# CounterDictionary

Description:
The maximum number of bytes of nonpaged pool the server has had in use at any one point.  Indicates how much physical memory the computer should have.


Comment5:
Physical Memory, Paging File, and Physical Disk Space Bottleneck

Description:
Committed Bytes displays the size of virtual memory (in bytes) that has been Committed (as opposed to simply reserved).  Committed memory must have backing (i.e., disk) storage available, or must be assured never to need disk storage (because main memory is large enough to hold it.)  Notice that this is an instantaneous count, not an average over the time interval.


Description:
% Committed Bytes In Use is the ratio of the Commited Bytes to the Commit Limit. This represents the amount of available virtual memory in use. Note that the Commit Limit may change if the paging file is extended. This is an instantaneous value, not an average.


Description:
Available Bytes displays the size of the virtual memory currently on the Zeroed, Free, and Standby lists.  Zeroed and Free memory is ready for use, with Zeroed memory cleared to zeros.  Standby memory is memory removed from a process's Working Set but still available.  Notice that this is an instantaneous count, not an average over the time interval.


Description:
Pages/sec is the number of pages read from the disk or written to the disk to resolve memory references to pages that were not in memory at the time of the reference.  This is the sum of Pages Input/sec and Pages Output/sec. This counter includes paging traffic on behalf of the system Cache to access file data for applications. This value also includes the pages to/from the noncached mapped memory files. This is the primary counter to observe if you are concerned about excessive memory pressure and the excessive paging that may result.


Description:
Average Disk sec/Transfer is the time in seconds of the average disk transfer.


Description:
The amount of the Page File instance in use in percent.  Page File Bytes is the current number of bytes this process has used in the paging file(s).  Paging files are used to store pages of memory used by the process that are not contained in other files.  Paging files are shared by all processes, and lack of space in paging files can prevent other processes from allocating memory.


Description:
The % Total Processor Time is the average percentage of time that all the processors on the system are busy executing non-idle threads.  On a multi-processor system, if all processors are always busy this is 100%, if all processors are 50% busy this is 50% and if 1/4th of the processors are 100% busy this is 25%.  It can be viewed as the fraction of the time spent doing useful work.  Each processor is assigned an Idle thread in the Idle process which consumes those unproductive processor cycles not used by any other threads.


Description:
Processor Queue Length is the instantaneous length of the processor queue in units of threads. All processors use a single queue in which threads wait for processor cycles.  This length does not include the threads that are currently executing. A sustained processor queue length greater than two generally indicates processor congestion. This is an instantaneous count, not an average over the time interval.


Description:
The number of times allocations from nonpaged pool have failed.  Indicates that the computer's physical memory is too small.


Description:
The number of times allocations from paged pool have failed.  Indicates that the computer's physical memory of pagefile are too small.


Description:
The maximum number of bytes of paged pool the server has had allocated.  Indicates the proper sizes of the Page File(s) and physical memory.


Description:
The number of times an internal Server Error was detected.  Unexpected errors usually indicate a problem with the Server.


Description:
The number of sessions that have been closed due to unexpected error conditions.  Indicates how frequently network problems are causing dropped sessions on the server.


Description:
The number of bytes the server has sent to and received from the network.  This value provides an overall indication of how busy the server is.


Description:
Context Blocks Queued per second is the rate that work context blocks had to be placed on the server's FSP queue to await server action.


Description:
The number of searches for files currently active in the server.  Indicates current server activity.


Description:
The number of files currently opened in the server.  Indicates current server activity.


Description:
Logon/sec is the rate of all server logons


Description:
The number of sessions currently active in the server.  Indicates current server activity.


Description:
The number of times opens on behalf of clients have failed with STATUS_ACCESS_DENIED.  Can indicate whether somebody is randomly attempting to access files in hopes of getting at something that was not properly protected.


Description:
The number of times accesses to files opened successfully were denied.  Can indicate attempts to access files without proper access authorization.


Description:
The number of failed logon attempts to the server.  Can indicate whether password guessing programs are being used to crack the security on the server.


Description:
The number of times the server has rejected blocking SMBs due to insufficient count of free work items. Indicates whether the maxworkitem or minfreeworkitems server parameters may need tuning.


Description:
The number of bytes of non-pageable computer memory the server is currently using.  Can help in determining good values for the maxnonpagedmemoryusage parameter.


Description:
The number of bytes of pageable computer memory the server is currently using.  Can help in determining good values for the maxpagedmemoryusage parameter.


Description:
The number of sessions that have been forced to logoff.  Can indicate how many sessions were forced to logoff due to logon time constraints.


