There's a kernel mode HTTP listener in Windows, which has its own cache and logging .. IIS (more specifically w3wp.exe worker processes) get requests and respo

There's a kernel mode HTTP listener in Windows, which has its own cache and logging .. IIS (more specifically w3wp.exe worker processes) get requests and respond through named pipes.