Click here to Skip to main content
Click here to Skip to main content

Exploring ASP.NET Session State and Cache data

, 10 Jan 2007 CPOL
Rate this:
Please Sign up or sign in to vote.
An article showing how to create quick, "easy to use" views of session state and cache.


On all the previous ASP and ASP.NET web sites I have worked on I have thought how useful it would be to have some quick and "easy to use" view of Session State and the Cache without having to sit with the debugger and manually step through each one.

As soon as you get a few developers working on a site you face the possibility of session and/or cache abuse. By this I do not mean to suggest that anything malicious might be going on, simply that there is the potential for sloppy use of these facilities. For example, putting information into session state that really shouldn't be in there or multiple developers putting identical data into session state under separate keys.

Under these circumstances it would be useful to have one or more utilities to allow you to view the contents of session state and the cache.

In this article I will show how to create these quick, "easy to use" views of session state and cache. Along the way we will touch on the subjects of HttpHandlers, custom configuration sections and binary serialization.

The full source code and a test web site is available to download.

Extending a Good Idea

Both our session and the cache views are implemented in a similar way to the standard trace tool that comes with ASP.NET, trace.axd.

The ASP.NET trace functionality is available to use in you ASP.NET code through the TraceContext class and the Page class’ Trace property. Information output to trace and a lot of other useful information such as an enumeration of session variables is rendered by the TraceHandler class that deals with the processing of the virtual page Trace.axd. The MSDN Online documentation on trace is here ASP.NET Trace.

Our session and cache views are custom HttpHandlers that are configured to process requests for the virtual pages of SessionView.axd and CacheView.axd. These names are determined using local web.config setting and the choice of them is up to the developer. I have given my "pages" an axd extension simply for consistency with the already well-known trace.axd. The article Extending ASP.NET with HttpHandlers and HttpModules from does a great job of explaining how to create a custom HttpHandler so I will not be covering that here.

The configuration xml to add the HttpHandlers to the ASP.NET pipeline is:

<add verb="*" 
type="Charteris.Web.HttpHandlers.SessionViewHandler,Charteris.Web.HttpHandlers" />
<add verb="*" 
type="Charteris.Web.HttpHandlers.CacheViewHandler,Charteris.Web.HttpHandlers" />

If the HttpHandler's assembly was located in the Global Assembly Cache (GAC) you would need to add further location information with the type attribute changing from



      Charteris.Web.HttpHandlers, Version=2.0.2000.0, 

This extra GAC information is available from Windows Explorer when you browse to the %WindowsDir%\Assembly directory.

For security reasons I have implemented a check to ensure only requests from the local box are processed. These are really only dev tools so this restriction is not really an issue. The RequestIsLocal code is in the Common.cs class and simply checks if the request’s source IP address is the local loopback address of or if it is the same as the server’s IP address.

/// Check if current request originated locally
///<param name="request">The current HttpRequest</param>
///<returns>True if the request originated locally</returns>
internal static bool RequestIsLocal(HttpRequest request){ 
    if(request.UserHostAddress == "" || 
        request.UserHostAddress == request.ServerVariables["LOCAL_ADDR"]){ 
            return true; 
        return false; 

The views both have a similar configuration style with the ability to disable the view and to disable the link, which allows viewing of the actual data stored within the session state or cache item. This link can be seen in the SessionView.axd screenshot in the following section.

These configuration options are implemented using a custom config handler. Custom config handlers inherit from IConfigurationSectionHandler and are used to process the config section that you set up in web.config. In the following piece of XML I have defined the config section and what handler will process it. Again the type attribute would need extra information if the config handler's assembly was in the GAC. The MSDN online docs for creating and processing custom config sections are very good and can be found here Creating New Configuration Sections.

As you may be aware Microsoft occasionally release best practice .NET code known as Application Blocks. There is a new block due for release this summer that deals with custom configuration, in .NET, using your own custom config files. If there is enough interest I will do an update to this article that uses the new Microsoft application block to handle the view's configuration needs.


The session state view enumerates all the items in Session State.

For each item it will render a row containing the item’s key in the session state collection and its type name.

