| LoriotPro Report from MIB file : perfmib.mib | |
| Host Name : LoriotPro | |
| IP address: 127.0.0.1 | |
| Built the : Tue Jan 13 10:43:52 2004 |
| MIB Definitions of WINDOWS-NT-PERFORMANCE |
| Name | ms-mem-PageFaultsPerSec |
| Value | #ERROR |
| Description | Page Faults/sec is the overall rate faulted pages are handled by the processor. It is measured in numbers of pages faulted per second. A page fault occurs when a process requires code or data that is not in its working set (its space in physical memory). This counter includes both hard faults (those that require disk access) and soft faults (where the faulted page is found elsewhere in physical memory). Most processors can handle large numbers of soft faults without consequence. However, hard faults can cause significant delays. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-mem-AvailableBytes |
| Value | #ERROR |
| Description | Available Bytes is the amount of physical memory available to processes running on the computer, in bytes. It is calculated by summing space on the Zeroed, Free, and Stand by memory lists. Free memory is ready for use; Zeroed memory are pages of memory filled with zeros to prevent later processes from seeing data used by a previous process. Standby memory is memory removed from a process' working set (its physical memory) on route to disk, but is still available to be recalled. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-CommittedBytes |
| Value | #ERROR |
| Description | Committed Bytes is the amount of committed virtual memory, in bytes. (Committed memory is physical memory for which space has been reserved on the disk paging file in case it needs to be written back to disk). This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-CommitLimit |
| Value | #ERROR |
| Description | Commit Limit is the amount of virtual memory that can be committed without having to extend the paging file(s). It is measured in bytes. (Committed memory is physical memory for which space has been reserved on the disk paging files. There can be one paging file on each logical drive). If the paging file(s) are be expanded, this limit increases accordingly. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-WriteCopiesPerSec |
| Value | #ERROR |
| Description | Write Copies/sec is the number of page faults caused by attempts to write that have been satisfied by coping of the page from elsewhere in physical memory. This is an economical way of sharing data since pages are only copied when they are written to; otherwise, the page is shared. This counter counts the number of copies, without regard for the number of pages copied in each operation. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-mem-TransitionFaultsPerSec |
| Value | #ERROR |
| Description | Transition Faults/sec is the number of page faults resolved by recovering pages that were on the modified page list, on the standby list, or being written to disk at the time of the page fault. The pages were recovered without additional disk activity. Transition faults are counted in numbers of faults, without regard for the number of pages faulted in each operation. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-mem-CacheFaultsPerSec |
| Value | #ERROR |
| Description | Cache Faults/sec is the number of faults which occur when a page sought in the file ms-system cache is not found there and must be retrieved from elsewhere in memory (a soft fault) or from disk (a hard fault). The file ms-system cache is an area of physical memory that stores recently used pages of data for applications. Cache activity is a reliable indicator of most application I/O operations. This counter counts the number of faults, without regard for the number of pages faulted in each operation. |
| Name | ms-mem-DemandZeroFaultsPerSec |
| Value | #ERROR |
| Description | Demand Zero Faults/sec is the number of page faults that require a zeroed page to satisfy the fault. Zeroed pages, pages emptied of previously stored data and filled with zeros, are a security feature of Windows NT. They prevent processes from seeing data stored by earlier processes that used the memory space. Windows NT maintains a list of zeroed pages to accelerate this process. This counter counts numbers of faults, without regard to the numbers of pages retrieved to satisfy the fault. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-mem-PagesPerSec |
| Value | #ERROR |
| Description | Pages/sec is the number of pages read from or written to disk to resolve hard page faults. (Hard page faults occur when a process requires code or data that is not in its working set or elsewhere in physical memory, and must be retrieved from disk). This counter was designed as a primary indicator of the kinds of faults that cause ms-system-wide delays. It is the sum of Memory: Pages Input/sec and Memory: Pages Output/sec. It is counted in numbers of pages, so it can be compared to other counts of pages, such as Memory: Page Faults/sec, without conversion. It includes pages retrieved to satisfy faults in the file ms-system cache (usually requested by applications) non-cached mapped memory files. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-mem-PagesInputPerSec |
| Value | #ERROR |
| Description | Pages Input/sec is the number of pages read from disk to resolve hard page faults. (Hard page faults occur when a process requires code or data that is not in its working set or elsewhere in physical memory, and must be retrieved from disk). This counter was designed as a primary indicator of the kinds of faults that cause ms-system-wide delays. It includes pages retrieved to satisfy faults in the file ms-system cache (usually requested by applications) and in non-cached mapped memory files. This counter counts numbers of pages, and can be compared to other counts of pages, such as Memory: Page Faults/sec, without conversion. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-mem-PageReadsPerSec |
| Value | #ERROR |
