IIS and Application pool crash, please help
in [IIS]
|
From: aspigel on 21 Jun 2006 17:19 Had the following error today (from Event Viewer): A process serving application pool 'DefaultAppPool' failed to respond to a ping. The process id was '6844'. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ** A few weeks ago I tried to daignose the error using debug and someone stated that my issue could my related to SiteMinder and the ISAPI filter. I am very new at trying to diagnose these type of errors and would really appreciate any help. Thanks... >> >From IIS State: Starting new log output IISState version 3.3.1 Wed Jun 21 13:09:06 2006 OS = Windows 2003 Server Executable: w3wp.exe PID = 6844 Note: Thread times are formatted as HH:MM:SS.ms *********************** IIS has crashed... Beginning Analysis DLL (!FunctionName) that failed: ntdll!RtlAddressInSectionTable Thread ID: 24 System Thread ID: 224 Kernel Time: 0:0:1.0 User Time: 0:0:2.984 *** WARNING: Unable to verify checksum for E:\Program Files\netegrity\webagent\bin\ISAPI6WebAgent.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for E:\Program Files\netegrity\webagent\bin\ISAPI6WebAgent.dll - Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0313acc0 7c839620 ntdll!RtlAddressInSectionTable+0x18a 01 0313ace0 00e23619 ntdll!RtlAddressInSectionTable+0xda 02 7c82f4c3 408b0000 ISAPI6WebAgent!HttpFilterProc+0xf5f9 03 0018a164 00000000 0x408b0000 Closing open log file E:\iisstate\output\IISState-6844.log Opened log file 'E:\iisstate\output\IISState-6844.log' *********************** Starting new log output IISState version 3.3.1 Wed Jun 21 13:09:06 2006 OS = Windows 2003 Server Executable: w3wp.exe PID = 6844 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 16a4 Kernel Time: 0:0:0.46 User Time: 0:0:0.93 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\w3dt.dll - *** ERROR: Module load completed but symbols could not be loaded for c:\windows\system32\inetsrv\w3wp.exe Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0006fc7c 77e6ba12 ntdll!KiFastSystemCallRet 01 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12 02 0006ff0c 0100187c w3dt!IPM_MESSAGE_PIPE::operator=+0x1b31 03 0006ff44 01001a23 w3wp+0x187c 04 0006ffc0 77e523cd w3wp+0x1a23 05 0006fff0 00000000 kernel32!IsProcessorFeaturePresent+0x9e Thread ID: 1 System Thread ID: 3cc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 009effb8 77e66063 ntdll!KiFastSystemCallRet 01 009effec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 2 System Thread ID: 1a7c Kernel Time: 0:0:6.703 User Time: 0:0:21.609 *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\W3TP.dll - Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00c8ff54 5a30249e ntdll!KiFastSystemCallRet 01 00c8ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00c8ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00c8ffb8 77e66063 W3TP+0x1db9 04 00c8ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 3 System Thread ID: 1728 Kernel Time: 0:0:5.859 User Time: 0:0:19.328 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00ccace0 00e23619 ntdll!RtlAddressInSectionTable+0xbf 01 7c82f4c3 408b0000 ISAPI6WebAgent!HttpFilterProc+0xf5f9 02 0018a164 00000000 0x408b0000 Thread ID: 4 System Thread ID: 1074 Kernel Time: 0:0:5.125 User Time: 0:0:14.546 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00d0ff54 5a30249e ntdll!KiFastSystemCallRet 01 00d0ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00d0ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00d0ffb8 77e66063 W3TP+0x1db9 04 00d0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 5 System Thread ID: 1b0 Kernel Time: 0:0:4.562 User Time: 0:0:13.421 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00d4ff54 5a30249e ntdll!KiFastSystemCallRet 01 00d4ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00d4ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00d4ffb8 77e66063 W3TP+0x1db9 04 00d4ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 6 System Thread ID: ae0 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00e0ffb8 77e66063 ntdll!KiFastSystemCallRet 01 00e0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 7 System Thread ID: 130 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\w3core.dll - Thread Type: HTTP Compression Thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 018afaf8 77e6ba12 ntdll!KiFastSystemCallRet 01 018afb0c 5a3b8147 kernel32!WaitForSingleObject+0x12 02 018affb8 77e66063 w3core!W3_FILE_INFO_CACHE::GetFileCache+0xd784 03 018affec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 8 System Thread ID: b9c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 018effb8 77e66063 ntdll!KiFastSystemCallRet 01 018effec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 9 System Thread ID: bc8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0192ffb8 77e66063 ntdll!KiFastSystemCallRet 01 0192ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 10 System Thread ID: 1578 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 01d3ff48 77e6ba12 ntdll!KiFastSystemCallRet 01 01d3ff5c 00e415e4 kernel32!WaitForSingleObject+0x12 02 00000000 00000000 ISAPI6WebAgent!CSmAgentTliPacket::`default constructor closure'+0xef4 Thread ID: 11 System Thread ID: 6c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.62 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0294ff60 77e6ba12 ntdll!KiFastSystemCallRet 01 0294ff74 00ea5f31 kernel32!WaitForSingleObject+0x12 02 0294ffb8 77e66063 ISAPI6WebAgent!CSmPasswordMsgReader::GetArg+0x46041 03 0294ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 12 System Thread ID: 1098 Kernel Time: 0:0:6.671 User Time: 0:0:20.296 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 02afff54 5a30249e ntdll!KiFastSystemCallRet 01 02afff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 02afffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 02afffb8 77e66063 W3TP+0x1db9 04 02afffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 13 System Thread ID: 5b8 Kernel Time: 0:0:5.406 User Time: 0:0:16.671 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\System32\mswsock.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\WS2_32.dll - *** WARNING: Unable to verify checksum for \\?\E:\JRun4\lib\wsconfig\1\jrun_iis6_wildcard.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for \\?\E:\JRun4\lib\wsconfig\1\jrun_iis6_wildcard.dll - Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00a8ed74 71b23a52 ntdll!KiFastSystemCallRet 01 00a8ee64 71c0470c mswsock+0x3a52 02 00a8eeb4 0295afa5 WS2_32!select+0xa1 03 00000000 00000000 jrun_iis6_wildcard!TerminateExtension+0x9345 Thread ID: 14 System Thread ID: 6dc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 029effb8 77e66063 ntdll!KiFastSystemCallRet 01 029effec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 15 System Thread ID: 120c Kernel Time: 0:0:3.656 User Time: 0:0:12.859 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 02a2ed74 71b23a52 ntdll!KiFastSystemCallRet 01 02a2ee64 71c0470c mswsock+0x3a52 02 02a2eeb4 0295afa5 WS2_32!select+0xa1 03 00000000 00000000 jrun_iis6_wildcard!TerminateExtension+0x9345 Thread ID: 16 System Thread ID: 6b0 Kernel Time: 0:0:3.484 User Time: 0:0:10.906 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00aced74 71b23a52 ntdll!KiFastSystemCallRet 01 00acee64 71c0470c mswsock+0x3a52 02 00aceeb4 0295afa5 WS2_32!select+0xa1 03 00000000 00000000 jrun_iis6_wildcard!TerminateExtension+0x9345 Thread ID: 17 System Thread ID: 158c Kernel Time: 0:0:2.218 User Time: 0:0:5.921 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00a2ff54 5a30249e ntdll!KiFastSystemCallRet 01 00a2ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00a2ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00a2ffb8 77e66063 W3TP+0x1db9 04 00a2ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 18 System Thread ID: 10bc Kernel Time: 0:0:3.500 User Time: 0:0:10.125 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\HTTPAPI.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\w3isapi.dll - Thread Type: HTTP Compression Thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 009aee44 67151b7c ntdll!KiFastSystemCallRet 01 009aee68 671525eb HTTPAPI!HttpSetAppPoolInformation+0x54 02 009aeeb8 5a361820 HTTPAPI!HttpSendResponseEntityBody+0x66 03 009aeefc 5a36176e w3dt!UlAtqSendEntityBody+0xd1 04 009aef1c 5a3931f6 w3dt!UlAtqSendEntityBody+0x1f 05 009aef48 5a39588b w3core+0x31f6 06 009aef84 5a39578c w3core+0x588b 07 009aefa8 5a3d0b65 w3core+0x578c 08 009aefc4 5a327904 w3core!UlW3Start+0x14b7a 09 009af22c 02953ad2 w3isapi!ProcessIsapiRequest+0x5073 0a 0014cb04 00060000 jrun_iis6_wildcard!TerminateExtension+0x1e72 0b 00000090 00000000 0x60000 Thread ID: 19 System Thread ID: 1238 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0307ffb8 77e66063 ntdll!KiFastSystemCallRet 01 0307ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 20 System Thread ID: 11c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 030bffb8 77e66063 ntdll!KiFastSystemCallRet 01 030bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 21 System Thread ID: 159c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll - Thread Type: Possible ASP page. Possible DCOM activity Executing Page: *** ERROR: Symbol file could not be found. Defaulted to export symbols for \\?