Collecting ETW traces for FTP Sessions

Posted: Aug 28, 2008  9 comments

Average Rating

Tags
Debugging
FTP
Publishing

Having problems with FTP Server not returning the expected return code? You have checked the detailed error message, nt event log and ftp log files, still can not get to the bottom of the problem?

Here are few simple steps you can follow to trace your ftp session and uncover the real cause. This feature is supported on Microsoft FTP Sever 7.0, which can be downloaded from http://www.microsoft.com/downloads/details.aspx?familyid=2ECCF14A-5C4F-4CFB-9153-CFE1204B346A&displaylang=en, and above.

1. Start FTP ETW Session using logman.exe

   Note: You need to be a system administrator on the FTP Server to be able to execute this command.

logman start "ftp" -p "IIS: Ftp Server" 255 5 –ets

2. Reproduce the error you are hitting

3. Stop FTP ETW Session using logman.exe

    Note: You need to be a system administrator on the FTP Server to be able to execute this command.

logman stop "ftp" –ets

4. Parse the etw log file using logparser.exe

    Note: LogParser can be downloaded from http://www.microsoft.com/downloads/details.aspx?FamilyID=890cd06b-abf8-4c25-91b2-f8d975cf8c07&displaylang=en

<Path To LogParser>\logparser "select EventTypeName, UserData from ftp.etl" -e 20 -o:DATAGRID -rtp 20 -compactModeSep " | "

 

The final step will open the etw log in the following grid format

image

 

In the above case the error is (Event #18) 0x8007002 (Specified File Not Found).

 

-Suditi

Comments

  1. Robert McMurray's Blog [MSFT]
    August 29, 2008

    My good friend Suditi Lahiri has written a terrific blog entry about one of the great new features in

  2. car insurance » FTP and ETW Tracing
    August 29, 2008

    Pingback from  car insurance &raquo; FTP and ETW Tracing

  3. funny wallpaper » FTP and ETW Tracing
    August 29, 2008

    Pingback from  funny wallpaper &raquo; FTP and ETW Tracing

  4. discount furniture » FTP and ETW Tracing
    August 29, 2008

    Pingback from  discount furniture &raquo; FTP and ETW Tracing

  5. a-foton » FTP and ETW Tracing
    August 29, 2008

    Pingback from  a-foton &raquo; FTP and ETW Tracing

  6. Robert McMurray
    August 29, 2008

    My good friend Suditi Lahiri has written a terrific blog entry about one of the great new features in

  7. » FTP and ETW Tracing
    August 29, 2008

    Pingback from  &raquo; FTP and ETW Tracing

  8. Adventures in IIS, Commerce and whatever else comes into my head.
    November 12, 2008

    I’ve been working with this a lot recently and thought I’d share some of what I found with you. You'll

  9. Introduction to the Secure FTP Server 7.0 in Windows 2008 | MS Tech News
    November 12, 2008

    Pingback from  Introduction to the Secure FTP Server 7.0 in Windows 2008 | MS Tech News

Page view counter