPsec IKEv1 IPv6
2422
Active Main Mode SAs
2424
Pending Main Mode Negotiations
2426
Main Mode Negotiations
2428
Main Mode Negotiations/sec
2430
Successful Main Mode Negotiations
2432
Successful Main Mode Negotiations/sec
2434
Failed Main Mode Negotiations
2436
Failed Main Mode Negotiations/sec
2438
Main Mode Negotiation Requests Received
2440
Main Mode Negotiation Requests Received/sec
2442
Active Quick Mode SAs
2444
Pending Quick Mode Negotiations
2446
Quick Mode Negotiations
2448
Quick Mode Negotiations/sec
2450
Successful Quick Mode Negotiations
2452
Successful Quick Mode Negotiations/sec
2454
Failed Quick Mode Negotiations
2456
Failed Quick Mode Negotiations/sec
4716
Teredo Relay
4718
In - Teredo Relay Total Packets: Success + Error
4720
In - Teredo Relay Success Packets: Total
4722
In - Teredo Relay Success Packets: Bubbles
4724
In - Teredo Relay Success Packets: Data Packets
4726
In - Teredo Relay Error Packets: Total
4728
In - Teredo Relay Error Packets: Header Error
4730
In - Teredo Relay Error Packets: Source Error
4732
In - Teredo Relay Error Packets: Destination Error
4734
Out - Teredo Relay Total Packets: Success + Error
4736
Out - Teredo Relay Success Packets
4738
Out - Teredo Relay Success Packets: Bubbles
4740
Out - Teredo Relay Success Packets: Data Packets
4742
Out - Teredo Relay Error Packets
4744
Out - Teredo Relay Error Packets: Header Error
4746
Out - Teredo Relay Error Packets: Source Error
4748
Out - Teredo Relay Error Packets: Destination Error
4750
In - Teredo Relay Total Packets: Success + Error / sec
4752
Out - Teredo Relay Total Packets: Success + Error / sec
4754
In - Teredo Relay Success Packets: Data Packets User Mode
4756
In - Teredo Relay Success Packets: Data Packets Kernel Mode
4758
Out - Teredo Relay Success Packets: Data Packets User Mode
4760
Out - Teredo Relay Success Packets: Data Packets Kernel Mode
4762
IPHTTPS Session
4764
Packets received on this session
4766
Packets sent on this session
4768
Bytes received on this session
4770
Bytes sent on this session
4772
Errors - Transmit errors on this session
4774
Errors - Receive errors on this session
4776
Duration - Duration of the session (Seconds)
4778
IPHTTPS Global
4780
In - Total bytes received
4782
Out - Total bytes sent
4784
Drops - Neighbor resolution timeouts
4786
Errors - Authentication Errors
4788
Out - Total bytes forwarded
4790
Errors - Transmit errors on the server
4792
Errors - Receive errors on the server
4794
In - Total packets received
4796
Out - Total packets sent
4798
Sessions - Total sessions
4686
Teredo Server
4688
In - Teredo Server Total Packets: Success + Error
4690
In - Teredo Server Success Packets: Total
4692
In - Teredo Server Success Packets: Bubbles
4694
In - Teredo Server Success Packets: Echo
4696
In - Teredo Server Success Packets: RS-Primary
4698
In - Teredo Server Success Packets: RS-Secondary
4700
In - Teredo Server Error Packets: Total
4702
In - Teredo Server Error Packets: Header Error
4704
In - Teredo Server Error Packets: Source Error
4706
In - Teredo Server Error Packets: Destination Error
4708
In - Teredo Server Error Packets: Authentication Error
4710
Out - Teredo Server: RA-Primary
4712
Out - Teredo Server: RA-Secondary
4714
In - Teredo Server Total Packets: Success + Error / sec
4662
Teredo Client
4664
In - Teredo Router Advertisement
4666
In - Teredo Bubble
4668
In - Teredo Data
4670
In - Teredo Invalid
4672
Out - Teredo Router Solicitation
4674
Out - Teredo Bubble
4676
Out - Teredo Data
4678
In - Teredo Data User Mode
4680
In - Teredo Data Kernel Mode
4682
Out - Teredo Data User Mode
4684
Out - Teredo Data Kernel Mode
11344
Classification Engine: Rule Package Cache
11346
Successful Cache Hits
11348
Recoverable Cache Misses
11350
Unrecoverable Cache Misses
11352
Forced Rule Package Retrievals
11354
Average Time to Retrieve Rules
11358
Average Time to Load Rules
11362
Rule Package Count Evictions
11364
Rule Package Memory Evictions
11330
Classification Engine: Content Analysis Session
11332
Average Time to Retrieve Data
11336
Average Time to Classify All Rules
11340
Average Time to Classify OOB Rules
7358
ServiceModelService 4.0.0.0
7360
Calls
7362
Calls Per Second
7364
Calls Outstanding
7366
Calls Failed
7368
Calls Failed Per Second
7370
Calls Faulted
7372
Calls Faulted Per Second
7374
Calls Duration
7376
Security Validation and Authentication Failures
7378
Security Validation and Authentication Failures Per Second
7380
Security Calls Not Authorized
7382
Security Calls Not Authorized Per Second
7384
Instances
7386
Instances Created Per Second
7388
Reliable Messaging Sessions Faulted
7390
Reliable Messaging Sessions Faulted Per Second
7392
Reliable Messaging Messages Dropped
7394
Reliable Messaging Messages Dropped Per Second
7396
Transactions Flowed
7398
Transactions Flowed Per Second
7400
Transacted Operations Committed
7402
Transacted Operations Committed Per Second
7404
Transacted Operations Aborted
7406
Transacted Operations Aborted Per Second
7408
Transacted Operations In Doubt
7410
Transacted Operations In Doubt Per Second
7412
Queued Poison Messages
7414
Queued Poison Messages Per Second
7416
Queued Messages Rejected
7418
Queued Messages Rejected Per Second
7420
Queued Messages Dropped
7422
Queued Messages Dropped Per Second
7424
Percent Of Max Concurrent Calls
7426
Percent Of Max Concurrent Instances
7428
Percent Of Max Concurrent Sessions
7430
CallDurationBase
7432
CallsPercentMaxConcurrentCallsBase
7434
InstancesPercentMaxConcurrentInstancesBase
7436
SessionsPercentMaxConcurrentSessionsBase
7478
ServiceModelOperation 4.0.0.0
7480
Calls
7482
Calls Per Second
7484
Calls Outstanding
7486
Calls Failed
7488
Call Failed Per Second
7490
Calls Faulted
7492
Calls Faulted Per Second
7494
Calls Duration
7496
Security Validation and Authentication Failures
7498
Security Validation and Authentication Failures Per Second
7500
Security Calls Not Authorized
7502
Security Calls Not Authorized Per Second
7504
Transactions Flowed
7506
Transactions Flowed Per Second
7508
CallsDurationBase
7438
ServiceModelEndpoint 4.0.0.0
7440
Calls
7442
Calls Per Second
7444
Calls Outstanding
7446
Calls Failed
7448
Calls Failed Per Second
7450
Calls Faulted
7452
Calls Faulted Per Second
7454
Calls Duration
7456
Security Validation and Authentication Failures
7458
Security Validation and Authentication Failures Per Second
7460
Security Calls Not Authorized
7462
Security Calls Not Authorized Per Second
7464
Reliable Messaging Sessions Faulted
7466
Reliable Messaging Sessions Faulted Per Second
7468
Reliable Messaging Messages Dropped
7470
Reliable Messaging Messages Dropped Per Second
7472
Transactions Flowed
7474
Transactions Flowed Per Second
7476
CallDurationBase
2246
Power Meter
2248
Power
2250
Power Budget
4644
HTTP Service Request Queues
4646
CurrentQueueSize
4648
MaxQueueItemAge
4650
ArrivalRate
4652
RejectionRate
4654
RejectedRequests
4656
CacheHitRate
4624
HTTP Service Url Groups
4626
BytesSentRate
4628
BytesReceivedRate
4630
BytesTransferredRate
4632
CurrentConnections
4634
MaxConnections
4636
ConnectionAttempts
4638
GetRequests
4640
HeadRequests
4642
AllRequests
4610
HTTP Service
4612
CurrentUrisCached
4614
TotalUrisCached
4616
UriCacheHits
4618
UriCacheMisses
4620
UriCacheFlushes
4622
TotalFlushedUris
5262
Windows Media Player Metadata
5264
Files Scanned/Minute
5268
Monitored Folder Updates/Second
5272
Groveler Service Routine Executions/Second
5276
Library Description Updates/Second
5280
Library Description Change Notifications/Second
5284
File Scanning Thread Prioirty
5286
Directory Change Queue Length
5288
Scanning State
5290
Dirty Directory Hit Count
5292
Timestamp Directory Hit Count
5294
AFTS Execution Time (ms)
5296
URL Classification Time (ms)
5298
Property Extraction Time (ms)
5300
Art Extraction Time (ms)
5302
Reorganize Time (ms)
5304
Commit Time (ms)
5306
Normalization Time (ms)
8064
RemoteFX Graphics
8066
Input Frames/Second
8068
Graphics Compression ratio
8070
Output Frames/Second
8072
Frames Skipped/Second - Insufficient Client Resources
8074
Frames Skipped/Second - Insufficient Network Resources
8076
Frames Skipped/Second - Insufficient Server Resources
8078
Frame Quality
8080
Average Encoding Time
8082
Source Frames/Second
8084
RemoteFX Network
8086
Base TCP RTT
8088
Current TCP RTT
8090
Current TCP Bandwidth
8092
Total Received Rate
8094
TCP Received Rate
8096
UDP Received Rate
8098
UDP Packets Received/sec
8100
Total Sent Rate
8102
TCP Sent Rate
8104
UDP Sent Rate
8106
UDP Packets Sent/sec
8108
Sent Rate P0
8110
Sent Rate P1
8112
Sent Rate P2
8114
Sent Rate P3
8116
Loss Rate
8118
Retransmission Rate
8120
FEC Rate
8124
Base UDP RTT
8126
Current UDP RTT
8128
Current UDP Bandwidth
3170
Netlogon
3172
Semaphore Waiters
3174
Semaphore Holders
3176
Semaphore Acquires
3178
Semaphore Timeouts
3180
Average Semaphore Hold Time
3182
Semaphore Hold Time Base
5854
Distributed Routing Table
5856
Registrations
5858
Searches
5860
Cache Entries
5862
Average Bytes/second Sent
5864
Average Bytes/second Received
5866
Estimated cloud size
5868
Stale Cache Entries
5870
Send Failures
5872
Receive Failures
5874
Solicit Messages Sent/second
5876
Solicit Messages Received/second
5878
Advertise Messages Sent/second
5880
Advertise Messages Received/second
5882
Request Messages Sent/second
5884
Request Messages Received/second
5886
Flood Messages Sent/second
5888
Flood Messages Received/second
5890
Inquire Messages Sent/second
5892
Inquire Messages Received/second
5894
Authority Sent/second
5896
Authority Messages Received/second
5898
Ack Messages Sent/second
5900
Ack Messages Received/second
5902
Lookup Messages Sent/second
5904
Lookup Messages Received/second
5906
Unrecognized Messages Received
3106
Per Processor Network Interface Card Activity
3108
DPCs Queued/sec
3110
Interrupts/sec
3112
Receive Indications/sec
3114
Return Packet Calls/sec
3116
Received Packets/sec
3118
Returned Packets/sec
3120
Send Request Calls/sec
3122
Send Complete Calls/sec
3124
Sent Packets/sec
3126
Sent Complete Packets/sec
3128
Build Scatter Gather List Calls/sec
3130
RSS Indirection Table Change Calls/sec
3132
Low Resource Receive Indications/sec
3134
Low Resource Received Packets/sec
3136
Tcp Offload Receive Indications/sec
3138
Tcp Offload Send Request Calls/sec
3140
Tcp Offload Receive bytes/sec
3142
Tcp Offload Send bytes/sec
3144
Per Processor Network Activity Cycles
3146
Interrupt DPC Cycles/sec
3148
Interrupt Cycles/sec
3150
NDIS Receive Indication Cycles/sec
3152
Stack Receive Indication Cycles/sec
3154
NDIS Return Packet Cycles/sec
3156
Miniport Return Packet Cycles/sec
3158
NDIS Send Cycles/sec
3160
Miniport Send Cycles/sec
3162
NDIS Send Complete Cycles/sec
3164
Build Scatter Gather Cycles/sec
3166
Miniport RSS Indirection Table Change Cycles
3168
Stack Send Complete Cycles/sec
1990
Event Tracing for Windows Session
1992
Buffer Memory Usage -- Paged Pool
1994
Buffer Memory Usage -- Non-Paged Pool
1996
Events Logged per sec
1998
Events Lost
2000
Number of Real-Time Consumers
1848
Processor Information
1850
% Processor Time
1852
% User Time
1854
% Privileged Time
1856
Interrupts/sec
1858
% DPC Time
1860
% Interrupt Time
1862
DPCs Queued/sec
1864
DPC Rate
1866
% Idle Time
1868
% C1 Time
1870
% C2 Time
1872
% C3 Time
1874
C1 Transitions/sec
1876
C2 Transitions/sec
1878
C3 Transitions/sec
1880
% Priority Time
1882
Parking Status
1884
Processor Frequency
1886
% of Maximum Frequency
1888
Processor State Flags
1976
Event Tracing for Windows
1978
Total Number of Distinct Enabled Providers
1980
Total Number of Distinct Pre-Enabled Providers
1982
Total Number of Distinct Disabled Providers
1984
Total Number of Active Sessions
1986
Total Memory Usage --- Paged Pool
1988
Total Memory Usage --- Non-Paged Pool
1890
Synchronization
1892
Spinlock Acquires/sec
1894
Spinlock Contentions/sec
1896
Spinlock Spins/sec
1898
IPI Send Broadcast Requests/sec
1900
IPI Send Routine Requests/sec
1902
IPI Send Software Interrupts/sec
1904
Exec. Resource Total Initialize/sec
1906
Exec. Resource Total Re-Initialize/sec
1908
Exec. Resource Total Delete/sec
1910
Exec. Resource Total Acquires/sec
1912
Exec. Resource Total Contentions/sec
1914
Exec. Resource Total Exclusive Releases/sec
1916
Exec. Resource Total Shared Releases/sec
1918
Exec. Resource Total Conv. Exclusive To Shared/sec
1920
Exec. Resource Attempts AcqExclLite/sec
1922
Exec. Resource Acquires AcqExclLite/sec
1924
Exec. Resource Recursive Excl. Acquires AcqExclLite/sec
1926
Exec. Resource Contention AcqExclLite/sec
1928
Exec. Resource no-Waits AcqExclLite/sec
1930
Exec. Resource Attempts AcqShrdLite/sec
1932
Exec. Resource Recursive Excl. Acquires AcqShrdLite/sec
1934
Exec. Resource Acquires AcqShrdLite/sec
1936
Exec. Resource Recursive Sh. Acquires AcqShrdLite/sec
1938
Exec. Resource Contention AcqShrdLite/sec
1940
Exec. Resource no-Waits AcqShrdLite/sec
1942
Exec. Resource Attempts AcqShrdStarveExcl/sec
1944
Exec. Resource Recursive Excl. Acquires AcqShrdStarveExcl/sec
1946
Exec. Resource Acquires AcqShrdStarveExcl/sec
1948
Exec. Resource Recursive Sh. Acquires AcqShrdStarveExcl/sec
1950
Exec. Resource Contention AcqShrdStarveExcl/sec
1952
Exec. Resource no-Waits AcqShrdStarveExcl/sec
1954
Exec. Resource Attempts AcqShrdWaitForExcl/sec
1956
Exec. Resource Recursive Excl. Acquires AcqShrdWaitForExcl/sec
1958
Exec. Resource Acquires AcqShrdWaitForExcl/sec
1960
Exec. Resource Recursive Sh. Acquires AcqShrdWaitForExcl/sec
1962
Exec. Resource Contention AcqShrdWaitForExcl/sec
1964
Exec. Resource no-Waits AcqShrdWaitForExcl/sec
1966
Exec. Resource Set Owner Pointer Exclusive/sec
1968
Exec. Resource Set Owner Pointer Shared (New Owner)/sec
1970
Exec. Resource Set Owner Pointer Shared (Existing Owner)/sec
1972
Exec. Resource Boost Excl. Owner/sec
1974
Exec. Resource Boost Shared Owners/sec
6432
BranchCache
6434
Retrieval: Bytes from server
6436
Retrieval: Bytes from cache
6438
Retrieval: Bytes served
6440
Discovery: Weighted average discovery time
6442
SMB: Bytes from cache
6444
SMB: Bytes from server
6446
BITS: Bytes from cache
6448
BITS: Bytes from server
6450
WININET: Bytes from cache
6452
WININET: Bytes from server
6454
WINHTTP: Bytes from cache
6456
WINHTTP: Bytes from server
6458
OTHER: Bytes from cache
6460
OTHER: Bytes from server
6462
Discovery: Attempted discoveries
6464
Local Cache: Cache complete file segments
6466
Local Cache: Cache partial file segments
6468
Hosted Cache: Client file segment offers made
6470
Retrieval: Average branch rate
6472
Discovery: Successful discoveries
6474
Hosted Cache: Segment offers queue size
5248
WSMan Quota Statistics
5250
Total Requests/Second
5252
User Quota Violations/Second
5254
System Quota Violations/Second
5256
Active Shells
5258
Active Operations
5260
Active Users
2174
TBS counters
2176
CurrentContexts
2178
CurrentResources
"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009]
"Help"="3
The System performance object consists of counters that apply to more than one instance of a component processors on the computer.
