summaryrefslogtreecommitdiffstats
path: root/public/oak/bin/perfh009.ini
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--public/oak/bin/perfh009.ini2205
1 files changed, 2205 insertions, 0 deletions
diff --git a/public/oak/bin/perfh009.ini b/public/oak/bin/perfh009.ini
new file mode 100644
index 000000000..c4a56ae3e
--- /dev/null
+++ b/public/oak/bin/perfh009.ini
@@ -0,0 +1,2205 @@
+ "3", "The System object type includes those counters "
+ "that apply to all processors on the computer "
+ "collectively. These counters represent the activity of "
+ "all processors on the computer.",
+
+ "5", "The Memory object type includes those counters "
+ "that describe the behavior of both real and virtual "
+ "memory on the computer. Real memory is allocated in "
+ "units of pages. Virtual memory may exceed real "
+ "memory in size, causing page traffic as virtual pages "
+ "are moved between disk and real memory.",
+
+ "7", "Processor Time is expressed as a percentage of the "
+ "elapsed time that a processor is busy executing "
+ "a non-Idle thread. It can be viewed as the fraction "
+ "of the time spent doing useful work. Each processor is "
+ "assigned an Idle thread in the Idle process which consumes "
+ "those unproductive processor cycles not used by any other "
+ "threads.",
+
+ "11", "File Read Operations/sec is an aggregate of all the file system "
+ "read operations on the computer.",
+
+ "13", "File Write Operations/sec is an aggregate of all the file system "
+ "write operations on the computer.",
+
+ "15", "File Control Operations/sec is an aggregate of all "
+ "file system operations that are neither reads nor writes. "
+ "These operations usually include file system control requests or "
+ "requests for information about device characteristics or "
+ "status.",
+
+ "17", "File Read Bytes/sec is an aggregate of the bytes transferred "
+ "for all the file system read operations on the computer.",
+
+ "19", "File Write Bytes/sec is an aggregate of the bytes transferred "
+ "for all the file system write operations on the computer.",
+
+ "21", "File Control Bytes/sec is an aggregate of bytes transferred "
+ "for all file system operations that are neither reads nor "
+ "writes. These operations usually include file system control "
+ "requests or requests for information about device "
+ "characteristics or status.",
+
+ "25", "Available Bytes displays the size of the virtual memory "
+ "currently on the Zeroed, Free, and Standby lists. Zeroed "
+ "and Free memory is ready for use, with Zeroed memory cleared "
+ "to zeros. Standby memory is memory removed from a process's "
+ "Working Set but still available. Notice that this is an "
+ "instantaneous count, not an average over the time interval.",
+
+ "27", "Committed Bytes displays the size of virtual memory "
+ "(in bytes) that has been Committed (as opposed to simply "
+ "reserved). Committed memory must have backing (i.e., disk) "
+ "storage available, or must be assured never to need disk "
+ "storage (because main memory is large enough to hold it.) "
+ "Notice that this is an instantaneous count, not an average "
+ "over the time interval.",
+
+ "29", "Page Faults/sec is a count of the Page Faults in "
+ "the processor. A page fault occurs when a process "
+ "refers to a virtual memory page that is not in its "
+ "Working Set in main memory. A Page Fault will not "
+ "cause the page to be fetched from disk if that page "
+ "is on the standby list, and hence already in main memory, "
+ "or if it is in use by another process with whom the "
+ "page is shared.",
+
+ "31", "Commit Limit is the size (in bytes) of "
+ "virtual memory that can be committed without having to "
+ "extend the paging file(s). If the paging file(s) can "
+ "be extended, this is a soft limit.",
+
+ "33", "Write Copies/sec is the number of page faults that "
+ "have been satisfied by making a copy of a page when an "
+ "attempt to write to the page is made. This is an "
+ "economical way of sharing data since the copy "
+ "of the page is only made on an attempt to write to "
+ "the page; otherwise, the page is shared.",
+
+ "35", "Transition Faults/sec is the number of page faults "
+ "resolved by recovering pages that were in "
+ "transition, i.e., being written to disk at the time "
+ "of the page fault. The pages were recovered without "
+ "additional disk activity.",
+
+ "37", "Cache Faults occur whenever the Cache manager does "
+ "not find a file's page in the immediate Cache and "
+ "must ask the memory manager to locate the page "
+ "elsewhere in memory or on the disk so that it can be "
+ "loaded into the immediate Cache.",
+
+ "39", "Demand Zero Faults are the number of page faults for "
+ "pages that must be filled with zeros before the "
+ "fault is satisfied. If the Zeroed list is not empty, "
+ "the fault can be resolved by removing a page from "
+ "the Zeroed list.",
+
+ "41", "Pages/sec is the number of pages read from the disk "
+ "or written to the disk "
+ "to resolve memory references to pages that "
+ "were not in memory at the time of the reference. "
+ "This is the sum of Pages Input/sec and Pages Output/sec. "
+ "This counter includes paging traffic on behalf of the "
+ "system Cache to access file data for applications. "
+ "This is the primary counter to observe if you are concerned "
+ "about excessive memory pressure (that is, thrashing), and "
+ "the excessive paging that may result.",
+
+ "43", "Page Reads/sec is the number of times the disk was read "
+ "to retrieve pages of virtual memory necessary to resolve "
+ "page faults. Multiple pages can be read during a disk read "
+ "operation.",
+
+ "45", "Processor Queue Length is the instantaneous length of the "
+ "processor queue "
+ "in units of threads. This counter is always 0 "
+ "unless you are also monitoring a thread counter. "
+ "All processors use a single "
+ "queue in which threads wait for processor cycles. "
+ "This length does not include the threads that are "
+ "currently executing. A sustained processor queue length "
+ "greater than two generally indicates processor congestion. "
+ "This is an instantaneous count, not an average over the "
+ "time interval.",
+
+ "47", "Thread State is the current state of the thread. "
+ "It is 0 for Initialized, 1 for Ready, 2 for Running, "
+ "3 for Standby, 4 for Terminated, 5 for Wait, "
+ "6 for Transition, 7 for Unknown. A Running thread is "
+ "using a processor; a Standby thread is about to use one. "
+ "A Ready thread wants to use a processor, but "
+ "is waiting for a processor because none are "
+ "free. A thread in Transition is waiting for a resource "
+ "in order to execute, such as waiting for its execution stack "
+ "to be paged in from disk. A Waiting thread has no use for "
+ "the processor because it is waiting for a peripheral "
+ "operation to complete or a resource to become free.",
+
+ "49", "Pages Output/sec is a count of the number of pages that "
+ "are written to disk because the pages "
+ "have been modified in main memory.",
+
+ "51", "Page Writes/sec is a count of the number of times "
+ "pages have been written to the disk because they "
+ "were changed since last retrieved. Each such write "
+ "operation may transfer a "
+ "number of pages.",
+
+ "57", "Pool Paged Bytes is the number of bytes in the "
+ "Paged Pool, a system memory area where space is acquired "
+ "by operating system components as they accomplish their "
+ "appointed tasks. Paged Pool pages can "
+ "be paged out to the paging file when not accessed by "
+ "the system for sustained periods of time.",
+
+ "59", "Pool Nonpaged Bytes is the number of bytes in the "
+ "Nonpaged Pool, a system memory area where space is acquired "
+ "by operating system components as they accomplish their "
+ "appointed tasks. Nonpaged Pool pages cannot be paged "
+ "out to the paging file, but instead remain in main memory "
+ "as long as they are allocated.",
+
+ "61", "Pool Paged Allocs is the number of calls to allocate "
+ "space in the system Paged Pool. "
+ "Paged Pool is a system memory area where space is acquired "
+ "by operating system components as they accomplish their "
+ "appointed tasks. Paged Pool pages can "
+ "be paged out to the paging file when not accessed by "
+ "the system for sustained periods of time.",
+
+ "63", "Pool Paged Resident Bytes is the size of paged Pool resident in "
+ "core memory. This is the actual cost of the paged Pool allocation, "
+ "since this is actively in use and using real physical memory.",
+
+ "65", "Pool Nonpaged Allocs is the number of calls to "
+ "allocate space in the system Nonpaged Pool. "
+ "Nonpaged Pool is a system memory area where space is acquired "
+ "by operating system components as they accomplish their "
+ "appointed tasks. Nonpaged Pool pages cannot be paged "
+ "out to the paging file, but instead remain in main memory "
+ "as long as they are allocated.",
+
+ "67", "Bytes Total/sec is the sum of Frame Bytes/sec and "
+ "Datagram Bytes/sec. This is the total rate of bytes "
+ "sent to or received from the network by the protocol, "
+ "but only counts the bytes in frames (i.e., packets) "
+ "which carry data.",
+
+ "69", "System Code Total Bytes is the number of bytes of pagable pages "
+ "in ntoskrnl.exe, hal.dll, and the boot drivers and file systems "
+ "loaded by ntldr/osloader.",
+
+ "71", "System Code Resident Bytes is the number of bytes of "
+ "System Code Total Bytes currently resident in core memory. "
+ "This is the code working set of the pagable executive. "
+ "In addition to this, there is another ~300k bytes of non-paged "
+ "kernel code.",
+
+ "73", "System Driver Total Bytes is the number of bytes of pagable "
+ "pages in all other loaded device drivers.",
+
+ "75", "System Driver Resident Bytes is the number of bytes of "
+ "System Driver Total Bytes currently resident in core memory. "
+ "This number is the code working set of the pagable drviers. "
+ "In addition to this, there is another ~700k bytes of non-paged "
+ "driver code.",
+
+ "77", "System Cache Resident Bytes is the number of bytes currently "
+ "resident in the global disk cache.",
+
+ "87", "The Cache object type manages memory for rapid access to "
+ "files. Files on Windows NT are cached in main memory in "
+ "units of pages. Main memory not being used in the working "
+ "sets of processes is available to the Cache for "
+ "this purpose. The Cache preserves file pages in memory "
+ "for as long as possible to permit access to the "
+ "data through the file system without having to access the "
+ "disk.",
+
+ "89", "Data Maps/sec is the frequency that a file system "
+ "such as NTFS or "
+ "HPFS maps a page of a file into the Cache to read the page.",
+
+ "91", "Sync Data Maps/sec counts the frequency that a "
+ "file system such as NTFS "
+ "or HPFS maps a page of a file into the Cache to read the "
+ "page, and wishes to wait for the Cache to retrieve the "
+ "page if it is not in main memory.",
+
+ "93", "Async Data Maps/sec is the frequency that an "
+ "application using a file system such as "
+ "NTFS or HPFS to map a page of a file into the Cache to read "
+ "the page, and does not wish to wait for the Cache to "
+ "retrieve the page if it is not in main memory.",
+
+ "95", "Data Map Hits is the percentage of Data Maps in "
+ "the Cache that could be resolved without having to "
+ "retrieve a page from the disk, i.e. the page was already "
+ "in physical memory.",
+
+ "97", "Data Map Pins/sec is the frequency of Data Maps in "
+ "the Cache that resulted in pinning a page in main "
+ "memory, an action usually preparatory to writing to the "
+ "file on disk. While pinned, a page's physical address "
+ "in main memory and virtual address in the Cache "
+ "will not be altered.",
+
+ "99", "Pin Reads/sec is the frequency of "
+ "reading data into the Cache preparatory to writing the "
+ "data back to disk. "
+ "Pages read in this fashion are pinned in memory at "
+ "the completion of the read. While pinned, a page's "
+ "physical address in the Cache will not be altered.",
+
+ "101", "Sync Pin Reads/sec is the frequency of "
+ "reading data into the "
+ "Cache preparatory to writing the data back to disk. "
+ "Pages read in this fashion are pinned in memory at the "
+ "completion of the read. The file system will not "
+ "regain control until the page is pinned in the Cache, "
+ "in particular if the disk must be accessed to retrieve the "
+ "page. While pinned, a page's physical address in the Cache will "
+ "not be altered.",
+
+ "103", "Async Pin Reads/sec is the frequency of "
+ "reading data into the "
+ "Cache preparatory to writing the data back to disk. "
