asked on

How to troubleshoot 404's on server

Hello I am a new systems admin for some webservers and I am trying to diagnose a potential problem with a server I am having. Some users are finding that some pages are not coming up. Not a specific page but some asp pages are just timing out or not showing up.

So my question is would you use the performance monitor in windows 2003 server? Or would there be some monitoring software that would be more appropriate for this instance? I think there is a lot of sites being hosted on this server so it is naturally slower. But what methods would I use to confirm this hypothesis?

Here is our latest log just so you can have some more information to show some 404 errors (more than any other server):

Check time      Status message      Connection Times (sec.)      Ping results
            DNS      Connect      First Byte      Last Byte      Total Response      Loss      Minimum (ms.)      Average (ms.)      Maximum (ms.)
07/13/2006 00:18      OK      0.0010      0.0660      3.1660      0.1650      3.3980      -      -      -      -
07/13/2006 00:48      OK      0.0010      0.0660      0.1280      0.1650      0.3600      -      -      -      -
07/13/2006 01:18      OK      0.0010      0.0660      0.1340      0.2220      0.4230      -      -      -      -
07/13/2006 01:49      OK      0.0010      0.0660      0.7030      0.1670      0.9370      -      -      -      -
07/13/2006 02:19      404 - Not Found      0.0010      0.0660      0.1190      0.1370      0.3230      -      -      -      -
07/13/2006 02:49      OK      0.0010      0.0660      0.1490      0.1660      0.3820      -      -      -      -
07/13/2006 03:19      OK      0.0010      0.0660      0.1480      0.1640      0.3790      -      -      -      -
07/13/2006 03:50      OK      0.0010      0.0660      0.1270      0.1660      0.3600      -      -      -      -
07/13/2006 04:20      OK      0.0010      0.0660      0.1330      0.1680      0.3680      -      -      -      -
07/13/2006 04:50      OK      0.0010      0.0660      0.1380      0.1650      0.3700      -      -      -      -
07/13/2006 05:21      OK      0.0010      0.0660      0.1180      0.1700      0.3550      -      -      -      -
07/13/2006 05:51      OK      0.0010      0.1580      0.1750      0.2570      0.5910      -      -      -      -
07/13/2006 06:21      OK      0.0010      0.0660      0.1170      0.1660      0.3500      -      -      -      -
07/13/2006 06:51      OK      0.0020      0.0660      0.1750      0.3150      0.5580      -      -      -      -
07/13/2006 07:22      OK      0.0010      0.0660      0.1840      0.1650      0.4160      -      -      -      -
07/13/2006 07:52      OK      0.0010      0.0660      0.1160      0.1650      0.3480      -      -      -      -
07/13/2006 08:22      OK      0.0010      0.0670      0.1380      0.1950      0.4010      -      -      -      -
07/13/2006 08:53      OK      0.0010      0.0660      0.1750      0.1700      0.4120      -      -      -      -
07/13/2006 09:23      OK      0.0010      0.0660      0.1090      0.1660      0.3420      -      -      -      -
07/13/2006 09:53      OK      0.0010      0.1010      0.1380      0.2000      0.4400      -      -      -      -
07/13/2006 10:24      OK      0.0010      0.0660      0.1160      0.2080      0.3910      -      -      -      -
07/13/2006 10:54      OK      0.0010      3.0640      0.1620      3.3070      6.5340      -      -      -      -
07/13/2006 11:24      OK      0.0010      0.1430      0.7930      0.2740      1.2110      -      -      -      -
07/13/2006 11:54      OK      0.1250      0.0660      0.1790      0.4310      0.8010      -      -      -      -
07/13/2006 12:25      OK      0.0010      0.0680      0.1230      0.1670      0.3590      -      -      -      -
07/13/2006 12:55      OK      0.0010      0.0660      0.1300      0.1650      0.3620      -      -      -      -
07/13/2006 13:26      OK      0.0010      0.0780      0.1370      0.1770      0.3930      -      -      -      -
07/13/2006 13:56      OK      0.0010      0.0660      0.1490      0.2200      0.4360      -      -      -      -
07/13/2006 14:27      OK      0.0010      0.0660      0.1330      0.2270      0.4270      -      -      -      -
07/13/2006 14:57      OK      0.0010      0.0660      0.1290      0.1660      0.3620      -      -      -      -
07/13/2006 15:27      OK      0.0010      0.1180      0.1280      0.2600      0.5070      -      -      -      -
07/13/2006 15:58      OK      0.0010      0.0660      0.1310      0.1650      0.3630      -      -      -      -
07/13/2006 16:28      OK      0.0010      0.0660      0.1280      0.1660      0.3610      -      -      -      -
07/13/2006 16:58      OK      0.0010      0.0660      0.1530      0.1650      0.3850      -      -      -      -
07/13/2006 17:28      OK      0.0010      0.0660      0.1280      0.1660      0.3610      -      -      -      -
07/13/2006 17:58      OK      0.0010      0.1560      0.2390      0.3680      0.7640      -      -      -      -
07/13/2006 18:28      OK      0.0010      0.0680      3.1470      0.1710      3.3870      -      -      -      -
07/13/2006 18:58      OK      0.0010      0.0670      0.1620      0.1640      0.3940      -      -      -      -
07/13/2006 19:28      OK      0.0010      0.0660      0.1440      0.1630      0.3740      -      -      -      -
07/13/2006 19:58      OK      0.0010      0.0660      0.1720      0.1650      0.4040      -      -      -      -
07/13/2006 20:29      OK      0.0010      3.0610      3.1470      3.1600      9.3690      -      -      -      -
07/13/2006 20:59      OK      0.0010      0.0760      0.1280      0.1780      0.3830      -      -      -      -
07/13/2006 21:29      404 - Not Found      0.0010      0.0660      0.1040      0.1370      0.3080      -      -      -      -
07/13/2006 21:59      OK      0.0010      0.0660      0.1410      0.1650      0.3730      -      -      -      -
07/13/2006 22:29      OK      0.0010      0.1330      0.3990      0.3210      0.8540      -      -      -      -
07/13/2006 23:00      OK      0.0010      0.0660      0.2030      0.1660      0.4360      -      -      -      -
07/13/2006 23:30      OK      0.0010      0.0700      0.2640      0.1690      0.5040      -      -      -      -
Totals:       0.0037      0.2030      0.3693      0.3244      0.9003      -      -      -      -