| Description | Page Reads/sec is the number of times the disk was read to resolve hard page faults. (Hard page faults occur when a process requires code or data that is not in its working set or elsewhere in physical memory, and must be retrieved from disk). This counter was designed as a primary indicator of the kinds of faults that cause ms-system-wide delays. It includes reads to satisfy faults in the file ms-system cache (usually requested by applications) and in non-cached mapped memory files. This counter counts numbers of read operations, without regard to the numbers of pages retrieved by each operation. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-mem-PagesOutputPerSec |
| Value | #ERROR |
| Description | Pages Output/sec is the number of pages written to disk to free up space in physical memory. Pages are written back to disk only if they are changed in physical memory, so they are likely to hold data, not code. A high rate of pages output might indicate a memory shortage. Windows NT writes more pages back to disk to free up space when physical memory is in short supply. This counter counts numbers of pages, and can be compared to other counts of pages, without conversion. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-mem-PoolPagedBytes |
| Value | #ERROR |
| Description | Pool Paged Bytes is the number of bytes in the paged pool, an area of ms-system memory (physical memory used by the operating ms-system) for objects that can be written to disk when they are not being used. Memory: Pool Paged Bytes is calculated differently than Process: Pool Paged Bytes, so it might not equal Process: Pool Paged Bytes: _Total. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-PoolNonpagedBytes |
| Value | #ERROR |
| Description | Pool Nonpaged Bytes is the number of bytes in the nonpaged pool, an area of ms-system memory (physical memory used by the operating ms-system) for objects that cannot be written to disk, but must remain in physical memory as long as they are allocated. Memory: Pool Nonpaged Bytes is calculated differently than Process: Pool Nonpaged Bytes, so it might not equal Process: Pool Nonpaged Bytes: _Total. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-PageWritesPerSec |
| Value | #ERROR |
| Description | Page Writes/sec is the number of times pages were written to disk to free up space in physical memory. Pages are written to disk only if they are changed while in physical memory, so they are likely to hold data, not code. This counter counts write operations, without regard to the number of pages written in each operation. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-mem-PoolPagedAllocs |
| Value | #ERROR |
| Description | Pool Paged Allocs is the number of calls to allocate space in the paged pool. The paged pool is an area of ms-system memory (physical memory used by the operating ms-system) for objects that can be written to disk when they are not being used. It is measured in numbers of calls to allocate space, regardless of the amount of space allocated in each call. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-PoolNonpagedAllocs |
| Value | #ERROR |
| Description | Pool Nonpaged Allocs is the number of calls to allocate space in the nonpaged pool. The nonpaged pool is an area of ms-system memory area for objects that cannot be written to disk, and must remain in physical memory as long as they are allocated. It is measured in numbers of calls to allocate space, regardless of the amount of space allocated in each call. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-Freems-systemPageTableEntries |
| Value | #ERROR |
| Description | Free ms-system Page Table Entries is the number of page table entries not being used by the ms-system. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-CacheBytes |
| Value | #ERROR |
| Description | Cache Bytes is the sum of the ms-system Cache Resident Bytes, ms-system Driver Resident Bytes, ms-system Code Resident Bytes, and Pool Paged Resident Bytes counters. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-CacheBytesPeak |
| Value | #ERROR |
| Description | Cache Bytes Peak is the maximum value of Cache Bytes since the ms-system was last restarted. This value might be larger than the current size of the cache. Cache Bytes is the sum of the ms-system Cache Resident Bytes, ms-system Driver Resident Bytes, ms-system Code Resident Bytes, and Pool Paged Resident Bytes counters. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-PoolPagedResidentBytes |
| Value | #ERROR |
| Description | Pool Paged Resident Bytes is the current size of paged pool in bytes. The paged pool is an area of ms-system memory (physical memory used by the operating ms-system) for objects that can be written to disk when they are not being used. Space used by the paged and nonpaged pools are taken from physical memory, so a pool that is too large denies memory space to processes. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-ms-systemCodeTotalBytes |
| Value | #ERROR |
| Description | ms-system Code Total Bytes is the number of bytes of pageable operating ms-system code currently in virtual memory. It is a measure of the amount of physical memory being used by the operating ms-system that can be written to disk when not in use. This value is calculated by summing the bytes in Ntoskrnl.exe, Hal.dll, the boot drivers, and file ms-systems loaded by Ntldr/osloader. This counter does not include code that must remain in physical memory and cannot be written to disk. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-ms-systemCodeResidentBytes |
| Value | #ERROR |
| Description | ms-system Code Resident Bytes is the number of bytes of operating ms-system code currently in physical memory that can be written to disk when not in use. This value is a component of ms-system Code Total Bytes, which also includes operating ms-system code on disk. ms-system Code Resident Bytes (and ms-system Code Total Bytes) does not include code that must remain in physical memory and cannot be written to disk. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-ms-systemDriverTotalBytes |
| Value | #ERROR |