+ "Pages read in this fashion are pinned in memory at the "
+ "completion of the read. The file system will regain "
+ "control immediately even if the disk must be accessed "
+ "to retrieve the page. While pinned, a page's physical "
+ "address will not be altered.",
+
+ "105", "Pin Read Hits is the percentage of Cache Pin Read "
+ "requests that hit the Cache, i.e., did not require a disk "
+ "read in order to provide access to the page in the Cache. "
+ "While pinned, a page's physical address in the Cache will "
+ "not be altered. "
+ "The LAN Redirector uses this method for retrieving Cache "
+ "information, as does the LAN Server for small transfers. "
+ "This is usually the method used by the disk file systems "
+ "as well.",
+
+ "107", "Copy Reads/sec is the frequency of reads from "
+ "Cache pages that involve "
+ "a memory copy of the data from the Cache to the "
+ "application's buffer. The LAN Redirector uses this method "
+ "for retrieving Cache information, as does the "
+ "LAN Server for small transfers. This is a method used "
+ "by the disk file systems as well.",
+
+ "109", "Sync Copy Reads/sec is the frequency of reads from "
+ "Cache pages that "
+ "involve a memory copy of the data from the Cache to the "
+ "application's buffer. The file system will not regain "
+ "control until the copy operation is complete, even "
+ "if the disk must be accessed to retrieve the page.",
+
+ "111", "Async Copy Reads/sec is the frequency of reads "
+ "from Cache pages that "
+ "involve a memory copy of the data from the Cache to the "
+ "application's buffer. The application will regain "
+ "control immediately even if the disk must be accessed "
+ "to retrieve the page.",
+
+ "113", "Copy Read Hits is the percentage of Cache Copy Read "
+ "requests that hit the Cache, i.e., did not require a "
+ "disk read in order to provide access to the page in "
+ "the Cache. A Copy Read is a file read operation that is "
+ "satisfied by a memory copy from a Cache page to the "
+ "application's buffer. "
+ "The LAN Redirector uses this method for "
+ "retrieving Cache information, as does the LAN Server "
+ "for small transfers. This is a method used by the disk "
+ "file systems as well.",
+
+ "115", "MDL Reads/sec is the frequency of reads from "
+ "Cache pages that use "
+ "a Memory Descriptor List (MDL) to access the data. The "
+ "MDL contains the physical address of each page involved "
+ "in the transfer, and thus can employ a "
+ "hardware Direct Memory Access (DMA) device to effect the "
+ "copy. The LAN Server uses this method for large transfers "
+ "out of the server.",
+
+ "117", "Sync MDL Reads/sec is the frequency of reads from "
+ "Cache pages that use a "
+ "Memory Descriptor List (MDL) to access the pages. The MDL "
+ "contains the physical address of each page in the transfer, "
+ "thus permitting Direct Memory Access (DMA) of the pages. "
+ "If the accessed page(s) are not in main memory, the caller "
+ "will wait for the pages to fault in from the disk.",
+
+ "119", "Async MDL Reads/sec is the frequency of reads "
+ "from Cache pages using a Memory Descriptor List (MDL) to "
+ "access the pages. The MDL contains the physical address "
+ "of each page in the transfer, thus permitting Direct "
+ "Memory Access (DMA) of the pages. If the accessed page(s) "
+ "are not in main memory, the calling application program will "
+ "not wait for the pages to fault in from disk.",
+
+ "121", "MDL Read Hits is the percentage of Cache Memory "
+ "Descriptor List (MDL) Read "
+ "requests that hit the Cache, i.e., did not require disk "
+ "accesses in order to provide memory access to the page(s) "
+ "in the Cache.",
+
+ "123", "Read Aheads/sec is the frequency of Cache reads "
+ "where the Cache detects sequential access to a file. "
+ "The read aheads permit the data to be transferred in "
+ "larger blocks than those being requested by the "
+ "application, reducing the overhead per access.",
+
+ "125", "Fast Reads/sec is the frequency of reads from "
+ "Cache pages that bypass "
+ "the installed file system and retrieve the data "
+ "directly from the Cache. Normally, file I/O requests "
+ "invoke the appropriate file system to retrieve data from "
+ "a file, but this path permits direct retrieval of Cache "
+ "data without file system involvement if the data is in "
+ "the Cache. Even if the data is not in the Cache, one "
+ "invocation of the file system is avoided.",
+
+ "127", "Sync Fast Reads/sec is the frequency of reads "
+ "from Cache pages that "
+ "bypass the installed file system and retrieve the data "
+ "directly from the Cache. Normally, file I/O requests "
+ "invoke the appropriate file system to retrieve data "
+ "from a file, but this path permits direct retrieval of "
+ "Cache data without file system involvement if the "
+ "data is in the Cache. Even if the data is not in the "
+ "Cache, one invocation of the file system is avoided. "
+ "If the data is not in the Cache, the request (application "
+ "program call) will wait "
+ "until the data has been retrieved from disk.",
+
+ "129", "Async Fast Reads/sec is the frequency of reads "
+ "from Cache pages that "
+ "bypass the installed file system and retrieve the data "
+ "directly from the Cache. Normally, file I/O requests will "
+ "invoke the appropriate file system to retrieve data "
+ "from a file, but this path permits direct retrieval "
+ "of Cache data without file system involvement if the "
+ "data is in the Cache. Even if the data is not in the "
+ "Cache, one invocation of the file system is avoided. "
+ "If the data is not in the Cache, the request (application "
+ "program call) will not wait until the data has been "
+ "retrieved from disk, but will get control immediately.",
+
+ "131", "Fast Read Resource Misses/sec is the frequency of "
+ "Cache misses necessitated by the lack of available "
+ "resources to satisfy the request.",
+
+ "133", "Fast Read Not Possibles/sec is the frequency of "
+ "attempts by "
+ "an Application Program Interface (API) function call "
+ "to bypass the file system to get at Cache data, that "
+ "could not be honored without invoking the file system "
+ "after all.",
+
+ "135", "Lazy Write Flushes/sec is the frequency "
+ "the Cache's Lazy Write thread has written to disk. "
+ "Lazy Writing is the process of updating the disk after "
+ "the page has been changed in memory, so the application "
+ "making the change to the file does not have to wait for "
+ "the disk write to complete before proceeding. "
+ "More than one page can be transferred on each write "
+ "operation.",
+
+ "137", "Lazy Write Pages/sec is the frequency "
+ "the Cache's Lazy Write thread has written to disk. "
+ "Lazy Writing is the process of updating the disk after "
+ "the page has been changed in memory, so the application "
+ "making the change to the file does not have to wait for "
+ "the disk write to complete before proceeding. "
+ "More than one page can be transferred on a single disk "
+ "write operation.",
+
+ "139", "Data Flushes/sec is the frequency "
+ "the Cache has flushed its contents to disk as the "
+ "result of a request to flush or to satisfy a write-through "
+ "file write request. More than one page can be "
+ "transferred on each flush operation.",
+
+ "141", "Data Flush Pages/sec is the number of pages "
+ "the Cache has flushed to disk as a result of a request "
+ "to flush or to satisfy a write-through file write "
+ "request. More than one page can be transferred on each "
+ "flush operation.",
+
+ "143", "User Time is the percentage of processor time spent "
+ "in User Mode in non-Idle threads. All application code "
+ "and subsystem code "
+ "execute in User Mode. The graphics engine, graphics "
+ "device drivers, printer device drivers, and the "
+ "window manager also execute in User Mode. "
+ "Code executing in User Mode cannot damage the integrity "
+ "of the Windows NT Executive, Kernel, and device drivers. "
+ "Unlike some early operating systems, Windows NT uses "
+ "process boundaries for subsystem protection in "
+ "addition to the traditional protection of User and Privileged "
+ "modes. These subsystem processes provide additional"
+ " protection. "
+ "Therefore, some work done by Windows NT on behalf of "
+ "your application may appear in other subsystem processes "
+ "in addition to the Privileged Time in your process.",
+
+ "145", "Privileged Time is the percentage of processor time "
+ "spent in Privileged Mode in non-Idle threads. The Windows "
+ "NT service layer, "
+ "the Executive routines, and the Windows NT Kernel "
+ "execute in Privileged Mode. Device drivers for most "
+ "devices other than graphics adapters and printers "
+ "also execute in Privileged Mode. "
+ "Unlike some early operating systems, Windows NT uses "
+ "process boundaries for subsystem protection in "
+ "addition to the traditional protection of User and Privileged "
+ "modes. These subsystem processes provide additional"
+ " protection. "
+ "Therefore, some work done by Windows NT on behalf of "
+ "your application may appear in other subsystem processes "
+ "in addition to the Privileged Time in your process.",
+
+ "147", "Context Switches/sec is the rate of switches from one "
+ "thread to another. Thread switches can occur either "
+ "inside of a single process or across processes. A thread "
+ "switch may be caused either by one thread asking another "
+ "for information, or by a thread being preempted by another, "
+ "higher priority thread becoming ready to run. "
+ "Unlike some early operating systems, Windows NT uses "
+ "process boundaries for subsystem protection in "
+ "addition to the traditional protection of User and Privileged "
+ "modes. These subsystem processes provide additional"
+ " protection. "
+ "Therefore, some work done by Windows NT on behalf of "
+ "an application may appear in other subsystem processes "
+ "in addition to the Privileged Time in the application. "
+ "Switching to the subsystem process causes one Context Switch "
+ "in the application thread. "
+ "Switching back causes another Context Switch in the "
+ "subsystem thread.",
+
+ "149", "Interrupts/sec is the number of device interrupts the "
+ "processor is experiencing. A device interrupts the "
+ "processor when it has completed a task or when it "
+ "otherwise requires attention. Normal thread execution "
+ "is suspended during interrupts. An interrupt may cause "
+ "the processor to switch to another, higher priority "
+ "thread. Clock interrupts are frequent and periodic "
+ "and create a background of interrupt activity.",
+
+ "151", "Systems Calls/sec is the frequency of calls to Windows NT "
+ "system service routines. These routines perform all "
+ "of the basic scheduling and synchronization of activities "
+ "on the computer, and provide access to non-graphical "
+ "devices, memory management, and name space management.",
+
+ "153", "Level 1 TLB Fills/sec is the frequency of faults that "
+ "occur when reference is made to memory whose Page Table Entry "
+ "(PTE) is not in the Translation Lookaside Buffer (TLB). "
+ "On some "
+ "computers this fault is handled by software loading the "
+ "PTE into the TLB, and this counter is incremented.",
+
+ "155", "Level 2 TLB Fills/sec is the frequency of faults that "
+ "occur when reference is made to memory whose Page Table Entry "
+ "(PTE) is not in the Translation Lookaside Buffer (TLB), nor "
+ "is the page containing the PTE. "
+ "On some "
+ "computers this fault is handled by software loading the "
+ "PTE into the TLB, and this counter is incremented.",
+
+ "157", "User Time is the percentage of elapsed time that this "
+ "process's threads have spent executing code in User Mode. "
+ "Applications execute in User Mode, as do subsystems "
+ "like the window manager and the graphics engine. "
+ "Code executing in User Mode cannot damage the integrity "
+ "of the Windows NT Executive, Kernel, and device drivers. "
+ "Unlike some early operating systems, Windows NT uses "
+ "process boundaries for subsystem protection in "
+ "addition to the traditional protection of User and Privileged "
+ "modes. These subsystem processes provide additional"
+ " protection. "
+ "Therefore, some work done by Windows NT on behalf of "
+ "your application may appear in other subsystem processes "
+ "in addition to the Privileged Time in your process.",
+
+ "159", "Privileged Time is the percentage of elapsed time that this "
+ "process's threads have spent executing code in Privileged "
+ "Mode. When a Windows NT system service is called, "
+ "the service will often run in Privileged Mode "