If the Session State mode being used means that the items are serialized into the session state then it will also display an approximation of the storage space the object is taking up. When Session State is running InProc (In Process) the actual objects that form the content are not stored in the collection, only reference to the objects. The figures for the size taken up by these objects "in" session state would be misleading under these circumstances. Therefore there is no "Object Size" column when running in this mode. When Session State is running out of process, either using a StateServer machine or a SQL Server database, the objects are serialized into Session State.

The value that is displayed in the "Object Size" column is the byte size of a stream that is used as the destination of a binary serialization. This code to perform the serialization for most objects is shown below:

MemoryStream m;
m = Common.BinarySerialize(sessionItem);

//Size value
double size = Convert.ToDouble(m.Length) / Convert.ToDouble(1000) + " KB"; 

/// <summary>
/// Serialize object into a memory stream using Binary Serialization
/// </summary>
/// <param name="objectToSerialize">object to serialize</param>
/// <returns></returns>
internal static MemoryStream BinarySerialize(object objectToSerialize) {
    MemoryStream m = new MemoryStream();
    BinaryFormatter b = new BinaryFormatter();

    b.Serialize(m, objectToSerialize);

    return m;

Originally I was the above technique, for all types stored in Session and Cache, to get my calculations for approximate "Object Size". However after some discussion with one of the Microsft devs in the US I now know that ASP.NET uses an internal, optimized, serialization technique for some of the standard types. This technique is internal to the System.Web assmebly and is subject to change in future versions. I have imitated their approach and have listed below all the types that are currebtly being serialized in this fashion. This set of types is correct for the 1.1 version of the framework. Less types were serialised in this way in version 1.0.

  • String
  • Int16
  • Int32
  • Int64
  • Boolean
  • DateTime
  • Decimal
  • Byte
  • Char
  • Double
  • SByte
  • UInt16
  • UInt32
  • UInt64
  • Timespan
  • Guid
  • IntPtr
  • UIntPtr
  • Object

If the item’s type can be understood by the XmlSerializer class then the “View Data” cell will display a link to allow viewing of the contents of the item. This facility can be disabled by setting the config attribute showViewDataLink to false. I use the XmlSeriliazer to get a renderable view of the data. This means that there are extraneous XML tags at the top and bottom of the data when viewed.


In a similar fashion to the session state view, this enumerates the contents of the cache.

Again for every cache item, it will render a row containing the item’s key in the cache collection and its type name. As the cache is always run in process, the items are object references and therefore there is no “Object Size” column for the cache view.

Again like the session view, if it is not disabled by the config setting showViewDataLink and the item’s type is understood by the XmlSerializer, the “View Data” cell will display a link to allow viewing of the contents of the item.

Points of Interest

One gotcha that I found with developing an HttpHandler that wants to use session state was that by default you can’t. If you want your HttpHandler to have access to session state you need to implement the IRequiresSessionState interface.


OK, After speaking to one of the Microsoft guys in the US there is a serious flaw in my thinking regarding calculating an approximate size for items in session state. ASP.NET "uses an optimized internal formatter for basic types such as int, string, bool, etc". Therefore me basing my calculation on the BinaryFormatter is wrong. I have updated the article saying that my use of the BinaryFormatter gives only a very rough approximation.

  • 31 May 2003 - updated downloads
  • 6 June 2003 - Amended Text

The article now takes into consideration that ASP.NET uses an internal optimized serialization technique for the many of the base types.

I have also fixed a bug where some or all parts of the data would not appear in the browser. This was fixed by HTML encoding the output using HttpServerUtility.HtmlEncode.

  • 10 Jan 2007 - Updated source file to include missing project


This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)


About the Author

Patrick Long
Web Developer
Europe Europe
I have been programming now for 10 years starting with COBOL, CICS and DB2 and ending up with ASP.NET, WPF, and various web technologies.

I work for Munkiisoft in the UK.

