Folks, old issue (i've posted it here once) but now I'm completelly
lost...
Not sure but I'm almost convinced that the problem is related to my CF5
and IIS5.0.
Everyday, at least one time, my IIS crashes and turn back working (see
error logs bellow) pretty much like it do when affected by
CodeRed/Nimba, etc worms. It's imperceptible to the visitors, but the
event viewer catch it.
I'm running all service packs, hot fixes, URLScan, I've also removed all
mappings except the ".cfm". I don't have COM objects running, the server
runs ONLY ColdFusion templates and HTML (not ASP, Perl, nothing) and I
consider my self a good CF programmer in terms of good coding pratices
(locking, performance issues, etc, etc) under very low traffic (less
than 3k visitors per day) and only two websites/cf applications...
The problem does not happens in our staging server, even under natural
and artificial load. I've searched CFServer logs for events that could
match something related to it but didn't find. I've also looked at the
visitors log trying to see what pages or even what kind of actions could
put the IIS down but I didn't find any, nothing in particular, even if I
compare to other logs to the same problem.
My software:
ColdFusion Pro 5.0;
Windows 2000 Server EN;
IIS 5.0;
SQL Server 2000 EN (on the same machine);
Regular and GOOD coding (locking, and so forth) ColdFusion applications.
My Hardware:
AMD Athlon 1.4 Thunderbird
1.024 regular RAM 133Mhz
SCSI drivers
SQL and CF running in separated disks
The message I found on EventViewer is:
---- BEGIN EVENT VIEWER LOG ----
Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7031
Date: 3/9/2002
Time: 07:23:39
User: N/A
Computer: XINGU
Description:
The IIS Admin Service service terminated unexpectedly. It has done this
1 time(s). The following corrective action will be taken in 1
milliseconds: Run the configured recovery program.
---- END EVENT VIEWER LOG ----
After it, I get the same error for the services (FTP, WebService, etc)
running under IIS.
I've runned the AD+ (John's suggestion) and didn't get any clue of what
is really going on with my server.
The AD+ log shows a normal IIS process such as:
--- BEGIN OF AD+ LOG MESSAGE (part of it) ----
Sat Aug 31 11:06:48 2002: ModLoad: 1df00000 1df0f000
C:\CFusion\bin\iscf.dll
Sat Aug 31 11:06:48 2002: ModLoad: 780c0000 78121000
C:\WINNT\system32\MSVCP60.dll
--- END OF AD+ LOG MESSAGE (part of it) ----
(the logs are in pairs, calling at the same time iscf.dll and
MSVCP60.dll)
And suddenly hangs (probably trying to run C:\CFusion\bin\iscf.dl):
--- BEGIN OF AD+ LOG MESSAGE (part of it) ----
Sat Aug 31 11:06:51 2002: (6a0.75c): Access violation - code c0000005
(first chance)
-- 1st chance Access Violation - Faulting stack below ----
2 Id: 6a0.75c Suspend: 1 Teb: 7ffdc000 Unfrozen
Start: *** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\system32\MSVCRT.dll -
MSVCRT!beginthreadex+57 (78006073)
*** WARNING: symbols timestamp is wrong 0x3d3d022f 0x3af32075 for
C:\WINNT\System32\inetsrv\INFOCOMM.DLL
# ChildEBP RetAddr Args to Child
00 006dfe94 769b333d ffffffff 006dff10 6e5a19ce
INFOCOMM!CTypedHashTable<CFileHashTable,TS_OPEN_FILE_INFO,CFileKey const
*,CLKRHashTable,CLKRHashTable::CIterator>::_EqualKeys+0x6 (FPO: [2,0,2])
01 006dfed0 6e5a17f6 769b3330 006dff20 006dfef0
INFOCOMM!FilteredFlushFileCache+0x87 (FPO: [Non-Fpo])
02 006dfef4 769b3490 769b3330 006dff20 002339e0
IisRTL!CACHED_DATETIME_FORMATS::GetFormattedDateTime+0xc6 (FPO:
[Non-Fpo])
03 006dff2c 769b3422 769b357b 00000000 6e5a250b
INFOCOMM!FilteredFlushBlobCache+0x11 (FPO: [2,0,1])
04 006dff38 6e5a250b 00000000 77b32ed8 00233ac8
INFOCOMM!FileFlushFilterTTL+0x16 (FPO: [2,0,0])
05 006dff7c 780060a9 780060ce 00233aa0 77b32ed8
IisRTL!CSchedData::UnlockItems+0xd (FPO: [0,0,0])
WARNING: Stack unwind information not available. Following frames may be
wrong.