| Description | ms-system Driver Total Bytes is the number of bytes of pageable virtual memory currently being used by device drivers. (Pageable memory can be written to disk when it is not being used). It includes physical memory (Memory: ms-system Driver Resident Bytes) and code and data paged to disk. It is a component of Memory: ms-system Code Total Bytes. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-ms-systemDriverResidentBytes |
| Value | #ERROR |
| Description | ms-system Driver Resident Bytes is the number of bytes of pageable physical memory being used by device drivers. It is the working set (physical memory area) of the drivers. This value is a component of Memory: ms-system Driver Total Bytes, which also includes driver memory that has been written to disk. Neither ms-system Driver Resident Bytes nor ms-system Driver Total Bytes includes memory that cannot be written to disk. |
| Name | ms-mem-ms-systemCacheResidentBytes |
| Value | #ERROR |
| Description | ms-system Cache Resident Bytes is the number of bytes from the file ms-system cache that are resident in physical memory. This value includes only current physical pages and does not include any virtual memory pages not currently resident. As such this value may be smaller than the actual amount of virtual memory in use by the file ms-system cache. This value is a component of Memory: ms-system Code Resident Bytes. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-PercentCommittedBytesInUse |
| Value | #ERROR |
| Description | \ommitted Bytes In Use is the ratio of Memory: Committed Bytes to Memory: Commit Limit. (Committed memory is physical memory in use for which space has been reserved in the paging file should it need to be written to disk. The commit limit is determined by the size of the paging file. If the paging file is enlarged, the commit limit increases, and the ratio is reduced). This counter displays the current percentage value only; it is not an average. |
| Name | ms-mem-AvailableKBytes |
| Value | #ERROR |
| Description | Available KBytes is the amount of physical memory available to processes running on the computer, in Kilobytes (Bytes / 1,024). It is calculated by summing space on the Zeroed, Free, and Stand by memory lists. Free memory is ready for use; Zeroed memory are pages of memory filled with zeros to prevent later processes from seeing data used by a previous process. Standby memory is memory removed from a process' working set (its physical memory) on route to disk, but is still available to be recalled. This counter displays the last observed value only; it is not an average. |
| Name | ms-mem-AvailableMBytes |
| Value | #ERROR |
| Description | Available MBytes is the amount of physical memory available to processes running on the computer, in Megabytes (Bytes / 1,048,576). It is calculated by summing space on the Zeroed, Free, and Stand by memory lists. Free memory is ready for use; Zeroed memory are pages of memory filled with zeros to prevent later processes from seeing data used by a previous process. Standby memory is memory removed from a process' working set (its physical memory) on route to disk, but is still available to be recalled. This counter displays the last observed value only; it is not an average. |
| Name | ms-proc-processTable |
| Description | A table containing performance information for instances of 'process' objects. |
| Name | ms-proc-processEntry |
| Description | Performance information for one particular instance of 'process' object. |
| Values | Table of : ms-proc-processEntry |
| Object | Description |
| ms-proc-processIndex | Index. |
| ms-proc-processInstance | Instance name. |
| ms-proc-PercentProcessorTime | % Processor Time is the percentage of elapsed time that all of the threads of this process used the processor to execute instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count. On Multi-processor machines the maximum value of the counter is 100 % times the number of processors. |
| ms-proc-PercentUserTime | % User Time is the percentage of elapsed time that this process' threads have spent executing code in user mode. Applications, environment subms-systems and integral subms-systems execute in user mode. Code executing in user mode cannot damage the integrity of the Windows NT Executive, Kernel, and device drivers. Unlike some early operating ms-systems, Windows NT uses process boundaries for subms-system protection in addition to the traditional protection of user and privileged modes. These subms-system processes provide additional protection. Therefore, some work done by Windows NT on behalf of your application might appear in other subms-system processes in addition to the privileged time in your process. |
| ms-proc-PercentPrivilegedTime | % Privileged Time is the percentage of elapsed time that the threads of the process have spent executing code in privileged mode. When a Windows NT ms-system service is called, the service will often run in Privileged Mode to gain access to ms-system-private data. Such data is protected from access by threads executing in user Mode. Calls to the ms-system can be explicit or implicit, such as page faults or interrupts. Unlike some early operating ms-systems, Windows NT uses process boundaries for subms-system protection in addition to the traditional protection of user and privileged modes. These subms-system processes provide additional protection. Therefore, some work done by Windows NT on behalf of your application might appear in other subms-system processes in addition to the privileged time in your process. |
| ms-proc-VirtualBytesPeak | Virtual Bytes Peak is the maximum number of bytes of virtual address space the process has used at any one time. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is however finite, and by using too much, the process might limit its ability to load libraries. |
| ms-proc-VirtualBytes | Virtual Bytes is the current size in bytes of the virtual address space the process is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and by using too much, the process can limit its ability to load libraries. |