5
The Memory performance object consists of counters that describe the behavior of physical and virtual memory on the computer. Physical memory is the amount of random access memory on the computer. Virtual memory consists of the space in physical memory and on disk. Many of the memory counters monitor paging, which is the movement of pages of code and data between disk and physical memory. Excessive paging, a symptom of a memory shortage, can cause delays which interfere with all system processes.
7
% Processor Time is the percentage of elapsed time that the processor spends to execute a non-Idle thread. It is calculated by measuring the percentage of time that the processor spends executing the idle thread and then subtracting that value from 100%. (Each processor has an idle thread that consumes cycles when no other threads are ready to run). This counter is the primary indicator of processor activity, and displays the average percentage of busy time observed during the sample interval. It should be noted that the accounting calculation of whether the processor is idle is performed at an internal sampling interval of the system clock (10ms). On todays fast processors, % Processor Time can therefore underestimate the processor utilization as the processor may be spending a lot of time servicing threads between the system clock sampling interval. Workload based timer applications are one example of applications which are more likely to be measured inaccurately as timers are signaled just after the sample is taken.
9
% Total DPC Time is the average percentage of time that all processors spend receiving and servicing deferred procedure calls (DPCs). (DPCs are interrupts that run at a lower priority than the standard interrupts). It is the sum of Processor: % DPC Time for all processors on the computer, divided by the number of processors. System: % Total DPC Time is a component of System: % Total Privileged Time because DPCs are executed in privileged mode. DPCs are counted separately and are not a component of the interrupt count. This counter displays the average busy time as a percentage of the sample time.
11
File Read Operations/sec is the combined rate of file system read requests to all devices on the computer, including requests to read from the file system cache. It is measured in numbers of reads. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
13
File Write Operations/sec is the combined rate of the file system write requests to all devices on the computer, including requests to write to data in the file system cache. It is measured in numbers of writes. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
15
File Control Operations/sec is the combined rate of file system operations that are neither reads nor writes, such as file system control requests and requests for information about device characteristics or status. This is the inverse of System: File Data Operations/sec and is measured in number of operations perf second. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
17
File Read Bytes/sec is the overall rate at which bytes are read to satisfy file system read requests to all devices on the computer, including reads from the file system cache. It is measured in number of bytes per second. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
19
File Write Bytes/sec is the overall rate at which bytes are written to satisfy file system write requests to all devices on the computer, including writes to the file system cache. It is measured in number of bytes per second. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
21
File Control Bytes/sec is the overall rate at which bytes are transferred for all file system operations that are neither reads nor writes, including file system control requests and requests for information about device characteristics or status. It is measured in numbers of bytes. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
23
% Total Interrupt Time is the average percentage of time that all processors spend receiving and servicing hardware interrupts during sample intervals, where the value is an indirect indicator of the activity of devices that generate interrupts. It is the sum of Processor: % Interrupt Time for of all processors on the computer, divided by the number of processors. DPCs are counted separately and are not a component of the interrupt count. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system timer, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices.
25
Available Bytes is the amount of physical memory, in bytes, immediately available for allocation to a process or for system use. It is equal to the sum of memory assigned to the standby (cached), free and zero page lists. For a full explanation of the memory manager, refer to MSDN and/or the System Performance and Troubleshooting Guide chapter in the Windows Server 2003 Resource Kit.
27
Committed Bytes is the amount of committed virtual memory, in bytes. Committed memory is the physical memory which has space reserved on the disk paging file(s). There can be one or more paging files on each physical drive. This counter displays the last observed value only; it is not an average.
29
Page Faults/sec is the average number of pages faulted per second. It is measured in number of pages faulted per second because only one page is faulted in each fault operation, hence this is also equal to the number of page fault operations. This counter includes both hard faults (those that require disk access) and soft faults (where the faulted page is found elsewhere in physical memory.) Most processors can handle large numbers of soft faults without significant consequence. However, hard faults, which require disk access, can cause significant delays.
31
Commit Limit is the amount of virtual memory that can be committed without having to extend the paging file(s). It is measured in bytes. Committed memory is the physical memory which has space reserved on the disk paging files. There can be one paging file on each logical drive). If the paging file(s) are be expanded, this limit increases accordingly. This counter displays the last observed value only; it is not an average.
33
Write Copies/sec is the rate at which page faults are caused by attempts to write that have been satisfied by coping of the page from elsewhere in physical memory. This is an economical way of sharing data since pages are only copied when they are written to; otherwise, the page is shared. This counter shows the number of copies, without regard for the number of pages copied in each operation.
35
Transition Faults/sec is the rate at which page faults are resolved by recovering pages that were being used by another process sharing the page, or were on the modified page list or the standby list, or were being written to disk at the time of the page fault. The pages were recovered without additional disk activity. Transition faults are counted in numbers of faults; because only one page is faulted in each operation, it is also equal to the number of pages faulted.
37
Cache Faults/sec is the rate at which faults occur when a page sought in the file system cache is not found and must be retrieved from elsewhere in memory (a soft fault) or from disk (a hard fault). The file system cache is an area of physical memory that stores recently used pages of data for applications. Cache activity is a reliable indicator of most application I/O operations. This counter shows the number of faults, without regard for the number of pages faulted in each operation.
39
Demand Zero Faults/sec is the rate at which a zeroed page is required to satisfy the fault. Zeroed pages, pages emptied of previously stored data and filled with zeros, are a security feature of Windows that prevent processes from seeing data stored by earlier processes that used the memory space. Windows maintains a list of zeroed pages to accelerate this process. This counter shows the number of faults, without regard to the number of pages retrieved to satisfy the fault. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
41
Pages/sec is the rate at which pages are read from or written to disk to resolve hard page faults. This counter is a primary indicator of the kinds of faults that cause system-wide delays. It is the sum of Memory\\Pages Input/sec and Memory\\Pages Output/sec. It is counted in numbers of pages, so it can be compared to other counts of pages, such as Memory\\Page Faults/sec, without conversion. It includes pages retrieved to satisfy faults in the file system cache (usually requested by applications) non-cached mapped memory files.
43
Page Reads/sec is the rate at which the disk was read to resolve hard page faults. It shows the number of reads operations, without regard to the number of pages retrieved in each operation. Hard page faults occur when a process references a page in virtual memory that is not in working set or elsewhere in physical memory, and must be retrieved from disk. This counter is a primary indicator of the kinds of faults that cause system-wide delays. It includes read operations to satisfy faults in the file system cache (usually requested by applications) and in non-cached mapped memory files. Compare the value of Memory\\Pages Reads/sec to the value of Memory\\Pages Input/sec to determine the average number of pages read during each operation.
45
Processor Queue Length is the number of threads in the processor queue. Unlike the disk counters, this counter counters, this counter shows ready threads only, not threads that are running. There is a single queue for processor time even on computers with multiple processors. Therefore, if a computer has multiple processors, you need to divide this value by the number of processors servicing the workload. A sustained processor queue of less than 10 threads per processor is normally acceptable, dependent of the workload.
47
Thread State is the current state of the thread. It is 0 for Initialized, 1 for Ready, 2 for Running, 3 for Standby, 4 for Terminated, 5 for Wait, 6 for Transition, 7 for Unknown. A Running thread is using a processor; a Standby thread is about to use one. A Ready thread wants to use a processor, but is waiting for a processor because none are free. A thread in Transition is waiting for a resource in order to execute, such as waiting for its execution stack to be paged in from disk. A Waiting thread has no use for the processor because it is waiting for a peripheral operation to complete or a resource to become free.
49
Pages Output/sec is the rate at which pages are written to disk to free up space in physical memory. Pages are written back to disk only if they are changed in physical memory, so they are likely to hold data, not code. A high rate of pages output might indicate a memory shortage. Windows writes more pages back to disk to free up space when physical memory is in short supply. This counter shows the number of pages, and can be compared to other counts of pages, without conversion.
51
Page Writes/sec is the rate at which pages are written to disk to free up space in physical memory. Pages are written to disk only if they are changed while in physical memory, so they are likely to hold data, not code. This counter shows write operations, without regard to the number of pages written in each operation. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
53
The Browser performance object consists of counters that measure the rates of announcements, enumerations, and other Browser transmissions.
55
Announcements Server/sec is the rate at which the servers in this domain have announced themselves to this server.
57
Pool Paged Bytes is the size, in bytes, of the paged pool, an area of system memory (physical memory used by the operating system) for objects that can be written to disk when they are not being used. Memory\\Pool Paged Bytes is calculated differently than Process\\Pool Paged Bytes, so it might not equal Process\\Pool Paged Bytes\\_Total. This counter displays the last observed value only; it is not an average.
59
Pool Nonpaged Bytes is the size, in bytes, of the nonpaged pool, an area of system memory (physical memory used by the operating system) for objects that cannot be written to disk, but must remain in physical memory as long as they are allocated. Memory\\Pool Nonpaged Bytes is calculated differently than Process\\Pool Nonpaged Bytes, so it might not equal Process\\Pool Nonpaged Bytes\\_Total. This counter displays the last observed value only; it is not an average.
61
Pool Paged Allocs is the number of calls to allocate space in the paged pool. The paged pool is an area of system memory (physical memory used by the operating system) for objects that can be written to disk when they are not being used. It is measured in numbers of calls to allocate space, regardless of the amount of space allocated in each call. This counter displays the last observed value only; it is not an average.
63
Pool Paged Resident Bytes is the current size, in bytes, of the paged pool. The paged pool is an area of system memory (physical memory used by the operating system) for objects that can be written to disk when they are not being used. Space used by the paged and nonpaged pools are taken from physical memory, so a pool that is too large denies memory space to processes. This counter displays the last observed value only; it is not an average.
65
Pool Nonpaged Allocs is the number of calls to allocate space in the nonpaged pool. The nonpaged pool is an area of system memory area for objects that cannot be written to disk, and must remain in physical memory as long as they are allocated. It is measured in numbers of calls to allocate space, regardless of the amount of space allocated in each call. This counter displays the last observed value only; it is not an average.
67
Bytes Total/sec is the total rate of bytes sent to or received from the network by the protocol, but only for the frames (packets) which carry data. This is the sum of Frame Bytes/sec and Datagram Bytes/sec.
69
System Code Total Bytes is the size, in bytes, of the pageable operating system code currently in virtual memory. It is a measure of the amount of physical memory being used by the operating system that can be written to disk when not in use. This value is calculated by summing the bytes in Ntoskrnl.exe, Hal.dll, the boot drivers, and file systems loaded by Ntldr/osloader. This counter does not include code that must remain in physical memory and cannot be written to disk. This counter displays the last observed value only; it is not an average.
71
System Code Resident Bytes is the size, in bytes of the operating system code currently in physical memory that can be written to disk when not in use. This value is a component of Memory\\System Code Total Bytes, which also includes operating system code on disk. Memory\\System Code Resident Bytes (and Memory\\System Code Total Bytes) does not include code that must remain in physical memory and cannot be written to disk. This counter displays the last observed value only; it is not an average.
