Madness80,
I tried your example but had the same problem. Here are the details.
I created a page foo.aspx with the following content (yours had syntax that was deprecated)
<html>
<body>
<%
response.write("Hello World!")
%>
</body>
</html>
Here's the output from the command shell.
C:\IISReqMon\test2>logman start WhatsRunning -p "IIS: Request Monitor" -ets -o W
hatsRunning.etl -max 13
Name: WhatsRunning
Age Limit: 15
Buffer Size: 64
Buffers Written: 1
Clock Type: System
Events Lost: 0
Flush Timer: 0
Buffers Free: 2
Buffers Lost: 0
File Mode: Sequential
File Name: C:\IISReqMon\test2\WhatsRunning.etl
Logger Id: 4
Logger Thread Id: 212
Maximum Buffers: 25
Maximum File Size: 13
Minimum Buffers: 3
Number of buffers: 3
Real Time Buffers Lost: 0
Provider Flags Level
-------------------------------------------------------------------------------
* "IIS: Request Monitor" 0x00000000 0x00
{3B7B0B4B-4B01-44B4-A95E-3C755719AEBF} 0x00000000 0x00
The command completed successfully.
C:\IISReqMon\test2>logman stop WhatsRunning -ets
The command completed successfully.
C:\IISReqMon\test2>tracerpt WhatsRunning.etl -o WhatsRunning.csv /y
Input
----------------
File(s):
WhatsRunning.etl
100.00%
Output
----------------
Text (CSV): WhatsRunning.csv
The command completed successfully.
C:\IISReqMon\test2>
Here's the content of the WhatsRunning.csv
Event Name, Type, TID, Clock-Time, Kernel(ms), User(ms), User Data
EventTrace, Header, 0x000009EC, 129005258965000000, 45, 0, 65536, 33620485, 3790, 1, 129005259298593750, 156250, 13, 0x00000000, 2, 1, 4, 0, 2793, 0x00614D28, 0x00614D42, 0, 3579545, 129005258965000000, 0x00000002, 0, 0, 0
IISRequestMonitor, StartProcessDump, 0x00000F58, 129005258965625000, 0, 0, 3964, 0, 4, 4, "Bugtracker", 129005258576710000, 0, 0
IISRequestMonitor, StopProcessDump, 0x00000F58, 129005258965625000, 0, 0, 3964, 0, 0
IISRequestMonitor, StartProcessDump, 0x000000C0, 129005258965625000, 0, 0, 852, 7, 4, 4, "SharePoint - 80", 129005252460000000, 0, 0
IISRequestMonitor, StopProcessDump, 0x000000C0, 129005258965625000, 0, 0, 852, 0, 0
It just logs the start/stop for two of the application pools. I get similar results for the other box where it's *just* ASP.net and no SharePoint.
Here is the output from logman query:
C:\IISReqMon\test2>logman query providers
Provider GUID
-------------------------------------------------------------------------------
IIS: WWW Global {d55d3bc9-cba9-44df-827e-132d3a4596c2}
.NET Common Language Runtime {e13c0d23-ccbc-4e12-931b-d9cc2eee27e4}
ACPI Driver Trace Provider {dab01d4d-2d48-477d-b1c3-daad0ce6f06b}
Active Directory: Kerberos {bba3add2-c229-4cdb-ae2b-57eb6966b0c4}
IIS: SSL Filter {1fbecc45-c060-4e7c-8a0e-0dbd6116181b}
IIS: Request Monitor {3b7b0b4b-4b01-44b4-a95e-3c755719aebf}
IIS: WWW Server {3a2a4e84-4c21-4981-ae10-3fda0d9b0f83}
IIS: Active Server Pages (ASP) {06b94d9a-b15e-456e-a4ef-37c984a2cb4b}
MSSQLSERVER Trace {130A3BE1-85CC-4135-8EA7-5A724EE6CE2C}
Local Security Authority (LSA) {cc85922f-db41-11d2-9244-006008269001}
IIS: IISADMIN Global {DC1271C2-A0AF-400f-850C-4E42FE16BE1C}
Processor Trace Information {08213901-B301-4a4c-B1DD-177238110F9F}
Windows Kernel Trace {9e814aad-3204-11d2-9a82-006008a86939}
ASP.NET Events {AFF081FE-0247-4275-9C4E-021F3DC1DA35}
NTLM Security Protocol {C92CF544-91B3-4dc0-8E11-C580339A0BF8}
IIS: WWW Isapi Extension {a1c2040e-8840-4c31-ba11-9871031a19ea}
Active Directory: SAM {8e598056-8993-11d2-819e-0000f875a064}
WSAT Trace Provider {7f3fe630-462b-47c5-ab07-67ca84934abd}
HTTP Service Trace {dd5ef90a-6398-47a4-ad34-4dcecdef795f}
Spooler Trace Control {94a984ef-f525-4bf1-be3c-ef374056a592}
Any suggestions would be appreciated.
Thanks!