| ms-proc-PageFaultsPerSec | Page Faults/sec is the rate Page Faults occur in the threads executing in this process. A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. This will not cause the page to be fetched from disk if it is on the standby list and hence already in main memory, or if it is in use by another process with whom the page is shared. |
| ms-proc-WorkingSetPeak | Working Set Peak is the maximum number of bytes in the Working Set of this process at any point in time. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before they leave main memory. |
| ms-proc-WorkingSet | Working Set is the current number of bytes in the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before they leave main memory. |
| ms-proc-PageFileBytesPeak | Page File Bytes Peak is the maximum number of bytes this process has used in the paging file(s). Paging files are used to store pages of memory used by the process that are not contained in other files. Paging files are shared by all processes, and lack of space in paging files can prevent other processes from allocating memory. |
| ms-proc-PageFileBytes | Page File Bytes is the current number of bytes this process has used in the paging file(s). Paging files are used to store pages of memory used by the process that are not contained in other files. Paging files are shared by all processes, and lack of space in paging files can prevent other processes from allocating memory. |
| ms-proc-PrivateBytes | Private Bytes is the current number of bytes this process has allocated that cannot be shared with other processes. |
| ms-proc-ThreadCount | The number of threads currently active in this process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes instructions. Every running process has at least one thread. |
| ms-proc-PriorityBase | The current base priority of this process. Threads within a process can raise and lower their own base priority relative to the process' base priority. |
| ms-proc-ElapsedTime | The total elapsed time (in seconds) this process has been running. |
| ms-proc-IDProcess | ID Process is the unique identifier of this process. ID Process numbers are reused, so they only identify a process for the lifetime of that process. |
| ms-proc-CreatingProcessID | The Creating Process ID value is the Process ID of the process that created the process. Note that the creating process may have terminated since this process was created and so this value may no longer identify a running process. |
| ms-proc-PoolPagedBytes | Pool Paged Bytes is the number of bytes in the paged pool, an area of ms-system memory (physical memory used by the operating ms-system) for objects that can be written to disk when they are not being used. Memory: Pool Paged Bytes is calculated differently than Process: Pool Paged Bytes, so it might not equal Process: Pool Paged Bytes: _Total. This counter displays the last observed value only; it is not an average. |
| ms-proc-PoolNonpagedBytes | Pool Nonpaged Bytes is the number of bytes in the nonpaged pool, an area of ms-system memory (physical memory used by the operating ms-system) for objects that cannot be written to disk, but must remain in physical memory as long as they are allocated. Memory: Pool Nonpaged Bytes is calculated differently than Process: Pool Nonpaged Bytes, so it might not equal Process: Pool Nonpaged Bytes: _Total. This counter displays the last observed value only; it is not an average. |
| ms-proc-HandleCount | The total number of handles currently open by this process. This number is the sum of the handles currently open by each thread in this process. |
| ms-proc-IOReadOperationsPerSec | The rate the process is issuing read I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/O's. |
| ms-proc-IOWriteOperationsPerSec | The rate the process is issuing write I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/O's. |
| ms-proc-IODataOperationsPerSec | The rate the process is issuing read and write I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/O's. |
| ms-proc-IOOtherOperationsPerSec | The rate the process is issuing I/O operations that are neither a read or a write operation. An example of this type of operation would be a control function. This counter counts all I/O activity generated by the process to include file, network and device I/O's. |
| ms-proc-IOReadBytesPerSec | The rate the process is reading bytes from I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/O's. |
| ms-proc-IOWriteBytesPerSec | The rate the process is writing bytes to I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/O's. |
| ms-proc-IODataBytesPerSec | The rate the process is reading and writing bytes in I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/O's. |
| ms-proc-IOOtherBytesPerSec | The rate the process is issuing bytes to I/O operations that don't involve data such as control operations. This counter counts all I/O activity generated by the process to include file, network and device I/O's. |
| Name | ms-threadTable |
| Description | A table containing performance information for instances of 'thread' objects. |
| Name | ms-threadEntry |
| Description | Performance information for one particular instance of 'thread' object. |
| Values | Table of : ms-threadEntry |
| Object | Description |
| ms-threadIndex | Index. |
| ms-threadInstance | Instance name. |
| ms-PercentProcessorTime | % Processor Time is the percentage of elapsed time that this thread used the processor to execute instructions. An instruction is the basic unit of execution in a processor, and a thread is the object that executes instructions. Code executed to handle some hardware interrupts and trap conditions are included in this count. |
| ms-PercentUserTime | % User Time is the percentage of elapsed time that this thread has spent executing code in user mode. Applications, environment subms-systems, and integral subms-systems execute in user mode. Code executing in user mode cannot damage the integrity of the Windows NT Executive, Kernel, and device drivers. Unlike some early operating ms-systems, Windows NT uses process boundaries for subms-system protection in addition to the traditional protection of user and privileged modes. These subms-system processes provide additional protection. Therefore, some work done by Windows NT on behalf of your application might appear in other subms-system processes in addition to the privileged time in your process. |
