IIS: Active Server Pages (ASP)

Event	Title	Channel	Sample	Rule
1	AspDequeueRequest	ETW Trace	N	N
2	AspDoneProcessing	ETW Trace	N	N
10	AspStartRequest	ETW Trace	N	N
11	AspEndRequest	ETW Trace	N	N
12	AspFirstRequest	ETW Trace	N	N
13	AspInitFailure	ETW Trace	N	N
14	AspUnhealthyFailure	ETW Trace	N	N
15	AspFirstRequestForApplication	ETW Trace	N	N
16	AspStartGlobalASACheck	ETW Trace	N	N
17	AspEndGlobalASACheck	ETW Trace	N	N
18	AspGlobalASADoesNotExist	ETW Trace	N	N
19	AspGlobalASAAccessDenied	ETW Trace	N	N
20	AspGlobalASAAccessSuccess	ETW Trace	N	N
21	AspNewSession	ETW Trace	N	N
22	AspSecureSessionID	ETW Trace	N	N
23	AspStartScriptlessSend	ETW Trace	N	N
24	AspEndScriptlessSend	ETW Trace	N	N
25	AspServerTooBusy	ETW Trace	N	N
26	AspQueueRequest	ETW Trace	N	N
28	AspQueueRequestFailed	ETW Trace	N	N
29	AspClientConnectionDisconnected	ETW Trace	N	N
30	AspRequestTimeout	ETW Trace	N	N
31	AspFileAccessDenied	ETW Trace	N	N
32	AspFileNotFound	ETW Trace	N	N
33	AspReadFile	ETW Trace	N	N
34	AspCompileFailed	ETW Trace	N	N
35	AspStartApplicationOnStart	ETW Trace	N	N
36	AspEndApplicationOnStart	ETW Trace	N	N
37	AspApplicationOnStartError	ETW Trace	N	N
38	AspApplicationOnStartSuccess	ETW Trace	N	N
39	AspStartSessionOnStart	ETW Trace	N	N
40	AspEndSessionOnStart	ETW Trace	N	N
41	AspSessionOnStartError	ETW Trace	N	N
42	AspSessionOnStartSuccess	ETW Trace	N	N
43	AspStartScriptExecution	ETW Trace	N	N
44	AspEndScriptExecution	ETW Trace	N	N
45	AspTransactionAborted	ETW Trace	N	N
46	AspTransactionCommited	ETW Trace	N	N
47	AspStartCompile	ETW Trace	N	N
48	AspEndCompile	ETW Trace	N	N
49	AspStartCacheAccess	ETW Trace	N	N
50	AspEndCacheAccess	ETW Trace	N	N
51	AspCurrentSession	ETW Trace	N	N
52	AspScriptTraceInfo	ETW Trace	N	N
53	AspScriptTraceInfo	ETW Trace	N	N
54	AspScriptObjectTraceInfo	ETW Trace	N	N
55	AspScriptObjectTraceInfo	ETW Trace	N	N
56	AspScriptObjectTraceInfo	ETW Trace	N	N
57	AspScriptObjectTraceInfo	ETW Trace	N	N
58	AspScriptObjectTraceInfo	ETW Trace	N	N
59	AspScriptObjectTraceInfo	ETW Trace	N	N
60	AspLogError	ETW Trace	N	N

Event ID 1: AspDequeueRequest

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 2: AspDoneProcessing

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 10: AspStartRequest

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`PhysicalPath` mof:String

Event ID 11: AspEndRequest

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 12: AspFirstRequest

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 13: AspInitFailure

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Reason` mof:UInt32

Event ID 14: AspUnhealthyFailure

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`Reason` mof:UInt32

Event ID 15: AspFirstRequestForApplication

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`ApplicationPath` mof:String

Event ID 16: AspStartGlobalASACheck

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`GlobalASAPath` mof:String

Event ID 17: AspEndGlobalASACheck

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 18: AspGlobalASADoesNotExist

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 19: AspGlobalASAAccessDenied

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 20: AspGlobalASAAccessSuccess

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 21: AspNewSession

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`SessionId` mof:String

Event ID 22: AspSecureSessionID

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`SessionId` mof:String

Event ID 23: AspStartScriptlessSend

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 24: AspEndScriptlessSend

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 25: AspServerTooBusy

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 26: AspQueueRequest

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 28: AspQueueRequestFailed

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`ErrorCode` mof:UInt32

Event ID 29: AspClientConnectionDisconnected

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 30: AspRequestTimeout

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 31: AspFileAccessDenied

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String

Event ID 32: AspFileNotFound

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String

Event ID 33: AspReadFile

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String

Event ID 34: AspCompileFailed

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String
`ErrorCode` mof:UInt32

Event ID 35: AspStartApplicationOnStart

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 36: AspEndApplicationOnStart

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 37: AspApplicationOnStartError

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`ErrorCode` mof:UInt32

Event ID 38: AspApplicationOnStartSuccess

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 39: AspStartSessionOnStart

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 40: AspEndSessionOnStart

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 41: AspSessionOnStartError

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`ErrorCode` mof:UInt32

Event ID 42: AspSessionOnStartSuccess

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 43: AspStartScriptExecution

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 44: AspEndScriptExecution

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 45: AspTransactionAborted

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 46: AspTransactionCommited

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 47: AspStartCompile

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String

Event ID 48: AspEndCompile

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object

Event ID 49: AspStartCacheAccess

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String

Event ID 50: AspEndCacheAccess

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`ErrorCode` mof:UInt32
`AccessResult` mof:UInt32

Event ID 51: AspCurrentSession

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`SessionID` mof:String

Event ID 52: AspScriptTraceInfo

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String

Event ID 53: AspScriptTraceInfo

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String

Event ID 54: AspScriptObjectTraceInfo

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String
`LineNumber` mof:UInt32
`CurrentStatement` mof:String
`SizeOfStatement` mof:UInt32

Event ID 55: AspScriptObjectTraceInfo

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String
`LineNumber` mof:UInt32
`CurrentStatement` mof:String
`SizeOfStatement` mof:UInt32

Event ID 56: AspScriptObjectTraceInfo

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String
`LineNumber` mof:UInt32
`CurrentStatement` mof:String
`SizeOfStatement` mof:UInt32

Event ID 57: AspScriptObjectTraceInfo

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String
`LineNumber` mof:UInt32
`CurrentStatement` mof:String
`SizeOfStatement` mof:UInt32

Event ID 58: AspScriptObjectTraceInfo

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String
`LineNumber` mof:UInt32
`CurrentStatement` mof:String
`SizeOfStatement` mof:UInt32

Event ID 59: AspScriptObjectTraceInfo

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`FilePath` mof:String
`LineNumber` mof:UInt32
`CurrentStatement` mof:String
`SizeOfStatement` mof:UInt32

Event ID 60: AspLogError

Channel: ETW Trace
Source: Trace

Fields #

Name	Description
`ContextId` mof:Object
`LineNumber` mof:String
`ErrorCode` mof:String
`Description` mof:String

Provenance

ETW provider GUID {06B94D9A-B15E-456E-A4EF-37C984A2CB4B}

WS2025-26100.0, schema read from the WMI MOF class, captured 2026-02-26
Taken from Windows installation media (build 26100.1), not a patched system, so the exact update level is unknown.
WS2022-20348.4893, schema read from the WMI MOF class, captured 2026-06-02
MOF class: ASP_Trace