Page Cannot Be Displayed Error - Troubleshooting Guide

Published Aug 20 2021 05:02 PM 1,894 Views

What is Page cannot be displayed?

 

There are certain scenarios in which when we try to browse a site hosted on IIS server, we end up getting Page cannot be displayed (PCBD) . There are several reasons for which we will eventually get PCBD , some of the reasons are :

 

  • Network related problems
  • Improper bindings on IIS
  • Improper certificates on IIS
  • Incorrect settings on Http.Sys

In most of the scenarios the request doesn’t even reach to the IIS layer and fails before that . Here is a nice article explaining about layers of service that a request has to travel: https://techcommunity.microsoft.com/t5/iis-support-blog/iis-services-http-sys-w3svc-was-w3wp-oh-my/b...

 

Generally, a PCBD error looks like below:

 

Archi_Chakraborty_0-1629502790429.png

 

 

This blog will focus on list of steps which are going to be useful for troubleshooting these kinds of scenarios .Here, I have created a Flow chart:

 

Archi_Chakraborty_1-1629502790435.png

 

 

 

There are several steps in the flow chart which require data collection , just listing a few of them here:

 

Steps for capturing Schnannel logs and Capi2 logs :

Schannel Logs:

 

  • Start Registry Editor. To do this, click Start, click Run, type regedt32, and then click OK.
  • Locate the following key in the registry:

 

    • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL
    • On the Edit menu, click Add Value, and then add the following registry value:
      • Value Name: EventLogging
      • Data Type: REG_DWORD
    • Note After you add this property, you must give it a value. See the table in the "Logging options" section to obtain the appropriate value for the kind of events that you want to log.
    • Exit Registry Editor.
    • Click Start, click Shut Down, click to select Restart, and then click OK to restart the computer. (Logging does not take effect until after you restart the computer).

 

Logging options:

 

The default value for Schannel event logging is 0x0000 in Windows NT Server 4.0, which means that no Schannel events are logged. In Windows 2000 Server and Windows XP Professional, this value is set to 0x0001, which means that error messages are logged. Additionally, you can log multiple events by specifying the hexadecimal value that equates to the logging options that you want. For example, to log error messages (0x0001) and warnings (0x0002), set the value to 0x0003.

 

Value  Description

0x0000       Do not log

0x0001        Log error messages

0x0002       Log warnings

0x0004       Log informational and success events

 

From https://support.microsoft.com/en-in/help/260729/how-to-enable-schannel-event-logging-in-iis

 

Capi2 Logs :

 

The CryptoAPI 2.0 Diagnostics is a feature available on Windows Server 2008+ that supports the trouble shooting of issues concerned with, for example: Certificate Chain Validation Certificate Store Operations Signature Verification

This article describes how to enable the CAPI2 Diagnostic, but for an in depth review of the capability, check here.

Enable CAPI2 logging by opening the Event Viewer and navigating to the Event Viewer (Local)\Applications and Services Logs\Microsoft\Windows\CAPI2 directory and expand it. You should see a view named Operational as illustrated in Figure 1.

Archi_Chakraborty_2-1629502790447.png

Figure 1, CAPI2 Diagnostics in Event Viewer

Next, right-click on the Operational view and click the Enable Log menu item as shown in Figure 2.

Archi_Chakraborty_3-1629502790449.png

Figure 2, Enable CAPI2 Event Logging

Once enabled, any warnings or errors are logged into the viewer. Reproduce the problem you are experiencing and check if the issue is logged.

 

Command for checking Reserved URLs:

 

 

 

 

netsh http show urlacl   

 

 

 

The above command lists DACLs  (discretionary access control list ) for the specified reserved URL or all reserved URLs.

 

Command for checking Http.sys Service State:

 

 

 

 

netsh http show ServiceState

 

 

 

 The above command shows snapshot of Http service .