| ms-PercentPrivilegedTime | Privileged Time is the percentage of elapsed time that this thread has spent executing code in privileged mode. When a Windows NT ms-system service is called, the service will often run in privileged mode in order to gain access to ms-system-private data. Such data is protected from access by threads executing in user mode. Calls to the ms-system can be explicit or implicit such as page faults and interrupts. Unlike some early operating ms-systems, Windows NT uses process boundaries for subms-system protection in addition to the traditional protection of user and privileged modes. These subms-system processes provide additional protection. Therefore, some work done by Windows NT on behalf of your application might appear in other subms-system processes in addition to the privileged time in your process. |
| ms-ContextSwitchesPerSec | Context Switches/sec is the rate of switches from one thread to another. Thread switches can occur either inside of a single process or across processes. A thread switch can be caused either by one thread asking another for information, or by a thread being preempted by another, higher priority thread becoming ready to run. Unlike some early operating ms-systems, Windows NT uses process boundaries for subms-system protection in addition to the traditional protection of user and privileged modes. These subms-system processes provide additional protection. Therefore, some work done by Windows NT on behalf of an application appear in other subms-system processes in addition to the privileged time in the application. Switching to the subms-system process causes one Context Switch in the application thread. Switching back causes another Context Switch in the subms-system thread. |
| ms-ElapsedTime | The total elapsed time (in seconds) this thread has been running. |
| ms-PriorityCurrent | The current dynamic priority of this thread. The ms-system can raise the thread's dynamic priority above the base priority if the thread is handling user input, or lower it towards the base priority if the thread becomes compute bound. |
| ms-PriorityBase | The current base priority of this thread. The ms-system can raise the thread's dynamic priority above the base priority if the thread is handling user input, or lower it towards the base priority if the thread becomes compute bound. |
| ms-StartAddress | Starting virtual address for this thread. |
| ms-ThreadState | Thread State is the current state of the thread. It is 0 for Initialized, 1 for Ready, 2 for Running, 3 for Standby, 4 for Terminated, 5 for Wait, 6 for Transition, 7 for Unknown. A Running thread is using a processor; a Standby thread is about to use one. A Ready thread wants to use a processor, but is waiting for a processor because none are free. A thread in Transition is waiting for a resource in order to execute, such as waiting for its execution stack to be paged in from disk. A Waiting thread has no use for the processor because it is waiting for a peripheral operation to complete or a resource to become free. |
| ms-ThreadWaitReason | Thread Wait Reason is only applicable when the thread is in the Wait state (see Thread State). It is 0 or 7 when the thread is waiting for the Executive, 1 or 8 for a Free Page, 2 or 9 for a Page In, 3 or 10 for a Pool Allocation, 4 or 11 for an Execution Delay, 5 or 12 for a Suspended condition, 6 or 13 for a User Request, 14 for an Event Pair High, 15 for an Event Pair Low, 16 for an LPC Receive, 17 for an LPC Reply, 18 for Virtual Memory, 19 for a Page Out; 20 and higher are not assigned at the time of this writing. Event Pairs are used to communicate with protected subms-systems (see Context Switches). |
| ms-IDProcess | ID Process is the unique identifier of this process. ID Process numbers are reused, so they only identify a process for the lifetime of that process. |
| ms-IDThread | ID Thread is the unique identifier of this thread. ID Thread numbers are reused, so they only identify a thread for the lifetime of that thread. |
| Name | ms-sys-FileReadOperationsPerSec |
| Value | #ERROR |
| Description | File Read Operations/sec is the combined rate of file ms-system read requests to all devices on the computer, including requests to read from the file ms-system cache. It is measured in numbers of reads. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-FileWriteOperationsPerSec |
| Value | #ERROR |
| Description | File Write Operations/sec is the combined rate of the file ms-system write requests to all devices on the computer, including requests to write to data in the file ms-system cache. It is measured in numbers of writes. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-FileControlOperationsPerSec |
| Value | #ERROR |
| Description | File Control Operations/sec is the combined rate of file ms-system operations that are neither reads nor writes, such as file ms-system control requests and requests for information about device characteristics or status. This is the inverse of ms-system: File Data Operations/sec and is measured in number of operations perf second. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-FileReadBytesPerSec |
| Value | #ERROR |
| Description | File Read Bytes/sec is the overall rate at which bytes are read to satisfy file ms-system read requests to all devices on the computer, including reads from the file ms-system cache. It is measured in number of bytes per second. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-FileWriteBytesPerSec |
| Value | #ERROR |
| Description | File Write Bytes/sec is the overall rate at which bytes are written to satisfy file ms-system write requests to all devices on the computer, including writes to the file ms-system cache. It is measured in number of bytes per second. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-FileControlBytesPerSec |
| Value | #ERROR |
