We are running a FW-1 management console and getting repeatable Dr. Watson errors when launching the log viewer. Server is Compaq 1850R with insight agents installed, running Windows NT 4.0 SP6a, and Firewall-1 is version 4.0 SP5.
The same error occurs when we stop the FW service and restart it. Seems like it might be somehow related to the management box trying to contact our Inspect module boxes. Included is a sample of the Dr. Watson log. Anyone else had this problem?
Application exception occurred:
App: WIN32/fw.exe (pid=223)
When: 5/17/2000 @ 18:6:15.895
Exception number: c0000005 (access violation)
*----> System Information <----*
Computer Name: HOC08SPS05
User Name: SYSTEM
Number of Processors: 2
Processor Type: x86 Family 6 Model 5 Stepping 2
Windows Version: 4.0
Current Build: 1381
Service Pack: 6
Current Type: Multiprocessor Free
Registered Organization: BCBSFL
Registered Owner: BCBSFL
*----> Task List <----*
0 Idle.exe
2 System.exe
33 SMSS.exe
45 CSRSS.exe
47 WINLOGON.exe
55 SERVICES.exe
58 LSASS.exe
93 AWHOST32.exe
85 CPQRCMC.exe
98 NPSSVC.exe
105 RPCSS.exe
115 SNMP.exe
126 surveyor.exe
138 SYSDOWN.exe
142 TIMESERV.exe
146 PSTORES.exe
157 cpqnimgt.exe
160 cqmgserv.exe
163 cqmgstor.exe
59 NDDEAGNT.exe
179 EXPLORER.exe
180 NTACMON.exe
172 TTACMON.exe
185 LOADWC.exe
191 cqmghost.exe
208 NTVDM.exe
224 WINFILE.exe
54 fwsvc.exe
250 fw.exe
245 fw.exe
223 fw.exe
227 WINZIP32.exe
229 DRWTSN32.exe
0 _Total.exe
(00400000 - 0096d000) WIN32/fw.exe
(77f60000 - 77fbe000) dll\ntdll.dbg
(776d0000 - 776d8000) dll\wsock32.dbg
(77f00000 - 77f5e000) dll\kernel32.dbg
(776b0000 - 776c4000) dll\ws2_32.dbg
(78000000 - 7803c000)
(77e70000 - 77ec5000) dll\user32.dbg
(77ed0000 - 77efc000) dll\gdi32.dbg
(77dc0000 - 77dff000) dll\advapi32.dbg
(77e10000 - 77e67000) dll\rpcrt4.dbg
(776a0000 - 776a7000) dll\ws2help.dbg
(77670000 - 77685000) dll\mswsock.dbg
(780a0000 - 780a0000)
(74ff0000 - 74ffe000) dll\rnr20.dbg
(77660000 - 7766f000) dll\msafd.dbg
(77690000 - 77699000) dll\wshtcpip.dbg
(77bf0000 - 77bf7000) dll\rpcltc1.dbg
State Dump for Thread Id 0x3e
eax=78036174 ebx=006abc68 ecx=00000000 edx=008f93be esi=006abc69 edi=00000000
eip=7800cf23 esp=0011bc2c ebp=0011bc38 iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000206
function: stricmp
7800cf09 8b7d08 mov edi,[ebp+0x8] ss:0118a63e=????????
7800cf0c 8d05a0610378 lea eax,[_lc_handle (780361a0)] ds:780361a0=00000000
7800cf12 83780800 cmp dword ptr [eax+0x8],0x0 ds:790a4b7a=????????
7800cf16 753b jnz stricmp+0x53 (7800cf53)
7800cf18 b0ff mov al,0xff
7800cf1a 8bff mov edi,edi
7800cf1c 0ac0 or al,al
7800cf1e 742e jz stricmp+0x4e (7800cf4e)
7800cf20 8a06 mov al,[esi] ds:006abc69=63
7800cf22 46 inc esi
FAULT ->7800cf23 8a27 mov ah,[edi] ds:00000000=??