 

Command for checking the IP Listen:

 

 

 

 

netsh http show iplisten  

 

 

 

  The above command lists all IP addresses in the IP listen list. The IP listen list is used to scope the list of addresses to which the HTTP service binds. "0.0.0.0" means any IPv4 address and "::" means any IPv6 address 

 

Capturing Network trace -

 

To capture Network trace using Netmon tool…please check out this link : https://docs.microsoft.com/en-us/windows/client-management/troubleshoot-tcpip-netmon

 

Steps for capturing Http.sys ETW trace:

 

Capture a Perfview trace with IIS ETW providers. You can download Perfview from : https://github.com/microsoft/perfview/releases/tag/P2.0.71

 

Before starting the Pervfiew trace just run this command in admin command prompt (this captures http.sys traces), also start the other traces:

 

 

 

netsh trace start capture=yes overwrite=yes maxsize=2048 tracefile=c:\minio_http.etl provider={DD5EF90A-6398-47A4-AD34-4DCECDEF795F} keywords=0xffffffffffffffff level=0xff provider={20F61733-57F1-4127-9F48-4AB7A9308AE2} keywords=0xffffffffffffffff level=0xff provider="Microsoft-Windows-HttpLog" keywords=0xffffffffffffffff level=0xff provider="Microsoft-Windows-HttpService" keywords=0xffffffffffffffff level=0xff provider="Microsoft-Windows-HttpEvent" keywords=0xffffffffffffffff level=0xff provider="Microsoft-Windows-Http-SQM-Provider" keywords=0xffffffffffffffff level=0xff

 

 

 

Make some 5-6 requests from client (http requests not https).. Once they fail, stop all of them, then run the below command to stop the command

 

 

 

netsh trace stop

 

 

 

This netsh trace will be saved on C drive with the name “minio_http.etl”..


Hope this one helps you.

 

Happy troubleshooting !!!

 

 

 

