Solved

How to troubleshoot 404's on server

Posted on 2006-07-14
7
220 Views
Last Modified: 2010-03-18
Hello I am a new systems admin for some webservers and I am trying to diagnose a potential problem with a server I am having. Some users are finding that some pages are not coming up. Not a specific page but some asp pages are just timing out or not showing up.  

So my question is would you use the performance monitor in windows 2003 server? Or would there be some monitoring software that would be more appropriate for this instance? I think there is a lot of sites being hosted on this server so it is naturally slower. But what methods would I use to confirm this hypothesis?

Here is our latest log just so you can have some more information to show some 404 errors (more than any other server):

Check time      Status message      Connection Times (sec.)      Ping results
            DNS      Connect      First Byte      Last Byte      Total Response      Loss      Minimum (ms.)      Average (ms.)      Maximum (ms.)
07/13/2006 00:18      OK      0.0010      0.0660      3.1660      0.1650      3.3980      -      -      -      -
07/13/2006 00:48      OK      0.0010      0.0660      0.1280      0.1650      0.3600      -      -      -      -
07/13/2006 01:18      OK      0.0010      0.0660      0.1340      0.2220      0.4230      -      -      -      -
07/13/2006 01:49      OK      0.0010      0.0660      0.7030      0.1670      0.9370      -      -      -      -
07/13/2006 02:19      404 - Not Found      0.0010      0.0660      0.1190      0.1370      0.3230      -      -      -      -
07/13/2006 02:49      OK      0.0010      0.0660      0.1490      0.1660      0.3820      -      -      -      -
07/13/2006 03:19      OK      0.0010      0.0660      0.1480      0.1640      0.3790      -      -      -      -
07/13/2006 03:50      OK      0.0010      0.0660      0.1270      0.1660      0.3600      -      -      -      -
07/13/2006 04:20      OK      0.0010      0.0660      0.1330      0.1680      0.3680      -      -      -      -
07/13/2006 04:50      OK      0.0010      0.0660      0.1380      0.1650      0.3700      -      -      -      -
07/13/2006 05:21      OK      0.0010      0.0660      0.1180      0.1700      0.3550      -      -      -      -
07/13/2006 05:51      OK      0.0010      0.1580      0.1750      0.2570      0.5910      -      -      -      -
07/13/2006 06:21      OK      0.0010      0.0660      0.1170      0.1660      0.3500      -      -      -      -
07/13/2006 06:51      OK      0.0020      0.0660      0.1750      0.3150      0.5580      -      -      -      -
07/13/2006 07:22      OK      0.0010      0.0660      0.1840      0.1650      0.4160      -      -      -      -
07/13/2006 07:52      OK      0.0010      0.0660      0.1160      0.1650      0.3480      -      -      -      -
07/13/2006 08:22      OK      0.0010      0.0670      0.1380      0.1950      0.4010      -      -      -      -
07/13/2006 08:53      OK      0.0010      0.0660      0.1750      0.1700      0.4120      -      -      -      -
07/13/2006 09:23      OK      0.0010      0.0660      0.1090      0.1660      0.3420      -      -      -      -
07/13/2006 09:53      OK      0.0010      0.1010      0.1380      0.2000      0.4400      -      -      -      -
07/13/2006 10:24      OK      0.0010      0.0660      0.1160      0.2080      0.3910      -      -      -      -
07/13/2006 10:54      OK      0.0010      3.0640      0.1620      3.3070      6.5340      -      -      -      -
07/13/2006 11:24      OK      0.0010      0.1430      0.7930      0.2740      1.2110      -      -      -      -
07/13/2006 11:54      OK      0.1250      0.0660      0.1790      0.4310      0.8010      -      -      -      -
07/13/2006 12:25      OK      0.0010      0.0680      0.1230      0.1670      0.3590      -      -      -      -
07/13/2006 12:55      OK      0.0010      0.0660      0.1300      0.1650      0.3620      -      -      -      -
07/13/2006 13:26      OK      0.0010      0.0780      0.1370      0.1770      0.3930      -      -      -      -
07/13/2006 13:56      OK      0.0010      0.0660      0.1490      0.2200      0.4360      -      -      -      -
07/13/2006 14:27      OK      0.0010      0.0660      0.1330      0.2270      0.4270      -      -      -      -
07/13/2006 14:57      OK      0.0010      0.0660      0.1290      0.1660      0.3620      -      -      -      -
07/13/2006 15:27      OK      0.0010      0.1180      0.1280      0.2600      0.5070      -      -      -      -
07/13/2006 15:58      OK      0.0010      0.0660      0.1310      0.1650      0.3630      -      -      -      -
07/13/2006 16:28      OK      0.0010      0.0660      0.1280      0.1660      0.3610      -      -      -      -
07/13/2006 16:58      OK      0.0010      0.0660      0.1530      0.1650      0.3850      -      -      -      -
07/13/2006 17:28      OK      0.0010      0.0660      0.1280      0.1660      0.3610      -      -      -      -
07/13/2006 17:58      OK      0.0010      0.1560      0.2390      0.3680      0.7640      -      -      -      -
07/13/2006 18:28      OK      0.0010      0.0680      3.1470      0.1710      3.3870      -      -      -      -
07/13/2006 18:58      OK      0.0010      0.0670      0.1620      0.1640      0.3940      -      -      -      -
07/13/2006 19:28      OK      0.0010      0.0660      0.1440      0.1630      0.3740      -      -      -      -
07/13/2006 19:58      OK      0.0010      0.0660      0.1720      0.1650      0.4040      -      -      -      -
07/13/2006 20:29      OK      0.0010      3.0610      3.1470      3.1600      9.3690      -      -      -      -
07/13/2006 20:59      OK      0.0010      0.0760      0.1280      0.1780      0.3830      -      -      -      -
07/13/2006 21:29      404 - Not Found      0.0010      0.0660      0.1040      0.1370      0.3080      -      -      -      -
07/13/2006 21:59      OK      0.0010      0.0660      0.1410      0.1650      0.3730      -      -      -      -
07/13/2006 22:29      OK      0.0010      0.1330      0.3990      0.3210      0.8540      -      -      -      -
07/13/2006 23:00      OK      0.0010      0.0660      0.2030      0.1660      0.4360      -      -      -      -
07/13/2006 23:30      OK      0.0010      0.0700      0.2640      0.1690      0.5040      -      -      -      -
Totals:       0.0037      0.2030      0.3693      0.3244      0.9003      -      -      -      -

