PRB: Window Media Server Log Shows Bytes Received is Greater Than Bytes Sent (293617)


The information in this article applies to:

  • Microsoft Windows Media Services 4.1
This article was previously published under Q293617

SYMPTOMS

The Window Media Server log may contain log entries where c-bytes are greater than sc-bytes. This implies that the client received more bytes than the server sent.

CAUSE

There are cases where multiple log entries account for sc-bytes.

STATUS

This behavior is by design.

MORE INFORMATION

Windows Media Server logs a 408 disconnect containing the server statistics if it does not receive anything from the client for more than 30 seconds. This also resets the server-side statistics for the particular client.

In the case where a disconnect has not actually occurred, the streaming may complete and the client may post a log request with its client-side stats, but the server-side stats are re-initialized. The original bytes are not included in the total. The log entries must be patched together when this occurs.

In the following example, the 200 log entry makes it appear as though the client received more bytes than the server sent. The sum of sc-bytes for the 408 and the 200 log entry is approximately the total of c-bytes. This needs to be accounted for in billing systems that use these fields. 

time      c-ip        c-status  sc-bytes  c-bytes
20:58:40  4.35.127.7  408       231017    -
20:59:48  4.35.127.7  200       228310    558068

Modification Type:MajorLast Reviewed:4/10/2002
Keywords:kbprb KB293617
©2002 Microsoft Corporation. All rights reserved.