73
System Driver Total Bytes is the size, in bytes, of the pageable virtual memory currently being used by device drivers. Pageable memory can be written to disk when it is not being used. It includes physical memory (Memory\\System Driver Resident Bytes) and code and data paged to disk. It is a component of Memory\\System Code Total Bytes. This counter displays the last observed value only; it is not an average.
75
System Driver Resident Bytes is the size, in bytes, of the pageable physical memory being used by device drivers. It is the working set (physical memory area) of the drivers. This value is a component of Memory\\System Driver Total Bytes, which also includes driver memory that has been written to disk. Neither Memory\\System Driver Resident Bytes nor Memory\\System Driver Total Bytes includes memory that cannot be written to disk.
77
System Cache Resident Bytes is the size, in bytes, of the pageable operating system code in the file system cache. This value includes only current physical pages and does not include any virtual memory pages not currently resident. It does equal the System Cache value shown in Task Manager. As a result, this value may be smaller than the actual amount of virtual memory in use by the file system cache. This value is a component of Memory\\System Code Resident Bytes which represents all pageable operating system code that is currently in physical memory. This counter displays the last observed value only; it is not an average.
79
Announcements Domain/sec is the rate at which a domain has announced itself to the network.
81
Election Packets/sec is the rate at which browser election packets have been received by this workstation.
83
Mailslot Writes/sec is the rate at which mailslot messages have been successfully received.
85
Server List Requests/sec is the rate at which requests to retrieve a list of browser servers have been processed by this workstation.
87
The Cache performance object consists of counters that monitor the file system cache, an area of physical memory that stores recently used data as long as possible to permit access to the data without having to read from the disk. Because applications typically use the cache, the cache is monitored as an indicator of application I/O operations. When memory is plentiful, the cache can grow, but when memory is scarce, the cache can become too small to be effective.
89
Data Maps/sec is the frequency that a file system such as NTFS, maps a page of a file into the file system cache to read the page.
91
Sync Data Maps/sec counts the frequency that a file system, such as NTFS, maps a page of a file into the file system cache to read the page, and wishes to wait for the page to be retrieved if it is not in main memory.
93
Async Data Maps/sec is the frequency that an application using a file system, such as NTFS, to map a page of a file into the file system cache to read the page, and does not wait for the page to be retrieved if it is not in main memory.
95
Data Map Hits is the percentage of data maps in the file system cache that could be resolved without having to retrieve a page from the disk, because the page was already in physical memory.
97
Data Map Pins/sec is the frequency of data maps in the file system cache that resulted in pinning a page in main memory, an action usually preparatory to writing to the file on disk. While pinned, a page's physical address in main memory and virtual address in the file system cache will not be altered.
99
Pin Reads/sec is the frequency of reading data into the file system cache preparatory to writing the data back to disk. Pages read in this fashion are pinned in memory at the completion of the read. While pinned, a page's physical address in the file system cache will not be altered.
101
Sync Pin Reads/sec is the frequency of reading data into the file system cache preparatory to writing the data back to disk. Pages read in this fashion are pinned in memory at the completion of the read. The file system will not regain control until the page is pinned in the file system cache, in particular if the disk must be accessed to retrieve the page. While pinned, a page's physical address in the file system cache will not be altered.
103
Async Pin Reads/sec is the frequency of reading data into the file system cache preparatory to writing the data back to disk. Pages read in this fashion are pinned in memory at the completion of the read. The file system will regain control immediately even if the disk must be accessed to retrieve the page. While pinned, a page's physical address will not be altered.
105
Pin Read Hits is the percentage of pin read requests that hit the file system cache, i.e., did not require a disk read in order to provide access to the page in the file system cache. While pinned, a page's physical address in the file system cache will not be altered. The LAN Redirector uses this method for retrieving data from the cache, as does the LAN Server for small transfers. This is usually the method used by the disk file systems as well.
107
Copy Reads/sec is the frequency of reads from pages of the file system cache that involve a memory copy of the data from the cache to the application's buffer. The LAN Redirector uses this method for retrieving information from the file system cache, as does the LAN Server for small transfers. This is a method used by the disk file systems as well.
109
Sync Copy Reads/sec is the frequency of reads from pages of the file system cache that involve a memory copy of the data from the cache to the application's buffer. The file system will not regain control until the copy operation is complete, even if the disk must be accessed to retrieve the page.
111
Async Copy Reads/sec is the frequency of reads from pages of the file system cache that involve a memory copy of the data from the cache to the application's buffer. The application will regain control immediately even if the disk must be accessed to retrieve the page.
113
Copy Read Hits is the percentage of cache copy read requests that hit the cache, that is, they did not require a disk read in order to provide access to the page in the cache. A copy read is a file read operation that is satisfied by a memory copy from a page in the cache to the application's buffer. The LAN Redirector uses this method for retrieving information from the cache, as does the LAN Server for small transfers. This is a method used by the disk file systems as well.
115
MDL Reads/sec is the frequency of reads from the file system cache that use a Memory Descriptor List (MDL) to access the data. The MDL contains the physical address of each page involved in the transfer, and thus can employ a hardware Direct Memory Access (DMA) device to effect the copy. The LAN Server uses this method for large transfers out of the server.
117
Sync MDL Reads/sec is the frequency of reads from the file system cache that use a Memory Descriptor List (MDL) to access the pages. The MDL contains the physical address of each page in the transfer, thus permitting Direct Memory Access (DMA) of the pages. If the accessed page(s) are not in main memory, the caller will wait for the pages to fault in from the disk.
119
Async MDL Reads/sec is the frequency of reads from the file system cache that use a Memory Descriptor List (MDL) to access the pages. The MDL contains the physical address of each page in the transfer, thus permitting Direct Memory Access (DMA) of the pages. If the accessed page(s) are not in main memory, the calling application program will not wait for the pages to fault in from disk.
121
MDL Read Hits is the percentage of Memory Descriptor List (MDL) Read requests to the file system cache that hit the cache, i.e., did not require disk accesses in order to provide memory access to the page(s) in the cache.
123
Read Aheads/sec is the frequency of reads from the file system cache in which the Cache detects sequential access to a file. The read aheads permit the data to be transferred in larger blocks than those being requested by the application, reducing the overhead per access.
125
Fast Reads/sec is the frequency of reads from the file system cache that bypass the installed file system and retrieve the data directly from the cache. Normally, file I/O requests invoke the appropriate file system to retrieve data from a file, but this path permits direct retrieval of data from the cache without file system involvement if the data is in the cache. Even if the data is not in the cache, one invocation of the file system is avoided.
127
Sync Fast Reads/sec is the frequency of reads from the file system cache that bypass the installed file system and retrieve the data directly from the cache. Normally, file I/O requests invoke the appropriate file system to retrieve data from a file, but this path permits direct retrieval of data from the cache without file system involvement if the data is in the cache. Even if the data is not in the cache, one invocation of the file system is avoided. If the data is not in the cache, the request (application program call) will wait until the data has been retrieved from disk.
129
Async Fast Reads/sec is the frequency of reads from the file system cache that bypass the installed file system and retrieve the data directly from the cache. Normally, file I/O requests will invoke the appropriate file system to retrieve data from a file, but this path permits data to be retrieved from the cache directly (without file system involvement) if the data is in the cache. Even if the data is not in the cache, one invocation of the file system is avoided. If the data is not in the cache, the request (application program call) will not wait until the data has been retrieved from disk, but will get control immediately.
131
Fast Read Resource Misses/sec is the frequency of cache misses necessitated by the lack of available resources to satisfy the request.
133
Fast Read Not Possibles/sec is the frequency of attempts by an Application Program Interface (API) function call to bypass the file system to get to data in the file system cache that could not be honored without invoking the file system.
135
Lazy Write Flushes/sec is the rate at which the Lazy Writer thread has written to disk. Lazy Writing is the process of updating the disk after the page has been changed in memory, so that the application that changed the file does not have to wait for the disk write to be complete before proceeding. More than one page can be transferred by each write operation.
137
Lazy Write Pages/sec is the rate at which the Lazy Writer thread has written to disk. Lazy Writing is the process of updating the disk after the page has been changed in memory, so that the application that changed the file does not have to wait for the disk write to be complete before proceeding. More than one page can be transferred on a single disk write operation.
139
Data Flushes/sec is the rate at which the file system cache has flushed its contents to disk as the result of a request to flush or to satisfy a write-through file write request. More than one page can be transferred on each flush operation.
141
Data Flush Pages/sec is the number of pages the file system cache has flushed to disk as a result of a request to flush or to satisfy a write-through file write request. More than one page can be transferred on each flush operation.
143
% User Time is the percentage of elapsed time the processor spends in the user mode. User mode is a restricted processing mode designed for applications, environment subsystems, and integral subsystems. The alternative, privileged mode, is designed for operating system components and allows direct access to hardware and all memory. The operating system switches application threads to privileged mode to access operating system services. This counter displays the average busy time as a percentage of the sample time.
145
% Privileged Time is the percentage of elapsed time that the process threads spent executing code in privileged mode. When a Windows system service in called, the service will often run in privileged mode to gain access to system-private data. Such data is protected from access by threads executing in user mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalf of the application might appear in other subsystem processes in addition to the privileged time in the process.
147
Context Switches/sec is the combined rate at which all processors on the computer are switched from one thread to another. Context switches occur when a running thread voluntarily relinquishes the processor, is preempted by a higher priority ready thread, or switches between user-mode and privileged (kernel) mode to use an Executive or subsystem service. It is the sum of Thread\\Context Switches/sec for all threads running on all processors in the computer and is measured in numbers of switches. There are context switch counters on the System and Thread objects. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
149
Interrupts/sec is the average rate, in incidents per second, at which the processor received and serviced hardware interrupts. It does not include deferred procedure calls (DPCs), which are counted separately. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards, and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended. The system clock typically interrupts the processor every 10 milliseconds, creating a background of interrupt activity. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
151
System Calls/sec is the combined rate of calls to operating system service routines by all processes running on the computer. These routines perform all of the basic scheduling and synchronization of activities on the computer, and provide access to non-graphic devices, memory management, and name space management. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
153
Level 1 TLB Fills/sec is the frequency of faults that occur when reference is made to memory whose Page Table Entry (PTE) is not in the Translation Lookaside Buffer (TLB). On some computers this fault is handled by software loading the PTE into the TLB, and this counter is incremented.
155
Level 2 TLB Fills/sec is the frequency of faults that occur when reference is made to memory whose Page Table Entry (PTE) is not in the Translation Lookaside Buffer (TLB), nor is the page containing the PTE. On some computers this fault is handled by software loading the PTE into the TLB, and this counter is incremented.
157
% User Time is the percentage of elapsed time that the process threads spent executing code in user mode. Applications, environment subsystems, and integral subsystems execute in user mode. Code executing in user mode cannot damage the integrity of the Windows executive, kernel, and device drivers. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalf of the application might appear in other subsystem processes in addition to the privileged time in the process.
159
% Privileged Time is the percentage of elapsed time that the process threads spent executing code in privileged mode. When a Windows system service is called, the service will often run in privileged mode to gain access to system-private data. Such data is protected from access by threads executing in user mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalf of the application might appear in other subsystem processes in addition to the privileged time in the process.
161
Enumerations Server/sec is the rate at which server browse requests have been processed by this workstation.
163
Enumerations Domain/sec is the rate at which domain browse requests have been processed by this workstation.
165
Enumerations Other/sec is the rate at which browse requests processed by this workstation are not domain or server browse requests.
167
Missed Server Announcements is the number of server announcements that have been missed due to configuration or allocation limits.
169
Missed Mailslot Datagrams is the number of Mailslot Datagrams that have been discarded due to configuration or allocation limits.
171
Missed Server List Requests is the number of requests to retrieve a list of browser servers that were received by this workstation, but could not be processed.
173
Virtual Bytes Peak is the maximum size, in bytes, of virtual address space the process has used at any one time. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. However, virtual space is finite, and the process might limit its ability to load libraries.
175
Virtual Bytes is the current size, in bytes, of the virtual address space the process is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and the process can limit its ability to load libraries.
177
Page Faults/sec is the rate at which page faults by the threads executing in this process are occurring. A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. This may not cause the page to be fetched from disk if it is on the standby list and hence already in main memory, or if it is in use by another process with whom the page is shared.
179
Working Set Peak is the maximum size, in bytes, of the Working Set of this process at any point in time. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before they leave main memory.
181
Working Set is the current size, in bytes, of the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before leaving main memory.
183
Page File Bytes Peak is the maximum amount of virtual memory, in bytes, that this process has reserved for use in the paging file(s). Paging files are used to store pages of memory used by the process that are not contained in other files. Paging files are shared by all processes, and the lack of space in paging files can prevent other processes from allocating memory. If there is no paging file, this counter reflects the maximum amount of virtual memory that the process has reserved for use in physical memory.
185
Page File Bytes is the current amount of virtual memory, in bytes, that this process has reserved for use in the paging file(s). Paging files are used to store pages of memory used by the process that are not contained in other files. Paging files are shared by all processes, and the lack of space in paging files can prevent other processes from allocating memory. If there is no paging file, this counter reflects the current amount of virtual memory that the process has reserved for use in physical memory.
187
Private Bytes is the current size, in bytes, of memory that this process has allocated that cannot be shared with other processes.
189
% Processor Time is the percentage of elapsed time that all of process threads used the processor to execution instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count.
191
% Processor Time is the percentage of elapsed time that all of process threads used the processor to execution instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count.
193
% User Time is the percentage of elapsed time that this thread has spent executing code in user mode. Applications, environment subsystems, and integral subsystems execute in user mode. Code executing in user mode cannot damage the integrity of the Windows NT Executive, Kernel, and device drivers. Unlike some early operating systems, Windows NT uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. These subsystem processes provide additional protection. Therefore, some work done by Windows NT on behalf of your application might appear in other subsystem processes in addition to the privileged time in your process.
195
% Privileged Time is the percentage of elapsed time that the process threads spent executing code in privileged mode. When a Windows system service in called, the service will often run in privileged mode to gain access to system-private data. Such data is protected from access by threads executing in user mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. Some work done by Windows on behalf of the application might appear in other subsystem processes in addition to the privileged time in the process.
