This script checks amount of bytes sent for different pages and different sc-status.

SELECT
    EXTRACT_EXTENSION(cs-uri-stem) AS PageType,
    SUM(sc-bytes) as TotalBytesSent,
    TO_INT(MUL(PROPSUM(sc-bytes), 100.0)) AS PercentBytes
    INTO PagesWithLargestBytesSent.htm
FROM
    logs\iis\ex*.log
GROUP BY
    Pagetype
ORDER BY
    PercentBytes
DESC


Looking at the list below a couple of things are interesting.

- You have 2,2 Gb of .GIF-data sent by the server with sc-status 401. In one of my other post i discussed setting picture folder to anonymous access if your domain uses NTLM instead of Kerberos. These 2,2 Gb could probably be removed/reduced in that case.

- Same for the ICO files if you have them in a separate folder

- You also have 650 Mb of data that is .GIF’s with 404. 404 means file not found. Go fix!

//Anders