0
Comment
Question by:Calv1n
  • 4
  • 3
7 Comments
 
LVL 43

Accepted Solution

by:
Steve Knight earned 500 total points
ID: 17109193
What do the IIS logs under %windir%\system32\logs\ show happening at these times?

Steve
0
 

Author Comment

by:Calv1n
ID: 17109593
It looks like some normal access to web files If you would like to look, here ya go:

For the 21:29  Timeout:


2006-07-13 21:29:04 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S24-02.WAV NOCACHE=0.7277578 80 - 192.168.0.4 NSPlayer/9.0.0.3250 200 0 0

2006-07-13 21:29:05 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S24-02.WAV NOCACHE=0.7277578 80 - 192.168.0.4 NSPlayer/9.0.0.3250+WMFSDK/9.0 206 0 0

2006-07-13 21:29:10 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S24-03.WAV NOCACHE=0.3548502 80 - 192.168.0.4 Windows-Media-Player/9.00.00.3349 200 0 64

2006-07-13 21:29:10 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S24-03.WAV NOCACHE=0.3548502 80 - 192.168.0.4 NSPlayer/9.0.0.3250 200 0 64

2006-07-13 21:29:11 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S24-03.WAV NOCACHE=0.3548502 80 - 192.168.0.4 NSPlayer/9.0.0.3250+WMFSDK/9.0 206 0 0

2006-07-13 21:29:34 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Screen.asp NOCACHE=0.2229886&PID=0&SID=23&ID=4&S=8&DONE=Y 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+Pivot;+SV1;+FunWebProducts) 200 0 0

2006-07-13 21:29:34 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Pictures/P25-1.jpg NOCACHE=0.4239727jpg 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+Pivot;+SV1;+FunWebProducts) 200 0 0

2006-07-13 21:29:34 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Pictures/P25-1.jpg NOCACHE=0.2732508jpg 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+Pivot;+SV1;+FunWebProducts) 200 0 0

2006-07-13 21:29:34 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Pictures/P25-1.jpg NOCACHE=0.3466853jpg 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+Pivot;+SV1;+FunWebProducts) 200 0 0

2006-07-13 21:29:35 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-01.WAV NOCACHE=0.4451563 80 - 192.168.0.4 Windows-Media-Player/9.00.00.3349 200 0 0

2006-07-13 21:29:35 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Pictures/P25-1.jpg NOCACHE=0.4239727jpg 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+Pivot;+SV1;+FunWebProducts) 200 0 0

2006-07-13 21:29:35 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-01.WAV NOCACHE=0.4451563 80 - 192.168.0.4 NSPlayer/9.0.0.3250 200 0 0