ASKER CERTIFIED SOLUTION

Steve Knight

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Calv1n

ASKER

It looks like some normal access to web files If you would like to look, here ya go:

For the 21:29 Timeout:

2006-07-13 21:29:04 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S24-02.WAV NOCACHE=0.7277578 80 - 192.168.0.4 NSPlayer/9.0.0.3250 200 0 0

2006-07-13 21:29:05 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S24-02.WAV NOCACHE=0.7277578 80 - 192.168.0.4 NSPlayer/9.0.0.3250+WMFSDK/9.0 206 0 0

2006-07-13 21:29:10 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S24-03.WAV NOCACHE=0.3548502 80 - 192.168.0.4 Windows-Media-Player/9.00.00.3349 200 0 64

2006-07-13 21:29:10 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S24-03.WAV NOCACHE=0.3548502 80 - 192.168.0.4 NSPlayer/9.0.0.3250 200 0 64

2006-07-13 21:29:11 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S24-03.WAV NOCACHE=0.3548502 80 - 192.168.0.4 NSPlayer/9.0.0.3250+WMFSDK/9.0 206 0 0

2006-07-13 21:29:34 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Screen.asp NOCACHE=0.2229886&PID=0&SID=23&ID=4&S=8&DONE=Y 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+Pivot;+SV1;+FunWebProducts) 200 0 0

2006-07-13 21:29:34 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Pictures/P25-1.jpg NOCACHE=0.4239727jpg 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+Pivot;+SV1;+FunWebProducts) 200 0 0

2006-07-13 21:29:34 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Pictures/P25-1.jpg NOCACHE=0.2732508jpg 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+Pivot;+SV1;+FunWebProducts) 200 0 0

2006-07-13 21:29:34 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Pictures/P25-1.jpg NOCACHE=0.3466853jpg 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+Pivot;+SV1;+FunWebProducts) 200 0 0

2006-07-13 21:29:35 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-01.WAV NOCACHE=0.4451563 80 - 192.168.0.4 Windows-Media-Player/9.00.00.3349 200 0 0

2006-07-13 21:29:35 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Pictures/P25-1.jpg NOCACHE=0.4239727jpg 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+Pivot;+SV1;+FunWebProducts) 200 0 0

2006-07-13 21:29:35 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-01.WAV NOCACHE=0.4451563 80 - 192.168.0.4 NSPlayer/9.0.0.3250 200 0 0

2006-07-13 21:29:42 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-02.WAV NOCACHE=0.5797475 80 - 192.168.0.4 Windows-Media-Player/9.00.00.3349 200 0 0