%3CLINGO-SUB%20id%3D%22lingo-sub-2670947%22%20slang%3D%22en-US%22%3EPage%20Cannot%20Be%20Displayed%20Error%20-%20Troubleshooting%20Guide%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2670947%22%20slang%3D%22en-US%22%3E%3CP%3EWhat%20is%20Page%20cannot%20be%20displayed%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20are%20certain%20scenarios%20in%20which%20when%20we%20try%20to%20browse%20a%20site%20hosted%20on%20IIS%20server%2C%20we%20end%20up%20getting%20Page%20cannot%20be%20displayed%20(PCBD)%20.%20There%20are%20several%20reasons%20for%20which%20we%20will%20eventually%20get%20PCBD%20%2C%20some%20of%20the%20reasons%20are%20%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3ENetwork%20related%20problems%3C%2FLI%3E%0A%3CLI%3EImproper%20bindings%20on%20IIS%3C%2FLI%3E%0A%3CLI%3EImproper%20certificates%20on%20IIS%3C%2FLI%3E%0A%3CLI%3EIncorrect%20settings%20on%20Http.Sys%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EIn%20most%20of%20the%20scenarios%20the%20request%20doesn%E2%80%99t%20even%20reach%20to%20the%20IIS%20layer%20and%20fails%20before%20that%20.%20Here%20is%20a%20nice%20article%20explaining%20about%20layers%20of%20service%20that%20a%20request%20has%20to%20travel%3A%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fiis-support-blog%2Fiis-services-http-sys-w3svc-was-w3wp-oh-my%2Fba-p%2F287856%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fiis-support-blog%2Fiis-services-http-sys-w3svc-was-w3wp-oh-my%2Fba-p%2F287856%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EGenerally%2C%20a%20PCBD%20error%20looks%20like%20below%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Archi_Chakraborty_0-1629502790429.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F304816i27F70F6CE535B5E2%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Archi_Chakraborty_0-1629502790429.png%22%20alt%3D%22Archi_Chakraborty_0-1629502790429.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20blog%20will%20focus%20on%20list%20of%20steps%20which%20are%20going%20to%20be%20useful%20for%20troubleshooting%20these%20kinds%20of%20scenarios%20.Here%2C%20I%20have%20created%20a%20Flow%20chart%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-align-center%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Archi_Chakraborty_1-1629502790435.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F304815i58A3A0BC9D88AAC3%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Archi_Chakraborty_1-1629502790435.png%22%20alt%3D%22Archi_Chakraborty_1-1629502790435.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20are%20several%20steps%20in%20the%20flow%20chart%20which%20require%20data%20collection%20%2C%20just%20listing%20a%20few%20of%20them%20here%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CEM%3E%3CU%3ESteps%20for%20capturing%20Schnannel%20logs%20and%20Capi2%20logs%20%3A%3C%2FU%3E%3C%2FEM%3E%3C%2FSTRONG%3E%3CBR%20%2F%3E%3CU%3E%3CBR%20%2F%3E%3CSTRONG%3ESchannel%20Logs%3A%3C%2FSTRONG%3E%3C%2FU%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EStart%20Registry%20Editor.%20To%20do%20this%2C%20click%20Start%2C%20click%20Run%2C%20type%20regedt32%2C%20and%20then%20click%20OK.%3C%2FLI%3E%0A%3CLI%3ELocate%20the%20following%20key%20in%20the%20registry%3A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CUL%3E%0A%3CLI%3EHKEY_LOCAL_MACHINE%5CSystem%5CCurrentControlSet%5CControl%5CSecurityProviders%5CSCHANNEL%3C%2FLI%3E%0A%3CLI%3EOn%20the%20Edit%20menu%2C%20click%20Add%20Value%2C%20and%20then%20add%20the%20following%20registry%20value%3A%3CUL%3E%0A%3CLI%3EValue%20Name%3A%20EventLogging%3C%2FLI%3E%0A%3CLI%3EData%20Type%3A%20REG_DWORD%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CUL%3E%0A%3CLI%3ENote%20After%20you%20add%20this%20property%2C%20you%20must%20give%20it%20a%20value.%20See%20the%20table%20in%20the%20%22Logging%20options%22%20section%20to%20obtain%20the%20appropriate%20value%20for%20the%20kind%20of%20events%20that%20you%20want%20to%20log.%3C%2FLI%3E%0A%3CLI%3EExit%20Registry%20Editor.%3C%2FLI%3E%0A%3CLI%3EClick%20Start%2C%20click%20Shut%20Down%2C%20click%20to%20select%20Restart%2C%20and%20then%20click%20OK%20to%20restart%20the%20computer.%20(Logging%20does%20not%20take%20effect%20until%20after%20you%20restart%20the%20computer).%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ELogging%20options%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20default%20value%20for%20Schannel%20event%20logging%20is%200x0000%20in%20Windows%20NT%20Server%204.0%2C%20which%20means%20that%20no%20Schannel%20events%20are%20logged.