+ "to gain access to system-private data. Such data "
+ "is protected from access by threads executing in "
+ "User Mode. Calls to the system may be explicit, or "
+ "they may be implicit such as when a page fault or an "
+ "interrupt occurs. "
+ "Unlike some early operating systems, Windows NT uses "
+ "process boundaries for subsystem protection in "
+ "addition to the traditional protection of User and Privileged "
+ "modes. These subsystem processes provide additional"
+ " protection. "
+ "Therefore, some work done by Windows NT on behalf of "
+ "your application may appear in other subsystem processes "
+ "in addition to the Privileged Time in your process.",
+
+ "173", "Virtual Bytes Peak is the maximum number of bytes of "
+ "virtual address space the process has used at any one "
+ "time. Use of virtual address space does not necessarily "
+ "imply corresponding use of either disk or main memory "
+ "pages. Virtual space is however finite, and by using "
+ "too much, the process may limit its ability to load "
+ "libraries.",
+
+ "175", "Virtual Bytes is the current size in bytes of the "
+ "virtual address space the process is using. "
+ "Use of virtual address space does not necessarily imply "
+ "corresponding use of either disk or main memory pages. "
+ "Virtual space is however finite, and by using too much, "
+ "the process may limit its ability to load libraries.",
+
+ "177", "Page Faults/sec is the rate of Page Faults by the threads "
+ "executing in this process. "
+ "A page fault occurs when a thread refers to a virtual "
+ "memory page that is not in its working set in main "
+ "memory. This will not cause the page to be fetched from "
+ "disk if it is on the standby list and hence already in "
+ "main memory, or if it is in use by another process with "
+ "whom the page is shared.",
+
+ "179", "Working Set Peak is the maximum number of bytes in the "
+ "Working Set of this process at any point in time. "
+ "The Working Set is the set of memory pages touched "
+ "recently by the threads in the process. "
+ "If free memory in the computer is above a threshold, "
+ "pages are left in the Working Set of a process even if "
+ "they are not in use. When free memory falls below "
+ "a threshold, pages are trimmed from Working Sets. If "
+ "they are needed they will then be soft-faulted back into the "
+ "Working Set before they leave main memory.",
+
+ "181", "Working Set is the current number of bytes "
+ "in the Working Set of this process. "
+ "The Working Set is the set of memory pages touched "
+ "recently by the threads in the process. "
+ "If free memory in the computer is above a threshold, "
+ "pages are left in the Working Set of a process even if "
+ "they are not in use. When free memory falls below "
+ "a threshold, pages are trimmed from Working Sets. If "
+ "they are needed they will then be soft-faulted back into the "
+ "Working Set before they leave main memory.",
+
+ "183", "Page File Bytes Peak is the maximum number of bytes this "
+ "process has used in the paging file(s). Paging files are "
+ "used to store pages of memory used by the process "
+ "that are not contained in other files. Paging "
+ "files are shared by all processes, and lack of space "
+ "in paging files can prevent other processes from "
+ "allocating memory.",
+
+ "185", "Page File Bytes is the current number of bytes this process "
+ "has used in the paging file(s). Paging files are "
+ "used to store pages of memory used by the process "
+ "that are not contained in other files. Paging "
+ "files are shared by all processes, and lack of space "
+ "in paging files can prevent other processes from "
+ "allocating memory.",
+
+ "187", "Private Bytes is the current number of bytes this process "
+ "has allocated that cannot be shared with other processes.",
+
+ "189", "Processor Time is the percentage of elapsed time that "
+ "all of the threads of this process used the processor "
+ "to execute instructions. An instruction is the basic "
+ "unit of execution in a computer, a thread is the object "
+ "that executes instructions, and a process is the object "
+ "created when a program is run. Code executed to handle "
+ "certain hardware interrupts or trap conditions may be "
+ "counted for this process.",
+
+ "191", "Processor Time is the percentage of elapsed time that this "
+ "thread used the processor to execute instructions. "
+ "An instruction is the basic unit of execution in a processor, "
+ "and a thread is the object that executes instructions. "
+ "Code executed to handle certain hardware interrupts or "
+ "trap conditions may be counted for this thread.",
+
+ "193", "User Time is the percentage of elapsed time that this "
+ "thread has spent executing code in User Mode. "
+ "Applications execute in User Mode, as do subsystems like "
+ "the window manager and the graphics engine. "
+ "Code executing in User Mode cannot damage the integrity "
+ "of the Windows NT Executive, Kernel, and device drivers. "
+ "Unlike some early operating systems, Windows NT uses "
+ "process boundaries for subsystem protection in "
+ "addition to the traditional protection of User and Privileged "
+ "modes. These subsystem processes provide additional"
+ " protection. "
+ "Therefore, some work done by Windows NT on behalf of "
+ "your application may appear in other subsystem processes "
+ "in addition to the Privileged Time in your process.",
+
+ "195", "Privileged Time is the percentage of elapsed time that "
+ "this thread has spent executing code in Privileged Mode. "
+ "When a Windows NT system service is called, "
+ "the service will often run in Privileged Mode in order "
+ "to gain access to system-private data. Such data is "
+ "protected from access by threads executing in User Mode. "
+ "Calls to the system may be explicit, or they may be "
+ "implicit such as when a page fault or an interrupt occurs. "
+ "Unlike some early operating systems, Windows NT uses "
+ "process boundaries for subsystem protection in "
+ "addition to the traditional protection of User and Privileged "
+ "modes. These subsystem processes provide additional"
+ " protection. "
+ "Therefore, some work done by Windows NT on behalf of "
+ "your application may appear in other subsystem processes "
+ "in addition to the Privileged Time in your process.",
+
+ "197", "Context Switches/sec is the rate of switches from one "
+ "thread to another. Thread switches can occur either inside "
+ "of a single process or across processes. A thread switch "
+ "may be caused either by one thread asking another for "
+ "information, or by a thread being preempted by another, "
+ "higher priority thread becoming ready to run. "
+ "Unlike some early operating systems, Windows NT uses "
+ "process boundaries for subsystem protection in "
+ "addition to the traditional protection of User and Privileged "
+ "modes. These subsystem processes provide additional"
+ " protection. "
+ "Therefore, some work done by Windows NT on behalf of "
+ "an application may appear in other subsystem processes "
+ "in addition to the Privileged Time in the application. "
+ "Switching to the subsystem process causes one Context Switch "
+ "in the application thread. "
+ "Switching back causes another Context Switch in the "
+ "subsystem thread.",
+
+ "199", "Disk Queue Length is the number of requests outstanding on "
+ "the disk at the time the performance data is collected. "
+ "It includes requests in service at the time of the snapshot. "
+ "This is an instantaneous length, not an average over the "
+ "time interval. "
+ "Multi-spindle disk devices can have multiple requests "
+ "active at one time, but other concurrent requests are "
+ "awaiting service. "
+ "This counter may reflect a transitory high or low queue length, "
+ "but if there is a sustained load on the disk drive, it is "
+ "likely that this will be consistently high. "
+ "Requests are experiencing "
+ "delays proportional to the length of this queue minus the "
+ "number of spindles on the disks. This difference should average "
+ "less than 2 for good performance.",
+
+ "201", "Disk Time is the percentage of elapsed time that the "
+ "selected disk drive is busy servicing read or write requests.",
+
+ "203", "Disk Read Time is the percentage of elapsed time that the "
+ "selected disk drive is busy servicing read requests.",
+
+ "205", "Disk Write Time is the percentage of elapsed time that the "
+ "selected disk drive is busy servicing write requests.",
+
+ "207", "Avg. Disk sec/Transfer is the time in seconds of the average disk "
+ "transfer.",
+
+ "209", "Avg. Disk sec/Read is the average time in seconds of a "
+ "read of data from the disk.",
+
+ "211", "Avg. Disk sec/Write is the average time in seconds of a "
+ "write of data to the disk.",
+
+ "213", "Disk Transfers/sec is the rate of read and write operations "
+ "on the disk.",
+
+ "215", "Disk Reads/sec is the rate of read operations on the disk.",
+
+ "217", "Disk Writes/sec is the rate of write operations on the disk.",
+
+ "219", "Disk Bytes/sec is the rate bytes are transferred "
+ "to or from the disk during write or read operations.",
+
+ "221", "Disk Read Bytes/sec is the rate bytes are transferred from "
+ "the disk during read operations.",
+
+ "223", "Disk Write Bytes is rate bytes are transferred to the disk "
+ "during write operations.",
+
+ "225", "Avg. Disk Bytes/Transfer is the average number of bytes transferred "
+ "to or from the disk during write or read operations.",
+
+ "227", "Avg. Disk Bytes/Read is the average number of bytes "
+ "transferred from the disk during read operations.",
+
+ "229", "Avg. Disk Bytes/Write is the average number of bytes "
+ "transferred to the disk during write operations.",
+
+ "231", "The Process object type is created when a "
+ "program is run. All the threads in a process share the "
+ "same address space and have access to the same data.",
+
+ "233", "The Thread object type is the basic object that executes "
+ "instructions in a processor. Every running process has at "
+ "least one thread.",
+
+ "235", "A Physical Disk object type is a hard or fixed disk drive. "
+ "It will contain 1 or more logical partitions. Disks are used "
+ "to store file, program, and paging data. The disk is read "
+ "to retrieve these items, and written to record changes to them.",
+
+ "237", "A Logical Disk object type is a partition on a hard or fixed "
+ "disk drive and assigned a drive letter, such as C. "
+ "Disks can be partitioned into distinct sections where they "
+ "can store file, program, and page data. The disk is read "
+ "to retrieve these items, and written to record changes to them.",
+
+ "239", "The Processor object type includes as instances all "
+ "processors on the computer. A processor is the part "
+ "in the computer that performs arithmetic and logical "
+ "computations, and initiates operations on peripherals. "
+ "It executes (i.e., runs) programs on the computer.",
+
+ "241", "The % Total Processor Time is the average percentage of time "
+ "that all the processors on the system are busy executing "
+ "non-idle threads. "
+ "On a multi-processor system, if all processors are always "
+ "busy this is 100%, if all processors are 50% busy this "
+ "is 50% and if 1/4th of the processors are busy this is "
+ "25%. "
+ "It can be viewed as the fraction "
+ "of the time spent doing useful work. Each processor is "
+ "assigned an Idle thread in the Idle process which consumes "
+ "those unproductive processor cycles not used by any other "
+ "threads. ",
+
+ "243", "The % Total User Time is the average percentage of time spent "
+ "in User mode by all processors. "
+ "On a multi-processor system, if all processors are always "
+ "in User mode this is 100%, if all processors are 50% "
+ "in User mode this "
+ "is 50% and if 1/4th of the processors are in User mode this "
+ "is 25%. "
+ "Applications execute in User Mode, as do subsystems like "
+ "the window manager and the graphics engine. "
+ "Code executing in User Mode cannot damage the integrity "
+ "of the Windows NT Executive, Kernel, and device drivers. "
+ "Unlike some early operating systems, Windows NT uses "
+ "process boundaries for subsystem protection in "
+ "addition to the traditional protection of User and Privileged "
+ "modes. These subsystem processes provide additional"
+ " protection. "
+ "Therefore, some work done by Windows NT on behalf of "
+ "an application may appear in other subsystem processes "
+ "in addition to the Privileged Time in the application process.",
+
+ "245", "The % Total Privileged Time is the average percentage of time "