197
Context Switches/sec is the rate of switches from one thread to another. Thread switches can occur either inside of a single process or across processes. A thread switch can be caused either by one thread asking another for information, or by a thread being preempted by another, higher priority thread becoming ready to run. Unlike some early operating systems, Windows NT uses process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. These subsystem processes provide additional protection. Therefore, some work done by Windows NT on behalf of an application appear in other subsystem processes in addition to the privileged time in the application. Switching to the subsystem process causes one Context Switch in the application thread. Switching back causes another Context Switch in the subsystem thread.
199
Current Disk Queue Length is the number of requests outstanding on the disk at the time the performance data is collected. It also includes requests in service at the time of the collection. This is a instantaneous snapshot, not an average over the time interval. Multi-spindle disk devices can have multiple requests that are active at one time, but other concurrent requests are awaiting service. This counter might reflect a transitory high or low queue length, but if there is a sustained load on the disk drive, it is likely that this will be consistently high. Requests experience delays proportional to the length of this queue minus the number of spindles on the disks. For good performance, this difference should average less than two.
201
% Disk Time is the percentage of elapsed time that the selected disk drive was busy servicing read or write requests.
203
% Disk Read Time is the percentage of elapsed time that the selected disk drive was busy servicing read requests.
205
% Disk Write Time is the percentage of elapsed time that the selected disk drive was busy servicing write requests.
207
Avg. Disk sec/Transfer is the time, in seconds, of the average disk transfer.
209
Avg. Disk sec/Read is the average time, in seconds, of a read of data from the disk.
211
Avg. Disk sec/Write is the average time, in seconds, of a write of data to the disk.
213
Disk Transfers/sec is the rate of read and write operations on the disk.
215
Disk Reads/sec is the rate of read operations on the disk.
217
Disk Writes/sec is the rate of write operations on the disk.
219
Disk Bytes/sec is the rate bytes are transferred to or from the disk during write or read operations.
221
Disk Read Bytes/sec is the rate at which bytes are transferred from the disk during read operations.
223
Disk Write Bytes/sec is rate at which bytes are transferred to the disk during write operations.
225
Avg. Disk Bytes/Transfer is the average number of bytes transferred to or from the disk during write or read operations.
227
Avg. Disk Bytes/Read is the average number of bytes transferred from the disk during read operations.
229
Avg. Disk Bytes/Write is the average number of bytes transferred to the disk during write operations.
231
The Process performance object consists of counters that monitor running application program and system processes. All the threads in a process share the same address space and have access to the same data.
233
The Thread performance object consists of counters that measure aspects of thread behavior. A thread is the basic object that executes instructions on a processor. All running processes have at least one thread.
235
The Physical Disk performance object consists of counters that monitor hard or fixed disk drive on a computer. Disks are used to store file, program, and paging data and are read to retrieve these items, and written to record changes to them. The values of physical disk counters are sums of the values of the logical disks (or partitions) into which they are divided.
237
The Logical Disk performance object consists of counters that monitor logical partitions of a hard or fixed disk drives. Performance Monitor identifies logical disks by their a drive letter, such as C.
239
The Processor performance object consists of counters that measure aspects of processor activity. The processor is the part of the computer that performs arithmetic and logical computations, initiates operations on peripherals, and runs the threads of processes. A computer can have multiple processors. The processor object represents each processor as an instance of the object.
241
% Total Processor Time is the average percentage of time that all processors on the computer are executing non-idle threads. This counter was designed as the primary indicator of processor activity on multiprocessor computers. It is equal to the sum of Process: % Processor Time for all processors, divided by the number of processors. It is calculated by summing the time that all processors spend executing the thread of the Idle process in each sample interval, subtracting that value from 100%, and dividing the difference by the number of processors on the computer. (Each processor has an Idle thread which consumes cycles when no other threads are ready to run). For example, on a multiprocessor computer, a value of 50% means that all processors are busy for half of the sample interval, or that half of the processors are busy for all of the sample interval. This counter displays the average percentage of busy time observed during the sample interval. It is calculated by monitoring the time the service was inactive, and then subtracting that value from 100%.
243
% Total User Time is the average percentage of non-idle time all processors spend in user mode. It is the sum of Processor: % User Time for all processors on the computer, divided by the number of processors. System: % Total User Time and System: % Total Privileged Time sum to % Total Processor Time, but not always to 100%. (User mode is a restricted processing mode designed for applications, environment subsystems, and integral subsystems. The alternative, privileged mode, is designed for operating system components and allows direct access to hardware and all memory. The operating system switches application threads to privileged mode to access operating system services). This counter displays the average busy time as a percentage of the sample time.
245
% Total Privileged Time is the average percentage of non-idle time all processors spend in privileged (kernel) mode. It is the sum of Processor: % Privileged Time for all processors on the computer, divided by the number of processors. System: % Total User Time and System: % Total Privileged Time sum to % Total Processor Time, but not always to 100%. (Privileged mode is an processing mode designed for operating system components which allows direct access to hardware and all memory. The operating system switches application threads to privileged mode to access operating system services. The alternative, user mode, is a restricted processing mode designed for applications and environment subsystems). This counter displays the average busy time as a percentage of the sample time.
247
Total Interrupts/sec is the combined rate of hardware interrupts received and serviced by all processors on the computer It is the sum of Processor: Interrupts/sec for all processors, and divided by the number of processors, and is measured in numbers of interrupts. It does not include DPCs, which are counted separately. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system timer, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended during interrupts. Most system clocks interrupt the processor every 10 milliseconds, creating a background of interrupt activity. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
249
Processes is the number of processes in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval. Each process represents the running of a program.
251
Threads is the number of threads in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval. A thread is the basic executable entity that can execute instructions in a processor.
253
Events is the number of events in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval. An event is used when two or more threads try to synchronize execution.
255
Semaphores is the number of semaphores in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval. Threads use semaphores to obtain exclusive access to data structures that they share with other threads.
257
Mutexes counts the number of mutexes in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval. Mutexes are used by threads to assure only one thread is executing a particular section of code.
259
Sections is the number of sections in the computer at the time of data collection. This is an instantaneous count, not an average over the time interval. A section is a portion of virtual memory created by a process for storing data. A process can share sections with other processes.
261
The Object performance object consists of counters that monitor logical objects in the system, such as processes, threads, mutexes, and semaphores. This information can be used to detect the unnecessary consumption of computer resources. Each object requires memory to store basic information about the object.
263
The Redirector performance object consists of counter that monitor network connections originating at the local computer.
265
Bytes Received/sec is the rate of bytes coming in to the Redirector from the network. It includes all application data as well as network protocol information (such as packet headers).
267
Packets Received/sec is the rate at which the Redirector is receiving packets (also called SMBs or Server Message Blocks). Network transmissions are divided into packets. The average number of bytes received in a packet can be obtained by dividing Bytes Received/sec by this counter. Some packets received might not contain incoming data (for example an acknowledgment to a write made by the Redirector would count as an incoming packet).
269
Read Bytes Paging/sec is the rate at which the Redirector is attempting to read bytes in response to page faults. Page faults are caused by loading of modules (such as programs and libraries), by a miss in the Cache (see Read Bytes Cache/sec), or by files directly mapped into the address space of applications (a high-performance feature of Windows NT).
271
Read Bytes Non-Paging/sec are those bytes read by the Redirector in response to normal file requests by an application when they are redirected to come from another computer. In addition to file requests, this counter includes other methods of reading across the network such as Named Pipes and Transactions. This counter does not count network protocol information, just application data.
273
Read Bytes Cache/sec is the rate at which applications are accessing the file system cache by using the Redirector. Some of these data requests are satisfied by retrieving the data from the cache. Requests that miss the Cache cause a page fault (see Read Bytes Paging/sec).
275
Read Bytes Network/sec is the rate at which applications are reading data across the network. This occurs when data sought in the file system cache is not found there and must be retrieved from the network. Dividing this value by Bytes Received/sec indicates the proportion of application data traveling across the network. (see Bytes Received/sec).
277
Bytes Transmitted/sec is the rate at which bytes are leaving the Redirector to the network. It includes all application data as well as network protocol information (such as packet headers and the like).
279
Packets Transmitted/sec is the rate at which the Redirector is sending packets (also called SMBs or Server Message Blocks). Network transmissions are divided into packets. The average number of bytes transmitted in a packet can be obtained by dividing Bytes Transmitted/sec by this counter.
281
Write Bytes Paging/sec is the rate at which the Redirector is attempting to write bytes changed in the pages being used by applications. The program data changed by modules (such as programs and libraries) that were loaded over the network are 'paged out' when no longer needed. Other output pages come from the file system cache (see Write Bytes Cache/sec).
283
Write Bytes Non-Paging/sec is the rate at which bytes are written by the Redirector in response to normal file outputs by an application when they are redirected to another computer. In addition to file requests, this count includes other methods of writing across the network, such as Named Pipes and Transactions. This counter does not count network protocol information, just application data.
285
Write Bytes Cache/sec is the rate at which applications on your computer are writing to the file system cache by using the Redirector. The data might not leave your computer immediately; it can be retained in the cache for further modification before being written to the network. This saves network traffic. Each write of a byte into the cache is counted here.
287
Write Bytes Network/sec is the rate at which applications are writing data across the network. This occurs when the file system cache is bypassed, such as for Named Pipes or Transactions, or when the cache writes the bytes to disk to make room for other data. Dividing this counter by Bytes Transmitted/sec will indicate the proportion of application data being to the network (see Transmitted Bytes/sec).
289
File Read Operations/sec is the rate at which applications are asking the Redirector for data. Each call to a file system or similar Application Program Interface (API) call counts as one operation.
291
Read Operations Random/sec counts the rate at which, on a file-by-file basis, reads are made that are not sequential. If a read is made using a particular file handle, and then is followed by another read that is not immediately the contiguous next byte, this counter is incremented by one.
293
Read Packets/sec is the rate at which read packets are being placed on the network. Each time a single packet is sent with a request to read data remotely, this counter is incremented by one.
295
Reads Large/sec is the rate at which reads over 2 times the server's negotiated buffer size are made by applications. Too many of these could place a strain on server resources. This counter is incremented once for each read. It does not count packets.
297
Read Packets Small/sec is the rate at which reads less than one-fourth of the server's negotiated buffer size are made by applications. Too many of these could indicate a waste of buffers on the server. This counter is incremented once for each read. It does not count packets.
299
File Write Operations/sec is the rate at which applications are sending data to the Redirector. Each call to a file system or similar Application Program Interface (API) call counts as one operation.
301
Write Operations Random/sec is the rate at which, on a file-by-file basis, writes are made that are not sequential. If a write is made using a particular file handle, and then is followed by another write that is not immediately the next contiguous byte, this counter is incremented by one.
303
Write Packets/sec is the rate at which writes are being sent to the network. Each time a single packet is sent with a request to write remote data, this counter is incremented by one.
305
Writes Large/sec is the rate at which writes are made by applications that are over 2 times the server's negotiated buffer size. Too many of these could place a strain on server resources. This counter is incremented once for each write: it counts writes, not packets.
307
Write Packets Small/sec is the rate at which writes are made by applications that are less than one-fourth of the server's negotiated buffer size. Too many of these could indicate a waste of buffers on the server. This counter is incremented once for each write: it counts writes, not packets.
309
Reads Denied/sec is the rate at which the server is unable to accommodate requests for Raw Reads. When a read is much larger than the server's negotiated buffer size, the Redirector requests a Raw Read which, if granted, would permit the transfer of the data without lots of protocol overhead on each packet. To accomplish this the server must lock out other requests, so the request is denied if the server is really busy.
311
Writes Denied/sec is the rate at which the server is unable to accommodate requests for Raw Writes. When a write is much larger than the server's negotiated buffer size, the Redirector requests a Raw Write which, if granted, would permit the transfer of the data without lots of protocol overhead on each packet. To accomplish this the server must lock out other requests, so the request is denied if the server is really busy.
313
Network Errors/sec is the rate at which serious unexpected errors are occurring. Such errors generally indicate that the Redirector and one or more Servers are having serious communication difficulties. For example an SMB (Server Manager Block) protocol error is a Network Error. An entry is written to the System Event Log and provide details.
315
Server Sessions counts the total number of security objects the Redirector has managed. For example, a logon to a server followed by a network access to the same server will establish one connection, but two sessions.
317
Server Reconnects counts the number of times your Redirector has had to reconnect to a server in order to complete a new active request. You can be disconnected by the Server if you remain inactive for too long. Locally even if all your remote files are closed, the Redirector will keep your connections intact for (nominally) ten minutes. Such inactive connections are called Dormant Connections. Reconnecting is expensive in time.
319
Connects Core counts the number of connections you have to servers running the original MS-Net SMB protocol, including MS-Net itself and Xenix and VAX's.
321
Connects LAN Manager 2.0 counts connections to LAN Manager 2.0 servers, including LMX servers.
323
Connects LAN Manager 2.1 counts connections to LAN Manager 2.1 servers, including LMX servers.
325
Connects Windows NT counts the connections to Windows 2000 or earlier computers.
327
Server Disconnects counts the number of times a Server has disconnected your Redirector. See also Server Reconnects.
329
Server Sessions Hung counts the number of active sessions that are timed out and unable to proceed due to a lack of response from the remote server.
331
The Server performance object consists of counters that measure communication between the local computer and the network.
333
The number of bytes the server has received from the network. Indicates how busy the server is.
335
The number of bytes the server has sent on the network. Indicates how busy the server is.
337
Thread Wait Reason is only applicable when the thread is in the Wait state (see Thread State). It is 0 or 7 when the thread is waiting for the Executive, 1 or 8 for a Free Page, 2 or 9 for a Page In, 3 or 10 for a Pool Allocation, 4 or 11 for an Execution Delay, 5 or 12 for a Suspended condition, 6 or 13 for a User Request, 14 for an Event Pair High, 15 for an Event Pair Low, 16 for an LPC Receive, 17 for an LPC Reply, 18 for Virtual Memory, 19 for a Page Out; 20 and higher are not assigned at the time of this writing. Event Pairs are used to communicate with protected subsystems (see Context Switches).