7800cf25 47 inc edi
7800cf26 38c4 cmp ah,al
7800cf28 74f2 jz stricmp+0x1c (7800cf1c)
7800cf2a 2c41 sub al,0x41
7800cf2c 3c1a cmp al,0x1a
7800cf2e 1ac9 sbb cl,cl
7800cf30 80e120 and cl,0x20
7800cf33 02c1 add al,cl
7800cf35 0441 add al,0x41
7800cf37 86e0 xchg al,ah
7800cf39 2c41 sub al,0x41
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
0011bc38 005d4511 00000000 006abc68 006abc68 005e4aac !stricmp
0011bc48 005e4aac 00000000 006abc68 00007100 0070cdc0 fw!ber_printf (FPO: [2,0,1])
0011bc64 005e4905 006abc68 003e5be0 00000003 003e5c04 fw!ber_printf (FPO: [EBP 0x00007100] [1,0,4])
0011bc80 005e88be 00007100 003ea840 00000000 0045fca8 fw!ber_printf (FPO: [EBP 0x003e5be0] [3,1,4])
0011bc90 0045fca8 00127100 00000006 0000000b 00000003 fw!ber_printf (FPO: [2,0,0])
0011bcac 00460437 0011bcd8 00000071 003e5be0 00123dd4 fw!<nosymbols> (FPO: [EBP 0x0000000b] [5,0,4])
0011fcd4 00461e2d 0011fd2c 003e5e20 003eaaa0 00123dd4 fw!<nosymbols> (FPO: [EBP 0x00123d60] [5,4096,4])
00123d28 00462bcf 00123d60 00123dd4 00000030 00043580 fw!<nosymbols> (FPO: [EBP 0x00000030] [4,4107,4])
00123d6c 00462945 003b0e40 00123dc4 00123dd4 0000228c fw!<nosymbols> (FPO: [EBP 0x00000003] [6,8,4])
00123d90 0045c202 003b0e40 00123dc4 00123dd4 0000228c fw!<nosymbols> (FPO: [6,0,2])
00127dd0 0045c8d3 003b0e40 0012be74 00000000 00000000 fw!<nosymbols> (FPO: [EBP 0x00000000] [1,4101,4])
00127de8 0045e860 003b0e40 0012be74 00127e2c 00041460 fw!<nosymbols> (FPO: [EBP 0x0012be74] [4,0,4])
00127e00 00461cca 0012be74 00127e2c 00041460 78007310 fw!<nosymbols> (FPO: [3,0,1])
0012be4c 00461bc4 0012be74 0012be88 00000014 00041460 fw!<nosymbols> (FPO: [EBP 0x78007310] [4,4107,4])
0012fe84 00456e51 00000000 00000000 00000000 002f7d78 fw!<nosymbols> (FPO: [EBP 0x003e46f0] [3,4101,4])
0012fe9c 005dfe35 00000000 00300cd7 00000000 002f7d78 fw!<nosymbols> (FPO: [1,0,2])
0012fed4 005e2272 002f7d78 002f7d78 00000000 005e218c fw!ber_printf (FPO: [EBP 0x00300cd7] [1,8,4])
0012fee4 005e218c 002f7d78 00300cd7 00300ca4 002f7d78 fw!ber_printf (FPO: [1,0,2])
0012fefc 005e25e0 002f7d78 00300ca4 00000003 005e25a9 fw!ber_printf (FPO: [EBP 0x00300cd7] [1,0,4])
0012ff0c 005e25a9 002f7d78 004572cd 00300ca4 006a0641 fw!ber_printf (FPO: [1,0,2])
0012ff14 004572cd 00300ca4 006a0641 0069f3fa 0069f478 fw!ber_printf (FPO: [0,0,0])
0012ff34 00405815 00000003 00300ca4 0012ffc0 00000000 fw!<nosymbols> (FPO: [EBP 0x00300ca4] [2,3,4])
0012ff54 0041e75d 00000003 00300ca0 00020024 006313dc fw!<nosymbols> (FPO: [EBP 0x0012ffc0] [2,1,4])
0012ff64 006313dc 00000004 00300ca0 00300bd0 00000000 fw!<nosymbols> (FPO: [2,0,1])
0012ffc0 77f1b9ea 00000000 00020024 7ffdf000 c0000005 fw!ber_printf
0012fff0 00000000 006312e0 00000000 000000b0 00000100 kernel32!GetProcessPriorityBoost
00000000 00000000 00000000 00000000 00000000 00000000 fw!<nosymbols>
*----> Raw Stack Dump <----*
0011bc2c 68 bc 6a 00 60 93 8f 00 - 80 fe 70 00 68 bc 6a 00 h.j.`.....p.h.j.
