path: root/public/oak/bin/perfh009.ini

    "3",     "The System object type includes those counters "
             "that apply to all processors on the computer "
             "collectively.  These counters represent the activity of "
             "all processors on the computer.",

    "5",     "The Memory object type includes those counters "
             "that describe the behavior of both real and virtual "
             "memory on the computer.  Real memory is allocated in "
             "units of pages.  Virtual memory may exceed real "
             "memory in size, causing page traffic as virtual pages "
             "are moved between disk and real memory.",

    "7",     "Processor Time is expressed as a percentage of the "
             "elapsed time that a processor is busy executing "
	     "a non-Idle thread.  It can be viewed as the fraction "
	     "of the time spent doing useful work.  Each processor is "
	     "assigned an Idle thread in the Idle process which consumes "
	     "those unproductive processor cycles not used by any other "
	     "threads.",

    "11",    "File Read Operations/sec is an aggregate of all the file system "
             "read operations on the computer.",

    "13",    "File Write Operations/sec is an aggregate of all the file system "
             "write operations on the computer.",

    "15",    "File Control Operations/sec is an aggregate of all "
             "file system operations that are neither reads nor writes.  "
             "These operations usually include file system control requests or "
             "requests for information about device characteristics or "
             "status.",

    "17",    "File Read Bytes/sec is an aggregate of the bytes transferred "
             "for all the file system read operations on the computer.",

    "19",    "File Write Bytes/sec is an aggregate of the bytes transferred "
             "for all the file system write operations on the computer.",

    "21",    "File Control Bytes/sec is an aggregate of bytes transferred "
             "for all file system operations that are neither reads nor "
             "writes.  These operations usually include file system control "
             "requests or requests for information about device "
             "characteristics or status.",

    "25",    "Available Bytes displays the size of the virtual memory "
             "currently on the Zeroed, Free, and Standby lists.  Zeroed "
             "and Free memory is ready for use, with Zeroed memory cleared "
             "to zeros.  Standby memory is memory removed from a process's "
	     "Working Set but still available.  Notice that this is an "
             "instantaneous count, not an average over the time interval.",

    "27",    "Committed Bytes displays the size of virtual memory "
             "(in bytes) that has been Committed (as opposed to simply "
             "reserved).  Committed memory must have backing (i.e., disk) "
             "storage available, or must be assured never to need disk "
             "storage (because main memory is large enough to hold it.)  "
             "Notice that this is an instantaneous count, not an average "
             "over the time interval.",

    "29",    "Page Faults/sec is a count of the Page Faults in "
             "the processor.  A page fault occurs when a process "
             "refers to a virtual memory page that is not in its "
             "Working Set in main memory.  A Page Fault will not "
             "cause the page to be fetched from disk if that page "
             "is on the standby list, and hence already in main memory, "
             "or if it is in use by another process with whom the "
             "page is shared.",

    "31",    "Commit Limit is the size (in bytes) of "
             "virtual memory that can be committed without having to "
	     "extend the paging file(s).  If the paging file(s) can "
             "be extended, this is a soft limit.",

    "33",    "Write Copies/sec is the number of page faults that "
             "have been satisfied by making a copy of a page when an "
             "attempt to write to the page is made.  This is an "
             "economical way of sharing data since the copy " 
             "of the page is only made on an attempt to write to "
             "the page; otherwise, the page is shared.",

    "35",    "Transition Faults/sec is the number of page faults "
             "resolved by recovering pages that were in "
             "transition, i.e., being written to disk at the time "       
             "of the page fault.  The pages were recovered without "
             "additional disk activity.",

    "37",    "Cache Faults occur whenever the Cache manager does "
             "not find a file's page in the immediate Cache and "
             "must ask the memory manager to locate the page "
             "elsewhere in memory or on the disk so that it can be "
             "loaded into the immediate Cache.",

    "39",    "Demand Zero Faults are the number of page faults for "
             "pages that must be filled with zeros before the "
             "fault is satisfied.  If the Zeroed list is not empty, "
             "the fault can be resolved by removing a page from "
             "the Zeroed list.",

    "41",    "Pages/sec is the number of pages read from the disk "
	     "or written to the disk "
             "to resolve memory references to pages that "
	     "were not in memory at the time of the reference.  "
             "This is the sum of Pages Input/sec and Pages Output/sec.  "
	     "This counter includes paging traffic on behalf of the "
             "system Cache to access file data for applications.  "
             "This is the primary counter to observe if you are concerned "
	     "about excessive memory pressure (that is, thrashing), and "
	     "the excessive paging that may result.",

    "43",    "Page Reads/sec is the number of times the disk was read "
             "to retrieve pages of virtual memory necessary to resolve "
             "page faults.  Multiple pages can be read during a disk read "
             "operation.",

    "45",    "Processor Queue Length is the instantaneous length of the "
	     "processor queue "
             "in units of threads.  This counter is always 0 "
             "unless you are also monitoring a thread counter.  "
             "All processors use a single "
             "queue in which threads wait for processor cycles.  "
             "This length does not include the threads that are "
             "currently executing.  A sustained processor queue length "
	     "greater than two generally indicates processor congestion.  "
	     "This is an instantaneous count, not an average over the "
	     "time interval.",

    "47",    "Thread State is the current state of the thread.  "
             "It is 0 for Initialized, 1 for Ready, 2 for Running, "
             "3 for Standby, 4 for Terminated, 5 for Wait, "
             "6 for Transition, 7 for Unknown.  A Running thread is "
             "using a processor; a Standby thread is about to use one.  "
             "A Ready thread wants to use a processor, but "
             "is waiting for a processor because none are "
             "free.  A thread in Transition is waiting for a resource "
             "in order to execute, such as waiting for its execution stack "
             "to be paged in from disk.  A Waiting thread has no use for "
             "the processor because it is waiting for a peripheral "
             "operation to complete or a resource to become free.",

    "49",    "Pages Output/sec is a count of the number of pages that "
	     "are written to disk because the pages "
             "have been modified in main memory.",

    "51",    "Page Writes/sec is a count of the number of times "
	     "pages have been written to the disk because they "
	     "were changed since last retrieved.  Each such write "
	     "operation may transfer a "
             "number of pages.",

    "57",    "Pool Paged Bytes is the number of bytes in the "
             "Paged Pool, a system memory area where space is acquired "
             "by operating system components as they accomplish their "
             "appointed tasks.  Paged Pool pages can "
             "be paged out to the paging file when not accessed by "
             "the system for sustained periods of time.",

    "59",    "Pool Nonpaged Bytes is the number of bytes in the "
             "Nonpaged Pool, a system memory area where space is acquired "
             "by operating system components as they accomplish their "
             "appointed tasks.  Nonpaged Pool pages cannot be paged "
             "out to the paging file, but instead remain in main memory "
             "as long as they are allocated.",

    "61",    "Pool Paged Allocs is the number of calls to allocate "
             "space in the system Paged Pool.  "
             "Paged Pool is a system memory area where space is acquired "
             "by operating system components as they accomplish their "
             "appointed tasks.  Paged Pool pages can "
             "be paged out to the paging file when not accessed by "
             "the system for sustained periods of time.",

    "63",    "Pool Paged Resident Bytes is the size of paged Pool resident in "
             "core memory.  This is the actual cost of the paged Pool allocation, "
             "since this is actively in use and using real physical memory.",

    "65",    "Pool Nonpaged Allocs is the number of calls to "
             "allocate space in the system Nonpaged Pool.  "
             "Nonpaged Pool is a system memory area where space is acquired "
             "by operating system components as they accomplish their "
             "appointed tasks.  Nonpaged Pool pages cannot be paged "
             "out to the paging file, but instead remain in main memory "
             "as long as they are allocated.",

    "67",    "Bytes Total/sec is the sum of Frame Bytes/sec and "
             "Datagram Bytes/sec.  This is the total rate of bytes "
             "sent to or received from the network by the protocol, "
             "but only counts the bytes in frames (i.e., packets) "
             "which carry data.",

    "69",    "System Code Total Bytes is the number of bytes of pagable pages "
             "in ntoskrnl.exe, hal.dll, and the boot drivers and file systems "
             "loaded by ntldr/osloader.",

    "71",    "System Code Resident Bytes is the number of bytes of "
             "System Code Total Bytes currently resident in core memory.  "
             "This is the code working set of the pagable executive.  "
             "In addition to this, there is another ~300k bytes of non-paged "
             "kernel code.",

    "73",    "System Driver Total Bytes is the number of bytes of pagable "
             "pages in all other loaded device drivers.",

    "75",    "System Driver Resident Bytes is the number of bytes of "
             "System Driver Total Bytes currently resident in core memory.  "
             "This number is the code working set of the pagable drviers.  "
             "In addition to this, there is another ~700k bytes of non-paged "
             "driver code.",

    "77",    "System Cache Resident Bytes is the number of bytes currently "
             "resident in the global disk cache.",

    "87",    "The Cache object type manages memory for rapid access to "
             "files.  Files on Windows NT are cached in main memory in "
             "units of pages.  Main memory not being used in the working "
             "sets of processes is available to the Cache for "
             "this purpose.  The Cache preserves file pages in memory "
             "for as long as possible to permit access to the "
             "data through the file system without having to access the "
             "disk.",

    "89",    "Data Maps/sec is the frequency that a file system "
             "such as NTFS or "
             "HPFS maps a page of a file into the Cache to read the page.",

    "91",    "Sync Data Maps/sec counts the frequency that a "
             "file system such as NTFS "
             "or HPFS maps a page of a file into the Cache to read the "
             "page, and wishes to wait for the Cache to retrieve the "
             "page if it is not in main memory.",

    "93",    "Async Data Maps/sec is the frequency that an "
	     "application using a file system such as "
             "NTFS or HPFS to map a page of a file into the Cache to read "
             "the page, and does not wish to wait for the Cache to "
             "retrieve the page if it is not in main memory.",

    "95",    "Data Map Hits is the percentage of Data Maps in "
             "the Cache that could be resolved without having to "
             "retrieve a page from the disk, i.e. the page was already "
             "in physical memory.",

    "97",    "Data Map Pins/sec is the frequency of Data Maps in "
             "the Cache that resulted in pinning a page in main "
             "memory, an action usually preparatory to writing to the "
             "file on disk.  While pinned, a page's physical address "
             "in main memory and virtual address in the Cache "
             "will not be altered.",

    "99",    "Pin Reads/sec is the frequency of "
             "reading data into the Cache preparatory to writing the "
             "data back to disk.  "
             "Pages read in this fashion are pinned in memory at "
             "the completion of the read.  While pinned, a page's "
             "physical address in the Cache will not be altered.",

    "101",   "Sync Pin Reads/sec is the frequency of "
             "reading data into the "
             "Cache preparatory to writing the data back to disk.  "
             "Pages read in this fashion are pinned in memory at the "
             "completion of the read.  The file system will not "
             "regain control until the page is pinned in the Cache, "
	     "in particular if the disk must be accessed to retrieve the "
             "page.  While pinned, a page's physical address in the Cache will "
             "not be altered.",