\C:\WINDOWS\system32\inetsrv\asp.dll - ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ole32.dll - OLE32.dll Symbols not found. Unable to proceed with DCOM check. Continuing other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 02b3ff84 77c5778f ntdll!KiFastSystemCallRet 01 02b3ff8c 77c5f7dd RPCRT4!NdrOleFree+0x3c5 02 02b3ffac 77c5de88 RPCRT4!I_RpcTransGetThreadEvent+0x188 03 02b3ffb8 77e66063 RPCRT4!I_RpcLogEvent+0xe92 04 02b3ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 22 System Thread ID: ec0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 030fffb8 77e66063 ntdll!KiFastSystemCallRet 01 030fffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 23 System Thread ID: 1f00 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 031bffb8 77e66063 ntdll!KiFastSystemCallRet 01 031bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 24 System Thread ID: 224 Kernel Time: 0:0:1.0 User Time: 0:0:2.984 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0313acc0 7c839620 ntdll!RtlAddressInSectionTable+0x18a 01 0313ace0 00e23619 ntdll!RtlAddressInSectionTable+0xda 02 7c82f4c3 408b0000 ISAPI6WebAgent!HttpFilterProc+0xf5f9 03 0018a164 00000000 0x408b0000 Thread ID: 25 System Thread ID: 1e4c Kernel Time: 0:0:2.890 User Time: 0:0:8.906 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0317ed74 71b23a52 ntdll!KiFastSystemCallRet 01 0317ee64 71c0470c mswsock+0x3a52 02 0317eeb4 0295afa5 WS2_32!select+0xa1 03 00000000 00000000 jrun_iis6_wildcard!TerminateExtension+0x9345 Thread ID: 26 System Thread ID: 924 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0327ffb8 77e66063 ntdll!KiFastSystemCallRet 01 0327ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 27 System Thread ID: 944 Kernel Time: 0:0:1.953 User Time: 0:0:7.515 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 031d8b50 71b23a52 ntdll!KiFastSystemCallRet 01 031d8c40 71c0470c mswsock+0x3a52 02 031d8c90 00e54d60 WS2_32!select+0xa1 03 0000003c 00000000 ISAPI6WebAgent!CSmAgentTliHandleSetIterator::Next+0xf0 Thread ID: 28 System Thread ID: 6f8 Kernel Time: 0:0:2.703 User Time: 0:0:9.718 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0323ff54 5a30249e ntdll!KiFastSystemCallRet 01 0323ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 0323ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 0323ffb8 77e66063 W3TP+0x1db9 04 0323ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 29 System Thread ID: 1b0c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 032bffb8 77e66063 ntdll!KiFastSystemCallRet 01 032bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 30 System Thread ID: 1b0c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 032bffb8 77e66063 ntdll!KiFastSystemCallRet 01 032bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 31 System Thread ID: 1b0c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 032bffb8 77e66063 ntdll!KiFastSystemCallRet 01 032bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 32 System Thread ID: f60 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 048cff80 77e6ba12 ntdll!KiFastSystemCallRet 01 048cff94 709fc91b kernel32!WaitForSingleObject+0x12 02 048cffb4 709fc8f3 asp!GetExtensionVersion+0x2b91 03 048cffec 00000000 asp!GetExtensionVersion+0x2b69 Thread ID: 33 System Thread ID: f60 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 048cff80 77e6ba12 ntdll!KiFastSystemCallRet 01 048cff94 709fc91b kernel32!WaitForSingleObject+0x12 02 048cffb4 709fc8f3 asp!GetExtensionVersion+0x2b91 03 048cffec 00000000 asp!GetExtensionVersion+0x2b69 Thread ID: 34 System Thread ID: 1cac Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\USER32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\msvcrt.dll - Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04bcfec8 7739cd08 ntdll!KiFastSystemCallRet 01 04bcff24 7738e381 USER32!PeekMessageW+0x244 02 04bcff40 709fbcbe USER32!MsgWaitForMultipleObjects+0x1f 03 04bcff84 77bcb530 asp!GetExtensionVersion+0x1f34 04 04bcffb8 77e66063 msvcrt!endthreadex+0xa3 05 04bcffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 35 System Thread ID: 1978 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04c0ff68 77e6ba12 ntdll!KiFastSystemCallRet 01 04c0ff7c 709fe9b7 kernel32!WaitForSingleObject+0x12 02 04c0ffb8 77e66063 asp!GetExtensionVersion+0x4c2d 03 04c0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 36 System Thread ID: b20 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\comsvcs.dll - Thread Type: Idle ASP thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04c6ff5c 77e6ba12 ntdll!KiFastSystemCallRet 01 04c6ff70 75bd4bd0 kernel32!WaitForSingleObject+0x12 02 04c6ff84 77bcb530 comsvcs!CoCreateActivity+0x2882 03 04c6ffb8 77e66063 msvcrt!endthreadex+0xa3 04 04c6ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 37 System Thread ID: 2cc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04caff54 77e6ba12 ntdll!KiFastSystemCallRet 01 04caff68 75bd464d kernel32!WaitForSingleObject+0x12 02 04caff84 77bcb530 comsvcs!CoCreateActivity+0x22ff 03 04caffb8 77e66063 msvcrt!endthreadex+0xa3 04 04caffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 38 System Thread ID: 1c34 Kernel Time: 0:0:0.109 User Time: 0:0:0.31 Thread Type: Idle ASP thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04cefe78 7739cd08 ntdll!KiFastSystemCallRet 01 04cefed4 7738e381 USER32!PeekMessageW+0x244 02 04cefef0 75bd86c6 USER32!MsgWaitForMultipleObjects+0x1f 03 04ceff84 77bcb530 comsvcs!CoCreateActivity+0x6378 04 04ceffb8 77e66063 msvcrt!endthreadex+0xa3 05 04ceffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 39 System Thread ID: 1dd4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04d2fe78 7739cd08 ntdll!KiFastSystemCallRet 01 04d2fed4 7738e381 USER32!PeekMessageW+0x244 02 04d2fef0 75bd86c6 USER32!MsgWaitForMultipleObjects+0x1f 03 04d2ff84 77bcb530 comsvcs!CoCreateActivity+0x6378 04 04d2ffb8 77e66063 msvcrt!endthreadex+0xa3 05 04d2ffec 00000000 kernel32!GetModuleFileNameA+0xeb ***** Dump name is formatted as: PID-Timestamp.dmp Creating E:\iisstate\output\6844-1150913346.dmp - mini user dump ***** Closing open log file E:\iisstate\output\IISState-6844.log Earlier posting: Trying to figure out why our web servers keep crashing. We are running JRun/ColdFusion Multi-Server Cluster (clustered using the Application server) on several Win 2003 machines. The machines that are having the error are running Windows 2003 SP1 while a third machine which does not have the Windows SP1 is not having the error. Please let me know if can provide any other information >> Error in Event Viewer: A process serving application pool 'DefaultAppPool' suffered a fatal communication error with the World Wide Web Publishing Service. The process id was '6464'. The data field contains the error number. Debug Diagnostic Tool Analysis from error that occured this past Friday: Analysis Summary Type Description Recommendation Error In w3wp__PID__6464__Date__05_19_2006__Time_01_30_30PM__62__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!RtlpWaitOnCriticalSection+d2 in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000014 on thread 11 Please follow up with the vendor Microsoft Corporation for C:\WINDOWS\system32\ntdll.dll Information DebugDiag determined that this dump file (w3wp__PID__6464__Date__05_19_2006__Time_01_30_30PM__62__Second_Chance_Exception_C0000005.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the IISAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True. Analysis Details Table Of Contents w3wp__PID__6464__Date__05_19_2006__Time_01_30_30PM__62__Second_Chance_Exception_C0000005.dmp Faulting Thread Faulting Module Information Report for w3wp__PID__6464__Date__05_19_2006__Time_01_30_30PM__62__Second_Chance_Exception_C0000005.dmp Type of Analysis Performed Crash Analysis Machine Name SLIOBTWEB6 Operating System Windows Server 2003 Service Pack 1 Number Of Processors 4 Process ID 6464 Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe System Up-Time 3 day(s) 02:20:48 Process Up-Time 0 day(s) 08:33:10 Thread 11 - System ID 7904 Entry point w3tp!THREAD_MANAGER::ThreadManagerThread Create time 5/19/2006 6:47:01 AM Time spent in user mode 0 Days 0:0:18.734 Time spent in kernel mode 0 Days 0:0:4.890 Function Arg 1 Arg 2 Arg 3 Source ntdll!RtlpWaitOnCriticalSection+d2 00000000 00000004 02c80fc0 ntdll!RtlEnterCriticalSection+a8 0427b060 02a2ada4 7c82f4c3 ISAPI6WebAgent!HttpFilterProc+f5f9 9090c334 8b909090 ec8b55ff 408b0000 00000000 00000000 00000000 NTDLL!RTLPWAITONCRITICALSECTION+D2In w3wp__PID__6464__Date__05_19_2006__Time_01_30_30PM__62__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!RtlpWaitOnCriticalSection+d2 in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000014 on thread 11 Module Information Image Name: C:\WINDOWS\system32\ntdll.dll Symbol Type: PDB Base address: 0x7c800000 Time Stamp: Thu Mar 24 20:30:42 2005 Checksum: 0x000c90bf Comments: COM DLL: False Company Name: Microsoft Corporation ISAPIExtension: False File Description: NT Layer DLL ISAPIFilter: False File Version: 5.2.3790.1830 (srv03_sp1_rtm.050324-1447) Managed DLL: False Internal Name: ntdll.dll VB DLL: False Legal Copyright: © Microsoft Corporation. All rights reserved. Loaded Image Name: ntdll.dll Legal Trademarks: Mapped Image Name: Original filename: ntdll.dll Module name: ntdll Private Build: Single Threaded: False Product Name: Microsoft® Windows® Operating System Module Size: 768.00 KBytes Product Version: 5.2.3790.1830 Symbol File Name: c:\symcache\ntdll.pdb\DCE823FCF71A4BF5AA489994520EA18F2\ntdll.pdb Special Build: & Script Summary Script Name Status Error Code Error Source Error Description Source Line IISAnalysis.asp Completed