2006-07-13 21:29:42 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-02.WAV NOCACHE=0.5797475 80 - 192.168.0.4 Windows-Media-Player/9.00.00.3349 200 0 0

2006-07-13 21:29:42 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-02.WAV NOCACHE=0.5797475 80 - 192.168.0.4 NSPlayer/9.0.0.3250 200 0 0

2006-07-13 21:29:43 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-02.WAV NOCACHE=0.5797475 80 - 192.168.0.4 NSPlayer/9.0.0.3250+WMFSDK/9.0 206 0 0

2006-07-13 21:29:52 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-03.WAV NOCACHE=0.3977579 80 - 192.168.0.4 Windows-Media-Player/9.00.00.3349 200 0 64

2006-07-13 21:29:53 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-03.WAV NOCACHE=0.3977579 80 - 192.168.0.4 NSPlayer/9.0.0.3250 200 0 64

2006-07-13 21:29:53 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-03.WAV NOCACHE=0.3977579 80 - 192.168.0.4 NSPlayer/9.0.0.3250+WMFSDK/9.0 206 0 0

AND 02:19:

2006-07-13 02:19:33 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-05.WAV NOCACHE=0.9458835 80 - 192.168.0.4 NSPlayer/10.0.0.3646+WMFSDK/10.0 206 0 0

2006-07-13 02:19:34 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/No35+PM+Forming+Section+WBT/animations/G-S02-01-01-01a08.swf NOCACHE=0.1324165swf 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 206 0 0

2006-07-13 02:19:40 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/ - 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 403 14 5

2006-07-13 02:19:40 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/ - 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 403 14 5

2006-07-13 02:19:40 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/No35+PM+Forming+Section+WBT/wbtsounds/S02-02-05-11.wav NOCACHE=0.3217866 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 200 0 0

2006-07-13 02:19:45 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/No35+PM+Forming+Section+WBT/animations/G-S02-01-01-01a11.swf NOCACHE=1.281142E-03swf 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 206 0 0

2006-07-13 02:19:45 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-06.WAV NOCACHE=0.4466437 80 - 192.168.0.4 Windows-Media-Player/10.00.00.4036 200 0 64

2006-07-13 02:19:45 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-06.WAV NOCACHE=0.4466437 80 - 192.168.0.4 NSPlayer/10.0.0.3646 200 0 0

2006-07-13 02:19:46 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-06.WAV NOCACHE=0.4466437 80 - 192.168.0.4 NSPlayer/10.0.0.3646+WMFSDK/10.0 206 0 0

2006-07-13 02:19:50 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/ - 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 403 14 5

2006-07-13 02:19:50 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/ - 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 403 14 5

2006-07-13 02:19:50 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/No35+PM+Forming+Section+WBT/wbtsounds/S02-02-05-12.wav NOCACHE=0.1796094 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 200 0 0

2006-07-13 02:19:57 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-07.WAV NOCACHE=0.4429874 80 - 192.168.0.4 Windows-Media-Player/10.00.00.4036 200 0 0

2006-07-13 02:19:57 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-07.WAV NOCACHE=0.4429874 80 - 192.168.0.4 NSPlayer/10.0.0.3646 200 0 0

2006-07-13 02:19:57 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-07.WAV NOCACHE=0.4429874 80 - 192.168.0.4 NSPlayer/10.0.0.3646+WMFSDK/10.0 206 0 0

2006-07-13 02:19:59 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/PopQuizQA.asp NOCACHE=0.7756592&PID=1&SID=6&ID=3&S=5 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 200 0 0

THANKS AGAIN!!
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 17111289
Well surely somewhere in the IIS logs there must be 404's in their that match up with your other logging and I  don't see any there?
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 

Author Comment

by:Calv1n
ID: 17111553
So it would give 404's in the log as well? In other words when someone gets a 404, the server is knowingly telling the client "sorry we dont have the page available" and takes a note of it in the log?
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 17112049
It should do surely, that's the whole point of the error numbers.  If it were a different issue then you would get a 403 (forbidden), 401, 402 etc. or if it wasn;t talking to the server at all then it would get a DNS error or timeout.

If it is getting a 404 then something, either the web server itself or a load balancer, proxy server, ISA server, or web forwarder between client and server is replying saying "404".

Steve
0
 

Author Comment

by:Calv1n
ID: 17168369
Thanks again for helping me out with this issue. I appreaciate it!
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 17168588
No problem, thanks for the points

Steve
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Downtime reduced, data recovered by utilizing an Experts Exchange Business Account Challenge The United States Marine Corps employs more than 200,000 active-duty Marines with operations in four continents, all requiring complex networking system…
This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now