Internet Information Services 6.0 log file entries may not be sorted in chronological order on a Windows Server 2003-based computer

If a race condition occurs on a Microsoft Windows Server 2003-based computer, the Internet Information Services (IIS) 6.0 log file entries may not be sorted in chronological order. For example, entries that are recorded at 12:59:59 may appear before entries that are recorded at 12:59:58.

This behavior is expected. To improve performance, the Http.sys driver sacrifices the guaranteed order of entries in the IIS log files. Http.sys is a kernel-mode driver that was introduced in Windows Server 2003.

This behavior may affect tools that you use to analyze the IIS log files because many tools presume that the log file entries are in chronological order.

To work around this behavior, sort the IIS log file entries by using the date and the time before you analyze the log files.