Microsoft KB Archive/293617

= PRB: Window Media Server Log Shows Bytes Received is Greater Than Bytes Sent =

Article ID: 293617

Article Last Modified on 4/10/2002

-

APPLIES TO


 * Microsoft Windows Media Services 4.1

-



This article was previously published under Q293617



SYMPTOMS
The Window Media Server log may contain log entries where c-bytes are greater than sc-bytes. This implies that the client received more bytes than the server sent.



CAUSE
There are cases where multiple log entries account for sc-bytes.



STATUS
This behavior is by design.



MORE INFORMATION
Windows Media Server logs a 408 disconnect containing the server statistics if it does not receive anything from the client for more than 30 seconds. This also resets the server-side statistics for the particular client.

In the case where a disconnect has not actually occurred, the streaming may complete and the client may post a log request with its client-side stats, but the server-side stats are re-initialized. The original bytes are not included in the total. The log entries must be patched together when this occurs.

In the following example, the 200 log entry makes it appear as though the client received more bytes than the server sent. The sum of sc-bytes for the 408 and the 200 log entry is approximately the total of c-bytes. This needs to be accounted for in billing systems that use these fields.

time     c-ip        c-status  sc-bytes  c-bytes 20:58:40 4.35.127.7  408       231017    - 20:59:48  4.35.127.7  200       228310    558068

Keywords: kbprb KB293617

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.