339
% DPC Time is the percentage of time that the processor spent receiving and servicing deferred procedure calls (DPCs) during the sample interval. DPCs are interrupts that run at a lower priority than standard interrupts. % DPC Time is a component of % Privileged Time because DPCs are executed in privileged mode. They are counted separately and are not a component of the interrupt counters. This counter displays the average busy time as a percentage of the sample time.
341
The number of sessions that have been closed due to their idle time exceeding the AutoDisconnect parameter for the server. Shows whether the AutoDisconnect setting is helping to conserve resources.
343
The number of sessions that have been closed due to unexpected error conditions or sessions that have reached the autodisconnect timeout and have been disconnected normally.
345
The number of sessions that have terminated normally. Useful in interpreting the Sessions Times Out and Sessions Errored Out statistics--allows percentage calculations.
347
The number of sessions that have been forced to logoff. Can indicate how many sessions were forced to logoff due to logon time constraints.
349
The number of failed logon attempts to the server. Can indicate whether password guessing programs are being used to crack the security on the server.
351
The number of times opens on behalf of clients have failed with STATUS_ACCESS_DENIED. Can indicate whether somebody is randomly attempting to access files in hopes of getting at something that was not properly protected.
353
The number of times accesses to files opened successfully were denied. Can indicate attempts to access files without proper access authorization.
355
The number of times an internal Server Error was detected. Unexpected errors usually indicate a problem with the Server.
357
The number of times the server has rejected blocking SMBs due to insufficient count of free work items. Indicates whether the MaxWorkItem or MinFreeWorkItems server parameters might need to be adjusted.
359
The number of times STATUS_DATA_NOT_ACCEPTED was returned at receive indication time. This occurs when no work item is available or can be allocated to service the incoming request. Indicates whether the InitWorkItems or MaxWorkItems parameters might need to be adjusted.
361
The number of successful open attempts performed by the server of behalf of clients. Useful in determining the amount of file I/O, determining overhead for path-based operations, and for determining the effectiveness of open locks.
363
The number of files currently opened in the server. Indicates current server activity.
365
The number of sessions currently active in the server. Indicates current server activity.
367
The number of searches for files currently active in the server. Indicates current server activity.
369
The number of bytes of non-pageable computer memory the server is using. This value is useful for determining the values of the MaxNonpagedMemoryUsage value entry in the Windows NT Registry.
371
The number of times allocations from nonpaged pool have failed. Indicates that the computer's physical memory is too small.
373
The maximum number of bytes of nonpaged pool the server has had in use at any one point. Indicates how much physical memory the computer should have.
375
The number of bytes of pageable computer memory the server is currently using. Can help in determining good values for the MaxPagedMemoryUsage parameter.
377
The number of times allocations from paged pool have failed. Indicates that the computer's physical memory or paging file are too small.
379
The maximum number of bytes of paged pool the server has had allocated. Indicates the proper sizes of the Page File(s) and physical memory.
381
Server Announce Allocations Failed/sec is the rate at which server (or domain) announcements have failed due to lack of memory.
383
Mailslot Allocations Failed is the number of times the datagram receiver has failed to allocate a buffer to hold a user mailslot write.
385
Mailslot Receives Failed indicates the number of mailslot messages that could not be received due to transport failures.
387
Mailslot Writes Failed is the total number of mailslot messages that have been successfully received, but that could not be written to the mailslot.
389
Bytes Total/sec is the rate the Redirector is processing data bytes. This includes all application and file data in addition to protocol information such as packet headers.
391
File Data Operations/sec is the rate at which the Redirector is processing data operations. One operation should include many bytes, since each operation has overhead. The efficiency of this path can be determined by dividing the Bytes/sec by this counter to obtain the average number of bytes transferred per operation.
393
Current Commands counter indicates the number of pending commands from the local computer to all destination servers. If the Current Commands counter shows a high number and the local computer is idle, this may indicate a network-related problem or a redirector bottleneck on the local computer.
395
The number of bytes the server has sent to and received from the network. This value provides an overall indication of how busy the server is.
397
% Interrupt Time is the time the processor spends receiving and servicing hardware interrupts during sample intervals. This value is an indirect indicator of the activity of devices that generate interrupts, such as the system clock, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended during interrupts. Most system clocks interrupt the processor every 10 milliseconds, creating a background of interrupt activity. suspends normal thread execution during interrupts. This counter displays the average busy time as a percentage of the sample time.
399
The NWLink NetBIOS performance object consists of counters that monitor IPX transport rates and connections.
401
Packets/sec is the rate the Redirector is processing data packets. One packet includes (hopefully) many bytes. We say hopefully here because each packet has protocol overhead. You can determine the efficiency of this path by dividing the Bytes/sec by this counter to determine the average number of bytes transferred/packet. You can also divide this counter by Operations/sec to determine the average number of packets per operation, another measure of efficiency.
405
Context Blocks Queued per second is the rate at which work context blocks had to be placed on the server's FSP queue to await server action.
407
File Data Operations/ sec is the combined rate of read and write operations on all logical disks on the computer. This is the inverse of System: File Control Operations/sec. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
409
% Free Space is the percentage of total usable space on the selected logical disk drive that was free.
411
Free Megabytes displays the unallocated space, in megabytes, on the disk drive in megabytes. One megabyte is equal to 1,048,576 bytes.
413
Connections Open is the number of connections currently open for this protocol. This counter shows the current count only and does not accumulate over time.
415
Connections No Retries is the total count of connections that were successfully made on the first try. This number is an accumulator and shows a running total.
417
Connections With Retries is the total count of connections that were made after retrying the attempt. A retry occurs when the first connection attempt failed. This number is an accumulator and shows a running total.
419
Disconnects Local is the number of session disconnections that were initiated by the local computer. This number is an accumulator and shows a running total.
421
Disconnects Remote is the number of session disconnections that were initiated by the remote computer. This number is an accumulator and shows a running total.
423
Failures Link is the number of connections that were dropped due to a link failure. This number is an accumulator and shows a running total.
425
Failures Adapter is the number of connections that were dropped due to an adapter failure. This number is an accumulator and shows a running total.
427
Connection Session Timeouts is the number of connections that were dropped due to a session timeout. This number is an accumulator and shows a running total.
429
Connections Canceled is the number of connections that were canceled. This number is an accumulator and shows a running total.
431
Failures Resource Remote is the number of connections that failed because of resource problems or shortages on the remote computer. This number is an accumulator and shows a running total.
433
Failures Resource Local is the number of connections that failed because of resource problems or shortages on the local computer. This number is an accumulator and shows a running total.
435
Failures Not Found is the number of connection attempts that failed because the remote computer could not be found. This number is an accumulator and shows a running total.
437
Failures No Listen is the number of connections that were rejected because the remote computer was not listening for connection requests.
439
Datagrams/sec is the rate at which datagrams are processed by the computer. This counter displays the sum of datagrams sent and datagrams received. A datagram is a connectionless packet whose delivery to a remote is not guaranteed.
441
Datagram Bytes/sec is the rate at which datagram bytes are processed by the computer. This counter is the sum of datagram bytes that are sent as well as received. A datagram is a connectionless packet whose delivery to a remote is not guaranteed.
443
Datagrams Sent/sec is the rate at which datagrams are sent from the computer. A datagram is a connectionless packet whose delivery to a remote computer is not guaranteed.
445
Datagram Bytes Sent/sec is the rate at which datagram bytes are sent from the computer. A datagram is a connectionless packet whose delivery to a remote computer is not guaranteed.
447
Datagrams Received/sec is the rate at which datagrams are received by the computer. A datagram is a connectionless packet whose delivery to a remote computer is not guaranteed.
449
Datagram Bytes Received/sec is the rate at which datagram bytes are received by the computer. A datagram is a connectionless packet whose delivery to a remote computer is not guaranteed.
451
Packets/sec is the rate at which packets are processed by the computer. This count is the sum of Packets Sent and Packets Received per second. This counter includes all packets processed: control as well as data packets.
453
Packets Sent/sec is the rate at which packets are sent by the computer. This counter counts all packets sent by the computer, i.e. control as well as data packets.
455
Packets Received/sec is the rate at which packets are received by the computer. This counter counts all packets processed: control as well as data packets.
457
Frames/sec is the rate at which data frames (or packets) are processed by the computer. This counter is the sum of data frames sent and data frames received. This counter only counts those frames (packets) that carry data.
459
Frame Bytes/sec is the rate at which data bytes are processed by the computer. This counter is the sum of data frame bytes sent and received. This counter only counts the byte in frames (packets) that carry data.
461
Frames Sent/sec is the rate at which data frames are sent by the computer. This counter only counts the frames (packets) that carry data.
463
Frame Bytes Sent/sec is the rate at which data bytes are sent by the computer. This counter only counts the bytes in frames (packets) that carry data.
465
Frames Received/sec is the rate at which data frames are received by the computer. This counter only counts the frames (packets) that carry data.
467
Frame Bytes Received/sec is the rate at which data bytes are received by the computer. This counter only counts the frames (packets) that carry data.
469
Frames Re-Sent/sec is the rate at which data frames (packets) are re-sent by the computer. This counter only counts the frames or packets that carry data.
471
Frame Bytes Re-Sent/sec is the rate at which data bytes are re-sent by the computer. This counter only counts the bytes in frames that carry data.
473
Frames Rejected/sec is the rate at which data frames are rejected. This counter only counts the frames (packets) that carry data.
475
Frame Bytes Rejected/sec is the rate at which data bytes are rejected. This counter only counts the bytes in data frames (packets) that carry data.
477
Expirations Response is the count of T1 timer expirations.
479
Expirations Ack is the count of T2 timer expirations.
481
Window Send Maximum is the maximum number of bytes of data that will be sent before waiting for an acknowledgment from the remote computer.
483
Window Send Average is the running average number of data bytes that were sent before waiting for an acknowledgment from the remote computer.
485
Piggyback Ack Queued/sec is the rate at which piggybacked acknowledgments are queued. Piggyback acknowledgments are acknowledgments to received packets that are to be included in the next outgoing packet to the remote computer.
487
Piggyback Ack Timeouts is the number of times that a piggyback acknowledgment could not be sent because there was no outgoing packet to the remote on which to piggyback. A piggyback ack is an acknowledgment to a received packet that is sent along in an outgoing data packet to the remote computer. If no outgoing packet is sent within the timeout period, then an ack packet is sent and this counter is incremented.
489
The NWLink IPX performance object consists of counters that measure datagram transmission to and from computers using the IPX protocol.
491
The NWLink SPX performance object consist of counters that measure data transmission and session connections for computers using the SPX protocol.
493
The NetBEUI performance object consists of counters that measure data transmission for network activity which conforms to the NetBIOS End User Interface standard.
495
The NetBEUI Resource performance object consists of counters that track the use of buffers by the NetBEUI protocol.
497
Used Maximum is the maximum number of NetBEUI resources (buffers) in use at any point in time. This value is useful in sizing the maximum resources provided. The number in parentheses following the resource name is used to identify the resource in Event Log messages.
499
Used Average is the current number of resources (buffers) in use at this time. The number in parentheses following the resource name is used to identify the resource in Event Log messages.
501
Times Exhausted is the number of times all the resources (buffers) were in use. The number in parentheses following the resource name is used to identify the resource in Event Log messages.
503
The NBT Connection performance object consists of counters that measure the rates at which bytes are sent and received over the NBT connection between the local computer and a remote computer. The connection is identified by the name of the remote computer.
505
Bytes Received/sec is the rate at which bytes are received by the local computer over an NBT connection to some remote computer. All the bytes received by the local computer over the particular NBT connection are counted.
507
Bytes Sent/sec is the rate at which bytes are sent by the local computer over an NBT connection to some remote computer. All the bytes sent by the local computer over the particular NBT connection are counted.
509
Bytes Total/sec is the rate at which bytes are sent or received by the local computer over an NBT connection to some remote computer. All the bytes sent or received by the local computer over the particular NBT connection are counted.
511
The Network Interface performance object consists of counters that measure the rates at which bytes and packets are sent and received over a TCP/IP network connection. It includes counters that monitor connection errors.
513
Bytes Total/sec is the rate at which bytes are sent and received over each network adapter, including framing characters. Network Interface\Bytes Total/sec is a sum of Network Interface\Bytes Received/sec and Network Interface\Bytes Sent/sec.
515
Packets/sec is the rate at which packets are sent and received on the network interface.
517
Packets Received/sec is the rate at which packets are received on the network interface.
519
Packets Sent/sec is the rate at which packets are sent on the network interface.
521
Current Bandwidth is an estimate of the current bandwidth of the network interface in bits per second (BPS). For interfaces that do not vary in bandwidth or for those where no accurate estimation can be made, this value is the nominal bandwidth.
523
Bytes Received/sec is the rate at which bytes are received over each network adapter, including framing characters. Network Interface\Bytes Received/sec is a subset of Network Interface\Bytes Total/sec.
525
Packets Received Unicast/sec is the rate at which (subnet) unicast packets are delivered to a higher-layer protocol.
527
Packets Received Non-Unicast/sec is the rate at which non-unicast (subnet broadcast or subnet multicast) packets are delivered to a higher-layer protocol.
529
Packets Received Discarded is the number of inbound packets that were chosen to be discarded even though no errors had been detected to prevent their delivery to a higher-layer protocol. One possible reason for discarding packets could be to free up buffer space.
531
Packets Received Errors is the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.
533
Packets Received Unknown is the number of packets received through the interface that were discarded because of an unknown or unsupported protocol.
535
Bytes Sent/sec is the rate at which bytes are sent over each network adapter, including framing characters. Network Interface\Bytes Sent/sec is a subset of Network Interface\Bytes Total/sec.
537
Packets Sent Unicast/sec is the rate at which packets are requested to be transmitted to subnet-unicast addresses by higher-level protocols. The rate includes the packets that were discarded or not sent.
539
Packets Sent Non-Unicast/sec is the rate at which packets are requested to be transmitted to non-unicast (subnet broadcast or subnet multicast) addresses by higher-level protocols. The rate includes the packets that were discarded or not sent.
541
Packets Outbound Discarded is the number of outbound packets that were chosen to be discarded even though no errors had been detected to prevent transmission. One possible reason for discarding packets could be to free up buffer space.
543
Packets Outbound Errors is the number of outbound packets that could not be transmitted because of errors.