Check out my blog here

Comments and Discussions

Questionwhat if I have multiple w3wp worker process for a given web app ? Pinmembermrpraba9-Sep-14 4:42 
SuggestionWhy not a distributed cache ? Pinmemberwesnur24-Sep-12 22:59 
GeneralError getting in Charteris.Web.HttpHandlers solution Pinmemberyk10june20-Oct-10 0:16 
Generalsession end PinmemberAjay Kale New9-Sep-10 5:16 
GeneralThanks! I am using it on Catharsis PinmemberRadim Köhler25-Jun-09 22:31 
GeneralUnable to make the session state request to the session state server. Pinmemberdido8-Aug-08 2:34 
GeneralRe: Unable to make the session state request to the session state server. PinmemberPatrick Long11-Aug-08 12:44 
GeneralMessage Automatically Removed PinmemberDotNetGuts11-Jun-09 2:04 
Generallosing session when I am use Response.Redirect Pinmemberprasadtalla17-Jul-07 4:53 
QuestionWhat is the use of writer.Write(1) PinmemberSucharit Sengupta2-Jul-07 3:18 
GeneralSession Objects Size on Remote Server Pinmembernetcove4-Apr-07 4:44 
GeneralRe: Session Objects Size on Remote Server PinmemberPatrick Long2-Jul-07 13:57 
QuestionQuestion Pinmembercodebased19-Feb-07 2:34 
AnswerRe: Question PinmemberPatrick Long20-Feb-07 11:37 
GeneralExtension Suggestion PinmemberMike Elliott24-Feb-06 9:48 
Questionhelp me with session ... Pinmembertuan hai22-Nov-05 22:23 
GeneralSession management options in ASP.NET PinsussElanKathir20-Oct-05 22:55 
GeneralRe: Session management options in ASP.NET Pinmemberrohitiscancerian25-Oct-05 20:04 
GeneralRe: Session management options in ASP.NET PinmemberTelekinetic6-Mar-06 7:03 
GeneralRe: Session management options in ASP.NET PinmemberPortatofe2-Oct-08 9:36 
QuestionSee size in session? Pinmembercoolguyrob11-Oct-04 17:14 
GeneralFormatted XML Output Pinmembermatzy23-Apr-04 8:37 
GeneralRe: Formatted XML Output PinmemberPatrick Long26-Apr-04 3:36 
GeneralCache Pinmembermatzy23-Apr-04 8:23 version? Cannot open solution! Pinmembermanfbraun16-Jul-03 22:08 
GeneralRe: version? Cannot open solution! PinmemberPatrick Long17-Jul-03 0:41 
GeneralRe: version? Cannot open solution! Pinmembermanfbraun17-Jul-03 1:50 
GeneralRe: version? Cannot open solution! PinmemberPatrick Long17-Jul-03 22:22 
GeneralRe: version? Cannot open solution! Pinmembermanfbraun18-Jul-03 9:42 
GeneralRe: version? Cannot open solution! PinmemberPatrick Long20-Jul-03 6:50 
GeneralSession State unpreditable Pinmemberjmathew5-Jul-03 12:32 
GeneralRe: Session State unpreditable PinmemberPatrick Long10-Jul-03 23:04 
GeneralError executing project Pinmemberaland@dbsoft.com3-Jun-03 9:27 
GeneralRe: Error executing project PinmemberPatrick Long3-Jun-03 11:23 
QuestionSee size in cache? PinmemberPaul Tallett29-May-03 23:18 
AnswerRe: See size in cache? PinmemberPatrick Long30-May-03 2:05 
GeneralRe: See size in cache? PinmemberPatrick Long3-Jun-03 11:41 
GeneralRe: See size in cache? Pinmember-~Chris~-29-Oct-04 11:45 
GeneralError Message opening up project PinmemberJerryK@PikeOnline.net28-May-03 7:58 
GeneralRe: Error Message opening up project PinmemberPatrick Long28-May-03 11:39 
GeneralRe: Error Message opening up project Pinmemberlasthope838-Jan-07 6:30 
GeneralRe: Error Message opening up project PinmemberPatrick Long9-Jan-07 10:54 
GeneralRe: Error Message opening up project PinmemberPatrick Long15-Jan-07 14:09 
They have been updated, sorry for all the trouble
GeneralRe: Error Message opening up project PinmemberPatrick Long1-Jun-03 12:16 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.

| Advertise | Privacy | Terms of Use | Mobile
Web04 | 2.8.150414.1 | Last Updated 10 Jan 2007
Article Copyright 2003 by Patrick Long
Everything else Copyright © CodeProject, 1999-2015
Layout: fixed | fluid