%20In%20Windows%202000%20Server%20and%20Windows%20XP%20Professional%2C%20this%20value%20is%20set%20to%200x0001%2C%20which%20means%20that%20error%20messages%20are%20logged.%20Additionally%2C%20you%20can%20log%20multiple%20events%20by%20specifying%20the%20hexadecimal%20value%20that%20equates%20to%20the%20logging%20options%20that%20you%20want.%20For%20example%2C%20to%20log%20error%20messages%20(0x0001)%20and%20warnings%20(0x0002)%2C%20set%20the%20value%20to%200x0003.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EValue%26nbsp%3B%20Description%3C%2FP%3E%0A%3CP%3E0x0000%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Do%20not%20log%3C%2FP%3E%0A%3CP%3E0x0001%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Log%20error%20messages%3C%2FP%3E%0A%3CP%3E0x0002%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Log%20warnings%3C%2FP%3E%0A%3CP%3E0x0004%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Log%20informational%20and%20success%20events%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFrom%20%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fsupport.microsoft.com%252Fen-in%252Fhelp%252F260729%252Fhow-to-enable-schannel-event-logging-in-iis%26amp%3Bdata%3D04%257C01%257Carchi.chakraborty%2540microsoft.com%257C129514611ce745b2630c08d9253dd080%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637581769722684298%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C1000%26amp%3Bsdata%3D7d0mhDreqFbQKEZsTEp6MsuTcoa89CmcXJBV56Temz4%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-in%2Fhelp%2F260729%2Fhow-to-enable-schannel-event-logging-in-iis%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CU%3ECapi2%20Logs%20%3A%3C%2FU%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20CryptoAPI%202.0%20Diagnostics%20is%20a%20feature%20available%20on%20Windows%20Server%202008%2B%20that%20supports%20the%20trouble%20shooting%20of%20issues%20concerned%20with%2C%20for%20example%3A%20Certificate%20Chain%20Validation%20Certificate%20Store%20Operations%20Signature%20Verification%3C%2FP%3E%0A%3CP%3EThis%20article%20describes%20how%20to%20enable%20the%20CAPI2%20Diagnostic%2C%20but%20for%20an%20in%20depth%20review%20of%20the%20capability%2C%20check%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttp%253A%252F%252Ftechnet.microsoft.com%252Fen-us%252Flibrary%252Fcc749296(v%253DWS.10).aspx%26amp%3Bdata%3D04%257C01%257Carchi.chakraborty%2540microsoft.com%257C129514611ce745b2630c08d9253dd080%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637581769722694291%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C1000%26amp%3Bsdata%3DDtCbnnQK1qdkHVkn5hw7x2Ybr8Sr5JFuMzOIW%252BNr0qQ%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehere%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3EEnable%20CAPI2%20logging%20by%20opening%20the%20Event%20Viewer%20and%20navigating%20to%20the%20Event%20Viewer%20(Local)%5CApplications%20and%20Services%20Logs%5CMicrosoft%5CWindows%5CCAPI2%20directory%20and%20expand%20it.%20You%20should%20see%20a%20view%20named%20Operational%20as%20illustrated%20in%20Figure%201.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Archi_Chakraborty_2-1629502790447.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F304817iB0343882AB74B0F6%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Archi_Chakraborty_2-1629502790447.png%22%20alt%3D%22Archi_Chakraborty_2-1629502790447.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EFigure%201%2C%20CAPI2%20Diagnostics%20in%20Event%20Viewer%3C%2FP%3E%0A%3CP%3ENext%2C%20right-click%20on%20the%20Operational%20view%20and%20click%20the%20Enable%20Log%20menu%20item%20as%20shown%20in%20Figure%202.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Archi_Chakraborty_3-1629502790449.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F304818i87E67F707F936C81%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Archi_Chakraborty_3-1629502790449.png%22%20alt%3D%22Archi_Chakraborty_3-1629502790449.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EFigure%202%2C%20Enable%20CAPI2%20Event%20Logging%3C%2FP%3E%0A%3CP%3EOnce%20enabled%2C%20any%20warnings%20or%20errors%20are%20logged%20into%20the%20viewer.%20Reproduce%20the%20problem%20you%20are%20experiencing%20and%20check%20if%20the%20issue%20is%20logged.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CEM%3E%3CU%3ECommand%20for%20checking%20Reserved%20URLs%3A%3C%2FU%3E%3C%2FEM%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-basic%22%3E%3CCODE%3Enetsh%20http%20show%20urlacl%20%20%20%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20above%20command%20lists%20DACLs%26nbsp%3B%20(discretionary%20access%20control%20list%20)%20for%20the%20specified%20reserved%20URL%20or%20all%20reserved%20URLs.