| Description | File Control Bytes/sec is the overall rate at which bytes are transferred for all file ms-system operations that are neither reads nor writes, including file ms-system control requests and requests for information about device characteristics or status. It is measured in numbers of bytes. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-ContextSwitchesPerSec |
| Value | #ERROR |
| Description | Context Switches/sec is the combined rate at which all processors on the computer are switched from one thread to another. Context switches occur when a running thread voluntarily relinquishes the processor, is preempted by a higher priority ready thread, or switches between user-mode and privileged (kernel) mode to use an Executive or subms-system service. It is the sum of Thread: Context Switches/sec for all threads running on all processors in the computer and is measured in numbers of switches. There are context switch counters on the ms-system and Thread objects. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-ms-systemCallsPerSec |
| Value | #ERROR |
| Description | ms-systems Calls/sec is the combined rate of calls to Windows NT ms-system service routines by all processes running on the computer. These routines perform all of the basic scheduling and synchronization of activities on the computer, and provide access to non-graphic devices, memory management, and name space management. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-FileDataOperationsPerSec |
| Value | #ERROR |
| Description | File Data Operations/ sec is the combined rate of read and write operations on all logical disks on the computer. This is the inverse of ms-system: File Control Operations/sec. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-ms-systemUpTime |
| Value | #ERROR |
| Description | ms-system Up Time is the elapsed time (in seconds) that the computer has been running since it was last started. This counter displays the difference between the start time and the current time. |
| Name | ms-sys-ProcessorQueueLength |
| Value | #ERROR |
| Description | Processor Queue Length is the number of threads in the processor queue. There is a single queue for processor time even on computers with multiple processors. Unlike the disk counters, this counter counts ready threads only, not threads that are running. A sustained processor queue of greater than two threads generally indicates processor congestion. This counter displays the last observed value only; it is not an average. |
| Name | ms-sys-Processes |
| Value | #ERROR |
| Description | Processes is the number of processes in the computer at the time of data collection. Notice that this is an instantaneous count, not an average over the time interval. Each process represents the running of a program. |
| Name | ms-sys-Threads |
| Value | #ERROR |
| Description | Threads is the number of threads in the computer at the time of data collection. Notice that this is an instantaneous count, not an average over the time interval. A thread is the basic executable entity that can execute instructions in a processor. |
| Name | ms-sys-AlignmentFixupsPerSec |
| Value | #ERROR |
| Description | Alignment Fixups/sec is the rate of alignment faults fixed by the ms-system. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-ExceptionDispatchesPerSec |
| Value | #ERROR |
| Description | Exception Dispatches/sec is the rate of exceptions dispatched by the ms-system. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-FloatingEmulationsPerSec |
| Value | #ERROR |
| Description | Floating Emulations/sec is the rate of floating emulations performed by the ms-system. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-sys-PercentRegistryQuotaInUse |
| Value | #ERROR |
| Description | Registry Quota In Use is the percentage of the Total Registry Quota Allowed that is currently being used by the ms-system. This counter displays the current percentage value only; it is not an average. |
| Name | ms-serv-BytesTotalPerSec |
| Value | #ERROR |
| Description | The number of bytes the server has sent to and received from the network. This value provides an overall indication of how busy the server is. |
| Name | ms-serv-BytesReceivedPerSec |
| Value | #ERROR |
| Description | The number of bytes the server has received from the network. Indicates how busy the server is. |
| Name | ms-serv-BytesTransmittedPerSec |
| Value | #ERROR |
| Description | The number of bytes the server has sent on the network. Indicates how busy the server is. |
| Name | ms-serv-SessionsTimedOut |
| Value | #ERROR |
| Description | The number of sessions that have been closed due to their idle time exceeding the AutoDisconnect parameter for the server. Shows whether the AutoDisconnect setting is helping to conserve resources. |
| Name | ms-serv-SessionsErroredOut |
| Value | #ERROR |
| Description | The number of sessions that have been closed due to unexpected error conditions or sessions that have reached the autodisconnect timeout and have been disconnected normally. |
| Name | ms-serv-SessionsLoggedOff |
| Value | #ERROR |
| Description | The number of sessions that have terminated normally. Useful in interpreting the Sessions Times Out and Sessions Errored Out statistics--allows percentage calculations. |
| Name | ms-serv-SessionsForcedOff |
| Value | #ERROR |
| Description | The number of sessions that have been forced to logoff. Can indicate how many sessions were forced to logoff due to logon time constraints. |
| Name | ms-serv-ErrorsLogon |
| Value | #ERROR |
| Description | The number of failed logon attempts to the server. Can indicate whether password guessing programs are being used to crack the security on the server. |
| Name | ms-serv-ErrorsAccessPermissions |
| Value | #ERROR |
| Description | The number of times opens on behalf of clients have failed with STATUS_ACCESS_DENIED. Can indicate whether somebody is randomly attempting to access files in hopes of getting at something that was not properly protected. |
| Name | ms-serv-ErrorsGrantedAccess |
| Value | #ERROR |
| Description | The number of times accesses to files opened successfully were denied. Can indicate attempts to access files without proper access authorization. |
| Name | ms-serv-Errorsms-system |
| Value | #ERROR |
| Description | The number of times an internal Server Error was detected. Unexpected errors usually indicate a problem with the Server. |
| Name | ms-serv-BlockingRequestsRejected |
| Value | #ERROR |
| Description | The number of times the server has rejected blocking SMBs due to insufficient count of free work items. Indicates whether the MaxWorkItem or MinFreeWorkItems server parameters might need to be adjusted. |
| Name | ms-serv-WorkItemShortages |
| Value | #ERROR |
| Description | The number of times STATUS_DATA_NOT_ACCEPTED was returned at receive indication time. This occurs when no work item is available or can be allocated to service the incoming request. Indicates whether the InitWorkItems or MaxWorkItems parameters might need to be adjusted. |
| Name | ms-serv-FilesOpenedTotal |
| Value | #ERROR |
| Description | The number of successful open attempts performed by the server of behalf of clients. Useful in determining the amount of file I/O, determining overhead for path-based operations, and for determining the effectiveness of open locks. |
| Name | ms-serv-FilesOpen |
| Value | #ERROR |
| Description | The number of files currently opened in the server. Indicates current server activity. |
| Name | ms-serv-ServerSessions |
| Value | #ERROR |
| Description | The number of sessions currently active in the server. Indicates current server activity. |
| Name | ms-serv-FileDirectorySearches |
| Value | #ERROR |
| Description | The number of searches for files currently active in the server. Indicates current server activity. |
| Name | ms-serv-PoolNonpagedBytes |
| Value | #ERROR |
| Description | The number of bytes of non-pageable computer memory the server is using. This value is useful for determining the values of the MaxNonpagedMemoryUsage value entry in the Windows NT Registry. |
| Name | ms-serv-PoolNonpagedFailures |
| Value | #ERROR |
| Description | The number of times allocations from nonpaged pool have failed. Indicates that the computer's physical memory is too small. |
| Name | ms-serv-PoolNonpagedPeak |
| Value | #ERROR |
| Description | The maximum number of bytes of nonpaged pool the server has had in use at any one point. Indicates how much physical memory the computer should have. |
| Name | ms-serv-PoolPagedBytes |
| Value | #ERROR |
| Description | The number of bytes of pageable computer memory the server is currently using. Can help in determining good values for the MaxPagedMemoryUsage parameter. |
| Name | ms-serv-PoolPagedFailures |
| Value | #ERROR |
| Description | The number of times allocations from paged pool have failed. Indicates that the computer's physical memory or paging file are too small. |
| Name | ms-serv-PoolPagedPeak |
| Value | #ERROR |
| Description | The maximum number of bytes of paged pool the server has had allocated. Indicates the proper sizes of the Page File(s) and physical memory. |
| Name | ms-serv-ContextBlocksQueuedPerSec |
| Value | #ERROR |
| Description | Context Blocks Queued per second is the rate at which work context blocks had to be placed on the server's FSP queue to await server action. |
| Name | ms-serv-LogonPerSec |
| Value | #ERROR |
| Description | Logon/sec is the rate of all server logons. |
| Name | ms-serv-LogonTotal |
| Value | #ERROR |
| Description | Logon Total includes all interactive logons, network logons, service logons, successful logon, and failed logons since the machine is last rebooted. |
| Name | ms-procsr-processorTable |
| Description | A table containing performance information for instances of 'processor' objects. |
| Name | ms-procsr-processorEntry |
| Description | Performance information for one particular instance of 'processor' object. |
| Values | Table of : ms-procsr-processorEntry |
| Object | Description |
| ms-procsr-processorIndex | Index. |
| ms-procsr-processorInstance | Instance name. |
| ms-procsr-PercentProcessorTime | % Processor Time is the percentage of time that the processor is executing a non-Idle thread. This counter was designed as a primary indicator of processor activity. It is calculated by measuring the time that the processor spends executing the thread of the Idle process in each sample interval, and subtracting that value from 100%. (Each processor has an Idle thread which consumes cycles when no other threads are ready to run). It can be viewed as the percentage of the sample interval spent doing useful work. This counter displays the average percentage of busy time observed during the sample interval. It is calculated by monitoring the time the service was inactive, and then subtracting that value from 100%. |
| ms-procsr-PercentUserTime | % User Time is the percentage of non-idle processor time spent in user mode. (User mode is a restricted processing mode designed for applications, environment subms-systems, and integral subms-systems. The alternative, privileged mode, is designed for operating ms-system components and allows direct access to hardware and all memory. The operating ms-system switches application threads to privileged mode to access operating ms-system services). This counter displays the average busy time as a percentage of the sample time. |
| ms-procsr-PercentPrivilegedTime | % Privileged Time is the percentage of non-idle processor time spent in privileged mode. (Privileged mode is a processing mode designed for operating ms-system components and hardware-manipulating drivers. It allows direct access to hardware and all memory. The alternative, user mode, is a restricted processing mode designed for applications, environment subms-systems, and integral subms-systems. The operating ms-system switches application threads to privileged mode to access operating ms-system services). % Privileged Time includes time servicing interrupts and DPCs. A high rate of privileged time might be attributable to a large number of interrupts generated by a failing device. This counter displays the average busy time as a percentage of the sample time. |