+ "spent in Privileged mode by all processors. "
+ "On a multi-processor system, if all processors are always "
+ "in Privileged mode this is 100%, if all processors are 50% "
+ "in Privileged mode this "
+ "is 50% and if 1/4th of the processors are in Privileged mode this "
+ "is 25%. "
+ "When a Windows NT system service is called, "
+ "the service will often run in Privileged Mode in order "
+ "to gain access to system-private data. Such data is "
+ "protected from access by threads executing in User Mode. "
+ "Calls to the system may be explicit, or they may be "
+ "implicit such as when a page fault or an interrupt occurs. "
+ "Unlike some early operating systems, Windows NT uses "
+ "process boundaries for subsystem protection in "
+ "addition to the traditional protection of User and Privileged "
+ "modes. These subsystem processes provide additional"
+ " protection. "
+ "Therefore, some work done by Windows NT on behalf of "
+ "an application may appear in other subsystem processes "
+ "in addition to the Privileged Time in the application process.",
+
+ "247", "Total Interrupts/sec is the rate the computer is receiving "
+ "and servicing hardware interrupts. Some devices that may "
+ "generate interrupts are the system timer, the mouse, data "
+ "communication lines, network interface "
+ "cards and other peripheral devices. This counter provides an "
+ "indication of how busy these devices are on a computer-wide "
+ "basis. See also Processor:Interrupts/sec.",
+
+ "249", "Processes is the number of processes in the computer at "
+ "the time of data collection. Notice that this is an "
+ "instantaneous count, not an average over the time interval. "
+ "Each process represents the running of a program.",
+
+ "251", "Threads is the number of threads in the computer at the time "
+ "of data collection. Notice that this is an instantaneous "
+ "count, not an average over the time interval. A thread is "
+ "the basic executable entity that can execute instructions "
+ "in a processor.",
+
+ "253", "Events is the number of events in the computer at the time "
+ "of data collection. Notice that this is an instantaneous "
+ "count, not an average over the time interval. An "
+ "event is used when two or more threads wish to synchronize "
+ "execution.",
+
+ "255", "Semaphores is the number of semaphores in the computer at the "
+ "time of data collection. Notice that this is an instantaneous "
+ "count, not an average over the time interval. Threads "
+ "use semaphores to obtain exclusive access to data structures "
+ "that they share with other threads.",
+
+ "257", "Mutexes counts the number of mutexes in the computer "
+ "at the time of data collection. This is an instantaneous "
+ "count, not an average over the time interval. Mutexes "
+ "are used by threads to assure only one thread is executing"
+ " some section of code.",
+
+ "259", "Sections is the number of sections in the computer at the "
+ "time of data collection. Notice that this is an "
+ "instantaneous count, not an average over the time interval. "
+ "A section is a portion of virtual memory created by a "
+ "process for a storing data. A process may share sections "
+ "with other processes.",
+
+ "261", "The Objects object type is a meta-object that contains "
+ "information about the objects in existence on the computer. "
+ "This information can be used to detect the unnecessary "
+ "consumption of computer resources. Each object requires "
+ "memory to store basic information about the object.",
+
+ "263", "The Redirector is the object that manages network "
+ "connections to other computers that originate from your own "
+ "computer.",
+
+ "265", "Bytes Received/sec is the rate of bytes coming in to the "
+ "Redirector from the network. It includes all application "
+ "data as well as network protocol information (such as packet "
+ "headers.)",
+
+ "267", "Packets Received/sec is the rate that the Redirector "
+ "is receiving packets (also called SMBs or Server Message "
+ "Blocks). Network transmissions are divided into packets. "
+ "The average number of bytes received in a packet can be "
+ "obtained by dividing Bytes Received/sec by this counter. "
+ "Some packets received may not contain incoming data, for "
+ "example an acknowledgment to a write made by the Redirector "
+ "would count as an incoming packet.",
+
+ "269", "Read Bytes Paging/sec is the rate that the Redirector is "
+ "attempting to read bytes in response to page faults. Page "
+ "faults are caused by loading of modules (such as programs and "
+ "libraries), by a miss in the Cache (see Read Bytes Cache/sec), "
+ "or by files directly mapped into the address space of "
+ "applications (a high-performance feature of Windows NT.)",
+
+ "271", "Read Bytes Non-Paging/sec are those bytes read by "
+ "the Redirector in response to normal file requests by an "
+ "application when they are redirected to come from another "
+ "computer. In addition to file requests, this counter includes "
+ "other methods of reading across the network such as Named "
+ "Pipes and Transactions. This counter does not count network "
+ "protocol information, just application data.",
+
+ "273", "Read Bytes Cache/sec is the rate that applications on "
+ "your computer are accessing the Cache using the Redirector. "
+ "Some of these data requests may be satisfied by merely "
+ "retrieving "
+ "the data from the system Cache on your own computer if it "
+ "happened to be used recently and there was room to keep it "
+ "in the Cache. Requests that miss the Cache will cause a "
+ "page fault (see Read Bytes Paging/sec).",
+
+ "275", "Read Bytes Network/sec is the rate that applications "
+ "are reading data across the network. For one reason or "
+ "another the data was not in the system Cache, and these bytes "
+ "actually came across the network. Dividing this number by "
+ "Bytes Received/sec will indicate the 'efficiency' of data "
+ "coming in from the network, since all of these bytes are "
+ "real application data (see Bytes Received/sec.)",
+
+ "277", "Bytes Transmitted/sec is the rate that bytes are leaving the "
+ "Redirector to the network. It includes all application "
+ "data as well as network protocol information (such as "
+ "packet headers and the like.)",
+
+ "279", "Packets Transmitted/sec is the rate that the Redirector "
+ "is sending packets (also called SMBs or Server Message "
+ "Blocks). Network transmissions are divided into packets. "
+ "The average number of bytes transmitted in a packet can be "
+ "obtained by dividing Bytes Transmitted/sec by this counter.",
+
+ "281", "Write Bytes Paging/sec is the rate that the Redirector is "
+ "attempting to write bytes changed in the pages being used "
+ "by applications. The program data changed by modules (such as "
+ "programs and libraries) that were loaded over the network "
+ "are 'paged out' when no longer needed. Other output pages "
+ "come from the Cache (see Write Bytes Cache/sec).",
+
+ "283", "Write Bytes Non-Paging/sec is the rate of the bytes "
+ "that are written by "
+ "the Redirector in response to normal file outputs by an "
+ "application when they are redirected to go to another "
+ "computer. In addition to file requests this counter includes "
+ "other methods of writing across the network such as Named "
+ "Pipes and Transactions. This counter does not count network "
+ "protocol information, just application data.",
+
+ "285", "Write Bytes Cache/sec is the rate that applications on "
+ "your computer are writing to the Cache using the Redirector. "
+ "The data may not leave your computer immediately, but may "
+ "be retained in the Cache for further modification before "
+ "being written to the network. This saves network traffic. "
+ "Each write of a byte into the Cache is counted here.",
+
+ "287", "Write Bytes Network/sec is the rate that your applications "
+ "are writing data across the network. Either the system Cache "
+ "was bypassed, as for Named Pipes or Transactions, or else the "
+ "Cache wrote the bytes to make room for other data. Dividing "
+ "this counter by "
+ "Bytes Transmitted/sec will indicate the 'efficiency' of data "
+ "written to the network, since all of these bytes are "
+ "real application data (see Transmitted Bytes/sec.)",
+
+ "289", "File Read Operations/sec is the rate that applications are "
+ "asking the Redirector for data. Each call to a file system "
+ "or similar Application Program Interface (API) call "
+ "counts as one operation.",
+
+ "291", "Read Operations Random/sec counts the rate that, on a "
+ "file-by-file basis, reads are made "
+ "that are not sequential. If a read is made using a particular "
+ "file handle, and then is followed by another read that "
+ "is not immediately the contiguous next byte, this counter "
+ "is incremented by one.",
+
+ "293", "Read Packets/sec is the rate that read packets are "
+ "being placed on the network. Each time a single packet is "
+ "sent with a request to read data remotely, this counter "
+ "is incremented by one.",
+
+ "295", "Reads Large/sec is the rate that reads over 2 "
+ "times the server's negotiated buffer size are made by "
+ "applications. "
+ "Too many of these could place a strain on server resources. "
+ "This counter is incremented once for each read. It does not "
+ "count packets.",
+
+ "297", "Read Packets Small/sec is the rate that reads less than "
+ "one-fourth of the server's negotiated buffer size are made "
+ "by applications. Too many of these could indicate a waste "
+ "of buffers on the server. This counter is incremented once "
+ "for each read. It does not count packets.",
+
+ "299", "File Write Operations/sec is the rate that applications are "
+ "sending data to the Redirector. Each call to a file system "
+ "or similar Application Program Interface (API) call "
+ "counts as one operation.",
+
+ "301", "Write Operations Random/sec is the rate that, on a "
+ "file-by-file basis, writes are made that are not sequential. "
+ "If a write is made using a particular file handle, and then "
+ "is followed by another write that "
+ "is not immediately the next contiguous byte, this counter "
+ "is incremented by one.",
+
+ "303", "Write Packets/sec is the rate that writes are "
+ "being sent to the network. Each time a single packet is "
+ "sent with a request to write remote data, this counter "
+ "is incremented by one.",
+
+ "305", "Writes Large/sec is the rate that writes are made "
+ "by applications "
+ "that are over 2 times the server's negotiated buffer size. "
+ "Too many of these could place a strain on server resources. "
+ "This counter is incremented once for each write: it counts "
+ "writes, not packets.",
+
+ "307", "Write Packets Small/sec is the rate that writes are made "
+ "by applications "
+ "that are less than one-fourth of the server's negotiated "
+ "buffer size. Too many of these could indicate a waste "
+ "of buffers on the server. This counter is incremented once "
+ "for each write: it counts writes, not packets!",
+
+ "309", "Reads Denied/sec is the rate that the server is "
+ "unable to accommodate requests for Raw Reads. When a "
+ "read is much larger than the server's negotiated buffer "
+ "size, the Redirector requests a Raw Read which, if granted, "
+ "would permit the transfer of the data without lots of "
+ "protocol overhead on each packet. To accomplish this the "
+ "server must lock out other requests, so the request is denied "
+ "if the server is really busy.",
+
+ "311", "Writes Denied/sec is the rate that the server is "
+ "unable to accommodate requests for Raw Writes. When a "
+ "write is much larger than the server's negotiated buffer "
+ "size, the Redirector requests a Raw Write which, if granted, "
+ "would permit the transfer of the data without lots of "
+ "protocol overhead on each packet. To accomplish this the "
+ "server must lock out other requests, so the request is denied "
+ "if the server is really busy.",
+
+ "313", "Network Errors/sec counts serious unexpected errors that "
+ "generally indicate the Redirector and one or more Servers "
+ "are having serious communication difficulties. "
+ "For example an SMB (Server Manager Block) protocol error "
+ "will generate a Network Error. These result in an entry "
+ "in the system Event Log, so look there for details.",
+
+ "315", "Server Sessions counts the number of active security objects the "
+ "Redirector is managing. For example, a Logon to a server "
+ "followed by a network access to the same server will establish "
+ "one connection, but two sessions.",
+
+ "317", "Server Reconnects counts the number of times your Redirector has "