Description:
The number of sessions that have been closed due to their idle time exceeding the autodisconnect parameter for the server.  Shows whether the autodisconnect setting is helping to conserve resources.


Description:
The number of times STATUS_DATA_NOT_ACCEPTED was returned at receive indication time.  This occurs when no work item is available or can be allocated to service the incoming request.  Indicates whether the initworkitems or maxworkitems parameters may need tuning.


Description:
Commit Limit is the size (in bytes) of virtual memory that can be committed without having to extend the paging file(s).  If the paging file(s) can be extended, this is a soft limit.


Description:
The number of Page Table Entries not currently in use by the system.


Description:
Cache Bytes Peak measures the maximum number of bytes used by the system Cache.  The system Cache is used to buffer data retrieved from disk or LAN.  The system Cache uses memory not in use by active processes in the computer.


Description:
System Code Total Bytes is the number of bytes of pagable pages in ntoskrnl.exe, hal.dll, and the boot drivers and file systems loaded by ntldr/osloader.


Description:
Copy Read Hits is the percentage of Cache Copy Read requests that hit the Cache, i.e., did not require a disk read in order to provide access to the page in the Cache.  A Copy Read is a file read operation that is satisfied by a memory copy from a Cache page to the application's buffer.  The LAN Redirector uses this method for retrieving Cache information, as does the LAN Server for small transfers.  This is a method used by the disk file systems as well.


Description:
Fast Read Resource Misses/sec is the frequency of Cache misses necessitated by the lack of available resources to satisfy the request.


Description:
Data Flushes/sec is the frequency the Cache has flushed its contents to disk as the result of a request to flush or to satisfy a write-through file write request.  More than one page can be transferred on each flush operation.


Description:
File Read Operations/sec is an aggregate of all the file system read operations on the computer.


Description:
File Write Operations/sec is an aggregate of all the file system write operations on the computer.


Description:
File Control Operations/sec is an aggregate of all file system operations that are neither reads nor writes.  These operations usually include file system control requests or requests for information about device characteristics or status.


Description:
File Read Bytes/sec is an aggregate of the bytes transferred for all the file system read operations on the computer.


Description:
File Write Bytes/sec is an aggregate of the bytes transferred for all the file system write operations on the computer.


Description:
File Control Bytes/sec is an aggregate of bytes transferred for all file system operations that are neither reads nor writes.  These operations usually include file system control requests or requests for information about device characteristics or status.


Description:
Context Switches/sec is the rate of switches from one thread to another.  Thread switches can occur either inside of a single process or across processes.  A thread switch may be caused either by one thread asking another for information, or by a thread being preempted by another, higher priority thread becoming ready to run.  Unlike some early operating systems, Windows NT uses process boundaries for subsystem protection in addition to the traditional protection of User and Privileged modes.  These subsystem processes provide additional protection.  Therefore, some work done by Windows NT on behalf of an application may appear in other subsystem processes in addition to the Privileged Time in the application.  Switching to the subsystem process causes one Context Switch in the application thread.  Switching back causes another Context Switch in the subsystem thread.


Description:
Systems Calls/sec is the frequency of calls to Windows NT system service routines.  These routines perform all of the basic scheduling and synchronization of activities on the computer, and provide access to non-graphical devices, memory management, and name space management.


Description:
The % Total User Time is the average percentage of time spent in User mode by all processors.  On a multi-processor system, if all processors are always in User mode this is 100%, if all processors are 50% in User mode this is 50% and if 1/4th of the processors are in User mode this is 25%.  Applications execute in User Mode, as do subsystems like the window manager and the graphics engine.  Code executing in User Mode cannot damage the integrity of the Windows NT Executive, Kernel, and device drivers.  Unlike some early operating systems, Windows NT uses process boundaries for subsystem protection in addition to the traditional protection of User and Privileged modes.  These subsystem processes provide additional protection.  Therefore, some work done by Windows NT on behalf of an application may appear in other subsystem processes in addition to the Privileged Time in the application process.


Description:
The % Total Privileged Time is the average percentage of time spent in Privileged mode by all processors.  On a multi-processor system, if all processors are always in Privileged mode this is 100%, and if 1/4th of the processors are in Privileged mode this is 25%.  When a Windows NT system service is called, the service will often run in Privileged Mode in order to gain access to system-private data.  Such data is protected from access by threads executing in User Mode.  Calls to the system may be explicit, or they may be implicit such as when a page fault or an interrupt occurs.  Unlike some early operating systems, Windows NT uses process boundaries for subsystem protection in addition to the traditional protection of User and Privileged modes.  These subsystem processes provide additional protection.  Therefore, some work done by Windows NT on behalf of an application may appear in other subsystem processes in addition to the Privileged Time in the application process.