545
Output Queue Length is the length of the output packet queue (in packets). If this is longer than two, there are delays and the bottleneck should be found and eliminated, if possible. Since the requests are queued by the Network Driver Interface Specification (NDIS) in this implementation, this will always be 0.
547
The IP performance object consists of counters that measure the rates at which IP datagrams are sent and received by using IP protocols. It also includes counters that monitor IP protocol errors.
549
Datagrams/sec is the rate, in incidents per second, at which IP datagrams were received from or sent to the interfaces, including those in error. Forwarded datagrams are not included in this rate.
551
Datagrams Received/sec is the rate, in incidents per second, at which IP datagrams are received from the interfaces, including those in error. Datagrams Received/sec is a subset of Datagrams/sec.
553
Datagrams Received Header Errors is the number of input datagrams that were discarded due to errors in the IP headers, including bad checksums, version number mismatch, other format errors, time-to-live exceeded, errors discovered in processing their IP options, etc.
555
Datagrams Received Address Errors is the number of input datagrams that were discarded because the IP address in their IP header destination field was not valid for the computer. This count includes invalid addresses (for example, 0.0. 0.0) and addresses of unsupported Classes (for example, Class E). For entities that are not IP gateways and do not forward datagrams, this counter includes datagrams that were discarded because the destination address was not a local address.
557
Datagrams Forwarded/sec is the rate, in incidents per second, at which attemps were made to find routes to forward input datagrams their final destination, because the local server was not the final IP destination. In servers that do not act as IP Gateways, this rate includes only packets that were source-routed via this entity, where the source-route option processing was successful.
559
Datagrams Received Unknown Protocol is the number of locally-addressed datagrams that were successfully received but were discarded because of an unknown or unsupported protocol.
561
Datagrams Received Discarded is the number of input IP datagrams that were discarded even though problems prevented their continued processing (for example, lack of buffer space). This counter does not include any datagrams discarded while awaiting re-assembly.
563
Datagrams Received Delivered/sec is the rate, in incidents per second, at which input datagrams were successfully delivered to IP user-protocols, including Internet Control Message Protocol (ICMP).
565
Datagrams Sent/sec is the rate, in incidents per second, at which IP datagrams were supplied for transmission by local IP user-protocols (including ICMP). This counter does not include any datagrams counted in Datagrams Forwarded/sec. Datagrams Sent/sec is a subset of Datagrams/sec.
567
Datagrams Outbound Discarded is the number of output IP datagrams that were discarded even though no problems were encountered to prevent their transmission to their destination (for example, lack of buffer space). This counter includes datagrams counted in Datagrams Forwarded/sec that meet this criterion.
569
Datagrams Outbound No Route is the number of IP datagrams that were discarded because no route could be found to transmit them to their destination. This counter includes any packets counted in Datagrams Forwarded/sec that meet this `no route' criterion.
571
Fragments Received/sec is the rate, in incidents per second, at which IP fragments that need to be reassembled at this entity are received.
573
Fragments Re-assembled/sec is the rate, in incidents per second, at which IP fragments were successfully reassembled.
575
Fragment Re-assembly Failures is the number of failures detected by the IP reassembly algorithm, such as time outs, errors, etc. This is not necessarily a count of discarded IP fragments since some algorithms (notably RFC 815) lose track of the number of fragments by combining them as they are received.
577
Fragmented Datagrams/sec is the rate, in incidents per second, at which datagrams are successfully fragmented.
579
Fragmentation Failures is the number of IP datagrams that were discarded because they needed to be fragmented at but could not be (for example, because the `Don't Fragment' flag was set).
581
Fragments Created/sec is the rate, in incidents per second, at which IP datagram fragments were generated as a result of fragmentation.
583
The ICMP performance object consists of counters that measure the rates at which messages are sent and received by using ICMP protocols. It also includes counters that monitor ICMP protocol errors.
585
Messages/sec is the total rate, in incidents per second, at which ICMP messages were sent and received by the entity. The rate includes messages received or sent in error.
587
Messages Received/sec is the rate, in incidents per second at which ICMP messages were received. The rate includes messages received in error.
589
Messages Received Errors is the number of ICMP messages that the entity received but had errors, such as bad ICMP checksums, bad length, etc.
591
Received Destination Unreachable is the number of ICMP Destination Unreachable messages received.
593
Received Time Exceeded is the number of ICMP Time Exceeded messages received.
595
Received Parameter Problem is the number of ICMP Parameter Problem messages received.
597
Received Source Quench is the number of ICMP Source Quench messages received.
599
Received Redirect/sec is the rate, in incidents per second, at which ICMP Redirect messages were received.
601
Received Echo/sec is the rate, in incidents per second, at which ICMP Echo messages were received.
603
Received Echo Reply/sec is the rate, in incidents per second, at which ICMP Echo Reply messages were received.
605
Received Timestamp/sec is the rate, in incidents per second at which ICMP Timestamp Request messages were received.
607
Received Timestamp Reply/sec is the rate of ICMP Timestamp Reply messages received.
609
Received Address Mask is the number of ICMP Address Mask Request messages received.
611
Received Address Mask Reply is the number of ICMP Address Mask Reply messages received.
613
Messages Sent/sec is the rate, in incidents per second, at which the server attempted to send. The rate includes those messages sent in error.
615
Messages Outbound Errors is the number of ICMP messages that were not send due to problems within ICMP, such as lack of buffers. This value does not include errors discovered outside the ICMP layer, such as those recording the failure of IP to route the resultant datagram. In some implementations, none of the error types are included in the value of this counter.
617
Sent Destination Unreachable is the number of ICMP Destination Unreachable messages sent.
619
Sent Time Exceeded is the number of ICMP Time Exceeded messages sent.
621
Sent Parameter Problem is the number of ICMP Parameter Problem messages sent.
623
Sent Source Quench is the number of ICMP Source Quench messages sent.
625
Sent Redirect/sec is the rate, in incidents per second, at which ICMP Redirect messages were sent.
627
Sent Echo/sec is the rate of ICMP Echo messages sent.
629
Sent Echo Reply/sec is the rate, in incidents per second, at which ICMP Echo Reply messages were sent.
631
Sent Timestamp/sec is the rate, in incidents per second, at which ICMP Timestamp Request messages were sent.
633
Sent Timestamp Reply/sec is the rate, in incidents per second, at which ICMP Timestamp Reply messages were sent.
635
Sent Address Mask is the number of ICMP Address Mask Request messages sent.
637
Sent Address Mask Reply is the number of ICMP Address Mask Reply messages sent.
639
The TCP performance object consists of counters that measure the rates at which TCP Segments are sent and received by using the TCP protocol. It includes counters that monitor the number of TCP connections in each TCP connection state.
641
Segments/sec is the rate at which TCP segments are sent or received using the TCP protocol.
643
Connections Established is the number of TCP connections for which the current state is either ESTABLISHED or CLOSE-WAIT.
645
Connections Active is the number of times TCP connections have made a direct transition to the SYN-SENT state from the CLOSED state. In other words, it shows a number of connections which are initiated by the local computer. The value is a cumulative total.
647
Connections Passive is the number of times TCP connections have made a direct transition to the SYN-RCVD state from the LISTEN state. In other words, it shows a number of connections to the local computer, which are initiated by remote computers. The value is a cumulative total.
649
Connection Failures is the number of times TCP connections have made a direct transition to the CLOSED state from the SYN-SENT state or the SYN-RCVD state, plus the number of times TCP connections have made a direct transition to the LISTEN state from the SYN-RCVD state.
651
Connections Reset is the number of times TCP connections have made a direct transition to the CLOSED state from either the ESTABLISHED state or the CLOSE-WAIT state.
653
Segments Received/sec is the rate at which segments are received, including those received in error. This count includes segments received on currently established connections.
655
Segments Sent/sec is the rate at which segments are sent, including those on current connections, but excluding those containing only retransmitted bytes.
657
Segments Retransmitted/sec is the rate at which segments are retransmitted, that is, segments transmitted containing one or more previously transmitted bytes.
659
The UDP performance object consists of counters that measure the rates at which UDP datagrams are sent and received by using the UDP protocol. It includes counters that monitor UDP protocol errors.
661
Datagrams/sec is the rate at which UDP datagrams are sent or received by the entity.
663
Datagrams Received/sec is the rate at which UDP datagrams are delivered to UDP users.
665
Datagrams No Port/sec is the rate of received UDP datagrams for which there was no application at the destination port.
667
Datagrams Received Errors is the number of received UDP datagrams that could not be delivered for reasons other than the lack of an application at the destination port.
669
Datagrams Sent/sec is the rate at which UDP datagrams are sent from the entity.
671
Disk Storage device statistics from the foreign computer
673
The number of allocation failures reported by the disk storage device
675
System Up Time is the elapsed time (in seconds) that the computer has been running since it was last started. This counter displays the difference between the start time and the current time.
677
The current number of system handles in use.
679
Free System Page Table Entries is the number of page table entries not currently in used by the system. This counter displays the last observed value only; it is not an average.
681
The number of threads currently active in this process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes instructions. Every running process has at least one thread.
683
The current base priority of this process. Threads within a process can raise and lower their own base priority relative to the process' base priority.
685
The total elapsed time, in seconds, that this process has been running.
687
Alignment Fixups/sec is the rate, in incidents per seconds, at alignment faults were fixed by the system.
689
Exception Dispatches/sec is the rate, in incidents per second, at which exceptions were dispatched by the system.
691
Floating Emulations/sec is the rate of floating emulations performed by the system. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
693
Logon/sec is the rate of all server logons.
695
The current dynamic priority of this thread. The system can raise the thread's dynamic priority above the base priority if the thread is handling user input, or lower it towards the base priority if the thread becomes compute bound.
697
The current base priority of this thread. The system can raise the thread's dynamic priority above the base priority if the thread is handling user input, or lower it towards the base priority if the thread becomes compute bound.
699
The total elapsed time (in seconds) this thread has been running.
701
The Paging File performance object consists of counters that monitor the paging file(s) on the computer. The paging file is a reserved space on disk that backs up committed physical memory on the computer.
703
The amount of the Page File instance in use in percent. See also Process\\Page File Bytes.
705
The peak usage of the Page File instance in percent. See also Process\\Page File Bytes Peak.
707
Starting virtual address for this thread.
709
Current User Program Counter for this thread.
711
Mapped Space is virtual memory that has been mapped to a specific virtual address (or range of virtual addresses) in the process' virtual address space. No Access protection prevents a process from writing to or reading from these pages and will generate an access violation if either is attempted.
713
Mapped Space is virtual memory that has been mapped to a specific virtual address (or range of virtual addresses) in the process' virtual address space. Read Only protection prevents the contents of these pages from being modified. Any attempts to write or modify these pages will generate an access violation.
715
Mapped Space is virtual memory that has been mapped to a specific virtual address (or range of virtual addresses) in the process' virtual address space. Read/Write protection allows a process to read, modify and write to these pages.
717
Mapped Space is virtual memory that has been mapped to a specific virtual address (or range of virtual addresses) in the process' virtual address space. Write Copy protection is used when memory is shared for reading but not for writing. When processes are reading this memory, they can share the same memory, however, when a sharing process wants to have write access to this shared memory, a copy of that memory is made.
719
Mapped Space is virtual memory that has been mapped to a specific virtual address (or range of virtual addresses) in the process' virtual address space. Executable memory is memory that can be executed by programs, but cannot be read or written. This type of protection is not supported by all processor types.
721
Mapped Space is virtual memory that has been mapped to a specific virtual address (or range of virtual addresses) in the process' virtual address space. Execute/Read Only memory is memory that can be executed as well as read.
723
Mapped Space is virtual memory that has been mapped to a specific virtual address (or range of virtual addresses) in the process' virtual address space. Execute/Read/Write memory is memory that can be executed by programs as well as read and modified.
725
Mapped Space is virtual memory that has been mapped to a specific virtual address (or range of virtual addresses) in the process' virtual address space. Execute Write Copy is memory that can be executed by programs as well as read and written. This type of protection is used when memory needs to be shared between processes. If the sharing processes only read the memory, then they will all use the same memory. If a sharing process desires write access, then a copy of this memory will be made for that process.
727
Reserved Space is virtual memory that has been reserved for future use by a process, but has not been mapped or committed. No Access protection prevents a process from writing to or reading from these pages and will generate an access violation if either is attempted.
729
Reserved Space is virtual memory that has been reserved for future use by a process, but has not been mapped or committed. Read Only protection prevents the contents of these pages from being modified. Any attempts to write or modify these pages will generate an access violation.
731
Reserved Space is virtual memory that has been reserved for future use by a process, but has not been mapped or committed. Read/Write protection allows a process to read, modify and write to these pages.
733
Reserved Space is virtual memory that has been reserved for future use by a process, but has not been mapped or committed. Write Copy protection is used when memory is shared for reading but not for writing. When processes are reading this memory, they can share the same memory, however, when a sharing process wants to have read/write access to this shared memory, a copy of that memory is made.
735
Reserved Space is virtual memory that has been reserved for future use by a process, but has not been mapped or committed. Executable memory is memory that can be executed by programs, but cannot be read or written. This type of protection is not supported by all processor types.
737
Reserved Space is virtual memory that has been reserved for future use by a process, but has not been mapped or committed. Execute/Read Only memory is memory that can be executed as well as read.
739
Reserved Space is virtual memory that has been reserved for future use by a process, but has not been mapped or committed. Execute/Read/Write memory is memory that can be executed by programs as well as read and modified.
741
The Image performance object consists of counters that monitor the virtual address usage of images executed by processes on the computer.
743
Reserved Space is virtual memory that has been reserved for future use by a process, but has not been mapped or committed. Execute Write Copy is memory that can be executed by programs as well as read and written. This type of protection is used when memory needs to be shared between processes. If the sharing processes only read the memory, then they will all use the same memory. If a sharing process desires write access, then a copy of this memory will be made for that process.
745
Unassigned Space is mapped and committed virtual memory in use by the process that is not attributable to any particular image being executed by that process. No Access protection prevents a process from writing to or reading from these pages and will generate an access violation if either is attempted.
747
Unassigned Space is mapped and committed virtual memory in use by the process that is not attributable to any particular image being executed by that process. Read Only protection prevents the contents of these pages from being modified. Any attempts to write or modify these pages will generate an access violation.