From: David Wang [Msft] on 22 Jun 2006 03:14 Crash comes from Netegrity SiteMinder. You should contact them for support. There is nothing you or we can do. -- //David IIS http://blogs.msdn.com/David.Wang This posting is provided "AS IS" with no warranties, and confers no rights. // <aspigel(a)exhibit3.com> wrote in message news:1150924769.852638.126810(a)c74g2000cwc.googlegroups.com... Had the following error today (from Event Viewer): A process serving application pool 'DefaultAppPool' failed to respond to a ping. The process id was '6844'. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ** A few weeks ago I tried to daignose the error using debug and someone stated that my issue could my related to SiteMinder and the ISAPI filter. I am very new at trying to diagnose these type of errors and would really appreciate any help. Thanks... >> >From IIS State: Starting new log output IISState version 3.3.1 Wed Jun 21 13:09:06 2006 OS = Windows 2003 Server Executable: w3wp.exe PID = 6844 Note: Thread times are formatted as HH:MM:SS.ms *********************** IIS has crashed... Beginning Analysis DLL (!FunctionName) that failed: ntdll!RtlAddressInSectionTable Thread ID: 24 System Thread ID: 224 Kernel Time: 0:0:1.0 User Time: 0:0:2.984 *** WARNING: Unable to verify checksum for E:\Program Files\netegrity\webagent\bin\ISAPI6WebAgent.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for E:\Program Files\netegrity\webagent\bin\ISAPI6WebAgent.dll - Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0313acc0 7c839620 ntdll!RtlAddressInSectionTable+0x18a 01 0313ace0 00e23619 ntdll!RtlAddressInSectionTable+0xda 02 7c82f4c3 408b0000 ISAPI6WebAgent!HttpFilterProc+0xf5f9 03 0018a164 00000000 0x408b0000 Closing open log file E:\iisstate\output\IISState-6844.log Opened log file 'E:\iisstate\output\IISState-6844.log' *********************** Starting new log output IISState version 3.3.1 Wed Jun 21 13:09:06 2006 OS = Windows 2003 Server Executable: w3wp.exe PID = 6844 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 16a4 Kernel Time: 0:0:0.46 User Time: 0:0:0.93 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\w3dt.dll - *** ERROR: Module load completed but symbols could not be loaded for c:\windows\system32\inetsrv\w3wp.exe Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0006fc7c 77e6ba12 ntdll!KiFastSystemCallRet 01 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12 02 0006ff0c 0100187c w3dt!IPM_MESSAGE_PIPE::operator=+0x1b31 03 0006ff44 01001a23 w3wp+0x187c 04 0006ffc0 77e523cd w3wp+0x1a23 05 0006fff0 00000000 kernel32!IsProcessorFeaturePresent+0x9e Thread ID: 1 System Thread ID: 3cc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 009effb8 77e66063 ntdll!KiFastSystemCallRet 01 009effec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 2 System Thread ID: 1a7c Kernel Time: 0:0:6.703 User Time: 0:0:21.609 *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\W3TP.dll - Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00c8ff54 5a30249e ntdll!KiFastSystemCallRet 01 00c8ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00c8ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00c8ffb8 77e66063 W3TP+0x1db9 04 00c8ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 3 System Thread ID: 1728 Kernel Time: 0:0:5.859 User Time: 0:0:19.328 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00ccace0 00e23619 ntdll!RtlAddressInSectionTable+0xbf 01 7c82f4c3 408b0000 ISAPI6WebAgent!HttpFilterProc+0xf5f9 02 0018a164 00000000 0x408b0000 Thread ID: 4 System Thread ID: 1074 Kernel Time: 0:0:5.125 User Time: 0:0:14.546 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00d0ff54 5a30249e ntdll!KiFastSystemCallRet 01 00d0ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00d0ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00d0ffb8 77e66063 W3TP+0x1db9 04 00d0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 5 System Thread ID: 1b0 Kernel Time: 0:0:4.562 User Time: 0:0:13.421 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00d4ff54 5a30249e ntdll!KiFastSystemCallRet 01 00d4ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00d4ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00d4ffb8 77e66063 W3TP+0x1db9 04 00d4ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 6 System Thread ID: ae0 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00e0ffb8 77e66063 ntdll!KiFastSystemCallRet 01 00e0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 7 System Thread ID: 130 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\w3core.dll - Thread Type: HTTP Compression Thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 018afaf8 77e6ba12 ntdll!KiFastSystemCallRet 01 018afb0c 5a3b8147 kernel32!WaitForSingleObject+0x12 02 018affb8 77e66063 w3core!W3_FILE_INFO_CACHE::GetFileCache+0xd784 03 018affec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 8 System Thread ID: b9c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 018effb8 77e66063 ntdll!KiFastSystemCallRet 01 018effec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 9 System Thread ID: bc8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0192ffb8 77e66063 ntdll!KiFastSystemCallRet 01 0192ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 10 System Thread ID: 1578 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 01d3ff48 77e6ba12 ntdll!KiFastSystemCallRet 01 01d3ff5c 00e415e4 kernel32!WaitForSingleObject+0x12 02 00000000 00000000 ISAPI6WebAgent!CSmAgentTliPacket::`default constructor closure'+0xef4 Thread ID: 11 System Thread ID: 6c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.62 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0294ff60 77e6ba12 ntdll!KiFastSystemCallRet 01 0294ff74 00ea5f31 kernel32!WaitForSingleObject+0x12 02 0294ffb8 77e66063 ISAPI6WebAgent!CSmPasswordMsgReader::GetArg+0x46041 03 0294ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 12 System Thread ID: 1098 Kernel Time: 0:0:6.671 User Time: 0:0:20.296 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 02afff54 5a30249e ntdll!KiFastSystemCallRet 01 02afff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 02afffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 02afffb8 77e66063 W3TP+0x1db9 04 02afffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 13 System Thread ID: 5b8 Kernel Time: 0:0:5.406 User Time: 0:0:16.671 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\System32\mswsock.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\WS2_32.dll - *** WARNING: Unable to verify checksum for \\?\E:\JRun4\lib\wsconfig\1\jrun_iis6_wildcard.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for \\?\E:\JRun4\lib\wsconfig\1\jrun_iis6_wildcard.dll - Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00a8ed74 71b23a52 ntdll!KiFastSystemCallRet 01 00a8ee64 71c0470c mswsock+0x3a52 02 00a8eeb4 0295afa5 WS2_32!select+0xa1 03 00000000 00000000 jrun_iis6_wildcard!TerminateExtension+0x9345 Thread ID: 14 System Thread ID: 6dc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 029effb8 77e66063 ntdll!KiFastSystemCallRet 01 029effec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 15 System Thread ID: 120c Kernel Time: 0:0:3.656 User Time: 0:0:12.859 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 02a2ed74 71b23a52 ntdll!KiFastSystemCallRet 01 02a2ee64 71c0470c mswsock+0x3a52 02 02a2eeb4 0295afa5 WS2_32!select+0xa1 03 00000000 00000000 jrun_iis6_wildcard!TerminateExtension+0x9345 Thread ID: 16 System Thread ID: 6b0 Kernel Time: 0:0:3.484 User Time: 0:0:10.906 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00aced74 71b23a52 ntdll!KiFastSystemCallRet 01 00acee64 71c0470c mswsock+0x3a52 02 00aceeb4 0295afa5 WS2_32!select+0xa1 03 00000000 00000000 jrun_iis6_wildcard!TerminateExtension+0x9345 Thread ID: 17 System Thread ID: 158c Kernel Time: 0:0:2.218 User Time: 0:0:5.921 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00a2ff54 5a30249e ntdll!KiFastSystemCallRet 01 00a2ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00a2ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00a2ffb8 77e66063 W3TP+0x1db9 04 00a2ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 18 System Thread ID: 10bc Kernel Time: 0:0:3.500 User Time: 0:0:10.125 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\HTTPAPI.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\w3isapi.dll - Thread Type: HTTP Compression Thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 009aee44 67151b7c ntdll!KiFastSystemCallRet 01 009aee68 671525eb HTTPAPI!HttpSetAppPoolInformation+0x54 02 009aeeb8 5a361820 HTTPAPI!HttpSendResponseEntityBody+0x66 03 009aeefc 5a36176e w3dt!UlAtqSendEntityBody+0xd1 04 009aef1c 5a3931f6 w3dt!UlAtqSendEntityBody+0x1f 05 009aef48 5a39588b w3core+0x31f6 06 009aef84 5a39578c w3core+0x588b 07 009aefa8 5a3d0b65 w3core+0x578c 08 009aefc4 5a327904 w3core!UlW3Start+0x14b7a 09 009af22c 02953ad2 w3isapi!ProcessIsapiRequest+0x5073 0a 0014cb04 00060000 jrun_iis6_wildcard!TerminateExtension+0x1e72 0b 00000090 00000000 0x60000 Thread ID: 19 System Thread ID: 1238 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0307ffb8 77e66063 ntdll!KiFastSystemCallRet 01 0307ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 20 System Thread ID: 11c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 030bffb8 77e66063 ntdll!KiFastSystemCallRet 01 030bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 21 System Thread ID: 159c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll - Thread Type: Possible ASP page. Possible DCOM activity Executing Page: *** ERROR: Symbol file could not be found. Defaulted to export symbols for \\?\C:\WINDOWS\system32\inetsrv\asp.dll - ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ole32.dll - OLE32.dll Symbols not found. Unable to proceed with DCOM check. Continuing other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 02b3ff84 77c5778f ntdll!KiFastSystemCallRet 01 02b3ff8c 77c5f7dd RPCRT4!NdrOleFree+0x3c5 02 02b3ffac 77c5de88 RPCRT4!I_RpcTransGetThreadEvent+0x188 03 02b3ffb8 77e66063 RPCRT4!I_RpcLogEvent+0xe92 04 02b3ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 22 System Thread ID: ec0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 030fffb8 77e66063 ntdll!KiFastSystemCallRet 01 030fffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 23 System Thread ID: 1f00 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 031bffb8 77e66063 ntdll!KiFastSystemCallRet 01 031bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 24 System Thread ID: 224 Kernel Time: 0:0:1.0 User Time: 0:0:2.984 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0313acc0 7c839620 ntdll!RtlAddressInSectionTable+0x18a 01 0313ace0 00e23619 ntdll!RtlAddressInSectionTable+0xda 02 7c82f4c3 408b0000 ISAPI6WebAgent!HttpFilterProc+0xf5f9 03 0018a164 00000000 0x408b0000 Thread ID: 25 System Thread ID: 1e4c Kernel Time: 0:0:2.890 User Time: 0:0:8.906 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0317ed74 71b23a52 ntdll!KiFastSystemCallRet 01 0317ee64 71c0470c mswsock+0x3a52 02 0317eeb4 0295afa5 WS2_32!select+0xa1 03 00000000 00000000 jrun_iis6_wildcard!TerminateExtension+0x9345 Thread ID: 26 System Thread ID: 924 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0327ffb8 77e66063 ntdll!KiFastSystemCallRet 01 0327ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 27 System Thread ID: 944 Kernel Time: 0:0:1.953 User Time: 0:0:7.515 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 031d8b50 71b23a52 ntdll!KiFastSystemCallRet 01 031d8c40 71c0470c mswsock+0x3a52 02 031d8c90 00e54d60 WS2_32!select+0xa1 03 0000003c 00000000 ISAPI6WebAgent!CSmAgentTliHandleSetIterator::Next+0xf0 Thread ID: 28 System Thread ID: 6f8 Kernel Time: 0:0:2.703 User Time: 0:0:9.718 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0323ff54 5a30249e ntdll!KiFastSystemCallRet 01 0323ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 0323ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 0323ffb8 77e66063 W3TP+0x1db9 04 0323ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 29 System Thread ID: 1b0c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 032bffb8 77e66063 ntdll!KiFastSystemCallRet 01 032bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 30 System Thread ID: 1b0c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 032bffb8 77e66063 ntdll!KiFastSystemCallRet 01 032bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 31 System Thread ID: 1b0c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 032bffb8 77e66063 ntdll!KiFastSystemCallRet 01 032bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 32 System Thread ID: f60 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 048cff80 77e6ba12 ntdll!KiFastSystemCallRet 01 048cff94 709fc91b kernel32!WaitForSingleObject+0x12 02 048cffb4 709fc8f3 asp!GetExtensionVersion+0x2b91 03 048cffec 00000000 asp!GetExtensionVersion+0x2b69 Thread ID: 33 System Thread ID: f60 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 048cff80 77e6ba12 ntdll!KiFastSystemCallRet 01 048cff94 709fc91b kernel32!WaitForSingleObject+0x12 02 048cffb4 709fc8f3 asp!GetExtensionVersion+0x2b91 03 048cffec 00000000 asp!GetExtensionVersion+0x2b69 Thread ID: 34 System Thread ID: 1cac Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\USER32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\msvcrt.dll - Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04bcfec8 7739cd08 ntdll!KiFastSystemCallRet 01 04bcff24 7738e381 USER32!PeekMessageW+0x244 02 04bcff40 709fbcbe USER32!MsgWaitForMultipleObjects+0x1f 03 04bcff84 77bcb530 asp!GetExtensionVersion+0x1f34 04 04bcffb8 77e66063 msvcrt!endthreadex+0xa3 05 04bcffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 35 System Thread ID: 1978 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04c0ff68 77e6ba12 ntdll!KiFastSystemCallRet 01 04c0ff7c 709fe9b7 kernel32!WaitForSingleObject+0x12 02 04c0ffb8 77e66063 asp!GetExtensionVersion+0x4c2d 03 04c0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 36 System Thread ID: b20 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\comsvcs.dll - Thread Type: Idle ASP thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04c6ff5c 77e6ba12 ntdll!KiFastSystemCallRet 01 04c6ff70 75bd4bd0 kernel32!WaitForSingleObject+0x12 02 04c6ff84 77bcb530 comsvcs!CoCreateActivity+0x2882 03 04c6ffb8 77e66063 msvcrt!endthreadex+0xa3 04 04c6ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 37 System Thread ID: 2cc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04caff54 77e6ba12 ntdll!KiFastSystemCallRet 01 04caff68 75bd464d kernel32!WaitForSingleObject+0x12 02 04caff84 77bcb530 comsvcs!CoCreateActivity+0x22ff 03 04caffb8 77e66063 msvcrt!endthreadex+0xa3 04 04caffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 38 System Thread ID: 1c34 Kernel Time: 0:0:0.109 User Time: 0:0:0.31 Thread Type: Idle ASP thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04cefe78 7739cd08 ntdll!KiFastSystemCallRet 01 04cefed4 7738e381 USER32!PeekMessageW+0x244 02 04cefef0 75bd86c6 USER32!MsgWaitForMultipleObjects+0x1f 03 04ceff84 77bcb530 comsvcs!CoCreateActivity+0x6378 04 04ceffb8 77e66063 msvcrt!endthreadex+0xa3 05 04ceffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 39 System Thread ID: 1dd4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04d2fe78 7739cd08 ntdll!KiFastSystemCallRet 01 04d2fed4 7738e381 USER32!PeekMessageW+0x244 02 04d2fef0 75bd86c6 USER32!MsgWaitForMultipleObjects+0x1f 03 04d2ff84 77bcb530 comsvcs!CoCreateActivity+0x6378 04 04d2ffb8 77e66063 msvcrt!endthreadex+0xa3 05 04d2ffec 00000000 kernel32!GetModuleFileNameA+0xeb ***** Dump name is formatted as: PID-Timestamp.dmp Creating E:\iisstate\output\6844-1150913346.dmp - mini user dump ***** Closing open log file E:\iisstate\output\IISState-6844.log Earlier posting: Trying to figure out why our web servers keep crashing. We are running JRun/ColdFusion Multi-Server Cluster (clustered using the Application server) on several Win 2003 machines. The machines that are having the error are running Windows 2003 SP1 while a third machine which does not have the Windows SP1 is not having the error. Please let me know if can provide any other information >> Error in Event Viewer: A process serving application pool 'DefaultAppPool' suffered a fatal communication error with the World Wide Web Publishing Service. The process id was '6464'. The data field contains the error number. Debug Diagnostic Tool Analysis from error that occured this past Friday: Analysis Summary Type Description Recommendation Error In w3wp__PID__6464__Date__05_19_2006__Time_01_30_30PM__62__Second_Chance_Excep?tion_C0000005.dmp the assembly instruction at ntdll!RtlpWaitOnCriticalSection+d2 in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000014 on thread 11 Please follow up with the vendor Microsoft Corporation for C:\WINDOWS\system32\ntdll.dll Information DebugDiag determined that this dump file (w3wp__PID__6464__Date__05_19_2006__Time_01_30_30PM__62__Second_Chance_Exce?ption_C0000005.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the IISAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True. Analysis Details Table Of Contents w3wp__PID__6464__Date__05_19_2006__Time_01_30_30PM__62__Second_Chance_Excep?tion_C0000005.dmp Faulting Thread Faulting Module Information Report for w3wp__PID__6464__Date__05_19_2006__Time_01_30_30PM__62__Second_Chance_Excep?tion_C0000005.dmp Type of Analysis Performed Crash Analysis Machine Name SLIOBTWEB6 Operating System Windows Server 2003 Service Pack 1 Number Of Processors 4 Process ID 6464 Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe System Up-Time 3 day(s) 02:20:48 Process Up-Time 0 day(s) 08:33:10 Thread 11 - System ID 7904 Entry point w3tp!THREAD_MANAGER::ThreadManagerThread Create time 5/19/2006 6:47:01 AM Time spent in user mode 0 Days 0:0:18.734 Time spent in kernel mode 0 Days 0:0:4.890 Function Arg 1 Arg 2 Arg 3 Source ntdll!RtlpWaitOnCriticalSection+d2 00000000 00000004 02c80fc0 ntdll!RtlEnterCriticalSection+a8 0427b060 02a2ada4 7c82f4c3 ISAPI6WebAgent!HttpFilterProc+f5f9 9090c334 8b909090 ec8b55ff 408b0000 00000000 00000000 00000000 NTDLL!RTLPWAITONCRITICALSECTION+D2In w3wp__PID__6464__Date__05_19_2006__Time_01_30_30PM__62__Second_Chance_Excep?tion_C0000005.dmp the assembly instruction at ntdll!RtlpWaitOnCriticalSection+d2 in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000014 on thread 11 Module Information Image Name: C:\WINDOWS\system32\ntdll.dll Symbol Type: PDB Base address: 0x7c800000 Time Stamp: Thu Mar 24 20:30:42 2005 Checksum: 0x000c90bf Comments: COM DLL: False Company Name: Microsoft Corporation ISAPIExtension: False File Description: NT Layer DLL ISAPIFilter: False File Version: 5.2.3790.1830 (srv03_sp1_rtm.050324-1447) Managed DLL: False Internal Name: ntdll.dll VB DLL: False Legal Copyright: ? Microsoft Corporation. All rights reserved. Loaded Image Name: ntdll.dll Legal Trademarks: Mapped Image Name: Original filename: ntdll.dll Module name: ntdll Private Build: Single Threaded: False Product Name: Microsoft? Windows? Operating System Module Size: 768.00 KBytes Product Version: 5.2.3790.1830 Symbol File Name: c:\symcache\ntdll.pdb\DCE823FCF71A4BF5AA489994520EA18F2\ntdll.pdb Special Build: & Script Summary Script Name Status Error Code Error Source Error Description Source Line IISAnalysis.asp Completed
|
Pages: 1 Prev: WIN 2003 Application Event log warning. Next: Please help... |