    "103",   "Async Pin Reads/sec is the frequency of "
             "reading data into the "
             "Cache preparatory to writing the data back to disk.   "
             "Pages read in this fashion are pinned in memory at the "
             "completion of the read.  The file system will regain "
             "control immediately even if the disk must be accessed "
             "to retrieve the page.  While pinned, a page's physical "
             "address will not be altered.",

    "105",   "Pin Read Hits is the percentage of Cache Pin Read "
             "requests that hit the Cache, i.e., did not require a disk "
             "read in order to provide access to the page in the Cache.  "
             "While pinned, a page's physical address in the Cache will "
             "not be altered.  "
             "The LAN Redirector uses this method for retrieving Cache "
             "information, as does the LAN Server for small transfers.  "
             "This is usually the method used by the disk file systems "
             "as well.",

    "107",   "Copy Reads/sec is the frequency of reads from "
             "Cache pages that involve "
             "a memory copy of the data from the Cache to the "
             "application's buffer.  The LAN Redirector uses this method "
             "for retrieving Cache information, as does the "
             "LAN Server for small transfers.  This is a method used "
             "by the disk file systems as well.",

    "109",   "Sync Copy Reads/sec is the frequency of reads from "
             "Cache pages that "
             "involve a memory copy of the data from the Cache to the "
             "application's buffer.  The file system will not regain "
             "control until the copy operation is complete, even "
             "if the disk must be accessed to retrieve the page.",

    "111",   "Async Copy Reads/sec is the frequency of reads "
             "from Cache pages that "
             "involve a memory copy of the data from the Cache to the "
	     "application's buffer.  The application will regain "
             "control immediately even if the disk must be accessed "
             "to retrieve the page.",

    "113",   "Copy Read Hits is the percentage of Cache Copy Read "
             "requests that hit the Cache, i.e., did not require a "
             "disk read in order to provide access to the page in "
             "the Cache.  A Copy Read is a file read operation that is "
             "satisfied by a memory copy from a Cache page to the "
	     "application's buffer.  "
             "The LAN Redirector uses this method for "
             "retrieving Cache information, as does the LAN Server "
             "for small transfers.  This is a method used by the disk "
             "file systems as well.",

    "115",   "MDL Reads/sec is the frequency of reads from "
             "Cache pages that use "
             "a Memory Descriptor List (MDL) to access the data.  The "
             "MDL contains the physical address of each page involved "
	     "in the transfer, and thus can employ a "
             "hardware Direct Memory Access (DMA) device to effect the "
             "copy.  The LAN Server uses this method for large transfers "
             "out of the server.",

    "117",   "Sync MDL Reads/sec is the frequency of reads from "
             "Cache pages that use a "
             "Memory Descriptor List (MDL) to access the pages.  The MDL "
             "contains the physical address of each page in the transfer, "
             "thus permitting Direct Memory Access (DMA) of the pages.  "
             "If the accessed page(s) are not in main memory, the caller "
             "will wait for the pages to fault in from the disk.",

    "119",   "Async MDL Reads/sec is the frequency of reads "
             "from Cache pages using a Memory Descriptor List (MDL) to "
             "access the pages.  The MDL contains the physical address "
             "of each page in the transfer, thus permitting Direct "        
             "Memory Access (DMA) of the pages.  If the accessed page(s) "
             "are not in main memory, the calling application program will "
             "not wait for the pages to fault in from disk.",

    "121",   "MDL Read Hits is the percentage of Cache Memory "
             "Descriptor List (MDL) Read "
             "requests that hit the Cache, i.e., did not require disk "
             "accesses in order to provide memory access to the page(s) "
             "in the Cache.",

    "123",   "Read Aheads/sec is the frequency of Cache reads "
             "where the Cache detects sequential access to a file.  "
             "The read aheads permit the data to be transferred in "
             "larger blocks than those being requested by the "
             "application, reducing the overhead per access.",

    "125",   "Fast Reads/sec is the frequency of reads from "
             "Cache pages that bypass "
             "the installed file system and retrieve the data "
             "directly from the Cache.  Normally, file I/O requests "
             "invoke the appropriate file system to retrieve data from "
             "a file, but this path permits direct retrieval of Cache "
             "data without file system involvement if the data is in "
             "the Cache.  Even if the data is not in the Cache, one "
             "invocation of the file system is avoided.",

    "127",   "Sync Fast Reads/sec is the frequency of reads "
             "from Cache pages that "
             "bypass the installed file system and retrieve the data "
             "directly from the Cache.  Normally, file I/O requests "
             "invoke the appropriate file system to retrieve data "
             "from a file, but this path permits direct retrieval of "
             "Cache data without file system involvement if the "
             "data is in the Cache.  Even if the data is not in the "
             "Cache, one invocation of the file system is avoided.  "
             "If the data is not in the Cache, the request (application "
             "program call) will wait "
             "until the data has been retrieved from disk.",

    "129",   "Async Fast Reads/sec is the frequency of reads "
             "from Cache pages that "
             "bypass the installed file system and retrieve the data "
             "directly from the Cache.  Normally, file I/O requests will "
             "invoke the appropriate file system to retrieve data "
             "from a file, but this path permits direct retrieval "
             "of Cache data without file system involvement if the "
             "data is in the Cache.  Even if the data is not in the "
             "Cache, one invocation of the file system is avoided.  "
             "If the data is not in the Cache, the request (application "
             "program call) will not wait until the data has been "
             "retrieved from disk, but will get control immediately.",

    "131",   "Fast Read Resource Misses/sec is the frequency of "
             "Cache misses necessitated by the lack of available "
             "resources to satisfy the request.",

    "133",   "Fast Read Not Possibles/sec is the frequency of "
             "attempts by "
             "an Application Program Interface (API) function call "
             "to bypass the file system to get at Cache data, that "
             "could not be honored without invoking the file system "
	     "after all.",

    "135",   "Lazy Write Flushes/sec is the frequency "
             "the Cache's Lazy Write thread has written to disk.  "
             "Lazy Writing is the process of updating the disk after "
	     "the page has been changed in memory, so the application "
	     "making the change to the file does not have to wait for "
	     "the disk write to complete before proceeding.  "
             "More than one page can be transferred on each write "
             "operation.",

    "137",   "Lazy Write Pages/sec is the frequency "
             "the Cache's Lazy Write thread has written to disk.  "
             "Lazy Writing is the process of updating the disk after "
	     "the page has been changed in memory, so the application "
	     "making the change to the file does not have to wait for "
	     "the disk write to complete before proceeding.  "
             "More than one page can be transferred on a single disk "
             "write operation.",

    "139",   "Data Flushes/sec is the frequency "
             "the Cache has flushed its contents to disk as the "
             "result of a request to flush or to satisfy a write-through "
             "file write request.  More than one page can be "
             "transferred on each flush operation.",

    "141",   "Data Flush Pages/sec is the number of pages "
             "the Cache has flushed to disk as a result of a request "
             "to flush or to satisfy a write-through file write "  
             "request.  More than one page can be transferred on each "     
             "flush operation.",

    "143",   "User Time is the percentage of processor time spent "
	     "in User Mode in non-Idle threads.  All application code "
	     "and subsystem code "
             "execute in User Mode.  The graphics engine, graphics "
             "device drivers, printer device drivers, and the "
             "window manager also execute in User Mode.  "
             "Code executing in User Mode cannot damage the integrity "
             "of the Windows NT Executive, Kernel, and device drivers.  "
             "Unlike some early operating systems, Windows NT uses "
             "process boundaries for subsystem protection in "
             "addition to the traditional protection of User and Privileged "
             "modes.  These subsystem processes provide additional"
             " protection.  "
             "Therefore, some work done by Windows NT on behalf of "
             "your application may appear in other subsystem processes "
             "in addition to the Privileged Time in your process.",

    "145",   "Privileged Time is the percentage of processor time "
	     "spent in Privileged Mode in non-Idle threads.  The Windows "
	     "NT service layer, "
             "the Executive routines, and the Windows NT Kernel "
             "execute in Privileged Mode.  Device drivers for most "
             "devices other than graphics adapters and printers "
             "also execute in Privileged Mode.  "
             "Unlike some early operating systems, Windows NT uses "
             "process boundaries for subsystem protection in "
             "addition to the traditional protection of User and Privileged "
             "modes.  These subsystem processes provide additional"
             " protection.  "
             "Therefore, some work done by Windows NT on behalf of "
             "your application may appear in other subsystem processes "
             "in addition to the Privileged Time in your process.",
                                 
    "147",   "Context Switches/sec is the rate of switches from one "
             "thread to another.  Thread switches can occur either "
             "inside of a single process or across processes.  A thread "
             "switch may be caused either by one thread asking another "
             "for information, or by a thread being preempted by another, "
             "higher priority thread becoming ready to run.  "
             "Unlike some early operating systems, Windows NT uses "
             "process boundaries for subsystem protection in "
             "addition to the traditional protection of User and Privileged "
             "modes.  These subsystem processes provide additional"
             " protection.  "
             "Therefore, some work done by Windows NT on behalf of "
             "an application may appear in other subsystem processes "
             "in addition to the Privileged Time in the application.  "
             "Switching to the subsystem process causes one Context Switch "
             "in the application thread.  "
             "Switching back causes another Context Switch in the "
             "subsystem thread.",

    "149",   "Interrupts/sec is the number of device interrupts the "
             "processor is experiencing.  A device interrupts the "
             "processor when it has completed a task or when it "
             "otherwise requires attention.  Normal thread execution "
             "is suspended during interrupts.  An interrupt may cause "
             "the processor to switch to another, higher priority "
             "thread.  Clock interrupts are frequent and periodic "
	     "and create a background of interrupt activity.",

    "151",   "Systems Calls/sec is the frequency of calls to Windows NT "
             "system service routines.  These routines perform all "
             "of the basic scheduling and synchronization of activities "
             "on the computer, and provide access to non-graphical "
             "devices, memory management, and name space management.",

    "153",   "Level 1 TLB Fills/sec is the frequency of faults that "
             "occur when reference is made to memory whose Page Table Entry "
             "(PTE) is not in the Translation Lookaside Buffer (TLB).  "
             "On some "
             "computers this fault is handled by software loading the "
             "PTE into the TLB, and this counter is incremented.",

    "155",   "Level 2 TLB Fills/sec is the frequency of faults that "
             "occur when reference is made to memory whose Page Table Entry "
             "(PTE) is not in the Translation Lookaside Buffer (TLB), nor "
             "is the page containing the PTE.  "
             "On some "
             "computers this fault is handled by software loading the "
             "PTE into the TLB, and this counter is incremented.",

    "157",   "User Time is the percentage of elapsed time that this "
             "process's threads have spent executing code in User Mode.  "
             "Applications execute in User Mode, as do subsystems "
             "like the window manager and the graphics engine.  "
             "Code executing in User Mode cannot damage the integrity "
             "of the Windows NT Executive, Kernel, and device drivers.  "
             "Unlike some early operating systems, Windows NT uses "
             "process boundaries for subsystem protection in "
             "addition to the traditional protection of User and Privileged "
             "modes.  These subsystem processes provide additional"
             " protection.  "
             "Therefore, some work done by Windows NT on behalf of "
             "your application may appear in other subsystem processes "
             "in addition to the Privileged Time in your process.",

    "159",   "Privileged Time is the percentage of elapsed time that this "
             "process's threads have spent executing code in Privileged "
             "Mode.  When a Windows NT system service is called, "
             "the service will often run in Privileged Mode "
             "to gain access to system-private data.  Such data "
             "is protected from access by threads executing in "
             "User Mode.  Calls to the system may be explicit, or "
             "they may be implicit such as when a page fault or an "
             "interrupt occurs.  "
             "Unlike some early operating systems, Windows NT uses "
             "process boundaries for subsystem protection in "
             "addition to the traditional protection of User and Privileged "
             "modes.  These subsystem processes provide additional"
             " protection.  "
             "Therefore, some work done by Windows NT on behalf of "
             "your application may appear in other subsystem processes "
             "in addition to the Privileged Time in your process.",

    "173",   "Virtual Bytes Peak is the maximum number of bytes of "
             "virtual address space the process has used at any one "
             "time.  Use of virtual address space does not necessarily "
             "imply corresponding use of either disk or main memory "
             "pages.  Virtual space is however finite, and by using "
             "too much, the process may limit its ability to load "
             "libraries.",

    "175",   "Virtual Bytes is the current size in bytes of the "
             "virtual address space the process is using.  "
             "Use of virtual address space does not necessarily imply "
             "corresponding use of either disk or main memory pages.  "
             "Virtual space is however finite, and by using too much, "
             "the process may limit its ability to load libraries.",

    "177",   "Page Faults/sec is the rate of Page Faults by the threads "
             "executing in this process.  "
             "A page fault occurs when a thread refers to a virtual "
             "memory page that is not in its working set in main "
             "memory.  This will not cause the page to be fetched from "
             "disk if it is on the standby list and hence already in "
             "main memory, or if it is in use by another process with "
             "whom the page is shared.",

    "179",   "Working Set Peak is the maximum number of bytes in the "
             "Working Set of this process at any point in time.  "
             "The Working Set is the set of memory pages touched "
             "recently by the threads in the process.  "
             "If free memory in the computer is above a threshold, "
             "pages are left in the Working Set of a process even if "
             "they are not in use.  When free memory falls below "
             "a threshold, pages are trimmed from Working Sets.  If "
             "they are needed they will then be soft-faulted back into the "
             "Working Set before they leave main memory.",

    "181",   "Working Set is the current number of bytes "
             "in the Working Set of this process.  "
             "The Working Set is the set of memory pages touched "
             "recently by the threads in the process.  "
             "If free memory in the computer is above a threshold, "
             "pages are left in the Working Set of a process even if "
             "they are not in use.  When free memory falls below "
             "a threshold, pages are trimmed from Working Sets.  If "
             "they are needed they will then be soft-faulted back into the "
             "Working Set before they leave main memory.",

    "183",   "Page File Bytes Peak is the maximum number of bytes this "
             "process has used in the paging file(s).  Paging files are "
             "used to store pages of memory used by the process "
             "that are not contained in other files.  Paging "
             "files are shared by all processes, and lack of space "
             "in paging files can prevent other processes from "
             "allocating memory.",

    "185",   "Page File Bytes is the current number of bytes this process "
             "has used in the paging file(s).  Paging files are "
             "used to store pages of memory used by the process "
             "that are not contained in other files.  Paging "
             "files are shared by all processes, and lack of space "
             "in paging files can prevent other processes from "
             "allocating memory.",

    "187",   "Private Bytes is the current number of bytes this process "
             "has allocated that cannot be shared with other processes.",

    "189",   "Processor Time is the percentage of elapsed time that "
             "all of the threads of this process used the processor "
             "to execute instructions.  An instruction is the basic "
             "unit of execution in a computer, a thread is the object "
             "that executes instructions, and a process is the object "
             "created when a program is run.  Code executed to handle "
             "certain hardware interrupts or trap conditions may be "
             "counted for this process.",

    "191",   "Processor Time is the percentage of elapsed time that this "
             "thread used the processor to execute instructions.  "
             "An instruction is the basic unit of execution in a processor, "
             "and a thread is the object that executes instructions.  "
             "Code executed to handle certain hardware interrupts or "
             "trap conditions may be counted for this thread.",

    "193",   "User Time is the percentage of elapsed time that this "
             "thread has spent executing code in User Mode.  "
             "Applications execute in User Mode, as do subsystems like "
             "the window manager and the graphics engine.  "
             "Code executing in User Mode cannot damage the integrity "
             "of the Windows NT Executive, Kernel, and device drivers.  "
             "Unlike some early operating systems, Windows NT uses "
             "process boundaries for subsystem protection in "
             "addition to the traditional protection of User and Privileged "
             "modes.  These subsystem processes provide additional"
             " protection.  "
             "Therefore, some work done by Windows NT on behalf of "
             "your application may appear in other subsystem processes "
             "in addition to the Privileged Time in your process.",

    "195",   "Privileged Time is the percentage of elapsed time that "
             "this thread has spent executing code in Privileged Mode.  "
             "When a Windows NT system service is called, "
             "the service will often run in Privileged Mode in order "
             "to gain access to system-private data.  Such data is "
             "protected from access by threads executing in User Mode.  "
             "Calls to the system may be explicit, or they may be "
             "implicit such as when a page fault or an interrupt occurs.  "
             "Unlike some early operating systems, Windows NT uses "
             "process boundaries for subsystem protection in "
             "addition to the traditional protection of User and Privileged "
             "modes.  These subsystem processes provide additional"
             " protection.  "
             "Therefore, some work done by Windows NT on behalf of "
             "your application may appear in other subsystem processes "
             "in addition to the Privileged Time in your process.",

    "197",   "Context Switches/sec is the rate of switches from one "
             "thread to another.  Thread switches can occur either inside "
             "of a single process or across processes.  A thread switch "
             "may be caused either by one thread asking another for "
             "information, or by a thread being preempted by another, "
             "higher priority thread becoming ready to run.  "
             "Unlike some early operating systems, Windows NT uses "
             "process boundaries for subsystem protection in "
             "addition to the traditional protection of User and Privileged "
             "modes.  These subsystem processes provide additional"
             " protection.  "
             "Therefore, some work done by Windows NT on behalf of "
             "an application may appear in other subsystem processes "
             "in addition to the Privileged Time in the application.  "
             "Switching to the subsystem process causes one Context Switch "
             "in the application thread.  "
             "Switching back causes another Context Switch in the "
             "subsystem thread.",

    "199",   "Disk Queue Length is the number of requests outstanding on "
             "the disk at the time the performance data is collected.  "
             "It includes requests in service at the time of the snapshot.  "
             "This is an instantaneous length, not an average over the "
             "time interval.  "
             "Multi-spindle disk devices can have multiple requests "
             "active at one time, but other concurrent requests are "
             "awaiting service.  "
             "This counter may reflect a transitory high or low queue length, "
             "but if there is a sustained load on the disk drive, it is "
             "likely that this will be consistently high.  "
             "Requests are experiencing "
             "delays proportional to the length of this queue minus the "
             "number of spindles on the disks.  This difference should average "
             "less than 2 for good performance.",

    "201",   "Disk Time is the percentage of elapsed time that the "
             "selected disk drive is busy servicing read or write requests.",

    "203",   "Disk Read Time is the percentage of elapsed time that the "
             "selected disk drive is busy servicing read requests.",

    "205",   "Disk Write Time is the percentage of elapsed time that the "
             "selected disk drive is busy servicing write requests.",

    "207",   "Avg. Disk sec/Transfer is the time in seconds of the average disk "
             "transfer.",

    "209",   "Avg. Disk sec/Read is the average time in seconds of a "
             "read of data from the disk.",

    "211",   "Avg. Disk sec/Write is the average time in seconds of a "
             "write of data to the disk.",

    "213",   "Disk Transfers/sec is the rate of read and write operations "
             "on the disk.",

    "215",   "Disk Reads/sec is the rate of read operations on the disk.",

    "217",   "Disk Writes/sec is the rate of write operations on the disk.",

    "219",   "Disk Bytes/sec is the rate bytes are transferred "
             "to or from the disk during write or read operations.",

    "221",   "Disk Read Bytes/sec is the rate bytes are transferred from "
             "the disk during read operations.",

    "223",   "Disk Write Bytes is rate bytes are transferred to the disk "
             "during write operations.",

    "225",   "Avg. Disk Bytes/Transfer is the average number of bytes transferred "
             "to or from the disk during write or read operations.",

    "227",   "Avg. Disk Bytes/Read is the average number of bytes "
             "transferred from the disk during read operations.",

    "229",   "Avg. Disk Bytes/Write is the average number of bytes "
             "transferred to the disk during write operations.",

    "231",   "The Process object type is created when a "
             "program is run.  All the threads in a process share the "
             "same address space and have access to the same data.",

    "233",   "The Thread object type is the basic object that executes "
             "instructions in a processor.  Every running process has at "
             "least one thread.",

    "235",   "A Physical Disk object type is a hard or fixed disk drive.  "
             "It will contain 1 or more logical partitions.  Disks are used "
             "to store file, program, and paging data.  The disk is read "
             "to retrieve these items, and written to record changes to them.",

    "237",   "A Logical Disk object type is a partition on a hard or fixed "
             "disk drive and assigned a drive letter, such as C.  "
             "Disks can be partitioned into distinct sections where they "
             "can store file, program, and page data.  The disk is read "
             "to retrieve these items, and written to record changes to them.",
                      
    "239",   "The Processor object type includes as instances all "
             "processors on the computer.  A processor is the part "
             "in the computer that performs arithmetic and logical "
             "computations, and initiates operations on peripherals.  "
             "It executes (i.e., runs) programs on the computer.",

    "241",   "The % Total Processor Time is the average percentage of time "
             "that all the processors on the system are busy executing "
             "non-idle threads.  "
             "On a multi-processor system, if all processors are always "
             "busy this is 100%, if all processors are 50% busy this "
             "is 50% and if 1/4th of the processors are busy this is "
             "25%.  "
             "It can be viewed as the fraction "
	     "of the time spent doing useful work.  Each processor is "
	     "assigned an Idle thread in the Idle process which consumes "
	     "those unproductive processor cycles not used by any other "
	     "threads.  ",

    "243",   "The % Total User Time is the average percentage of time spent "
             "in User mode by all processors.  "
             "On a multi-processor system, if all processors are always "
             "in User mode this is 100%, if all processors are 50% "
             "in User mode this "
             "is 50% and if 1/4th of the processors are in User mode this "
             "is 25%.  "
             "Applications execute in User Mode, as do subsystems like "
             "the window manager and the graphics engine.  "
             "Code executing in User Mode cannot damage the integrity "
             "of the Windows NT Executive, Kernel, and device drivers.  "
             "Unlike some early operating systems, Windows NT uses "
             "process boundaries for subsystem protection in "
             "addition to the traditional protection of User and Privileged "
             "modes.  These subsystem processes provide additional"
             " protection.  "
             "Therefore, some work done by Windows NT on behalf of "
             "an application may appear in other subsystem processes "
             "in addition to the Privileged Time in the application process.",

    "245",   "The % Total Privileged Time is the average percentage of time "
             "spent in Privileged mode by all processors.  "
             "On a multi-processor system, if all processors are always "
             "in Privileged mode this is 100%, if all processors are 50% "
             "in Privileged mode this "
             "is 50% and if 1/4th of the processors are in Privileged mode this "
             "is 25%.  "
             "When a Windows NT system service is called, "
             "the service will often run in Privileged Mode in order "
             "to gain access to system-private data.  Such data is "
             "protected from access by threads executing in User Mode.  "
             "Calls to the system may be explicit, or they may be "
             "implicit such as when a page fault or an interrupt occurs.  "
             "Unlike some early operating systems, Windows NT uses "
             "process boundaries for subsystem protection in "
             "addition to the traditional protection of User and Privileged "
             "modes.  These subsystem processes provide additional"
             " protection.  "
             "Therefore, some work done by Windows NT on behalf of "
             "an application may appear in other subsystem processes "
             "in addition to the Privileged Time in the application process.",
    
    "247",   "Total Interrupts/sec is the rate the computer is receiving "
             "and servicing hardware interrupts.  Some devices that may "
	     "generate interrupts are the system timer, the mouse, data "
	     "communication lines, network interface "
             "cards and other peripheral devices.  This counter provides an "
             "indication of how busy these devices are on a computer-wide "
	     "basis.  See also Processor:Interrupts/sec.",

    "249",   "Processes is the number of processes in the computer at "
             "the time of data collection.  Notice that this is an "
             "instantaneous count, not an average over the time interval.  "
             "Each process represents the running of a program.",

    "251",   "Threads is the number of threads in the computer at the time "
             "of data collection.  Notice that this is an instantaneous "
             "count, not an average over the time interval.  A thread is "
             "the basic executable entity that can execute instructions "
             "in a processor.",

    "253",   "Events is the number of events in the computer at the time "
             "of data collection.  Notice that this is an instantaneous "
             "count, not an average over the time interval.  An "
             "event is used when two or more threads wish to synchronize "
             "execution.",

    "255",   "Semaphores is the number of semaphores in the computer at the "
             "time of data collection.  Notice that this is an instantaneous "
             "count, not an average over the time interval.  Threads "
             "use semaphores to obtain exclusive access to data structures "
             "that they share with other threads.",

    "257",   "Mutexes counts the number of mutexes in the computer "
             "at the time of data collection.  This is an instantaneous "
             "count, not an average over the time interval.  Mutexes "
             "are used by threads to assure only one thread is executing"
             " some section of code.",

    "259",   "Sections is the number of sections in the computer at the "
             "time of data collection.  Notice that this is an "
             "instantaneous count, not an average over the time interval.  "
             "A section is a portion of virtual memory created by a "
             "process for  a storing data.  A process may share sections "
             "with other processes.",

    "261",   "The Objects object type is a meta-object that contains "
             "information about the objects in existence on the computer.  "
             "This information can be used to detect the unnecessary "
             "consumption of computer resources.  Each object requires "
             "memory to store basic information about the object.",

    "263",   "The Redirector is the object that manages network "
             "connections to other computers that originate from your own "
             "computer.",

    "265",   "Bytes Received/sec is the rate of bytes coming in to the "
             "Redirector from the network.  It includes all application "
             "data as well as network protocol information (such as packet "
             "headers.)",

    "267",   "Packets Received/sec is the rate that the Redirector "
             "is receiving packets (also called SMBs or Server Message "
             "Blocks).  Network transmissions are divided into packets.  "
             "The average number of bytes received in a packet can be "
             "obtained by dividing Bytes Received/sec by this counter.  "
             "Some packets received may not contain incoming data, for "
             "example an acknowledgment to a write made by the Redirector "
             "would count as an incoming packet.",

    "269",   "Read Bytes Paging/sec is the rate that the Redirector is "
             "attempting to read bytes in response to page faults.  Page "
             "faults are caused by loading of modules (such as programs and "
             "libraries), by a miss in the Cache (see Read Bytes Cache/sec), "
             "or by files directly mapped into the address space of "
             "applications (a high-performance feature of Windows NT.)",

    "271",   "Read Bytes Non-Paging/sec are those bytes read by "
             "the Redirector in response to normal file requests by an "
             "application when they are redirected to come from another "
             "computer.  In addition to file requests, this counter includes "
             "other methods of reading across the network such as Named "
             "Pipes and Transactions.  This counter does not count network "
             "protocol information, just application data.",

    "273",   "Read Bytes Cache/sec is the rate that applications on "
             "your computer are accessing the Cache using the Redirector.  "
             "Some of these data requests may be satisfied by merely "
             "retrieving "
             "the data from the system Cache on your own computer if it "
             "happened to be used recently and there was room to keep it "
             "in the Cache.  Requests that miss the Cache will cause a "
             "page fault (see Read Bytes Paging/sec).",

    "275",   "Read Bytes Network/sec is the rate that applications "
             "are reading data across the network.  For one reason or "
             "another the data was not in the system Cache, and these bytes "
             "actually came across the network.  Dividing this number by "
             "Bytes Received/sec will indicate the 'efficiency' of data "
             "coming in from the network, since all of these bytes are "
             "real application data (see Bytes Received/sec.)",

    "277",   "Bytes Transmitted/sec is the rate that bytes are leaving the "
             "Redirector to the network.  It includes all application "
             "data as well as network protocol information (such as "
             "packet headers and the like.)",

    "279",   "Packets Transmitted/sec is the rate that the Redirector "
             "is sending packets (also called SMBs or Server Message "
             "Blocks).  Network transmissions are divided into packets.  "
             "The average number of bytes transmitted in a packet can be "
             "obtained by dividing Bytes Transmitted/sec by this counter.",

    "281",   "Write Bytes Paging/sec is the rate that the Redirector is "
             "attempting to write bytes changed in the pages being used "
             "by applications.  The program data changed by modules (such as "
             "programs and libraries) that were loaded over the network "
             "are 'paged out' when no longer needed.  Other output pages "
             "come from the Cache (see Write Bytes Cache/sec).",

    "283",   "Write Bytes Non-Paging/sec is the rate of the bytes "
             "that are written by "
             "the Redirector in response to normal file outputs by an "
             "application when they are redirected to go to another "
             "computer.  In addition to file requests this counter includes "
             "other methods of writing across the network such as Named "
             "Pipes and Transactions.  This counter does not count network "
             "protocol information, just application data.",

    "285",   "Write Bytes Cache/sec is the rate that applications on "
             "your computer are writing to the Cache using the Redirector.  "
             "The data may not leave your computer immediately, but may "
             "be retained in the Cache for further modification before "
             "being written to the network.  This saves network traffic.  "
             "Each write of a byte into the Cache is counted here.",

    "287",   "Write Bytes Network/sec is the rate that your applications "
             "are writing data across the network.  Either the system Cache "
             "was bypassed, as for Named Pipes or Transactions, or else the "
             "Cache wrote the bytes to make room for other data.  Dividing "
             "this counter by "
             "Bytes Transmitted/sec will indicate the 'efficiency' of data "
             "written to the network, since all of these bytes are "
             "real application data (see Transmitted Bytes/sec.)",

    "289",   "File Read Operations/sec is the rate that applications are "
             "asking the Redirector for data.  Each call to a file system "
             "or similar Application Program Interface (API) call "
             "counts as one operation.",

    "291",   "Read Operations Random/sec counts the rate that, on a "
             "file-by-file basis, reads are made "
             "that are not sequential.  If a read is made using a particular "
             "file handle, and then is followed by another read that "
             "is not immediately the contiguous next byte, this counter "
             "is incremented by one.",

    "293",   "Read Packets/sec is the rate that read packets are "
             "being placed on the network.  Each time a single packet is "
             "sent with a request to read data remotely, this counter "
             "is incremented by one.",

    "295",   "Reads Large/sec is the rate that reads over 2 "
             "times the server's negotiated buffer size are made by "
             "applications.  "
             "Too many of these could place a strain on server resources.  "
             "This counter is incremented once for each read. It does not "
             "count packets.",

    "297",   "Read Packets Small/sec is the rate that reads less than "
             "one-fourth of the server's negotiated buffer size are made "
             "by applications.  Too many of these could indicate a waste "
             "of buffers on the server.  This counter is incremented once "
             "for each read. It does not count packets.",

    "299",   "File Write Operations/sec is the rate that applications are "
             "sending data to the Redirector.  Each call to a file system "
             "or similar Application Program Interface (API) call "
             "counts as one operation.",

    "301",   "Write Operations Random/sec is the rate that, on a "
             "file-by-file basis, writes are made that are not sequential.  "
             "If a write is made using a particular file handle, and then "
             "is followed by another write that "
             "is not immediately the next contiguous byte, this counter "
             "is incremented by one.",

    "303",   "Write Packets/sec is the rate that writes are "
             "being sent to the network.  Each time a single packet is "
             "sent with a request to write remote data, this counter "
             "is incremented by one.",

    "305",   "Writes Large/sec is the rate that writes are made "
             "by applications "
             "that are over 2 times the server's negotiated buffer size.  "
             "Too many of these could place a strain on server resources.  "
             "This counter is incremented once for each write: it counts "
             "writes, not packets.",

    "307",   "Write Packets Small/sec is the rate that writes are made "
             "by applications "
             "that are less than one-fourth of the server's negotiated "
             "buffer size.  Too many of these could indicate a waste "
             "of buffers on the server.  This counter is incremented once "
             "for each write: it counts writes, not packets!",

    "309",   "Reads Denied/sec is the rate that the server is "
             "unable to accommodate requests for Raw Reads.  When a "
             "read is much larger than the server's negotiated buffer "
             "size, the Redirector requests a Raw Read which, if granted, "
             "would permit the transfer of the data without lots of "
             "protocol overhead on each packet.  To accomplish this the "
             "server must lock out other requests, so the request is denied "
             "if the server is really busy.",

    "311",   "Writes Denied/sec is the rate that the server is "
             "unable to accommodate requests for Raw Writes.  When a "
             "write is much larger than the server's negotiated buffer "
             "size, the Redirector requests a Raw Write which, if granted, "
             "would permit the transfer of the data without lots of "
             "protocol overhead on each packet.  To accomplish this the "
             "server must lock out other requests, so the request is denied "
             "if the server is really busy.",

    "313",   "Network Errors/sec counts serious unexpected errors that "
             "generally indicate the Redirector and one or more Servers "
             "are having serious communication difficulties.  "
             "For example an SMB (Server Manager Block) protocol error "
             "will generate a Network Error.  These result in an entry "
             "in the system Event Log, so look there for details.",

    "315",   "Server Sessions counts the number of active security objects the "
             "Redirector is managing.  For example, a Logon to a server "
             "followed by a network access to the same server will establish "
             "one connection, but two sessions.",

    "317",   "Server Reconnects counts the number of times your Redirector has "
             "had to reconnect to a server in order to complete a new active "
             "request.  You can be disconnected by the Server if you remain "
             "inactive for too long.  Locally even if all your remote files "
             "are closed, the Redirector will keep your connections intact "
             "for (nominally) ten minutes.  Such inactive connections are "
             "called Dormant Connections.  Reconnecting is expensive in time.",

    "319",   "Connects Core counts the number of connections you "
             "have to "
             "servers running the original MS-Net SMB protocol, including "
             "MS-Net itself and Xenix and Vax's.",

    "321",   "Connects Lan Manager 2.0 counts connections to Lan Manager "
             "2.0 servers, "
             "including LMX servers.",

    "323",   "Connects Lan Manager 2.1 counts connections to Lan Manager "
             "2.1 servers, "
             "including LMX servers.",

    "325",   "Connects Windows NT counts the connections to Windows NT "
             "computers.  Good choice!",

    "327",   "Server Disconnects counts the number of times a Server "
             "has disconnected your Redirector.  See also Server Reconnects.",

    "329",   "Server Sessions Hung counts the number of active sessions "
             "that are "
             "timed out and unable to proceed due to a lack of response "
             "from the remote server.",

    "331",   "Server - is the process that interfaces the services from the "
             "local computer to the network services.",

    "333",   "The number of bytes the server has received from the network.  "
             "Indicates how busy the server is.",

    "335",   "The number of bytes the server has sent on the network.  "
             "Indicates how busy the server is.",

    "337",   "Thread Wait Reason is only applicable when the "
             "thread is in the Wait state (see Thread State.)  "
             "It is 0 or 7 when "
             "the thread is waiting for "
             "the Executive, 1 or 8 for a Free Page, 2 or 9 for a Page In, "
             "3 or 10 for a Pool Allocation, 4 or 11 for an "
             "Execution Delay, 5 or 12 for "
             "a Suspended condition, 6 or 13 for a User Request, "
             "14 for an Event "
             "Pair High, 15 for an Event Pair Low, 16 for an LPC "
             "Receive, 17 for an LPC Reply, 18 for Virtual Memory, "
             "19 for a Page Out; 20 and higher are not assigned at the time "
             "of this writing.  Event Pairs are used to communicate "
             "with protected subsystems (see Context Switches.)",

    "341",   "The number of sessions that have been closed due to their idle "
             "time exceeding the autodisconnect parameter for the server.  "
             "Shows whether the autodisconnect setting is helping to conserve "
             "resources.",

    "343",   "The number of sessions that have been closed due to unexpected "
             "error conditions.  Indicates how frequently network problems are "
             "causing dropped sessions on the server.",

    "345",   "The number of sessions that have terminated normally. Useful in "
             "interpreting the Sessions Times Out and Sessions Errored Out "
             "statistics--allows percentage calculations.",

    "347",   "The number of sessions that have been forced to logoff.  "
             "Can indicate how many sessions were forced to logoff due to "
             "logon time constraints.",

    "349",   "The number of failed logon attempts to the server.  Can indicate "
             "whether password guessing programs are being used to crack the "
             "security on the server.",

    "351",   "The number of times opens on behalf of clients have failed with "
             "STATUS_ACCESS_DENIED.  Can indicate whether somebody is randomly "
             "attempting to access files in hopes of getting at something that "
             "was not properly protected.",

    "353",   "The number of times accesses to files opened successfully were " 
             "denied.  Can indicate attempts to access files without proper "
             "access authorization.",

    "355",   "The number of times an internal Server Error was detected.  "
             "Unexpected errors usually indicate a problem with the Server.",

    "357",   "The number of times the server has rejected blocking SMBs due to "
             "insufficient count of free work items. Indicates whether the "
             "maxworkitem or minfreeworkitems server parameters may need "
             "tuning.",

    "359",   "The number of times STATUS_DATA_NOT_ACCEPTED was returned at "
             "receive indication time.  This occurs when no work item is "
             "available or can be allocated to service the incoming request.  "
             "Indicates whether the initworkitems or maxworkitems parameters "
             "may need tuning.",

    "361",   "The number of successful open attempts performed by the server "
             "of behalf of clients.  Useful in determining the amount of file "
             "I/O, determining overhead for path-based operations, determining "
             "the effectiveness of oplocks.",

    "363",   "The number of files currently opened in the server.  Indicates "
             "current server activity.",

    "365",   "The number of sessions currently active in the server.  "
             "Indicates current server activity.",

    "367",   "The number of searches for files currently active in "
             "the server.  "
             "Indicates current server activity.",

    "369",   "The number of bytes of non-pageable computer memory the server "
             "is currently using.  "
             "Can help in determining good values for the "
             "maxnonpagedmemoryusage "
             "parameter.",

    "371",   "The number of times allocations from nonpaged pool have failed.  "
             "Indicates that the computer's physical memory is too small.",

    "373",   "The maximum number of bytes of nonpaged pool the server has "
             "had in use "
             "at any one point.  Indicates how much physical memory "
             "the computer "
             "should have.",

    "375",   "The number of bytes of pageable computer memory the server is "
             "currently using.  "
             "Can help in determining good values for the maxpagedmemoryusage "
             "parameter.",

    "377",   "The number of times allocations from paged pool have failed.  "
             "Indicates that the computer's physical memory of pagefile are "
             "too small.",

    "379",   "The maximum number of bytes of paged pool the server has "
             "had allocated.  "
             "Indicates the proper sizes of the Page File(s) and "
             "physical memory.",

    "389",   "Bytes Total/sec is the rate the Redirector is processing "
             "data bytes.  This includes all application and file "
             "data in addition to protocol information such as packet "
             "headers.",

    "391",   "File Data Operations/sec is the rate the Redirector is processing "
             "data operations.  One operation includes (hopefully) many "
             "bytes.  We say hopefully here because each operation "
             "has overhead.  You can determine the efficiency of this "
             "path by dividing the Bytes/sec by this counter to determine "
             "the average number of bytes transferred/operation.",

    "393",   "Current Commands counts the number of requests to the "
             "Redirector that are currently queued for service.  If "
             "this number is much larger than the number of network "
             "adapter cards installed in the computer, then the network(s) "
             "and/or the server(s) being accessed are seriously "
             "bottlenecked.",

    "395",   "The number of bytes the server has sent to and received from the "
             "network.  This value provides an overall indication of how busy "
             "the server is.",

    "399",   "The NWLink NetBIOS protocol layer handles the interface to "
             "applicatons communicating over the IPX transport. ",

    "401",   "Packets/sec is the rate the Redirector is processing "
             "data packets.  "
             "One packet includes (hopefully) many "
             "bytes.  We say hopefully here because each packet has "
             "protocol overhead.  You can determine the efficiency of this "
             "path by dividing the Bytes/sec by this counter to determine "
             "the average number of bytes transferred/packet.  You can "
             "also divide this counter by Operations/sec to determine "
             "the average number of packets per operation, another "
             "measure of efficiency.",

    "403",   "Context Block Queue Time is the average time, in milliseconds, "
             "a work context block sat on the server's FSP queue waiting for "
             "the server to act on the request.",

    "405",   "Context Blocks Queued per second is the rate that work "
             "context blocks had to be placed on the server's FSP "
             "queue to await server action.",

    "407",   "File Data Operations per second is the rate that the computer "
             "is issuing Read and Write operations to file system "
             "devices.  It does not include File Control Operations.",

    "409",   "Percent Free Space is the ratio of the free space available "
             "on the logical disk unit to the total usable space provided "
             "by the selected logical disk drive",

    "411",   "Free Megabytes displays the unallocated space on the disk "
             "drive in megabytes. One megabyte = 1,048,576 bytes.",

    "413",   "Connections Open is the number of connections "
             "currently open for this protocol.  "
             "This counter shows the current count "
             "only and does not accumulate over time.",

    "415",   "Connections No Retries is the total count of connections "
             "that were successfully made on the first try.  This number is "
             "an accumulator and shows a running total.",

    "417",   "Connections With Retries is the total count of connections "
             "that were made after retrying the attempt.  A retry occurs "
             "when the first connection attempt failed.  This number is an "
             "accumulator and shows a running total.",

    "419",   "Disconnects Local is the number of session disconnections "
             "that were initiated by the local computer.  This number is an "
             "accumulator and shows a running total.",

    "421",   "Disconnects Remote is the number of session disconnections "
             "that were initiated by the remote computer.  This number is an "
             "accumulator and shows a running total.",

    "423",   "Failures Link is the number of connections that were dropped "
             "due to a link failure.  This number is an accumulator and "
             "shows a running total.",

    "425",   "Failures Adapter is the number of connections that were "
             "dropped due to an adapter failure.  This number is an "
             "accumulator and shows a running total.",

    "427",   "Connection Session Timeouts is the number of connections "
             "that were "
             "dropped due to a session timeout.  This number is an "
             "accumulator and shows a running total.",

    "429",   "Connections Canceled is the number of connections that were "
             "canceled.  This number is an accumulator and shows a running "
             "total.",

    "431",   "Failures Resource Remote is the number of connections that "
             "failed because of resource problems or shortages on the "
             "remote computer.  This number is an accumulator and shows a "
             "running total.",

    "433",   "Failures Resource Local is the number of connections that "
             "failed because of resource problems or shortages on the "
             "local computer.  This number is an accumulator and shows a "
             "running total.",

    "435",   "Failures Not Found is the number of connection attempts "
             "that failed because the remote computer could not be "
             "found.  This number is an accumulator and shows a running "
             "total.",

    "437",   "Failures No Listen is the number of connections that were "
             "rejected because the remote computer was not listening for "
             "connection requests.",

    "439",   "Datagrams/sec is the rate that datagrams are "
             "processed by the computer.  This counter displays the sum of "
             "datagrams sent and datagrams received.  "
             "A datagram is a connectionless packet whose delivery "
             "to a remote is not guaranteed.",

    "441",   "Datagram Bytes/sec is the rate that datagram bytes are "
             "processed by the computer.  This counter is the sum of datagram "
             "bytes that are sent as well as received.  "
             "A datagram is a connectionless packet whose delivery "
             "to a remote is not guaranteed.",

    "443",   "Datagrams Sent/sec is the rate that datagrams are sent from "
             "the computer.  "
             "A datagram is a connectionless packet whose delivery "
             "to a remote computer is not guaranteed.",

    "445",   "Datagram Bytes Sent/sec is the rate that datagram bytes "
             "are sent from the computer.  "
             "A datagram is a connectionless packet whose delivery "
             "to a remote computer is not guaranteed.",

    "447",   "Datagrams Received/sec is the rate that datagrams are "
             "received by the computer.  "
             "A datagram is a connectionless packet whose delivery "
             "to a remote computer is not guaranteed.",

    "449",   "Datagram Bytes Received/sec is the rate that datagram bytes "
             "are received by the computer.  "
             "A datagram is a connectionless packet whose delivery "
             "to a remote computer is not guaranteed.",
                                                                           
    "451",   "Packets/sec is the rate that packets are processed by the "
             "computer.  This count is the sum of Packets Sent and Packets "
             "Received per second.  This counter includes all packets "
             "processed: control as well as data packets.",

    "453",   "Packets Sent/sec is the rate that packets are sent by "
             "the computer.  This counter counts all packets sent by the "
             "computer, i.e. control as well as data packets.",

    "455",   "Packets Received/sec is the rate that packets are received "
             "by the computer.  This counter counts all packets processed: "
             "control as well as data packets.",
                                                                       
    "457",   "Frames/sec is the rate that data frames (or packets) are "
             "processed by the computer.  This counter is the sum of data "
             "frames sent and data frames received.  This counter only "
             "counts those frames (packets) that carry data.",

    "459",   "Frame Bytes/sec is the rate that data bytes are processed "
             "by the computer.  This counter is the sum of data frame bytes "
             "sent and received.  This counter only counts the byte in "
             "frames (packets) that carry data.",

    "461",   "Frames Sent/sec is the rate that data frames are sent by "
             "the computer.  This counter only counts the frames (packets) "
             "that carry data.",

    "463",   "Frame Bytes Sent/sec is the rate that data bytes are sent "
             "by the computer.  This counter only counts the bytes in frames "
             "(packets) that carry data.",

    "465",   "Frames Received/sec is the rate that data frames are received "
             "by the computer.  This counter only counts the frames (packets) "
             "that carry data.",

    "467",   "Frame Bytes Received/sec is the rate that data bytes are "
             "received by the computer.  This counter only counts the frames "
             "(packets) that carry data.",

    "469",   "Frames Re-Sent/sec is the rate that data frames (packets) are "
             "re-sent by the computer.  This counter only counts the frames or "
             "packets that carry data.",

    "471",   "Frame Bytes Re-Sent/sec is the rate that data bytes are "
             "re-sent by the computer.  This counter only counts the bytes in "
             "frames that carry data.",

    "473",   "Frames Rejected/sec is the rate that data frames are "
             "rejected.  This counter only counts the frames (packets) that "
             "carry data.",

    "475",   "Frame Bytes Rejected/sec is the rate that data bytes are "
             "rejected.  This counter only counts the bytes in data frames "
             "(packets) that carry data.",

    "477",   "Expirations Response is the count of T1 timer expirations.",

    "479",   "Expirations Ack is the count of T2 timer expirations",

    "481",   "Window Send Maximum is the maximum number of bytes of data "
             "that will be sent before waiting for an acknowledgment from "
             "the remote computer.",

    "483",   "Window Send Average is the running average number of data "
             "bytes that were sent before waiting for an acknowledgment "
             "from the remote computer.",

    "485",   "Piggyback Ack Queued/sec is the rate that piggybacked "
             "acknowledgments are queued. Piggyback acknowledgments are "
             "acknowledgments to received packets that are to be included "
             "in the next outgoing packet to the remote computer.",

    "487",   "Piggyback Ack Timeouts is the number of times that a piggyback "
             "acknowledgment could not be sent because there was no "
             "outgoing packet to the remote on which to piggyback.  A "
             "piggyback ack is an acknowledgment to a received packet that "
             "is sent along in an outgoing data packet to the remote "
             "computer.  If no outgoing packet is sent within the timeout "
             "period, then an ack packet is sent and this counter is "
             "incremented.",

    "489",   "The NWLink IPX transport handles datagram transmission to "
             "and from computers using the IPX protocol.",

    "491",   "The NWLink SPX transport handles data transmission and "
             "session connections for computers using the SPX protocol.",

    "493",   "The NetBEUI protocol handles data transmission for "
             "that network activity which follows the NetBIOS End "
             "User Interface standard.",

    "495",   "The NetBEUI Resource object tracks the use of resources "
             "(i.e., buffers) by the NetBEUI protocol.",

    "497",   "Used Maximum is the maximum number of NetBEUI "
             "resources (buffers) "
             "in use at any point in time.  This value is useful in "
             "sizing the maximum resources provided.  "
             "The number in parentheses following the resource name is used "
             "to identify the resource in Event Log messages.",

    "499",   "Used Average is the current number of resources (buffers) in "
             "use at this time.  "
             "The number in parentheses following the resource name is used "
             "to identify the resource in Event Log messages.",

    "501",   "Times Exhausted is the number of times all "
             "the resources (buffers) "
             "were in use.  "
             "The number in parentheses following the resource name is used "
             "to identify the resource in Event Log messages.",

    "503",   "The NBT Connection Object Type includes those "
             "counters that describe the rates that bytes are "
             "received and sent over a single NBT connection "
             "connecting the local computer with some remote computer.  "
             "The connection is identified by the name of the remote "
             "computer.",

    "505",   "Bytes Received/sec is the rate that bytes are "
             "received by the local computer over an NBT connection "
             "to some remote computer.  All the bytes received by the "
             "local computer over the particular NBT connection are "
             "counted.",

    "507",   "Bytes Sent/sec is the rate that bytes are "
             "sent by the local computer over an NBT connection "
             "to some remote computer.  All the bytes sent by the "
             "local computer over the particular NBT connection are "
             "counted.",

    "509",   "Bytes Total/sec is the rate that bytes are sent or "
             "received by the local computer over an NBT connection "
             "to some remote computer.  All the bytes sent or received "
             "by the local computer over the particular NBT connection "
             "are counted.",

    "511",   "The Network Interface Object Type includes those counters "
             "that describe the rates that bytes and packets are "
             "received and sent over a Network TCP/IP connection. It also "
             "describes various error counts for the same connection.",

    "513",   "Bytes Total/sec is the rate that bytes are sent and received "
             "on the interface, including framing characters.",

    "515",   "Packets/sec is the rate that packets are sent and received "
             "on the network interface.",

    "517",   "Packets Received/sec is the rate that packets are received "
             "on the network interface.",

    "519",   "Packets Sent/sec is the rate that packets are sent "
             "on the network interface.",

    "521",   "Current Bandwidth is an estimate of the interface's "
             "current bandwidth in bits per second (bps). For interfaces "
             "that do not vary in bandwidth or for those where no "
             "accurate estimation can be made, this value is the nominal "
             "bandwidth.",

    "523",   "Bytes Received/sec is the rate that bytes are received "
             "on the interface, including framing characters.",

    "525",   "Packets Received Unicast/sec is the rate that (subnet) "
             "unicast packets are delivered to a higher-layer protocol.",

    "527",   "Packets Received Non-Unicast/sec is the rate that "
             "non-unicast (i.e., subnet broadcast or subnet multicast) "
             "packets are delivered to a higher-layer protocol.",
    
    "529",   "Packets Received Discarded is the number of inbound packets "
             "that were chosen to be discarded even though no errors had "
             "been detected to prevent their being deliverable to a "
             "higher-layer protocol. One possible reason for discarding "
             "such a packet could be to free up buffer space.",

    "531",   "Packets Received Errors is the number of inbound packets "
             "that contained errors preventing them from being deliverable "
             "to a higher-layer protocol.",

    "533",   "Packets Received Unknown is the number of packets "
             "received via the interface that were discarded because of "
             "an unknown or unsupported protocol.",

    "535",   "Bytes Sent/sec is the rate that bytes are sent "
             "on the interface, including framing characters.",

    "537",   "Packets Sent Unicast/sec is the rate that packets are "
             "requested to be transmitted to subnet-unicast addresses "
             "by higher-level protocols.  The rate includes the packets "
             "that were discarded or not sent.",

    "539",   "Packets Sent Non-Unicast/sec is the rate that packets are "
             "requested to be transmitted to non-unicast (i.e., subnet "
             "broadcast or subnet multicast) addresses "
             "by higher-level protocols.  The rate includes the packets "
             "that were discarded or not sent.",

    "541",   "Packets Outbound Discarded is the number of outbound packets "
             "that were chosen to be discarded even though no errors had "
             "been detected to prevent their being transmitted.  "
             "One possible reason for discarding "
             "such a packet could be to free up buffer space.",

    "543",   "Packets Outbound Errors is the number of outbound packets "
             "that could not be transmitted because of errors.",

    "545",   "Output Queue Length is the length of the output packet queue "
             "(in packets.)  If this is longer than 2, delays are being "
             "experienced and the bottleneck should be found and "
             "eliminated if possible.  Since the requests are queued by "
             "NDIS in this implementations, this will always be 0.",

    "547",   "The IP Object Type includes those counters "
             "that describe the rates that IP datagrams are "
             "received and sent by a certain computer using the IP protocol.  "
             "It also describes various error counts for the IP protocol.",

    "549",   "Datagrams/sec is the rate that IP datagrams are received "
             "from or sent to the interfaces, including those in error.  "
             "Any forwarded datagrams are not included in this rate.",

    "551",   "Datagrams Received/sec is the rate that IP datagrams are "
             "received from the interfaces, including those in error.",

    "553",   "Datagrams Received Header Errors is the number of input "
             "datagrams discarded due to errors in their IP headers, "
             "including bad checksums, version number mismatch, other format "
             "errors, time-to-live exceeded, errors discovered in processing "
             "their IP options, etc.",

    "555",   "Datagrams Received Address Errors is the number of input "
             "datagrams discarded because the IP address in their IP header's "
             "destination field was not a valid address to be received at "
             "this entity.  This count includes invalid addresses (e.g., 0.0.  "
             "0.0) and addresses of unsupported Classes (e.g., Class E).  "
             "For entities that are not IP Gateways and therefore do not "
             "forward datagrams, this counter includes datagrams discarded "
             "because the destination address was not a local address.",

    "557",   "Datagrams Forwarded/sec is the rate of input datagrams for "
             "that this entity was not their final IP destination, as a "
             "result of which an attempt was made to find a route to "
             "forward them to that final destination.  In entities that do "
             "not act as IP Gateways, this rate will include only those "
             "packets that were Source-Routed via this entity, and the "
             "Source-Route option processing was successful.",

    "559",   "Datagrams Received Unknown Protocol is the number of "
             "locally-addressed datagrams received successfully but discarded "
             "because of an unknown or unsupported protocol.",

    "561",   "Datagrams Received Discarded is the number of input IP "
             "datagrams for which no problems were encountered to prevent "
             "their continued processing, but which were discarded "
             "(e.g., for lack of buffer space). This counter does "
             "not include any datagrams discarded while awaiting re-assembly.",

    "563",   "Datagrams Received Delivered/sec is the rate that input "
             "datagrams are successfully delivered to IP user-protocols "
             "(including ICMP).",

    "565",   "Datagrams Sent/sec is the rate that IP datagrams are "
             "supplied to IP for transmission by local IP user-protocols "
             "(including ICMP). That this counter does not include "
             "any datagrams counted in Datagrams Forwarded.",

    "567",   "Datagrams Outbound Discarded is the number of output IP "
             "datagrams for which no problems were encountered to prevent "
             "their transmission to their destination, but which were "
             "discarded (e.g., for lack of buffer space.)  This "
             "counter would include datagrams counted in Datagrams Forwarded "
             "if any such packets met this (discretionary) "
             "discard criterion.",

