i was just doing some reading and i came across this

"In IIS 5.0, Inetinfo.exe (a user-mode process) performed all logging. In
the redesigned architecture of IIS 6.0, if a request is cached, the response
is served from the HTTP.sys kernel-mode cache without passing through
Inetinfo.exe or another user-mode component; therefore, HTTP.sys handles
most logging in IIS 6.0 (Open Database Connectivity [ODBC] and custom
logging are the exceptions) to ensure that responses are recorded."

http://www.microsoft.com/technet/pro....mspx?mfr=true

I was just a little curious about what this meant. it sounds almost like
odbc and custom loggin are done via the inetinfo.exe which is usermode..
which it seems as though it implies you might get different info.

are there any differences in the info you get back?

Thanks
Justin