2006-07-13 21:29:42 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-02.WAV NOCACHE=0.5797475 80 - 192.168.0.4 NSPlayer/9.0.0.3250 200 0 0

2006-07-13 21:29:43 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-02.WAV NOCACHE=0.5797475 80 - 192.168.0.4 NSPlayer/9.0.0.3250+WMFSDK/9.0 206 0 0

2006-07-13 21:29:52 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-03.WAV NOCACHE=0.3977579 80 - 192.168.0.4 Windows-Media-Player/9.00.00.3349 200 0 64

2006-07-13 21:29:53 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-03.WAV NOCACHE=0.3977579 80 - 192.168.0.4 NSPlayer/9.0.0.3250 200 0 64

2006-07-13 21:29:53 192.168.0.15 GET /ip-androscoggin-contractor-safety/HTML_CBT/Contractor+Safety/Sounds/S25-03.WAV NOCACHE=0.3977579 80 - 192.168.0.4 NSPlayer/9.0.0.3250+WMFSDK/9.0 206 0 0

AND 02:19:

2006-07-13 02:19:33 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-05.WAV NOCACHE=0.9458835 80 - 192.168.0.4 NSPlayer/10.0.0.3646+WMFSDK/10.0 206 0 0

2006-07-13 02:19:34 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/No35+PM+Forming+Section+WBT/animations/G-S02-01-01-01a08.swf NOCACHE=0.1324165swf 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 206 0 0

2006-07-13 02:19:40 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/ - 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 403 14 5

2006-07-13 02:19:40 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/ - 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 403 14 5

2006-07-13 02:19:40 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/No35+PM+Forming+Section+WBT/wbtsounds/S02-02-05-11.wav NOCACHE=0.3217866 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 200 0 0

2006-07-13 02:19:45 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/No35+PM+Forming+Section+WBT/animations/G-S02-01-01-01a11.swf NOCACHE=1.281142E-03swf 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 206 0 0

2006-07-13 02:19:45 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-06.WAV NOCACHE=0.4466437 80 - 192.168.0.4 Windows-Media-Player/10.00.00.4036 200 0 64

2006-07-13 02:19:45 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-06.WAV NOCACHE=0.4466437 80 - 192.168.0.4 NSPlayer/10.0.0.3646 200 0 0

2006-07-13 02:19:46 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-06.WAV NOCACHE=0.4466437 80 - 192.168.0.4 NSPlayer/10.0.0.3646+WMFSDK/10.0 206 0 0

2006-07-13 02:19:50 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/ - 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 403 14 5

2006-07-13 02:19:50 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/ - 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 403 14 5

2006-07-13 02:19:50 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/No35+PM+Forming+Section+WBT/wbtsounds/S02-02-05-12.wav NOCACHE=0.1796094 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 200 0 0

2006-07-13 02:19:57 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-07.WAV NOCACHE=0.4429874 80 - 192.168.0.4 Windows-Media-Player/10.00.00.4036 200 0 0

2006-07-13 02:19:57 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-07.WAV NOCACHE=0.4429874 80 - 192.168.0.4 NSPlayer/10.0.0.3646 200 0 0

2006-07-13 02:19:57 192.168.0.15 GET /sp-newsprint-contractor-safety/HTML_CBT/Contractor+Safety+Orientation/Sounds/S68-07.WAV NOCACHE=0.4429874 80 - 192.168.0.4 NSPlayer/10.0.0.3646+WMFSDK/10.0 206 0 0

2006-07-13 02:19:59 192.168.0.15 GET /IPCourtlandWBTs/HTML_CBT_2/PopQuizQA.asp NOCACHE=0.7756592&PID=1&SID=6&ID=3&S=5 80 - 192.168.0.4 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322) 200 0 0

THANKS AGAIN!!

Steve Knight

Well surely somewhere in the IIS logs there must be 404's in their that match up with your other logging and I don't see any there?

Calv1n

ASKER

So it would give 404's in the log as well? In other words when someone gets a 404, the server is knowingly telling the client "sorry we dont have the page available" and takes a note of it in the log?

Steve Knight

It should do surely, that's the whole point of the error numbers. If it were a different issue then you would get a 403 (forbidden), 401, 402 etc. or if it wasn;t talking to the server at all then it would get a DNS error or timeout.

If it is getting a 404 then something, either the web server itself or a load balancer, proxy server, ISA server, or web forwarder between client and server is replying saying "404".

Steve

Calv1n

ASKER

Thanks again for helping me out with this issue. I appreaciate it!

Steve Knight

No problem, thanks for the points

Steve