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CEM%3E%3CU%3ECommand%20for%20checking%20Http.sys%20Service%20State%3A%3C%2FU%3E%3C%2FEM%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-basic%22%3E%3CCODE%3Enetsh%20http%20show%20ServiceState%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3BThe%26nbsp%3Babove%20command%20shows%20snapshot%20of%20Http%20service%20.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CEM%3E%3CU%3ECommand%20for%20checking%20the%20IP%20Listen%3A%3C%2FU%3E%3C%2FEM%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-basic%22%3E%3CCODE%3Enetsh%20http%20show%20iplisten%20%20%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%20The%26nbsp%3Babove%20command%20lists%20all%20IP%20addresses%20in%20the%20IP%20listen%20list.%20The%20IP%20listen%20list%20is%20used%20to%20scope%20the%20list%20of%20addresses%20to%20which%20the%20HTTP%20service%20binds.%20%220.0.0.0%22%20means%20any%20IPv4%20address%20and%20%22%3A%3A%22%20means%20any%20IPv6%20address%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CEM%3E%3CU%3ECapturing%20Network%20trace%3C%2FU%3E%3C%2FEM%3E%3C%2FSTRONG%3E%20-%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETo%20capture%20Network%20trace%20using%20Netmon%20tool%E2%80%A6please%20check%20out%20this%20link%20%3A%20%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fen-us%252Fwindows%252Fclient-management%252Ftroubleshoot-tcpip-netmon%26amp%3Bdata%3D04%257C01%257Carchi.chakraborty%2540microsoft.com%257C129514611ce745b2630c08d9253dd080%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637581769722704287%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C1000%26amp%3Bsdata%3Dzj7ixmvniATlinQQ4Eg5Xu9kG1saJ544mV7kdD93S3E%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fclient-management%2Ftroubleshoot-tcpip-netmon%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CEM%3E%3CU%3ESteps%20for%20capturing%20Http.sys%20ETW%20trace%3A%3C%2FU%3E%3C%2FEM%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECapture%20a%20Perfview%20trace%20with%20IIS%20ETW%20providers.%20You%20can%20download%20Perfview%20from%20%3A%26nbsp%3B%3CA%20tabindex%3D%22-1%22%20title%3D%22https%3A%2F%2Fgithub.com%2Fmicrosoft%2Fperfview%2Freleases%2Ftag%2Fp2.0.71%22%20href%3D%22https%3A%2F%2Fgithub.com%2Fmicrosoft%2Fperfview%2Freleases%2Ftag%2FP2.0.71%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20aria-label%3D%22Link%20https%3A%2F%2Fgithub.com%2Fmicrosoft%2Fperfview%2Freleases%2Ftag%2FP2.0.71%22%3Ehttps%3A%2F%2Fgithub.com%2Fmicrosoft%2Fperfview%2Freleases%2Ftag%2FP2.0.71%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBefore%20starting%20the%20Pervfiew%20trace%20just%20run%20this%20command%20in%20admin%20command%20prompt%20(this%20captures%20http.sys%20traces)%2C%20also%20start%20the%20other%20traces%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-basic%22%3E%3CCODE%3Enetsh%20trace%20start%20capture%3Dyes%20overwrite%3Dyes%20maxsize%3D2048%20tracefile%3Dc%3A%5Cminio_http.etl%20provider%3D%7BDD5EF90A-6398-47A4-AD34-4DCECDEF795F%7D%20keywords%3D0xffffffffffffffff%20level%3D0xff%20provider%3D%7B20F61733-57F1-4127-9F48-4AB7A9308AE2%7D%20keywords%3D0xffffffffffffffff%20level%3D0xff%20provider%3D%22Microsoft-Windows-HttpLog%22%20keywords%3D0xffffffffffffffff%20level%3D0xff%20provider%3D%22Microsoft-Windows-HttpService%22%20keywords%3D0xffffffffffffffff%20level%3D0xff%20provider%3D%22Microsoft-Windows-HttpEvent%22%20keywords%3D0xffffffffffffffff%20level%3D0xff%20provider%3D%22Microsoft-Windows-Http-SQM-Provider%22%20keywords%3D0xffffffffffffffff%20level%3D0xff%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMake%20some%205-6%20requests%20from%20client%20(http%20requests%20not%20https)..%20Once%20they%20fail%2C%20stop%20all%20of%20them%2C%20then%20run%20the%20below%20command%20to%20stop%20the%20command%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-basic%22%3E%3CCODE%3Enetsh%20trace%20stop%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20netsh%20trace%20will%20be%20saved%20on%20C%20drive%20with%20the%20name%20%E2%80%9Cminio_http.etl%E2%80%9D..%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3EHope%20this%20one%20helps%20you.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CEM%3EHappy%20troubleshooting%20!!!%3C%2FEM%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Aug 23 2021 10:08 AM
Updated by: