I've checked MSDN, and the W3C format, but nothing seems to explain what causes IIS to output "..." in the "cs(Cookie)" column.
My assumption is that the cookie is "too big", but I'd like to know for sure and also what is the limit before IIS outputs "..."?
You are correct. If the log field exceeds the default limit size it would show "...".