    "569",   "Datagrams Outbound No Route is the number of IP datagrams "
             "discarded because no route could be found to transmit them "
             "to their destination. This counter includes any "
             "packets counted in Datagrams Forwarded that meet this "
             "`no route' criterion.",

    "571",   "Fragments Received/sec is the rate that IP fragments that "
             "need to be re-assembled at this entity are received.",

    "573",   "Fragments Re-assembled/sec is the rate that IP fragments "
             "are successfully re-assembled.",

    "575",   "Fragment Re-assembly Failures is the number of failures "
             "detected by the IP re-assembly algorithm (for whatever reason: "
             "timed out, errors, etc.)  This is not necessarily a "
             "count of discarded IP fragments since some algorithms "
             "(notably RFC 815) can lose track of the number of fragments "
             "by combining them as they are received.",

    "577",   "Fragmented Datagrams/sec is the rate that datagrams are "
             "successfully fragmented at this entity.",

    "579",   "Fragmentation Failures is the number of IP datagrams that have "
             "been discarded because they needed to be fragmented at this "
             "entity but could not be, e.g., because their `Don't Fragment' "
             "flag was set.",

    "581",   "Fragments Created/sec is the rate that IP datagram fragments "
             "have been generated as a result of fragmentation at this entity.",

    "583",   "The ICMP Object Type includes those counters "
             "that describe the rates that ICMP Messages are "
             "received and sent by a certain entity using the ICMP protocol.  "
             "It also describes various error counts for the ICMP protocol.",

    "585",   "Messages/sec is the total rate that ICMP messages are "
             "received and sent by the entity.  The rate includes those "
             "messages received or sent in error.",

    "587",   "Messages Received/sec is the rate that ICMP messages are "
             "received by the entity.  The rate includes those "
             "messages received in error.",

    "589",   "Messages Received Errors is the number of ICMP messages "
             "that the entity received but determined as having errors "
             "(bad ICMP checksums, bad length, etc.).",

    "591",   "Received Destination Unreachable is the number of ICMP "
             "Destination Unreachable messages received.",

    "593",   "Received Time Exceeded is the number of ICMP Time Exceeded "
             "messages received.",

    "595",   "Received Parameter Problem is the number of ICMP Parameter "
             "Problem messages received.",

    "597",   "Received Source Quench is the number of ICMP Source Quench "
             "messages received.",

    "599",   "Received Redirect/sec is the rate of ICMP Redirect messages "
             "received.",

    "601",   "Received Echo/sec is the rate of ICMP Echo messages received.",

    "603",   "Received Echo Reply/sec is the rate of ICMP Echo Reply "
             "messages received.",

    "605",   "Received Timestamp/sec is the rate of ICMP Timestamp "
             "(request) messages received.",

    "607",   "Received Timestamp Reply/sec is the rate of ICMP Timestamp "
             "Reply messages received.",

    "609",   "Received Address Mask is the number of ICMP Address Mask "
             "Request messages received.",

    "611",   "Received Address Mask Reply is the number of ICMP Address "
             "Mask Reply messages received.",

    "613",   "Messages Sent/sec is the rate that ICMP messages are "
             "attempted to be sent by the entity.  The rate includes those "
             "messages sent in error.",

    "615",   "Messages Outbound Errors is the number of ICMP messages "
             "that this entity did not send due to problems discovered "
             "within ICMP such as lack of buffers.  This value should not "
             "include errors discovered outside the ICMP layer such as the "
             "inability of IP to route the resultant datagram. In some "
             "implementations there may be no types of error that contribute "
             "to this counter's value.",

    "617",   "Sent Destination Unreachable is the number of ICMP "
             "Destination Unreachable messages sent.",

    "619",   "Sent Time Exceeded is the number of ICMP Time Exceeded "
             "messages sent.",

    "621",   "Sent Parameter Problem is the number of ICMP Parameter "
             "Problem messages sent.",

    "623",   "Sent Source Quench is the number of ICMP Source Quench "
             "messages sent.",

    "625",   "Sent Redirect/sec is the rate of ICMP Redirect messages "
             "sent.",

    "627",   "Sent Echo/sec is the rate of ICMP Echo messages sent.",

    "629",   "Sent Echo Reply/sec is the rate of ICMP Echo Reply "
             "messages sent.",

    "631",   "Sent Timestamp/sec is the rate of ICMP Timestamp "
             "(request) messages sent.",

    "633",   "Sent Timestamp Reply/sec is the rate of ICMP Timestamp "
             "Reply messages sent.",

    "635",   "Sent Address Mask is the number of ICMP Address Mask "
             "Request messages sent.",

    "637",   "Sent Address Mask Reply is the number of ICMP Address "
             "Mask Reply messages sent.",

    "639",   "The TCP Object Type includes those counters "
             "that describe the rates that TCP Segments are "
             "received and sent by a certain entity using the TCP protocol.  "
             "In addition, it describes the number of TCP connections that are "
             "in each of the possible TCP connection states.",

    "641",   "Segments/sec is the rate that TCP segments are sent or "
             "received using the TCP protocol.",

    "643",   "Connections Established is the number of TCP "
             "connections for which the current state is either "
             "ESTABLISHED or CLOSE-WAIT.",

    "645",   "Connections Active is the number of times TCP connections have "
             "made a direct transition to the SYN-SENT state from the "
             "CLOSED state.",

    "647",   "Connections Passive is the number of times TCP connections "
             "have made a direct transition to the SYN-RCVD state from the "
             "LISTEN state.",

    "649",   "Connection Failures is the number of times TCP connections "
             "have made a direct transition to the CLOSED state from the "
             "SYN-SENT state or the SYN-RCVD state, plus the number of "
             "times TCP connections have made a direct transition to the "
             "LISTEN state from the SYN-RCVD state.",

    "651",   "Connections Reset is the number of times TCP connections "
             "have made a direct transition to the CLOSED state from either "
             "the ESTABLISHED state or the CLOSE-WAIT state.",

    "653",   "Segments Received/sec is the rate that segments are "
             "received, including those received in error.  This count includes "
             "segments received on currently established connections.",

    "655",   "Segments Sent/sec is the rate that segments are sent, "
             "including those on current connections, but excluding those "
             "containing only retransmitted bytes.",

    "657",   "Segments Retransmitted/sec is the rate that segments are "
             "retransmitted, that is, segments transmitted containing one "
             "or more previously transmitted bytes.",

    "659",   "The UDP Object Type includes those counters "
             "that describe the rates that UDP datagrams are "
             "received and sent by a certain entity using the UDP protocol.  "
             "It also describes various error counts for the UDP protocol.",

    "661",   "Datagrams/sec is the rate that UDP datagrams are sent or "
             "received by the entity.",

    "663",   "Datagrams Received/sec is the rate that UDP datagrams "
             "are delivered to UDP users.",

    "665",   "Datagrams No Port/sec is the rate of received UDP datagrams "
             "for which there was no application at the destination port.",

    "667",   "Datagrams Received Errors is the number of received UDP "
             "datagrams that could not be delivered for reasons other than "
             "the lack of an application at the destination port.",

    "669",   "Datagrams Sent/sec is the rate that UDP datagrams are sent "
             "from the entity.",

    "671",   "Disk Storage device statistics from the foreign computer",

    "673",   "The number of allocation failures reported by the disk storage "
             "device",

    "675",   "Total Time (in seconds) that the computer has been operational "
             "since it was last started.",

    "677",   "The current number of system handles in use.",

    "679",   "The number of Page Table Entries not currently in use by the "
             "system.",

    "681",   "The number of threads currently active in this process.  "
             "An instruction is the basic unit of execution in a processor, "
             "and a thread is the object that executes instructions.  "
             "Every running process has at least one "
             "thread.",

    "683",   "The current base priority of this process.  Threads "
             "within a process can raise and lower their own base priority "
             "relative to the process's base priority.",

    "685",   "The total elapsed time (in seconds) this process has been "
             "running.",

    "695",   "The current dynamic priority of this thread.  "
             "The system may "
             "raise the thread's dynamic priority above the base priority "
             "if the thread is handling user input, or lower it towards "
             "the base priority if the "
             "thread becomes compute bound.",

    "697",   "The current base priority of this thread.  The system may "
             "raise the thread's dynamic priority above the base priority "
             "if the thread is handling user input, or lower it towards "
             "the base priority if the "
             "thread becomes compute bound.",

    "699",   "The total elapsed time (in seconds) this thread has been "
             "running.",

    "701",   "Displays information about the system's Page File(s).",

    "703",   "The amount of the Page File instance in use in percent.  "
             "See also Process:Page File Bytes.",

    "705",   "The peak usage of the Page File instance in percent.  "
             "See also Process:Page File Bytes Peak.",

    "707",   "Starting virtual address for this thread.",

    "709",   "Current User Program Counter for this thread.",

    "711",   "Mapped Space is virtual memory that has been mapped  "
             "to a specific virtual address (or range of virtual "
             "addresses) in the process's virtual address space.  "
             "No Access protection prevents a process from writing to "
             "or reading from these pages and will generate an access " 
             "violation if either is attempted.",

    "713",   "Mapped Space is virtual memory that has been mapped  "
             "to a specific virtual address (or range of virtual "
             "addresses) in the process's virtual address space.  "
             "Read Only protection prevents the contents of these pages "
             "from being modified.  Any attempts to write or modify these "
             "pages will generate an access violation.",
          
    "715",   "Mapped Space is virtual memory that has been mapped  "
             "to a specific virtual address (or range of virtual "
             "addresses) in the process's virtual address space.  "
             "Read/Write protection allows a process to read, modify "
             "and write to these pages.",

    "717",   "Mapped Space is virtual memory that has been mapped  "
             "to a specific virtual address (or range of virtual "
             "addresses) in the process's virtual address space.  "
             "Write Copy protection is used when memory is shared for "
             "reading but not for writing.  When processes are reading this "
             "memory, they can share the same memory, however, when "
             "a sharing process wants to have write access to this "
             "shared memory, a copy of that memory is made.",

    "719",   "Mapped Space is virtual memory that has been mapped  "
             "to a specific virtual address (or range of virtual "
             "addresses) in the process's virtual address space.  "
             "Executable memory is memory that can be executed by "
             "programs, but may not be read or written.  "
             "This type of protection is not supported by all "
             "processor types.",

    "721",   "Mapped Space is virtual memory that has been mapped  "
             "to a specific virtual address (or range of virtual "
             "addresses) in the process's virtual address space.  "
             "Execute/Read Only memory is memory that can be executed "
             "as well as read.",

    "723",   "Mapped Space is virtual memory that has been mapped  "
             "to a specific virtual address (or range of virtual "
             "addresses) in the process's virtual address space.  "
             "Execute/Read/Write memory is memory that can be executed by "
             "programs as well as read "
             "and modified.",

    "725",   "Mapped Space is virtual memory that has been mapped  "
             "to a specific virtual address (or range of virtual "
             "addresses) in the process's virtual address space.  "
             "Execute Write Copy is memory that can be executed by "
             "programs as well as read and written.  "
             "This type of protection is used when memory needs to be "
             "shared between processes. If the sharing processes only "
             "read the memory, then they will all use the same memory.  "
             "If a sharing process desires write access, then a copy of "
             "this memory will be made for that process.",