Description:
Total Interrupts/sec is the rate the computer is receiving and servicing hardware interrupts.  Some devices that may generate interrupts are the system timer, the mouse, data communication lines, network interface cards and other peripheral devices.  This counter provides an indication of how busy these devices are on a computer-wide basis.  See also Processor:Interrupts/sec.


Description:
Total Time (in seconds) that the computer has been operational since it was last started.


Description:
Alignment Fixups/sec is the rate of alignment faults fixed by the system.


Description:
Exception Dispatches/sec is the rate of exceptions dispatched by the system.


Description:
Floating Emulations/sec is the rate of floating emulations performed by the system.


Description:
% Registry Quota In Use indicates the percentage of the Total Registry Quota Allowed currently in use by the system.


Description:
The peak usage of the Page File instance in percent.  See also Process:Page File Bytes Peak.


Description:
Disk Time is the percentage of elapsed time that the selected disk drive is busy servicing read or write requests.


Description:
Avg. Disk Queue Length is the average number of both read and write requests that were queued for the selected disk during the sample interval.


Description:
Disk Read Time is the percentage of elapsed time that the selected disk drive is busy servicing read requests.


Description:
Avg. Disk Read Queue Length is the average number of read requests that were queued for the selected disk during the sample interval.


Description:
Disk Write Time is the percentage of elapsed time that the selected disk drive is busy servicing write requests.


Description:
Avg. Disk Write Queue Length is the average number of write requests that were queued for the selected disk during the sample interval.


Description:
Avg. Disk Bytes/Transfer is the average number of bytes transferred to or from the disk during write or read operations.


Description:
Avg. Disk Bytes/Read is the average number of bytes transferred from the disk during read operations.


Description:
Avg. Disk Bytes/Write is the average number of bytes transferred to the disk during write operations.


Description:
Percent Free Space is the ratio of the free space available on the logical disk unit to the total usable space provided by the selected logical disk drive


Description:
Free Megabytes displays the unallocated space on the disk drive in megabytes. One megabyte = 1,048,576 bytes.


Comment5:
% Interrupt Time is the percentage of elapsed time that the Processor spent handling hardware Interrupts.  When a hardware device interrupts the Processor, the Interrupt Handler will execute to handle the condition, usually by signaling I/O completion and possibly issuing another pending I/O request.  Some of this work may be done in a Deferred Procedure Call (see % DPC Time.)  However, time spent in DPC's is not counted as time in Interrupts.  Interrupts are executed in Privileged Mode, so this is a component of Processor: % Privileged Time.  This counter can help determine the source of excessive time being spent in Privileged Mode.


Description:
Connection Failures is the number of times TCP connections have made a direct transition to the CLOSED state from the SYN-SENT state or the SYN-RCVD state, plus the number of times TCP connections have made a direct transition to the LISTEN state from the SYN-RCVD state.


Description:
Connections Active is the number of times TCP connections have made a direct transition to the SYN-SENT state from the CLOSED state.


Description:
Connections Established is the number of TCP connections for which the current state is either ESTABLISHED or CLOSE-WAIT.


Description:
Connections Passive is the number of times TCP connections have made a direct transition to the SYN-RCVD state from the LISTEN state.


Description:
Connections Reset is the number of times TCP connections have made a direct transition to the CLOSED state from either the ESTABLISHED state or the CLOSE-WAIT state.


Description:
Segments Received/sec is the rate that segments are received, including those received in error.  This count includes segments received on currently established connections.


Description:
Segments Retransmitted/sec is the rate that segments are retransmitted, that is, segments transmitted containing one or more previously transmitted bytes.


Description:
Segments Sent/sec is the rate that segments are sent, including those on current connections, but excluding those containing only retransmitted bytes.


Description:
Segments/sec is the rate that TCP segments are sent or received using the TCP protocol.


Description:
Fragmentation Failures is the number of IP datagrams that have been discarded because they needed to be fragmented at this entity but could not be, e.g., because their `Don't Fragment' flag was set.


Description:
Fragment Re-assembly Failures is the number of failures detected by the IP re-assembly algorithm (for whatever reason: timed out, errors, etc.)  This is not necessarily a count of discarded IP fragments since some algorithms (notably RFC 815) can lose track of the number of fragments by combining them as they are received.


# SupportedAnalysisHWSW

Description:
NT/2000 Server Specific To File Server and Sessions


Description:
Internet Information Server Performance Analysis


Description:
TCP/IP Statistics and Fragmentation Analysis


Description:
Graph's availability and response performance of HTTP and other services for specified time-frame


# WorkingSetHistory

Description:
Graph's last n hours for availability and response performance of HTTP and other services.