+ "had to reconnect to a server in order to complete a new active "
+ "request. You can be disconnected by the Server if you remain "
+ "inactive for too long. Locally even if all your remote files "
+ "are closed, the Redirector will keep your connections intact "
+ "for (nominally) ten minutes. Such inactive connections are "
+ "called Dormant Connections. Reconnecting is expensive in time.",
+
+ "319", "Connects Core counts the number of connections you "
+ "have to "
+ "servers running the original MS-Net SMB protocol, including "
+ "MS-Net itself and Xenix and Vax's.",
+
+ "321", "Connects Lan Manager 2.0 counts connections to Lan Manager "
+ "2.0 servers, "
+ "including LMX servers.",
+
+ "323", "Connects Lan Manager 2.1 counts connections to Lan Manager "
+ "2.1 servers, "
+ "including LMX servers.",
+
+ "325", "Connects Windows NT counts the connections to Windows NT "
+ "computers. Good choice!",
+
+ "327", "Server Disconnects counts the number of times a Server "
+ "has disconnected your Redirector. See also Server Reconnects.",
+
+ "329", "Server Sessions Hung counts the number of active sessions "
+ "that are "
+ "timed out and unable to proceed due to a lack of response "
+ "from the remote server.",
+
+ "331", "Server - is the process that interfaces the services from the "
+ "local computer to the network services.",
+
+ "333", "The number of bytes the server has received from the network. "
+ "Indicates how busy the server is.",
+
+ "335", "The number of bytes the server has sent on the network. "
+ "Indicates how busy the server is.",
+
+ "337", "Thread Wait Reason is only applicable when the "
+ "thread is in the Wait state (see Thread State.) "
+ "It is 0 or 7 when "
+ "the thread is waiting for "
+ "the Executive, 1 or 8 for a Free Page, 2 or 9 for a Page In, "
+ "3 or 10 for a Pool Allocation, 4 or 11 for an "
+ "Execution Delay, 5 or 12 for "
+ "a Suspended condition, 6 or 13 for a User Request, "
+ "14 for an Event "
+ "Pair High, 15 for an Event Pair Low, 16 for an LPC "
+ "Receive, 17 for an LPC Reply, 18 for Virtual Memory, "
+ "19 for a Page Out; 20 and higher are not assigned at the time "
+ "of this writing. Event Pairs are used to communicate "
+ "with protected subsystems (see Context Switches.)",
+
+ "341", "The number of sessions that have been closed due to their idle "
+ "time exceeding the autodisconnect parameter for the server. "
+ "Shows whether the autodisconnect setting is helping to conserve "
+ "resources.",
+
+ "343", "The number of sessions that have been closed due to unexpected "
+ "error conditions. Indicates how frequently network problems are "
+ "causing dropped sessions on the server.",
+
+ "345", "The number of sessions that have terminated normally. Useful in "
+ "interpreting the Sessions Times Out and Sessions Errored Out "
+ "statistics--allows percentage calculations.",
+
+ "347", "The number of sessions that have been forced to logoff. "
+ "Can indicate how many sessions were forced to logoff due to "
+ "logon time constraints.",
+
+ "349", "The number of failed logon attempts to the server. Can indicate "
+ "whether password guessing programs are being used to crack the "
+ "security on the server.",
+
+ "351", "The number of times opens on behalf of clients have failed with "
+ "STATUS_ACCESS_DENIED. Can indicate whether somebody is randomly "
+ "attempting to access files in hopes of getting at something that "
+ "was not properly protected.",
+
+ "353", "The number of times accesses to files opened successfully were "
+ "denied. Can indicate attempts to access files without proper "
+ "access authorization.",
+
+ "355", "The number of times an internal Server Error was detected. "
+ "Unexpected errors usually indicate a problem with the Server.",
+
+ "357", "The number of times the server has rejected blocking SMBs due to "
+ "insufficient count of free work items. Indicates whether the "
+ "maxworkitem or minfreeworkitems server parameters may need "
+ "tuning.",
+
+ "359", "The number of times STATUS_DATA_NOT_ACCEPTED was returned at "
+ "receive indication time. This occurs when no work item is "
+ "available or can be allocated to service the incoming request. "
+ "Indicates whether the initworkitems or maxworkitems parameters "
+ "may need tuning.",
+
+ "361", "The number of successful open attempts performed by the server "
+ "of behalf of clients. Useful in determining the amount of file "
+ "I/O, determining overhead for path-based operations, determining "
+ "the effectiveness of oplocks.",
+
+ "363", "The number of files currently opened in the server. Indicates "
+ "current server activity.",
+
+ "365", "The number of sessions currently active in the server. "
+ "Indicates current server activity.",
+
+ "367", "The number of searches for files currently active in "
+ "the server. "
+ "Indicates current server activity.",
+
+ "369", "The number of bytes of non-pageable computer memory the server "
+ "is currently using. "
+ "Can help in determining good values for the "
+ "maxnonpagedmemoryusage "
+ "parameter.",
+
+ "371", "The number of times allocations from nonpaged pool have failed. "
+ "Indicates that the computer's physical memory is too small.",
+
+ "373", "The maximum number of bytes of nonpaged pool the server has "
+ "had in use "
+ "at any one point. Indicates how much physical memory "
+ "the computer "
+ "should have.",
+
+ "375", "The number of bytes of pageable computer memory the server is "
+ "currently using. "
+ "Can help in determining good values for the maxpagedmemoryusage "
+ "parameter.",
+
+ "377", "The number of times allocations from paged pool have failed. "
+ "Indicates that the computer's physical memory of pagefile are "
+ "too small.",
+
+ "379", "The maximum number of bytes of paged pool the server has "
+ "had allocated. "
+ "Indicates the proper sizes of the Page File(s) and "
+ "physical memory.",
+
+ "389", "Bytes Total/sec is the rate the Redirector is processing "
+ "data bytes. This includes all application and file "
+ "data in addition to protocol information such as packet "
+ "headers.",
+
+ "391", "File Data Operations/sec is the rate the Redirector is processing "
+ "data operations. One operation includes (hopefully) many "
+ "bytes. We say hopefully here because each operation "
+ "has overhead. You can determine the efficiency of this "
+ "path by dividing the Bytes/sec by this counter to determine "
+ "the average number of bytes transferred/operation.",
+
+ "393", "Current Commands counts the number of requests to the "
+ "Redirector that are currently queued for service. If "
+ "this number is much larger than the number of network "
+ "adapter cards installed in the computer, then the network(s) "
+ "and/or the server(s) being accessed are seriously "
+ "bottlenecked.",
+
+ "395", "The number of bytes the server has sent to and received from the "
+ "network. This value provides an overall indication of how busy "
+ "the server is.",
+
+ "399", "The NWLink NetBIOS protocol layer handles the interface to "
+ "applicatons communicating over the IPX transport. ",
+
+ "401", "Packets/sec is the rate the Redirector is processing "
+ "data packets. "
+ "One packet includes (hopefully) many "
+ "bytes. We say hopefully here because each packet has "
+ "protocol overhead. You can determine the efficiency of this "
+ "path by dividing the Bytes/sec by this counter to determine "
+ "the average number of bytes transferred/packet. You can "
+ "also divide this counter by Operations/sec to determine "
+ "the average number of packets per operation, another "
+ "measure of efficiency.",
+
+ "403", "Context Block Queue Time is the average time, in milliseconds, "
+ "a work context block sat on the server's FSP queue waiting for "
+ "the server to act on the request.",
+
+ "405", "Context Blocks Queued per second is the rate that work "
+ "context blocks had to be placed on the server's FSP "
+ "queue to await server action.",
+
+ "407", "File Data Operations per second is the rate that the computer "
+ "is issuing Read and Write operations to file system "
+ "devices. It does not include File Control Operations.",
+
+ "409", "Percent Free Space is the ratio of the free space available "
+ "on the logical disk unit to the total usable space provided "
+ "by the selected logical disk drive",
+
+ "411", "Free Megabytes displays the unallocated space on the disk "
+ "drive in megabytes. One megabyte = 1,048,576 bytes.",
+
+ "413", "Connections Open is the number of connections "
+ "currently open for this protocol. "
+ "This counter shows the current count "
+ "only and does not accumulate over time.",
+
+ "415", "Connections No Retries is the total count of connections "
+ "that were successfully made on the first try. This number is "
+ "an accumulator and shows a running total.",
+
+ "417", "Connections With Retries is the total count of connections "
+ "that were made after retrying the attempt. A retry occurs "
+ "when the first connection attempt failed. This number is an "
+ "accumulator and shows a running total.",
+
+ "419", "Disconnects Local is the number of session disconnections "
+ "that were initiated by the local computer. This number is an "
+ "accumulator and shows a running total.",
+
+ "421", "Disconnects Remote is the number of session disconnections "
+ "that were initiated by the remote computer. This number is an "
+ "accumulator and shows a running total.",
+
+ "423", "Failures Link is the number of connections that were dropped "
+ "due to a link failure. This number is an accumulator and "
+ "shows a running total.",
+
+ "425", "Failures Adapter is the number of connections that were "
+ "dropped due to an adapter failure. This number is an "
+ "accumulator and shows a running total.",
+
+ "427", "Connection Session Timeouts is the number of connections "
+ "that were "
+ "dropped due to a session timeout. This number is an "
+ "accumulator and shows a running total.",
+
+ "429", "Connections Canceled is the number of connections that were "
+ "canceled. This number is an accumulator and shows a running "
+ "total.",
+
+ "431", "Failures Resource Remote is the number of connections that "
+ "failed because of resource problems or shortages on the "
+ "remote computer. This number is an accumulator and shows a "
+ "running total.",
+
+ "433", "Failures Resource Local is the number of connections that "
+ "failed because of resource problems or shortages on the "
+ "local computer. This number is an accumulator and shows a "
+ "running total.",
+
+ "435", "Failures Not Found is the number of connection attempts "
+ "that failed because the remote computer could not be "
+ "found. This number is an accumulator and shows a running "
+ "total.",
+
+ "437", "Failures No Listen is the number of connections that were "
+ "rejected because the remote computer was not listening for "
+ "connection requests.",
+
+ "439", "Datagrams/sec is the rate that datagrams are "
+ "processed by the computer. This counter displays the sum of "
+ "datagrams sent and datagrams received. "
+ "A datagram is a connectionless packet whose delivery "
+ "to a remote is not guaranteed.",
+
+ "441", "Datagram Bytes/sec is the rate that datagram bytes are "
+ "processed by the computer. This counter is the sum of datagram "
+ "bytes that are sent as well as received. "
+ "A datagram is a connectionless packet whose delivery "
+ "to a remote is not guaranteed.",
+
+ "443", "Datagrams Sent/sec is the rate that datagrams are sent from "
+ "the computer. "
+ "A datagram is a connectionless packet whose delivery "
+ "to a remote computer is not guaranteed.",
+
+ "445", "Datagram Bytes Sent/sec is the rate that datagram bytes "
+ "are sent from the computer. "
+ "A datagram is a connectionless packet whose delivery "
+ "to a remote computer is not guaranteed.",
+
+ "447", "Datagrams Received/sec is the rate that datagrams are "
+ "received by the computer. "
+ "A datagram is a connectionless packet whose delivery "
+ "to a remote computer is not guaranteed.",
+
+ "449", "Datagram Bytes Received/sec is the rate that datagram bytes "
+ "are received by the computer. "
+ "A datagram is a connectionless packet whose delivery "
+ "to a remote computer is not guaranteed.",
+
+ "451", "Packets/sec is the rate that packets are processed by the "
+ "computer. This count is the sum of Packets Sent and Packets "
+ "Received per second. This counter includes all packets "
+ "processed: control as well as data packets.",
+
+ "453", "Packets Sent/sec is the rate that packets are sent by "
+ "the computer. This counter counts all packets sent by the "
+ "computer, i.e. control as well as data packets.",
+
+ "455", "Packets Received/sec is the rate that packets are received "
+ "by the computer. This counter counts all packets processed: "
+ "control as well as data packets.",
+
+ "457", "Frames/sec is the rate that data frames (or packets) are "
+ "processed by the computer. This counter is the sum of data "
+ "frames sent and data frames received. This counter only "
+ "counts those frames (packets) that carry data.",
+
+ "459", "Frame Bytes/sec is the rate that data bytes are processed "
+ "by the computer. This counter is the sum of data frame bytes "
+ "sent and received. This counter only counts the byte in "
+ "frames (packets) that carry data.",
+
+ "461", "Frames Sent/sec is the rate that data frames are sent by "
+ "the computer. This counter only counts the frames (packets) "
+ "that carry data.",
+
+ "463", "Frame Bytes Sent/sec is the rate that data bytes are sent "
+ "by the computer. This counter only counts the bytes in frames "
+ "(packets) that carry data.",
+
+ "465", "Frames Received/sec is the rate that data frames are received "
+ "by the computer. This counter only counts the frames (packets) "
+ "that carry data.",
+
+ "467", "Frame Bytes Received/sec is the rate that data bytes are "
+ "received by the computer. This counter only counts the frames "
+ "(packets) that carry data.",
+
+ "469", "Frames Re-Sent/sec is the rate that data frames (packets) are "
+ "re-sent by the computer. This counter only counts the frames or "
+ "packets that carry data.",
+
+ "471", "Frame Bytes Re-Sent/sec is the rate that data bytes are "
+ "re-sent by the computer. This counter only counts the bytes in "
+ "frames that carry data.",
+
+ "473", "Frames Rejected/sec is the rate that data frames are "
+ "rejected. This counter only counts the frames (packets) that "
+ "carry data.",
+
+ "475", "Frame Bytes Rejected/sec is the rate that data bytes are "
+ "rejected. This counter only counts the bytes in data frames "
+ "(packets) that carry data.",
+
+ "477", "Expirations Response is the count of T1 timer expirations.",
+
+ "479", "Expirations Ack is the count of T2 timer expirations",
+
+ "481", "Window Send Maximum is the maximum number of bytes of data "
+ "that will be sent before waiting for an acknowledgment from "
+ "the remote computer.",
+
+ "483", "Window Send Average is the running average number of data "
+ "bytes that were sent before waiting for an acknowledgment "
+ "from the remote computer.",
+
+ "485", "Piggyback Ack Queued/sec is the rate that piggybacked "
+ "acknowledgments are queued. Piggyback acknowledgments are "
+ "acknowledgments to received packets that are to be included "
+ "in the next outgoing packet to the remote computer.",
+
+ "487", "Piggyback Ack Timeouts is the number of times that a piggyback "
+ "acknowledgment could not be sent because there was no "
+ "outgoing packet to the remote on which to piggyback. A "
+ "piggyback ack is an acknowledgment to a received packet that "
+ "is sent along in an outgoing data packet to the remote "
+ "computer. If no outgoing packet is sent within the timeout "
+ "period, then an ack packet is sent and this counter is "
+ "incremented.",
+
+ "489", "The NWLink IPX transport handles datagram transmission to "
+ "and from computers using the IPX protocol.",
+
+ "491", "The NWLink SPX transport handles data transmission and "
+ "session connections for computers using the SPX protocol.",
+
+ "493", "The NetBEUI protocol handles data transmission for "
+ "that network activity which follows the NetBIOS End "
+ "User Interface standard.",
+
+ "495", "The NetBEUI Resource object tracks the use of resources "
+ "(i.e., buffers) by the NetBEUI protocol.",
+
+ "497", "Used Maximum is the maximum number of NetBEUI "
+ "resources (buffers) "
+ "in use at any point in time. This value is useful in "
+ "sizing the maximum resources provided. "
+ "The number in parentheses following the resource name is used "
+ "to identify the resource in Event Log messages.",
+
+ "499", "Used Average is the current number of resources (buffers) in "
+ "use at this time. "
+ "The number in parentheses following the resource name is used "
+ "to identify the resource in Event Log messages.",
+
+ "501", "Times Exhausted is the number of times all "
+ "the resources (buffers) "
+ "were in use. "
+ "The number in parentheses following the resource name is used "
+ "to identify the resource in Event Log messages.",
+
+ "503", "The NBT Connection Object Type includes those "
+ "counters that describe the rates that bytes are "
+ "received and sent over a single NBT connection "
+ "connecting the local computer with some remote computer. "
+ "The connection is identified by the name of the remote "
+ "computer.",
+
+ "505", "Bytes Received/sec is the rate that bytes are "
+ "received by the local computer over an NBT connection "
+ "to some remote computer. All the bytes received by the "
+ "local computer over the particular NBT connection are "
+ "counted.",
+
+ "507", "Bytes Sent/sec is the rate that bytes are "
+ "sent by the local computer over an NBT connection "
+ "to some remote computer. All the bytes sent by the "
+ "local computer over the particular NBT connection are "
+ "counted.",
+
+ "509", "Bytes Total/sec is the rate that bytes are sent or "
+ "received by the local computer over an NBT connection "
+ "to some remote computer. All the bytes sent or received "
+ "by the local computer over the particular NBT connection "
+ "are counted.",
+
+ "511", "The Network Interface Object Type includes those counters "
+ "that describe the rates that bytes and packets are "
+ "received and sent over a Network TCP/IP connection. It also "
+ "describes various error counts for the same connection.",
+
+ "513", "Bytes Total/sec is the rate that bytes are sent and received "
+ "on the interface, including framing characters.",
+
+ "515", "Packets/sec is the rate that packets are sent and received "
+ "on the network interface.",
+
+ "517", "Packets Received/sec is the rate that packets are received "
+ "on the network interface.",
+
+ "519", "Packets Sent/sec is the rate that packets are sent "
+ "on the network interface.",
+
+ "521", "Current Bandwidth is an estimate of the interface's "
+ "current bandwidth in bits per second (bps). For interfaces "
+ "that do not vary in bandwidth or for those where no "
+ "accurate estimation can be made, this value is the nominal "
+ "bandwidth.",
+
+ "523", "Bytes Received/sec is the rate that bytes are received "
+ "on the interface, including framing characters.",
+
+ "525", "Packets Received Unicast/sec is the rate that (subnet) "
+ "unicast packets are delivered to a higher-layer protocol.",
+
+ "527", "Packets Received Non-Unicast/sec is the rate that "
+ "non-unicast (i.e., subnet broadcast or subnet multicast) "
+ "packets are delivered to a higher-layer protocol.",
+
+ "529", "Packets Received Discarded is the number of inbound packets "
+ "that were chosen to be discarded even though no errors had "
+ "been detected to prevent their being deliverable to a "
+ "higher-layer protocol. One possible reason for discarding "
+ "such a packet could be to free up buffer space.",
+
+ "531", "Packets Received Errors is the number of inbound packets "
+ "that contained errors preventing them from being deliverable "
+ "to a higher-layer protocol.",
+
+ "533", "Packets Received Unknown is the number of packets "
+ "received via the interface that were discarded because of "
+ "an unknown or unsupported protocol.",
+
+ "535", "Bytes Sent/sec is the rate that bytes are sent "
+ "on the interface, including framing characters.",
+
+ "537", "Packets Sent Unicast/sec is the rate that packets are "
+ "requested to be transmitted to subnet-unicast addresses "
+ "by higher-level protocols. The rate includes the packets "
+ "that were discarded or not sent.",
+
+ "539", "Packets Sent Non-Unicast/sec is the rate that packets are "
+ "requested to be transmitted to non-unicast (i.e., subnet "
+ "broadcast or subnet multicast) addresses "
+ "by higher-level protocols. The rate includes the packets "
+ "that were discarded or not sent.",
+
+ "541", "Packets Outbound Discarded is the number of outbound packets "
+ "that were chosen to be discarded even though no errors had "
+ "been detected to prevent their being transmitted. "
+ "One possible reason for discarding "
+ "such a packet could be to free up buffer space.",
+
+ "543", "Packets Outbound Errors is the number of outbound packets "
+ "that could not be transmitted because of errors.",
+
+ "545", "Output Queue Length is the length of the output packet queue "
+ "(in packets.) If this is longer than 2, delays are being "
+ "experienced and the bottleneck should be found and "
+ "eliminated if possible. Since the requests are queued by "
+ "NDIS in this implementations, this will always be 0.",
+
+ "547", "The IP Object Type includes those counters "
+ "that describe the rates that IP datagrams are "
+ "received and sent by a certain computer using the IP protocol. "
+ "It also describes various error counts for the IP protocol.",
+
+ "549", "Datagrams/sec is the rate that IP datagrams are received "
+ "from or sent to the interfaces, including those in error. "
+ "Any forwarded datagrams are not included in this rate.",
+
+ "551", "Datagrams Received/sec is the rate that IP datagrams are "
+ "received from the interfaces, including those in error.",
+
+ "553", "Datagrams Received Header Errors is the number of input "
+ "datagrams discarded due to errors in their IP headers, "
+ "including bad checksums, version number mismatch, other format "
+ "errors, time-to-live exceeded, errors discovered in processing "
+ "their IP options, etc.",
+
+ "555", "Datagrams Received Address Errors is the number of input "
+ "datagrams discarded because the IP address in their IP header's "
+ "destination field was not a valid address to be received at "
+ "this entity. This count includes invalid addresses (e.g., 0.0. "
+ "0.0) and addresses of unsupported Classes (e.g., Class E). "
+ "For entities that are not IP Gateways and therefore do not "
+ "forward datagrams, this counter includes datagrams discarded "
+ "because the destination address was not a local address.",
+
+ "557", "Datagrams Forwarded/sec is the rate of input datagrams for "
+ "that this entity was not their final IP destination, as a "
+ "result of which an attempt was made to find a route to "
+ "forward them to that final destination. In entities that do "
+ "not act as IP Gateways, this rate will include only those "
+ "packets that were Source-Routed via this entity, and the "
+ "Source-Route option processing was successful.",
+
+ "559", "Datagrams Received Unknown Protocol is the number of "
+ "locally-addressed datagrams received successfully but discarded "
+ "because of an unknown or unsupported protocol.",
+
+ "561", "Datagrams Received Discarded is the number of input IP "
+ "datagrams for which no problems were encountered to prevent "
+ "their continued processing, but which were discarded "
+ "(e.g., for lack of buffer space). This counter does "
+ "not include any datagrams discarded while awaiting re-assembly.",
+
+ "563", "Datagrams Received Delivered/sec is the rate that input "
+ "datagrams are successfully delivered to IP user-protocols "
+ "(including ICMP).",
+
+ "565", "Datagrams Sent/sec is the rate that IP datagrams are "
+ "supplied to IP for transmission by local IP user-protocols "
+ "(including ICMP). That this counter does not include "
+ "any datagrams counted in Datagrams Forwarded.",
+
+ "567", "Datagrams Outbound Discarded is the number of output IP "
+ "datagrams for which no problems were encountered to prevent "
+ "their transmission to their destination, but which were "
+ "discarded (e.g., for lack of buffer space.) This "
+ "counter would include datagrams counted in Datagrams Forwarded "
+ "if any such packets met this (discretionary) "
+ "discard criterion.",
+
+ "569", "Datagrams Outbound No Route is the number of IP datagrams "
+ "discarded because no route could be found to transmit them "
+ "to their destination. This counter includes any "
+ "packets counted in Datagrams Forwarded that meet this "
+ "`no route' criterion.",
+
+ "571", "Fragments Received/sec is the rate that IP fragments that "
+ "need to be re-assembled at this entity are received.",
+
+ "573", "Fragments Re-assembled/sec is the rate that IP fragments "
+ "are successfully re-assembled.",
+
+ "575", "Fragment Re-assembly Failures is the number of failures "
+ "detected by the IP re-assembly algorithm (for whatever reason: "
+ "timed out, errors, etc.) This is not necessarily a "
+ "count of discarded IP fragments since some algorithms "
+ "(notably RFC 815) can lose track of the number of fragments "
+ "by combining them as they are received.",
+
+ "577", "Fragmented Datagrams/sec is the rate that datagrams are "
+ "successfully fragmented at this entity.",
+
+ "579", "Fragmentation Failures is the number of IP datagrams that have "
+ "been discarded because they needed to be fragmented at this "
+ "entity but could not be, e.g., because their `Don't Fragment' "
+ "flag was set.",
+
+ "581", "Fragments Created/sec is the rate that IP datagram fragments "
+ "have been generated as a result of fragmentation at this entity.",
+
+ "583", "The ICMP Object Type includes those counters "
+ "that describe the rates that ICMP Messages are "
+ "received and sent by a certain entity using the ICMP protocol. "
+ "It also describes various error counts for the ICMP protocol.",
+
+ "585", "Messages/sec is the total rate that ICMP messages are "
+ "received and sent by the entity. The rate includes those "
+ "messages received or sent in error.",
+
+ "587", "Messages Received/sec is the rate that ICMP messages are "
+ "received by the entity. The rate includes those "
+ "messages received in error.",
+
+ "589", "Messages Received Errors is the number of ICMP messages "
+ "that the entity received but determined as having errors "
+ "(bad ICMP checksums, bad length, etc.).",
+
+ "591", "Received Destination Unreachable is the number of ICMP "
+ "Destination Unreachable messages received.",
+
+ "593", "Received Time Exceeded is the number of ICMP Time Exceeded "
+ "messages received.",
+
+ "595", "Received Parameter Problem is the number of ICMP Parameter "
+ "Problem messages received.",
+
+ "597", "Received Source Quench is the number of ICMP Source Quench "
+ "messages received.",
+
+ "599", "Received Redirect/sec is the rate of ICMP Redirect messages "
+ "received.",
+
+ "601", "Received Echo/sec is the rate of ICMP Echo messages received.",
+
+ "603", "Received Echo Reply/sec is the rate of ICMP Echo Reply "
+ "messages received.",
+
+ "605", "Received Timestamp/sec is the rate of ICMP Timestamp "
+ "(request) messages received.",
+
+ "607", "Received Timestamp Reply/sec is the rate of ICMP Timestamp "
+ "Reply messages received.",
+
+ "609", "Received Address Mask is the number of ICMP Address Mask "
+ "Request messages received.",
+
+ "611", "Received Address Mask Reply is the number of ICMP Address "
+ "Mask Reply messages received.",
+
+ "613", "Messages Sent/sec is the rate that ICMP messages are "
+ "attempted to be sent by the entity. The rate includes those "
+ "messages sent in error.",
+
+ "615", "Messages Outbound Errors is the number of ICMP messages "
+ "that this entity did not send due to problems discovered "
+ "within ICMP such as lack of buffers. This value should not "
+ "include errors discovered outside the ICMP layer such as the "
+ "inability of IP to route the resultant datagram. In some "
+ "implementations there may be no types of error that contribute "
+ "to this counter's value.",
+
+ "617", "Sent Destination Unreachable is the number of ICMP "
+ "Destination Unreachable messages sent.",
+
+ "619", "Sent Time Exceeded is the number of ICMP Time Exceeded "
+ "messages sent.",
+
+ "621", "Sent Parameter Problem is the number of ICMP Parameter "
+ "Problem messages sent.",
+
+ "623", "Sent Source Quench is the number of ICMP Source Quench "
+ "messages sent.",
+
+ "625", "Sent Redirect/sec is the rate of ICMP Redirect messages "
+ "sent.",
+
+ "627", "Sent Echo/sec is the rate of ICMP Echo messages sent.",
+
+ "629", "Sent Echo Reply/sec is the rate of ICMP Echo Reply "
+ "messages sent.",
+
+ "631", "Sent Timestamp/sec is the rate of ICMP Timestamp "
+ "(request) messages sent.",
+
+ "633", "Sent Timestamp Reply/sec is the rate of ICMP Timestamp "
+ "Reply messages sent.",
+
+ "635", "Sent Address Mask is the number of ICMP Address Mask "
+ "Request messages sent.",
+
+ "637", "Sent Address Mask Reply is the number of ICMP Address "
+ "Mask Reply messages sent.",
+
+ "639", "The TCP Object Type includes those counters "
+ "that describe the rates that TCP Segments are "
+ "received and sent by a certain entity using the TCP protocol. "
+ "In addition, it describes the number of TCP connections that are "
+ "in each of the possible TCP connection states.",
+
+ "641", "Segments/sec is the rate that TCP segments are sent or "
+ "received using the TCP protocol.",
+
+ "643", "Connections Established is the number of TCP "
+ "connections for which the current state is either "
+ "ESTABLISHED or CLOSE-WAIT.",
+
+ "645", "Connections Active is the number of times TCP connections have "
+ "made a direct transition to the SYN-SENT state from the "
+ "CLOSED state.",
+
+ "647", "Connections Passive is the number of times TCP connections "
+ "have made a direct transition to the SYN-RCVD state from the "
+ "LISTEN state.",
+
+ "649", "Connection Failures is the number of times TCP connections "
+ "have made a direct transition to the CLOSED state from the "
+ "SYN-SENT state or the SYN-RCVD state, plus the number of "
+ "times TCP connections have made a direct transition to the "
+ "LISTEN state from the SYN-RCVD state.",
+
+ "651", "Connections Reset is the number of times TCP connections "
+ "have made a direct transition to the CLOSED state from either "
+ "the ESTABLISHED state or the CLOSE-WAIT state.",
+
+ "653", "Segments Received/sec is the rate that segments are "
+ "received, including those received in error. This count includes "
+ "segments received on currently established connections.",
+
+ "655", "Segments Sent/sec is the rate that segments are sent, "
+ "including those on current connections, but excluding those "
+ "containing only retransmitted bytes.",
+
+ "657", "Segments Retransmitted/sec is the rate that segments are "
+ "retransmitted, that is, segments transmitted containing one "
+ "or more previously transmitted bytes.",
+
+ "659", "The UDP Object Type includes those counters "
+ "that describe the rates that UDP datagrams are "
+ "received and sent by a certain entity using the UDP protocol. "
+ "It also describes various error counts for the UDP protocol.",
+
+ "661", "Datagrams/sec is the rate that UDP datagrams are sent or "
+ "received by the entity.",
+
+ "663", "Datagrams Received/sec is the rate that UDP datagrams "
+ "are delivered to UDP users.",
+
+ "665", "Datagrams No Port/sec is the rate of received UDP datagrams "
+ "for which there was no application at the destination port.",
+
+ "667", "Datagrams Received Errors is the number of received UDP "
+ "datagrams that could not be delivered for reasons other than "
+ "the lack of an application at the destination port.",
+
+ "669", "Datagrams Sent/sec is the rate that UDP datagrams are sent "
+ "from the entity.",
+
+ "671", "Disk Storage device statistics from the foreign computer",
+
+ "673", "The number of allocation failures reported by the disk storage "
+ "device",
+
+ "675", "Total Time (in seconds) that the computer has been operational "
+ "since it was last started.",
+
+ "677", "The current number of system handles in use.",
+
+ "679", "The number of Page Table Entries not currently in use by the "
+ "system.",
+
+ "681", "The number of threads currently active in this process. "
+ "An instruction is the basic unit of execution in a processor, "
+ "and a thread is the object that executes instructions. "
+ "Every running process has at least one "
+ "thread.",
+
+ "683", "The current base priority of this process. Threads "
+ "within a process can raise and lower their own base priority "
+ "relative to the process's base priority.",
+
+ "685", "The total elapsed time (in seconds) this process has been "
+ "running.",
+
+ "695", "The current dynamic priority of this thread. "
+ "The system may "
+ "raise the thread's dynamic priority above the base priority "
+ "if the thread is handling user input, or lower it towards "
+ "the base priority if the "
+ "thread becomes compute bound.",
+
+ "697", "The current base priority of this thread. The system may "
+ "raise the thread's dynamic priority above the base priority "
+ "if the thread is handling user input, or lower it towards "
+ "the base priority if the "
+ "thread becomes compute bound.",
+
+ "699", "The total elapsed time (in seconds) this thread has been "
+ "running.",
+
+ "701", "Displays information about the system's Page File(s).",
+
+ "703", "The amount of the Page File instance in use in percent. "
+ "See also Process:Page File Bytes.",
+
+ "705", "The peak usage of the Page File instance in percent. "
+ "See also Process:Page File Bytes Peak.",
+
+ "707", "Starting virtual address for this thread.",
+
+ "709", "Current User Program Counter for this thread.",
+
+ "711", "Mapped Space is virtual memory that has been mapped "
+ "to a specific virtual address (or range of virtual "
+ "addresses) in the process's virtual address space. "
+ "No Access protection prevents a process from writing to "
+ "or reading from these pages and will generate an access "
+ "violation if either is attempted.",
+
+ "713", "Mapped Space is virtual memory that has been mapped "
+ "to a specific virtual address (or range of virtual "
+ "addresses) in the process's virtual address space. "
+ "Read Only protection prevents the contents of these pages "
+ "from being modified. Any attempts to write or modify these "
+ "pages will generate an access violation.",
+
+ "715", "Mapped Space is virtual memory that has been mapped "
+ "to a specific virtual address (or range of virtual "
+ "addresses) in the process's virtual address space. "
+ "Read/Write protection allows a process to read, modify "
+ "and write to these pages.",
+
+ "717", "Mapped Space is virtual memory that has been mapped "
+ "to a specific virtual address (or range of virtual "
+ "addresses) in the process's virtual address space. "
+ "Write Copy protection is used when memory is shared for "
+ "reading but not for writing. When processes are reading this "
+ "memory, they can share the same memory, however, when "
+ "a sharing process wants to have write access to this "
+ "shared memory, a copy of that memory is made.",
+
+ "719", "Mapped Space is virtual memory that has been mapped "
+ "to a specific virtual address (or range of virtual "
+ "addresses) in the process's virtual address space. "
+ "Executable memory is memory that can be executed by "
+ "programs, but may not be read or written. "
+ "This type of protection is not supported by all "
+ "processor types.",
+
+ "721", "Mapped Space is virtual memory that has been mapped "
+ "to a specific virtual address (or range of virtual "
+ "addresses) in the process's virtual address space. "
+ "Execute/Read Only memory is memory that can be executed "
+ "as well as read.",
+
+ "723", "Mapped Space is virtual memory that has been mapped "
+ "to a specific virtual address (or range of virtual "
+ "addresses) in the process's virtual address space. "
+ "Execute/Read/Write memory is memory that can be executed by "
+ "programs as well as read "
+ "and modified.",
+
+ "725", "Mapped Space is virtual memory that has been mapped "
+ "to a specific virtual address (or range of virtual "
+ "addresses) in the process's virtual address space. "
+ "Execute Write Copy is memory that can be executed by "
+ "programs as well as read and written. "
+ "This type of protection is used when memory needs to be "
+ "shared between processes. If the sharing processes only "
+ "read the memory, then they will all use the same memory. "
+ "If a sharing process desires write access, then a copy of "
+ "this memory will be made for that process.",
+
+ "727", "Reserved Space is virtual memory that has been reserved for "
+ "future use by a process, but has not been mapped or committed. "
+ "No Access protection prevents a process from writing to "
+ "or reading from these pages and will generate an access "
+ "violation if either is attempted.",
+
+ "729", "Reserved Space is virtual memory that has been reserved for "
+ "future use by a process, but has not been mapped or committed. "
+ "Read Only protection prevents the contents of these pages "
+ "from being modified. Any attempts to write or modify these "
+ "pages will generate an access violation.",
+
+ "731", "Reserved Space is virtual memory that has been reserved for "
+ "future use by a process, but has not been mapped or committed. "
+ "Read/Write protection allows a process to read, modify "
+ "and write to these pages.",
+
+ "733", "Reserved Space is virtual memory that has been reserved for "