    "727",   "Reserved Space is virtual memory that has been reserved for "
             "future use by a process, but has not been mapped or committed.  "
             "No Access protection prevents a process from writing to "
             "or reading from these pages and will generate an access " 
             "violation if either is attempted.",
             
    "729",   "Reserved Space is virtual memory that has been reserved for "
             "future use by a process, but has not been mapped or committed.  "
             "Read Only protection prevents the contents of these pages "
             "from being modified.  Any attempts to write or modify these "
             "pages will generate an access violation.",
 
    "731",   "Reserved Space is virtual memory that has been reserved for "
             "future use by a process, but has not been mapped or committed.  "
             "Read/Write protection allows a process to read, modify "
             "and write to these pages.",
  
    "733",   "Reserved Space is virtual memory that has been reserved for "
             "future use by a process, but has not been mapped or committed.  "
             "Write Copy protection is used when memory is shared for "
             "reading but not for writing.  When processes are reading this "
             "memory, they can share the same memory, however, when "
             "a sharing process wants to have read/write access to this "
             "shared memory, a copy of that memory is made.",
 
    "735",   "Reserved Space is virtual memory that has been reserved for "
             "future use by a process, but has not been mapped or committed.  "
             "Executable memory is memory that can be executed by programs, "
             "but may not be read or written.  "
             "This type of protection is not supported by all "
             "processor types.",
 
    "737",   "Reserved Space is virtual memory that has been reserved for "
             "future use by a process, but has not been mapped or committed.  "
             "Execute/Read Only memory is memory that can be executed "
             "as well as read.",
 
    "739",   "Reserved Space is virtual memory that has been reserved for "
             "future use by a process, but has not been mapped or committed.  "
             "Execute/Read/Write memory is memory that can be executed by "
             "programs as well as read "
             "and modified.",
 
    "741",   "The Image object type displays information about the virtual "
             "address usage of the images being executed by a process on the "
             "computer.",

    "743",   "Reserved Space is virtual memory that has been reserved for "
             "future use by a process, but has not been mapped or committed.  "
             "Execute Write Copy is memory that can be executed by "
             "programs as well as read and written.  "
             "This type of protection is used when memory needs to be "
             "shared between processes.  If the sharing processes only "
             "read the memory, then they will all use the same memory.  "
             "If a sharing process desires write access, then a copy of "
             "this memory will be made for that process.",

    "745",   "Unassigned Space is mapped and committed virtual memory in "
             "use by the process that is not attributable to any particular "
             "image being executed by that process.  "
             "No Access protection prevents a process from writing to "
             "or reading from these pages and will generate an access " 
             "violation if either is attempted.",

    "747",   "Unassigned Space is mapped and committed virtual memory in "
             "use by the process that is not attributable to any particular "
             "image being executed by that process.  "
             "Read Only protection prevents the contents of these pages "
             "from being modified.  Any attempts to write or modify these "
             "pages will generate an access violation.",

    "749",   "Unassigned Space is mapped and committed virtual memory in "
             "use by the process that is not attributable to any particular "
             "image being executed by that process.  "
             "Read/Write protection allows a process to read, modify "
             "and write to these pages.",

    "751",   "Unassigned Space is mapped and committed virtual memory in "
             "use by the process that is not attributable to any particular "
             "image being executed by that process.  "
             "Write Copy protection is used when memory is shared for "
             "reading but not for writing.  When processes are reading this "
             "memory, they can share the same memory, however, when "
             "a sharing process wants to have read/write access to this "
             "shared memory, a copy of that memory is made for writing to.",

    "753",   "Unassigned Space is mapped and committed virtual memory in "
             "use by the process that is not attributable to any particular "
             "image being executed by that process.  "
             "Executable memory is memory that can be executed by "
             "programs, but may not be read or written.  "
             "This type of protection is not supported by all "
             "processor types.",

    "755",   "Unassigned Space is mapped and committed virtual memory in "
             "use by the process that is not attributable to any particular "
             "image being executed by that process.  "
             "Execute/Read Only memory is memory that can be "
             "executed as well as read.",
               
    "757",   "Unassigned Space is mapped and committed virtual memory in "
             "use by the process that is not attributable to any particular "
             "image being executed by that process.  "
             "Execute/Read/Write memory is memory that can be "
             "executed by programs as well as read and written.",

    "759",   "Unassigned Space is mapped and committed virtual memory in "
             "use by the process that is not attributable to any particular "
             "image being executed by that process.  "
             "Execute Write Copy is memory that can be executed by "
             "programs as well as read and written.  "
             "This type of protection is used when memory needs to be "
             "shared between processes. If the sharing processes only "
             "read the memory, then they will all use the same memory.  "
             "If a sharing process desires write access, then a copy of "
             "this memory will be made for that process.",

    "761",   "Image Space is the virtual address space in use by the "
             "images being executed by the process.  This is the sum of all "
             "the address space with this protection allocated by images run "
             "by the selected process  "             
             "No Access protection prevents a process from writing to "
             "or reading from these pages and will generate an access " 
             "violation if either is attempted.",

    "763",   "Image Space is the virtual address space in use by the "
             "images being executed by the process.  This is the sum of all "
             "the address space with this protection allocated by images run "
             "by the selected process  "             
             "Read Only protection prevents the contents of these pages "
             "from being modified.  Any attempts to write or modify these "
             "pages will generate an access violation.",

    "765",   "Image Space is the virtual address space in use by the "
             "images being executed by the process.  This is the sum of all "
             "the address space with this protection allocated by images run "
             "by the selected process  "             
             "Read/Write protection allows a process to read, modify "
             "and write to these pages.",

    "767",   "Image Space is the virtual address space in use by the "
             "images being executed by the process.  This is the sum of all "
             "the address space with this protection allocated by images run "
             "by the selected process  "             
             "Write Copy protection is used when memory is shared for "
             "reading but not for writing. When processes are reading this "
             "memory, they can share the same memory, however, when "
             "a sharing process wants to have read/write access to this "
             "shared memory, a copy of that memory is made for writing to.",

    "769",   "Image Space is the virtual address space in use by the "
             "images being executed by the process.  This is the sum of all "
             "the address space with this protection allocated by images run "
             "by the selected process  "             
             "Executable memory is memory that can be executed by "
             "programs, but may not be read or written.  "
             "This type of protection is not supported by all "
             "processor types.",

    "771",   "Image Space is the virtual address space in use by the "
             "images being executed by the process.  This is the sum of all "
             "the address space with this protection allocated by images run "
             "by the selected process  "             
             "Execute/Read Only memory is memory that can be "
             "executed as well as read.",
               
    "773",   "Image Space is the virtual address space in use by the "
             "images being executed by the process.  This is the sum of all "
             "the address space with this protection allocated by images run "
             "by the selected process  "             
             "Execute/Read/Write memory is memory that can be "
             "executed by programs as well as read and written "
             "and modified.",

    "775",   "Image Space is the virtual address space in use by the "
             "images being executed by the process.  This is the sum of all "
             "the address space with this protection allocated by images run "
             "by the selected process  "             
             "Execute Write Copy is memory that can be executed by "
             "programs as well as read and written.  "
             "This type of protection is used when memory needs to be "
             "shared between processes.  If the sharing processes only "
             "read the memory, then they will all use the same memory.  "
             "If a sharing process desires write access, then a copy of "
             "this memory will be made for that process.",

    "777",   "Bytes Image Reserved is the sum of all virtual memory reserved "
             "by images run within this process.",

    "779",   "Bytes Image Free is the amount of virtual address space that "
             "is not in use or reserved by images within this process.",

    "781",   "Bytes Reserved is the total amount of virtual memory "
             "reserved for future use by this process.",

    "783",   "Bytes Free is the total unused virtual address space of this "
             "process.",

    "785",   "ID Process is the unique identifier of this process.  "
             "ID Process numbers are reused, so they only identify "
             "a process for the lifetime of that process.",

    "787",   "Process Address Space object type displays details about"
             " the virtual memory usage and allocation of the selected "
             "process.",

    "789",   "Image Space is the virtual address space in use by the "
             "selected image with this protection.  "
             "No Access protection prevents a process from writing "
             "or reading these pages and will generate an access "
             "violation if either is attempted.",

    "791",   "Image Space is the virtual address space in use by the "
             "selected image with this protection.  "
             "Read Only protection prevents the contents of these pages "
             "from being modified.  Any attempts to write or modify these "
             "pages will generate an access violation.",

    "793",   "Image Space is the virtual address space in use by the "
             "selected image with this protection.  "
             "Read/Write protection allows a process to read, modify "
             "and write to these pages.",

    "795",   "Image Space is the virtual address space in use by the "
             "selected image with this protection.  "
             "Write Copy protection is used when memory is shared for "
             "reading but not for writing.  When processes are reading this "
             "memory, they can share the same memory, however, when "
             "a sharing process wants to have read/write access to this "
             "shared memory, a copy of that memory is made for writing to.",

    "797",   "Image Space is the virtual address space in use by the "
             "selected image with this protection.  "
             "Executable memory is memory that can be executed by "
             "programs, but may not be read or written.  "
             "This type of protection is not supported by all "
             "processor types.",

    "799",   "Image Space is the virtual address space in use by the "
             "selected image with this protection.  "
             "Execute/Read Only memory is memory that can be "
             "executed as well as read.",
               
    "801",   "Image Space is the virtual address space in use by the "
             "selected image with this protection.  "
             "Execute/Read/Write memory is memory that can be executed by "
             "programs as well as read and written.",

    "803",   "Image Space is the virtual address space in use by the "
             "selected image with this protection.  "
             "Execute Write Copy is memory that can be executed by "
             "programs as well as read and written.  "
             "This type of protection is used when memory needs to be "
             "shared between processes.  If the sharing processes only "
             "read the memory, then they will all use the same memory.  "
             "If a sharing process desires write access, then a copy of "
             "this memory will be made for that process.",

    "805",   "ID Thread is the unique identifier of this thread.  "
             "ID Thread numbers are reused, so they only identify "
             "a thread for the lifetime of that thread.",

    "817",   "Thread Details object contains the thread counters that "
             "are time consuming to collect.",

    "819",   "Cache Bytes measures the number of bytes currently in "
             "use by the system Cache.  The system Cache "
             "is used to buffer data retrieved from disk or LAN.  "
             "The system Cache uses memory not in use by active "
             "processes in the computer.",

    "821",   "Cache Bytes Peak measures the maximum number of bytes "
             "used by the system Cache.  The system Cache "
             "is used to buffer data retrieved from disk or LAN.  "
             "The system Cache uses memory not in use by active "
             "processes in the computer.",

    "823",   "Pages Input/sec is the number of pages read from the disk "
             "to resolve memory references to pages that "
             "were not in memory at the time of the reference.  "
	     "This counter includes paging traffic on behalf of the "
             "system Cache to access file data for applications.  "
	     "This is an important counter to observe if you are concerned "
	     "about excessive memory pressure (that is, thrashing), and "
	     "the excessive paging that may result.";