06 006dffb4 77e887dd 00233ac8 77b32ed8 0059f5b0
MSVCRT!beginthreadex+0x8d
07 006dffec 00000000 78006073 00233ac8 00000000
KERNEL32!WideCharToMultiByte+0x29d (FPO: [Non-Fpo])
-----------------------------------
Creating
C:\temp\ad_logs\CRASH_~2\PID-1696__INETINFO.EXE__1st_chance_access_viola
tion__mini_2002-08-31_14-25-10-140_06A0.dmp - mini user dump
Sat Aug 31 14:25:12 2002: (6a0.75c): Access violation - code c0000005
(!!! second chance !!!)
-- 2nd chance Acess Violation - Faulting stack below ---
2 Id: 6a0.75c Suspend: 1 Teb: 7ffdc000 Unfrozen
Start: MSVCRT!beginthreadex+57 (78006073)
# ChildEBP RetAddr Args to Child
00 006dfe94 769b333d ffffffff 006dff10 6e5a19ce
INFOCOMM!CTypedHashTable<CFileHashTable,TS_OPEN_FILE_INFO,CFileKey const
*,CLKRHashTable,CLKRHashTable::CIterator>::_EqualKeys+0x6 (FPO: [2,0,2])
01 006dfed0 6e5a17f6 769b3330 006dff20 006dfef0
INFOCOMM!FilteredFlushFileCache+0x87 (FPO: [Non-Fpo])
02 006dfef4 769b3490 769b3330 006dff20 002339e0
IisRTL!CACHED_DATETIME_FORMATS::GetFormattedDateTime+0xc6 (FPO:
[Non-Fpo])
03 006dff2c 769b3422 769b357b 00000000 6e5a250b
INFOCOMM!FilteredFlushBlobCache+0x11 (FPO: [2,0,1])
04 006dff38 6e5a250b 00000000 77b32ed8 00233ac8
INFOCOMM!FileFlushFilterTTL+0x16 (FPO: [2,0,0])
05 006dff7c 780060a9 780060ce 00233aa0 77b32ed8
IisRTL!CSchedData::UnlockItems+0xd (FPO: [0,0,0])
WARNING: Stack unwind information not available. Following frames may be
wrong.
06 006dffb4 77e887dd 00233ac8 77b32ed8 0059f5b0
MSVCRT!beginthreadex+0x8d
07 006dffec 00000000 78006073 00233ac8 00000000
KERNEL32!WideCharToMultiByte+0x29d (FPO: [Non-Fpo])
Creating
C:\temp\ad_logs\CRASH_~2\PID-1696__INETINFO.EXE__2nd_chance_access_viola
tion__full_2002-08-31_14-25-12-223_06A0.dmp - mini user dump
quit:
eax=ffffffff ebx=00bc6d28 ecx=00000000 edx=0000075c esi=006dff10
edi=ffffffff
eip=769b357f esp=006dfe84 ebp=006dfed0 iopl=0 nv up ei pl zr na
po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000
efl=00000246
INFOCOMM!CTypedHashTable<CFileHashTable,TS_OPEN_FILE_INFO,CFileKey const
*,CLKRHashTable,CLKRHashTable::CIterator>::_EqualKeys+6:
769b357f 83b86402000000 cmp dword ptr [eax+0x264],0x0
ds:0023:00000263=????????
0:002> *
0:002> *
0:002> *
0:002> * -------- Autodump+ 5.03 finished running at: --------
0:002> .time
Debug session time: Sat Aug 31 14:25:17 2002
System Uptime: 1 days 12:12:14.361
Process Uptime: 1 days 11:52:47.423
0:002> * -------------------------------------------------------
0:002> q
quit:
--- END OF AD+ LOG MESSAGE (part of it) ----
Not sure, but AD+ didn't helped me a lot since I coudn't understand it's
error logs.
Does anybody have a clue of what is going on?
Hardware issues maybe?
Thanks a lot!!
[]'s
Alex
______________________________________________________________________
Your ad could be here. Monies from ads go to support these lists and provide more
resources for the community. http://www.fusionauthority.com/ads.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