749
Unassigned Space is mapped and committed virtual memory in use by the process that is not attributable to any particular image being executed by that process. Read/Write protection allows a process to read, modify and write to these pages.
751
Unassigned Space is mapped and committed virtual memory in use by the process that is not attributable to any particular image being executed by that process. Write Copy protection is used when memory is shared for reading but not for writing. When processes are reading this memory, they can share the same memory, however, when a sharing process wants to have read/write access to this shared memory, a copy of that memory is made for writing to.
753
Unassigned Space is mapped and committed virtual memory in use by the process that is not attributable to any particular image being executed by that process. Executable memory is memory that can be executed by programs, but cannot be read or written. This type of protection is not supported by all processor types.
755
Unassigned Space is mapped and committed virtual memory in use by the process that is not attributable to any particular image being executed by that process. Execute/Read Only memory is memory that can be executed as well as read.
757
Unassigned Space is mapped and committed virtual memory in use by the process that is not attributable to any particular image being executed by that process. Execute/Read/Write memory is memory that can be executed by programs as well as read and written.
759
Unassigned Space is mapped and committed virtual memory in use by the process that is not attributable to any particular image being executed by that process. Execute Write Copy is memory that can be executed by programs as well as read and written. This type of protection is used when memory needs to be shared between processes. If the sharing processes only read the memory, then they will all use the same memory. If a sharing process desires write access, then a copy of this memory will be made for that process.
761
Image Space is the virtual address space in use by the images being executed by the process. This is the sum of all the address space with this protection allocated by images run by the selected process No Access protection prevents a process from writing to or reading from these pages and will generate an access violation if either is attempted.
763
Image Space is the virtual address space in use by the images being executed by the process. This is the sum of all the address space with this protection allocated by images run by the selected process Read Only protection prevents the contents of these pages from being modified. Any attempts to write or modify these pages will generate an access violation.
765
Image Space is the virtual address space in use by the images being executed by the process. This is the sum of all the address space with this protection allocated by images run by the selected process Read/Write protection allows a process to read, modify and write to these pages.
767
Image Space is the virtual address space in use by the images being executed by the process. This is the sum of all the address space with this protection allocated by images run by the selected process Write Copy protection is used when memory is shared for reading but not for writing. When processes are reading this memory, they can share the same memory, however, when a sharing process wants to have read/write access to this shared memory, a copy of that memory is made for writing to.
769
Image Space is the virtual address space in use by the images being executed by the process. This is the sum of all the address space with this protection allocated by images run by the selected process Executable memory is memory that can be executed by programs, but cannot be read or written. This type of protection is not supported by all processor types.
771
Image Space is the virtual address space in use by the images being executed by the process. This is the sum of all the address space with this protection allocated by images run by the selected process Execute/Read-Only memory is memory that can be executed as well as read.
773
Image Space is the virtual address space in use by the images being executed by the process. This is the sum of all the address space with this protection allocated by images run by the selected process Execute/Read/Write memory is memory that can be executed by programs as well as read and written and modified.
775
Image Space is the virtual address space in use by the images being executed by the process. This is the sum of all the address space with this protection allocated by images run by the selected process Execute Write Copy is memory that can be executed by programs as well as read and written. This type of protection is used when memory needs to be shared between processes. If the sharing processes only read the memory, then they will all use the same memory. If a sharing process desires write access, then a copy of this memory will be made for that process.
777
Bytes Image Reserved is the sum of all virtual memory reserved by images within this process.
779
Bytes Image Free is the amount of virtual address space that is not in use or reserved by images within this process.
781
Bytes Reserved is the total amount of virtual memory reserved for future use by this process.
783
Bytes Free is the total unused virtual address space of this process.
785
ID Process is the unique identifier of this process. ID Process numbers are reused, so they only identify a process for the lifetime of that process.
787
The Process Address Space performance object consists of counters that monitor memory allocation and use for a selected process.
789
Image Space is the virtual address space in use by the selected image with this protection. No Access protection prevents a process from writing or reading these pages and will generate an access violation if either is attempted.
791
Image Space is the virtual address space in use by the selected image with this protection. Read Only protection prevents the contents of these pages from being modified. Any attempts to write or modify these pages will generate an access violation.
793
Image Space is the virtual address space in use by the selected image with this protection. Read/Write protection allows a process to read, modify and write to these pages.
795
Image Space is the virtual address space in use by the selected image with this protection. Write Copy protection is used when memory is shared for reading but not for writing. When processes are reading this memory, they can share the same memory, however, when a sharing process wants to have read/write access to this shared memory, a copy of that memory is made for writing to.
797
Image Space is the virtual address space in use by the selected image with this protection. Executable memory is memory that can be executed by programs, but cannot be read or written. This type of protection is not supported by all processor types.
799
Image Space is the virtual address space in use by the selected image with this protection. Execute/Read Only memory is memory that can be executed as well as read.
801
Image Space is the virtual address space in use by the selected image with this protection. Execute/Read/Write memory is memory that can be executed by programs as well as read and written.
803
Image Space is the virtual address space in use by the selected image with this protection. Execute Write Copy is memory that can be executed by programs as well as read and written. This type of protection is used when memory needs to be shared between processes. If the sharing processes only read the memory, then they will all use the same memory. If a sharing process desires write access, then a copy of this memory will be made for that process.
805
ID Thread is the unique identifier of this thread. ID Thread numbers are reused, so they only identify a thread for the lifetime of that thread.
807
Mailslot Opens Failed/sec indicates the rate at which mailslot messages to be delivered to mailslots that are not present are received by this workstation.
809
Duplicate Master Announcements indicates the number of times that the master browser has detected another master browser on the same domain.
811
Illegal Datagrams/sec is the rate at which incorrectly formatted datagrams have been received by the workstation.
813
Announcements Total/sec is the sum of Announcements Server/sec and Announcements Domain/sec.
815
Enumerations Total/sec is the rate at which browse requests have been processed by this workstation. This is the sum of Enumerations Server/sec, Enumerations Domain/sec, and Enumerations Other/sec.
817
The Thread Details performance object consists of counters that measure aspects of thread behavior that are difficult or time-consuming or collect. These counters are distinguished from those in the Thread object by their high overhead.
819
Cache Bytes is the sum of the Memory\\System Cache Resident Bytes, Memory\\System Driver Resident Bytes, Memory\\System Code Resident Bytes, and Memory\\Pool Paged Resident Bytes counters. This counter displays the last observed value only; it is not an average.
821
Cache Bytes Peak is the maximum number of bytes used by the file system cache since the system was last restarted. This might be larger than the current size of the cache. This counter displays the last observed value only; it is not an average.
823
Pages Input/sec is the rate at which pages are read from disk to resolve hard page faults. Hard page faults occur when a process refers to a page in virtual memory that is not in its working set or elsewhere in physical memory, and must be retrieved from disk. When a page is faulted, the system tries to read multiple contiguous pages into memory to maximize the benefit of the read operation. Compare the value of Memory\\Pages Input/sec to the value of Memory\\Page Reads/sec to determine the average number of pages read into memory during each read operation.
825
Transition Pages RePurposed is the rate at which the number of transition cache pages were reused for a different purpose. These pages would have otherwise remained in the page cache to provide a (fast) soft fault (instead of retrieving it from backing store) in the event the page was accessed in the future. Note these pages can contain private or sharable memory.
873
The number of bytes transmitted total for this connection.
875
The number of bytes received total for this connection.
877
The number of data frames transmitted total for this connection.
879
The number of data frames received total for this connection.
881
The compression ratio for bytes being transmitted.
883
The compression ratio for bytes being received.
885
The total number of CRC Errors for this connection. CRC Errors occur when the frame received contains erroneous data.
887
The total number of Timeout Errors for this connection. Timeout Errors occur when an expected is not received in time.
889
The total number of Serial Overrun Errors for this connection. Serial Overrun Errors occur when the hardware cannot handle the rate at which data is received.
891
The total number of Alignment Errors for this connection. Alignment Errors occur when a byte received is different from the byte expected.
893
The total number of Buffer Overrun Errors for this connection. Buffer Overrun Errors when the software cannot handle the rate at which data is received.
895
The total number of CRC, Timeout, Serial Overrun, Alignment, and Buffer Overrun Errors for this connection.
897
The number of bytes transmitted per second.
899
The number of bytes received per second.
901
The number of frames transmitted per second.
903
The number of frames received per second.
905
The total number of CRC, Timeout, Serial Overrun, Alignment, and Buffer Overrun Errors per second.
909
The total number of Remote Access connections.
921
The WINS Server performance object consists of counters that monitor communications using the WINS Server service.
923
Unique Registrations/sec is the rate at which unique registration are received by the WINS server.
925
Group Registrations/sec is the rate at which group registration are received by the WINS server.
927
Total Number of Registrations/sec is the sum of the Unique and Group registrations per sec. This is the total rate at which registration are received by the WINS server.
929
Unique Renewals/sec is the rate at which unique renewals are received by the WINS server.
931
Group Renewals/sec is the rate at which group renewals are received by the WINS server.
933
Total Number of Renewals/sec is the sum of the Unique and Group renewals per sec. This is the total rate at which renewals are received by the WINS server.
935
Total Number of Releases/sec is the rate at which releases are received by the WINS server.
937
Total Number of Queries/sec is the rate at which queries are received by the WINS server.
939
Unique Conflicts/sec is the rate at which unique registrations/renewals received by the WINS server resulted in conflicts with records in the database.
941
Group Conflicts/sec is the rate at which group registration received by the WINS server resulted in conflicts with records in the database.
943
Total Number of Conflicts/sec is the sum of the Unique and Group conflicts per sec. This is the total rate at which conflicts were seen by the WINS server.
945
Total Number of Successful Releases/sec
947
Total Number of Failed Releases/sec
949
Total Number of Successful Queries/sec
951
Total Number of Failed Queries/sec
953
The total number of handles currently open by this process. This number is equal to the sum of the handles currently open by each thread in this process.
1001
Services for Macintosh AFP File Server.
1003
The maximum amount of paged memory resources used by the MacFile Server.
1005
The current amount of paged memory resources used by the MacFile Server.
1007
The maximum amount of nonpaged memory resources use by the MacFile Server.
1009
The current amount of nonpaged memory resources used by the MacFile Server.
1011
The number of sessions currently connected to the MacFile server. Indicates current server activity.
1013
The maximum number of sessions connected at one time to the MacFile server. Indicates usage level of server.
1015
The number of internal files currently open in the MacFile server. This count does not include files opened on behalf of Macintosh clients.
1017
The maximum number of internal files open at one time in the MacFile server. This count does not include files opened on behalf of Macintosh clients.
1019
The number of failed logon attempts to the MacFile server. Can indicate whether password guessing programs are being used to crack the security on the server.
1021
The number of bytes read from disk per second.
1023
The number of bytes written to disk per second.
1025
The number of bytes received from the network per second. Indicates how busy the server is.
1027
The number of bytes sent on the network per second. Indicates how busy the server is.
1029
The number of outstanding work items waiting to be processed.
1031
The maximum number of outstanding work items waiting at one time.
1033
The current number of threads used by MacFile server. Indicates how busy the server is.
1035
The maximum number of threads used by MacFile server. Indicates peak usage level of server.
1051
AppleTalk Protocol
1053
Number of packets received per second by Appletalk on this port.
1055
Number of packets sent per second by Appletalk on this port.
1057
Number of bytes received per second by Appletalk on this port.
1059
Number of bytes sent per second by Appletalk on this port.
1061
Average time in milliseconds to process a DDP packet on this port.
1063
Number of DDP packets per second received by Appletalk on this port.
1065
Average time in milliseconds to process an AARP packet on this port.
1067
Number of AARP packets per second received by Appletalk on this port.
1069
Average time in milliseconds to process an ATP packet on this port.
1071
Number of ATP packets per second received by Appletalk on this port.
1073
Average time in milliseconds to process an NBP packet on this port.
1075
Number of NBP packets per second received by Appletalk on this port.
1077
Average time in milliseconds to process a ZIP packet on this port.
1079
Number of ZIP packets per second received by Appletalk on this port.
1081
Average time in milliseconds to process an RTMP packet on this port.
1083
Number of RTMP packets per second received by Appletalk on this port.
1085
Number of ATP requests retransmitted on this port.
1087
Number of ATP release timers that have expired on this port.
1089
Number of ATP Exactly-once transaction responses per second on this port.
1091
Number of ATP At-least-once transaction responses per second on this port.
1093
Number of ATP transaction release packets per second received on this port.
1095
The current amount of nonpaged memory resources used by AppleTalk.
1097
Number of packets routed in on this port.
1099
Number of packets dropped due to resource limitations on this port.
1101
Number of ATP requests retransmitted to this port.
1103
Number of packets routed out on this port.
1111
Provides Network Statistics for the local network segment via the Network Monitor Service.
1113
The total number of frames received per second on this network segment.
1115
The number of bytes received per second on this network segment.
1117
The number of Broadcast frames received per second on this network segment.
1119
The number of Multicast frames received per second on this network segment.
1121
Percentage of network bandwidth in use on this network segment.
1125
Percentage of network bandwidth which is made up of broadcast traffic on this network segment.
1127
Percentage of network bandwidth which is made up of multicast traffic on this network segment.
1151
The Telephony System
1153
The number of telephone lines serviced by this computer.
1155
The number of telephone devices serviced by this computer.
1157
The number of telephone lines serviced by this computer that are currently active.
1159
The number of telephone devices that are currently being monitored.
1161
The rate of outgoing calls made by this computer.
1163
The rate of incoming calls answered by this computer.
1165
The number of applications that are currently using telephony services.
1167
Current outgoing calls being serviced by this computer.
1169
Current incoming calls being serviced by this computer.
1233
Packet Burst Read NCP Count/sec is the rate of NetWare Core Protocol requests for Packet Burst Read. Packet Burst is a windowing protocol that improves performance.
1235
Packet Burst Read Timeouts/sec is the rate the NetWare Service needs to retransmit a Burst Read Request because the NetWare server took too long to respond.
1237
Packet Burst Write NCP Count/sec is the rate of NetWare Core Protocol requests for Packet Burst Write. Packet Burst is a windowing protocol that improves performance.
1239
Packet Burst Write Timeouts/sec is the rate the NetWare Service needs to retransmit a Burst Write Request because the NetWare server took too long to respond.