+ "future use by a process, but has not been mapped or committed. "
+ "Write Copy protection is used when memory is shared for "
+ "reading but not for writing. When processes are reading this "
+ "memory, they can share the same memory, however, when "
+ "a sharing process wants to have read/write access to this "
+ "shared memory, a copy of that memory is made.",
+
+ "735", "Reserved Space is virtual memory that has been reserved for "
+ "future use by a process, but has not been mapped or committed. "
+ "Executable memory is memory that can be executed by programs, "
+ "but may not be read or written. "
+ "This type of protection is not supported by all "
+ "processor types.",
+
+ "737", "Reserved Space is virtual memory that has been reserved for "
+ "future use by a process, but has not been mapped or committed. "
+ "Execute/Read Only memory is memory that can be executed "
+ "as well as read.",
+
+ "739", "Reserved Space is virtual memory that has been reserved for "
+ "future use by a process, but has not been mapped or committed. "
+ "Execute/Read/Write memory is memory that can be executed by "
+ "programs as well as read "
+ "and modified.",
+
+ "741", "The Image object type displays information about the virtual "
+ "address usage of the images being executed by a process on the "
+ "computer.",
+
+ "743", "Reserved Space is virtual memory that has been reserved for "
+ "future use by a process, but has not been mapped or committed. "
+ "Execute Write Copy is memory that can be executed by "
+ "programs as well as read and written. "
+ "This type of protection is used when memory needs to be "
+ "shared between processes. If the sharing processes only "
+ "read the memory, then they will all use the same memory. "
+ "If a sharing process desires write access, then a copy of "
+ "this memory will be made for that process.",
+
+ "745", "Unassigned Space is mapped and committed virtual memory in "
+ "use by the process that is not attributable to any particular "
+ "image being executed by that process. "
+ "No Access protection prevents a process from writing to "
+ "or reading from these pages and will generate an access "
+ "violation if either is attempted.",
+
+ "747", "Unassigned Space is mapped and committed virtual memory in "
+ "use by the process that is not attributable to any particular "
+ "image being executed by that process. "
+ "Read Only protection prevents the contents of these pages "
+ "from being modified. Any attempts to write or modify these "
+ "pages will generate an access violation.",
+
+ "749", "Unassigned Space is mapped and committed virtual memory in "
+ "use by the process that is not attributable to any particular "
+ "image being executed by that process. "
+ "Read/Write protection allows a process to read, modify "
+ "and write to these pages.",
+
+ "751", "Unassigned Space is mapped and committed virtual memory in "
+ "use by the process that is not attributable to any particular "
+ "image being executed by that process. "
+ "Write Copy protection is used when memory is shared for "
+ "reading but not for writing. When processes are reading this "
+ "memory, they can share the same memory, however, when "
+ "a sharing process wants to have read/write access to this "
+ "shared memory, a copy of that memory is made for writing to.",
+
+ "753", "Unassigned Space is mapped and committed virtual memory in "
+ "use by the process that is not attributable to any particular "
+ "image being executed by that process. "
+ "Executable memory is memory that can be executed by "
+ "programs, but may not be read or written. "
+ "This type of protection is not supported by all "
+ "processor types.",
+
+ "755", "Unassigned Space is mapped and committed virtual memory in "
+ "use by the process that is not attributable to any particular "
+ "image being executed by that process. "
+ "Execute/Read Only memory is memory that can be "
+ "executed as well as read.",
+
+ "757", "Unassigned Space is mapped and committed virtual memory in "
+ "use by the process that is not attributable to any particular "
+ "image being executed by that process. "
+ "Execute/Read/Write memory is memory that can be "
+ "executed by programs as well as read and written.",
+
+ "759", "Unassigned Space is mapped and committed virtual memory in "
+ "use by the process that is not attributable to any particular "
+ "image being executed by that process. "
+ "Execute Write Copy is memory that can be executed by "
+ "programs as well as read and written. "
+ "This type of protection is used when memory needs to be "
+ "shared between processes. If the sharing processes only "
+ "read the memory, then they will all use the same memory. "
+ "If a sharing process desires write access, then a copy of "
+ "this memory will be made for that process.",
+
+ "761", "Image Space is the virtual address space in use by the "
+ "images being executed by the process. This is the sum of all "
+ "the address space with this protection allocated by images run "
+ "by the selected process "
+ "No Access protection prevents a process from writing to "
+ "or reading from these pages and will generate an access "
+ "violation if either is attempted.",
+
+ "763", "Image Space is the virtual address space in use by the "
+ "images being executed by the process. This is the sum of all "
+ "the address space with this protection allocated by images run "
+ "by the selected process "
+ "Read Only protection prevents the contents of these pages "
+ "from being modified. Any attempts to write or modify these "
+ "pages will generate an access violation.",
+
+ "765", "Image Space is the virtual address space in use by the "
+ "images being executed by the process. This is the sum of all "
+ "the address space with this protection allocated by images run "
+ "by the selected process "
+ "Read/Write protection allows a process to read, modify "
+ "and write to these pages.",
+
+ "767", "Image Space is the virtual address space in use by the "
+ "images being executed by the process. This is the sum of all "
+ "the address space with this protection allocated by images run "
+ "by the selected process "
+ "Write Copy protection is used when memory is shared for "
+ "reading but not for writing. When processes are reading this "
+ "memory, they can share the same memory, however, when "
+ "a sharing process wants to have read/write access to this "
+ "shared memory, a copy of that memory is made for writing to.",
+
+ "769", "Image Space is the virtual address space in use by the "
+ "images being executed by the process. This is the sum of all "
+ "the address space with this protection allocated by images run "
+ "by the selected process "
+ "Executable memory is memory that can be executed by "
+ "programs, but may not be read or written. "
+ "This type of protection is not supported by all "
+ "processor types.",
+
+ "771", "Image Space is the virtual address space in use by the "
+ "images being executed by the process. This is the sum of all "
+ "the address space with this protection allocated by images run "
+ "by the selected process "
+ "Execute/Read Only memory is memory that can be "
+ "executed as well as read.",
+
+ "773", "Image Space is the virtual address space in use by the "
+ "images being executed by the process. This is the sum of all "
+ "the address space with this protection allocated by images run "
+ "by the selected process "
+ "Execute/Read/Write memory is memory that can be "
+ "executed by programs as well as read and written "
+ "and modified.",
+
+ "775", "Image Space is the virtual address space in use by the "
+ "images being executed by the process. This is the sum of all "
+ "the address space with this protection allocated by images run "
+ "by the selected process "
+ "Execute Write Copy is memory that can be executed by "
+ "programs as well as read and written. "
+ "This type of protection is used when memory needs to be "
+ "shared between processes. If the sharing processes only "
+ "read the memory, then they will all use the same memory. "
+ "If a sharing process desires write access, then a copy of "
+ "this memory will be made for that process.",
+
+ "777", "Bytes Image Reserved is the sum of all virtual memory reserved "
+ "by images run within this process.",
+
+ "779", "Bytes Image Free is the amount of virtual address space that "
+ "is not in use or reserved by images within this process.",
+
+ "781", "Bytes Reserved is the total amount of virtual memory "
+ "reserved for future use by this process.",
+
+ "783", "Bytes Free is the total unused virtual address space of this "
+ "process.",
+
+ "785", "ID Process is the unique identifier of this process. "
+ "ID Process numbers are reused, so they only identify "
+ "a process for the lifetime of that process.",
+
+ "787", "Process Address Space object type displays details about"
+ " the virtual memory usage and allocation of the selected "
+ "process.",
+
+ "789", "Image Space is the virtual address space in use by the "
+ "selected image with this protection. "
+ "No Access protection prevents a process from writing "
+ "or reading these pages and will generate an access "
+ "violation if either is attempted.",
+
+ "791", "Image Space is the virtual address space in use by the "
+ "selected image with this protection. "
+ "Read Only protection prevents the contents of these pages "
+ "from being modified. Any attempts to write or modify these "
+ "pages will generate an access violation.",
+
+ "793", "Image Space is the virtual address space in use by the "
+ "selected image with this protection. "
+ "Read/Write protection allows a process to read, modify "
+ "and write to these pages.",
+
+ "795", "Image Space is the virtual address space in use by the "
+ "selected image with this protection. "
+ "Write Copy protection is used when memory is shared for "
+ "reading but not for writing. When processes are reading this "
+ "memory, they can share the same memory, however, when "
+ "a sharing process wants to have read/write access to this "
+ "shared memory, a copy of that memory is made for writing to.",
+
+ "797", "Image Space is the virtual address space in use by the "
+ "selected image with this protection. "
+ "Executable memory is memory that can be executed by "
+ "programs, but may not be read or written. "
+ "This type of protection is not supported by all "
+ "processor types.",
+
+ "799", "Image Space is the virtual address space in use by the "
+ "selected image with this protection. "
+ "Execute/Read Only memory is memory that can be "
+ "executed as well as read.",
+
+ "801", "Image Space is the virtual address space in use by the "
+ "selected image with this protection. "
+ "Execute/Read/Write memory is memory that can be executed by "
+ "programs as well as read and written.",
+
+ "803", "Image Space is the virtual address space in use by the "
+ "selected image with this protection. "
+ "Execute Write Copy is memory that can be executed by "
+ "programs as well as read and written. "
+ "This type of protection is used when memory needs to be "
+ "shared between processes. If the sharing processes only "
+ "read the memory, then they will all use the same memory. "
+ "If a sharing process desires write access, then a copy of "
+ "this memory will be made for that process.",
+
+ "805", "ID Thread is the unique identifier of this thread. "
+ "ID Thread numbers are reused, so they only identify "
+ "a thread for the lifetime of that thread.",
+
+ "817", "Thread Details object contains the thread counters that "
+ "are time consuming to collect.",
+
+ "819", "Cache Bytes measures the number of bytes currently in "
+ "use by the system Cache. The system Cache "
+ "is used to buffer data retrieved from disk or LAN. "
+ "The system Cache uses memory not in use by active "
+ "processes in the computer.",
+
+ "821", "Cache Bytes Peak measures the maximum number of bytes "
+ "used by the system Cache. The system Cache "
+ "is used to buffer data retrieved from disk or LAN. "
+ "The system Cache uses memory not in use by active "
+ "processes in the computer.",
+
+ "823", "Pages Input/sec is the number of pages read from the disk "
+ "to resolve memory references to pages that "
+ "were not in memory at the time of the reference. "
+ "This counter includes paging traffic on behalf of the "
+ "system Cache to access file data for applications. "
+ "This is an important counter to observe if you are concerned "
+ "about excessive memory pressure (that is, thrashing), and "
+ "the excessive paging that may result.";
+
+ \ No newline at end of file