| ms-procsr-InterruptsPerSec | Interrupts/sec is the average number of hardware interrupts the processor is receiving and servicing in each second. It does not include DPCs, which are counted separately. This value is an indirect indicator of the activity of devices that generate interrupts, such as the ms-system clock, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended during interrupts. Most ms-system clocks interrupt the processor every 10 milliseconds, creating a background of interrupt activity. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| ms-procsr-PercentDPCTime | % DPC Time is the percentage of time that the processor spent receiving and servicing deferred procedure calls (DPCs) during the sample interval. (DPCs are interrupts that run at a lower priority than standard interrupts). % DPC Time is a component of % Privileged Time because DPCs are executed in privileged mode. They are counted separately and are not a component of the interrupt counters. This counter displays the average busy time as a percentage of the sample time. |
| ms-procsr-PercentInterruptTime | % Interrupt Time is the percentage of time the processor spent receiving and servicing hardware interrupts during the sample interval. This value is an indirect indicator of the activity of devices that generate interrupts, such as the ms-system clock, the mouse, disk drivers, data communication lines, network interface cards and other peripheral devices. These devices normally interrupt the processor when they have completed a task or require attention. Normal thread execution is suspended during interrupts. Most ms-system clocks interrupt the processor every 10 milliseconds, creating a background of interrupt activity. This counter displays the average busy time as a percentage of the sample time. |
| ms-procsr-DPCsQueuedPerSec | DPCs Queued/sec is the overall rate at which deferred procedure calls (DPCs) are added to the processor's DPC queue. (DPCs are interrupts that run at a lower priority than standard interrupts. Each processor has its own DPC queue). This counter measures the rate at which DPCs are added to the queue, not the number of DPCs in the queue. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| ms-procsr-DPCRate | DPC Rate is the rate at which deferred procedure calls (DPCs) are added to the processor's DPC queue between the timer ticks of the processor clock. (DPCs are interrupts that run at a lower priority than standard interrupts. Each processor has its own DPC queue). This counter measures the rate at which DPCs are added to the queue, not the number of DPCs in the queue. This counter displays the last observed value only; it is not an average. |
| ms-procsr-DPCBypassesPerSec | DPC Bypasses/sec is the rate at which deferred procedure calls (DPCs) on all processors were avoided. (DPCs are interrupts that run at a lower priority than standard interrupts). This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| ms-procsr-APCBypassesPerSec | APC Bypasses/sec is the rate at which Kernel APC interrupts were avoided. APC Bypasses/sec is the rate at which kernel APC interrupts were short-circuited. This counter displays the difference between the values observed in the last two samples, divided by the duration of the sample interval. |
| Name | ms-paging-paging-FileTable |
| Description | A table containing performance information for instances of 'paging-File' objects. |
| Name | ms-paging-paging-FileEntry |
| Description | Performance information for one particular instance of 'paging-File' object. |
| Values | Table of : ms-paging-paging-FileEntry |
| Object | Description |
| ms-paging-paging-FileIndex | Index. |
| ms-paging-paging-FileInstance | Instance name. |
| ms-paging-PercentUsage | The amount of the Page File instance in use in percent. See also Process: Page File Bytes. |
| ms-paging-PercentUsagePeak | The peak usage of the Page File instance in percent. See also Process: Page File Bytes Peak. |
| Name | ms-pdisk-physicalDiskTable |
| Description | A table containing performance information for instances of 'physicalDisk' objects. |
| Name | ms-pdisk-physicalDiskEntry |
| Description | Performance information for one particular instance of 'physicalDisk' object. |
| Values | Table of : ms-pdisk-physicalDiskEntry |
| Object | Description |
| ms-pdisk-physicalDiskIndex | Index. |
| ms-pdisk-physicalDiskInstance | Instance name. |
| ms-pdisk-CurrentDiskQueueLength | Current Disk Queue Length is the number of requests outstanding on the disk at the time the performance data is collected. It includes requests in service at the time of the snapshot. This is an instantaneous length, not an average over the time interval. Multi-spindle disk devices can have multiple requests active at one time, but other concurrent requests are awaiting service. This counter might reflect a transitory high or low queue length, but if there is a sustained load on the disk drive, it is likely that this will be consistently high. Requests are experiencing delays proportional to the length of this queue minus the number of spindles on the disks. This difference should average less than 2 for good performance. |
| ms-pdisk-PercentDiskTime | % Disk Time is the percentage of elapsed time that the selected disk drive is busy servicing read or write requests. |
| ms-pdisk-AvgDiskQueueLength | Avg. Disk Queue Length is the average number of both read and write requests that were queued for the selected disk during the sample interval. |
| ms-pdisk-PercentDiskReadTime | % Disk Read Time is the percentage of elapsed time that the selected disk drive is busy servicing read requests. |
| ms-pdisk-AvgDiskReadQueueLength | Avg. Disk Read Queue Length is the average number of read requests that were queued for the selected disk during the sample interval. |
| ms-pdisk-PercentDiskWriteTime | % Disk Write Time is the percentage of elapsed time that the selected disk drive is busy servicing write requests. |
| ms-pdisk-AvgDiskWriteQueueLength | Avg. Disk Write Queue Length is the average number of write requests that were queued for the selected disk during the sample interval. |