1241
Packet Burst IO/sec is the sum of Packet Burst Read NCPs/sec and Packet Burst Write NCPs/sec.
1261
Logon Total includes all interactive logons, network logons, service logons, successful logon, and failed logons since the machine is last rebooted.
1263
The number of durable handles, it indicates how many durable handles keep alive ever when SMB2 sessions are disconnected.
1265
The number of reconnected durable handles, the ratio of "reconnected durable handles"/"total durable handles" indicates how much performance gain from reconnect durable handles.
1267
The number of SMB BranchCache hash requests that were for the header only received by the server. This indicates how many requests are being done to validate hashes that are already cached by the client.
1269
The number of SMB BranchCache hash generation requests that were sent by SRV2 to the SMB Hash Generation service because a client requested hashes for the file and there was either no hash content for the file or the existing hashes were out of date.
1271
The number of SMB BranchCache hash requests that were received by the server.
1273
The number of SMB BranchCache hash responses that have been sent from the server.
1275
The amount of SMB BranchCache hash data sent from the server. This includes bytes transferred for both hash header requests and full hash data requests.
1277
The number of resilient handles, it indicates how many resilient handles keep alive ever when SMB2 sessions are disconnected.
1279
The number of reconnected resilient handles, the ratio of "reconnected resilient handles"/"total resilient handles" indicates how much performance gain from reconnect resilient handles.
1301
The Server Work Queues performance object consists of counters that monitor the length of the queues and objects in the queues.
1303
Queue Length is the current length of the server work queue for this CPU. A sustained queue length greater than four might indicate processor congestion. This is an instantaneous count, not an average over time.
1305
Active Threads is the number of threads currently working on a request from the server client for this CPU. The system keeps this number as low as possible to minimize unnecessary context switching. This is an instantaneous count for the CPU, not an average over time.
1307
Available Threads is the number of server threads on this CPU not currently working on requests from a client. The server dynamically adjusts the number of threads to maximize server performance.
1309
Every request from a client is represented in the server as a 'work item,' and the server maintains a pool of available work items per CPU to speed processing. This is the instantaneous number of available work items for this CPU. A sustained near-zero value indicates the need to increase the MinFreeWorkItems registry value for the Server service. This value will always be 0 in the Blocking Queue instance.
1311
Every request from a client is represented in the server as a 'work item,' and the server maintains a pool of available work items per CPU to speed processing. When a CPU runs out of work items, it borrows a free work item from another CPU. An increasing value of this running counter might indicate the need to increase the 'MaxWorkItems' or 'MinFreeWorkItems' registry values for the Server service. This value will always be 0 in the Blocking Queue instance.
1313
Every request from a client is represented in the server as a 'work item,' and the server maintains a pool of available work items per CPU to speed processing. A sustained value greater than zero indicates the need to increase the 'MaxWorkItems' registry value for the Server service. This value will always be 0 in the Blocking Queue instance.
1315
Current Clients is the instantaneous count of the clients being serviced by this CPU. The server actively balances the client load across all of the CPU's in the system. This value will always be 0 in the Blocking Queue instance.
1317
The rate at which the Server is receiving bytes from the network clients on this CPU. This value is a measure of how busy the Server is.
1319
The rate at which the Server is sending bytes to the network clients on this CPU. This value is a measure of how busy the Server is.
1321
The rate at which the Server is sending and receiving bytes with the network clients on this CPU. This value is a measure of how busy the Server is.
1323
Read Operations/sec is the rate the server is performing file read operations for the clients on this CPU. This value is a measure of how busy the Server is. This value will always be 0 in the Blocking Queue instance.
1325
Read Bytes/sec is the rate the server is reading data from files for the clients on this CPU. This value is a measure of how busy the Server is.
1327
Write Operations/sec is the rate the server is performing file write operations for the clients on this CPU. This value is a measure of how busy the Server is. This value will always be 0 in the Blocking Queue instance.
1329
Write Bytes/sec is the rate the server is writing data to files for the clients on this CPU. This value is a measure of how busy the Server is.
1331
Total Bytes/sec is the rate the Server is reading and writing data to and from the files for the clients on this CPU. This value is a measure of how busy the Server is.
1333
Total Operations/sec is the rate the Server is performing file read and file write operations for the clients on this CPU. This value is a measure of how busy the Server is. This value will always be 0 in the Blocking Queue instance.
1335
DPCs Queued/sec is the average rate, in incidents per second, at which deferred procedure calls (DPCs) were added to the processor's DPC queue. DPCs are interrupts that run at a lower priority than standard interrupts. Each processor has its own DPC queue. This counter measures the rate that DPCs are added to the queue, not the number of DPCs in the queue. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
1337
DPC Rate is the rate at which deferred procedure calls (DPCs) were added to the processors DPC queues between the timer ticks of the processor clock. DPCs are interrupts that run at alower priority than standard interrupts. Each processor has its own DPC queue. This counter measures the rate that DPCs were added to the queue, not the number of DPCs in the queue. This counter displays the last observed value only; it is not an average.
1343
Total DPCs Queued/sec is the combined rate at which deferred procedure calls (DPCs) are added to the DPC queue of all processors on the computer. (DPCs are interrupts that run at a lower priority than standard interrupts). Each processor has its own DPC queue. This counter measures the rate at which DPCs are added to the queue, not the number of DPCs in the queue. It is the sum of Processor: DPCs Queued/sec for all processors on the computer, divided by the number of processors. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval.
1345
Total DPC Rate is the combined rate at which deferred procedure calls (DPCs) are added to the DPC queues of all processors between timer ticks of each processor's system clock. (DPCs are interrupts that run at a lower priority than standard interrupts). Each processor has its own DPC queue. This counter measures the rate at which DPCs are added to the queue, not the number of DPCs in the queue. It is the sum of Processor: DPC Rate for all processors on the computer, divided by the number of processors. This counter displays the last observed value only; it is not an average.
1351
% Registry Quota In Use is the percentage of the Total Registry Quota Allowed that is currently being used by the system. This counter displays the current percentage value only; it is not an average.
1361
Counters that indicate the status of local and system Very Large memory allocations.
1363
VLM % Virtual Size In Use
1365
Current size of the process VLM Virtual memory space in bytes.
1367
The peak size of the process VLM virtual memory space in bytes. This value indicates the maximum size of the process VLM virtual memory since the process started.
1369
The current size of the process VLM virtual memory space in bytes that may be allocated. Note that the maximum allocation allowed may be smaller than this value due to fragmentation of the memory space.
1371
The current size of committed VLM memory space for the current process in bytes.
1373
The peak size of the committed VLM memory space in bytes for the current process since the process started.
1375
The current size of all committed VLM memory space in bytes for the system.
1377
The peak size of all committed VLM memory space in bytes since the system was started.
1379
The current size of all committed shared VLM memory space in bytes for the system.
1381
Available KBytes is the amount of physical memory, in Kilobytes, immediately available for allocation to a process or for system use. It is equal to the sum of memory assigned to the standby (cached), free and zero page lists. For a full explanation of the memory manager, refer to MSDN and/or the System Performance and Troubleshooting Guide chapter in the Windows Server 2003 Resource Kit.
1383
Available MBytes is the amount of physical memory, in Megabytes, immediately available for allocation to a process or for system use. It is equal to the sum of memory assigned to the standby (cached), free and zero page lists. For a full explanation of the memory manager, refer to MSDN and/or the System Performance and Troubleshooting Guide chapter in the Windows Server 2003 Resource Kit.
1401
Avg. Disk Queue Length is the average number of both read and write requests that were queued for the selected disk during the sample interval.
1403
Avg. Disk Read Queue Length is the average number of read requests that were queued for the selected disk during the sample interval.
1405
Avg. Disk Write Queue Length is the average number of write requests that were queued for the selected disk during the sample interval.
1407
% Committed Bytes In Use is the ratio of Memory\\Committed Bytes to the Memory\\Commit Limit. Committed memory is the physical memory in use for which space has been reserved in the paging file should it need to be written to disk. The commit limit is determined by the size of the paging file. If the paging file is enlarged, the commit limit increases, and the ratio is reduced). This counter displays the current percentage value only; it is not an average.
1409
The Full Image performance object consists of counters that monitor the virtual address usage of images executed by processes on the computer. Full Image counters are the same counters as contained in Image object with the only difference being the instance name. In the Full Image object, the instance name includes the full file path name of the loaded modules, while in the Image object only the filename is displayed.
1411
The Creating Process ID value is the Process ID of the process that created the process. The creating process may have terminated, so this value may no longer identify a running process.
1413
The rate at which the process is issuing read I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
1415
The rate at which the process is issuing write I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
1417
The rate at which the process is issuing read and write I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
1419
The rate at which the process is issuing I/O operations that are neither read nor write operations (for example, a control function). This counter counts all I/O activity generated by the process to include file, network and device I/Os.
1421
The rate at which the process is reading bytes from I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
1423
The rate at which the process is writing bytes to I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
1425
The rate at which the process is reading and writing bytes in I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
1427
The rate at which the process is issuing bytes to I/O operations that do not involve data such as control operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
1451
Displays performance statistics about a Print Queue.
1453
Total number of jobs printed on a print queue since the last restart.
1455
Number of bytes per second printed on a print queue.
1457
Total number of pages printed through GDI on a print queue since the last restart.
1459
Current number of jobs in a print queue.
1461
Current number of references (open handles) to this printer.
1463
Peak number of references (open handles) to this printer.
1465
Current number of spooling jobs in a print queue.
1467
Maximum number of spooling jobs in a print queue since last restart.
1469
Total number of out of paper errors in a print queue since the last restart.
1471
Total number of printer not ready errors in a print queue since the last restart.
1473
Total number of job errors in a print queue since last restart.
1475
Total number of calls from browse clients to this print server to request network browse lists since last restart.
1477
Total number of calls from other print servers to add shared network printers to this server since last restart.
1479
Working Set - Private displays the size of the working set, in bytes, that is use for this process only and not shared nor sharable by other processes.
1481
Working Set - Shared displays the size of the working set, in bytes, that is sharable and may be used by other processes. Because a portion of a process' working set is shareable, does not necessarily mean that other processes are using it.
1483
% Idle Time reports the percentage of time during the sample interval that the disk was idle.
1485
Split IO/Sec reports the rate at which I/Os to the disk were split into multiple I/Os. A split I/O may result from requesting data of a size that is too large to fit into a single I/O or that the disk is fragmented.
1501
Reports the accounting and processor usage data collected by each active named Job object.
1503
Current % Processor Time shows the percentage of the sample interval that the processes in the Job object spent executing code.
1505
Current % User mode Time shows the percentage of the sample interval that the processes in the Job object spent executing code in user mode.
1507
Current % Kernel mode Time shows the percentage of the sample interval that the processes in the Job object spent executing code in kernel or privileged mode.
1509
This Period mSec - Processor shows the time, in milliseconds, of processor time used by all the processes in the Job object, including those that have terminated or that are no longer associated with the Job object, since a time limit on the Job was established.
1511
This Period mSec - User mode shows the time, in milliseconds, of user mode processor time used by all the processes in the Job object, including those that have terminated or that are no longer associated with the Job object, since a time limit on the Job was established.
1513
This Period mSec - Kernel mode shows the time, in milliseconds, of kernel mode processor time used by all the processes in the Job object, including those that have terminated or that are no longer associated with the Job object, since a time limit on the Job was established.
1515
Pages/Sec shows the page fault rate of all the processes in the Job object.
1517
Process Count - Total shows the number of processes, both active and terminated, that are or have been associated with the Job object.
1519
Process Count - Active shows the number of processes that are currently associated with the Job object.
1521
Process Count - Terminated shows the number of processes that have been terminated because of a limit violation.
1523
Total mSec - Processor shows the time, in milliseconds, of processor time used by all the processes in the Job object, including those that have terminated or that are no longer associated with the Job object, since the Job object was created.
1525
Total mSec - User mode shows the time, in milliseconds, of user mode processor time used by all the processes in the Job object, including those that have terminated or that are no longer associated with the Job object, since the Job object was created.
1527
Total mSec - Kernel mode shows the time, in milliseconds, of kernel mode processor time used by all the processes in the Job object, including those that have terminated or that are no longer associated with the Job object, since the Job object was created.
1537
Received Packet Too Big is the number of received packets thatare larger than anticipated.
1539
Received Membership Query is the number of packets received thatquery their membership to a group.
1541
Received Membership Report is the number of packets received thatreport their membership to a group.
1543
Received Membership Reduction is the number of packets received thatcancelled their membership to a group.
1545
Received Router Solicit is the number of packets received thatsolicit the router.
1547
Received Router Advert is the number of packets received thatadvert the router.
1549
% Job object Details shows detailed performance information about the active processes that make up a Job object.
1551
Received Neighbor Solicit is the number of packets received thatsolicit a neighbor.
1553
Received Neighbor Advert is the number of packets received thatadvert a neighbor.
1555
Sent Packet Too Big is the number of sent packets thatare larger than anticipated.
1557
Sent Membership Query is the number of packets sent thatquery their membership to a group.
1559
Sent Membership Report is the number of packets sent thatreport their membership to a group.
1561
Sent Membership Reduction is the number of packets sent thatcancelled their membership to a group.
1563
Sent Router Solicit is the number of packets sent thatsolicit the router.
1565
Sent Router Advert is the number of packets sent thatadvert the router.
1567
Sent Neighbor Solicit is the number of packets sent thatsolicit a neighbor.
1569
Sent Neighbor Advert is the number of packets sent thatadvert a neighbor.
1571
These counters track authentication performance on a per second basis.
1573
This counter tracks the number of NTLM authentications processed per second for the AD on this DC or for local accounts on this member server.
1575
This counter tracks the number of times that clients use a ticket to authenticate to this computer per second.
1577
This counter tracks the number of Authentiation Service (AS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use AS requests to obtain a ticket-granting ticket.
1579
This counter tracks the number of ticket-granting service (TGS) requests that are being processed by the Key Distribution Center (KDC) per second. Clients use these TGS requests to obtain a service ticket, which allows a client to access resources on other computers.
1581
This counter tracks the number of Secure Sockets Layer (SSL) entries that are currently stored in the secure channel (Schannel) session cache. The Schannel session cache stores information about successful