0011bc3c 11 45 5d 00 00 00 00 00 - 68 bc 6a 00 68 bc 6a 00 .E].....h.j.h.j.
0011bc4c ac 4a 5e 00 00 00 00 00 - 68 bc 6a 00 00 71 00 00 .J^.....h.j..q..
0011bc5c c0 cd 70 00 40 a8 3e 00 - 71 00 00 00 05 49 5e 00 ..p.@.>.q....I^.
0011bc6c 68 bc 6a 00 e0 5b 3e 00 - 03 00 00 00 04 5c 3e 00 h.j..[>......\>.
0011bc7c 71 00 00 00 00 00 00 00 - be 88 5e 00 00 71 00 00 q.........^..q..
0011bc8c 40 a8 3e 00 00 00 00 00 - a8 fc 45 00 00 71 12 00 @.>.......E..q..
0011bc9c 06 00 00 00 0b 00 00 00 - 03 00 00 00 04 5c 3e 00 .............\>.
0011bcac 6b fd 11 00 37 04 46 00 - d8 bc 11 00 71 00 00 00 k...7.F.....q...
0011bcbc e0 5b 3e 00 d4 3d 12 00 - 0b 00 00 00 60 3d 12 00 .[>..=......`=..
0011bccc d4 3d 12 00 a0 aa 3e 00 - 0c 00 00 00 67 77 78 6e .=....>.....gwxn
0011bcdc 65 74 2e 62 63 62 73 66 - 6c 2e 63 6f 6d 00 33 33 et.bcbsfl.com.33
0011bcec 00 8b 45 00 a8 bd 11 00 - 0c 3e 12 00 54 22 00 00 ..E......>..T"..
0011bcfc 18 38 03 78 d4 3d 12 00 - c4 3d 12 00 8c 22 00 00 .8.x.=...=..."..
0011bd0c 09 86 45 00 30 bd 11 00 - 34 bd 11 00 d4 3d 12 00 ..E.0...4....=..
0011bd1c 00 40 00 00 18 38 03 78 - 40 0e 3b 00 8c 22 00 00 [email protected]@.;.."..
0011bd2c 80 35 04 00 fc df 11 00 - 08 00 00 00 81 9e 45 00 .5............E.
0011bd3c c4 3d 12 00 70 bd 11 00 - 8c 22 00 00 d4 3d 12 00 .=..p...."...=..
0011bd4c 00 40 00 00 03 00 00 00 - 40 0e 3b 00 40 0e 3b 00 .@......@.;.@.;.
0011bd5c c4 3d 12 00 00 01 22 8c - 9d ae e5 01 39 23 17 82 .=....".....9#..
State Dump for Thread Id 0xca
eax=408f4000 ebx=010eff60 ecx=00000000 edx=00000000 esi=7ffdf000 edi=00000000
eip=77f682cb esp=010eff3c ebp=010eff90 iopl=0 nv up ei pl nz ac pe cy
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00000213
function: NtWaitForMultipleObjects
77f682c0 b8c4000000 mov eax,0xc4
77f682c5 8d542404 lea edx,[esp+0x4] ss:0215e943=????????
77f682c9 cd2e int 2e
77f682cb c21400 ret 0x14
77f682ce 8bc0 mov eax,eax
*----> Stack Back Trace <----*
FramePtr ReturnAd Param#1 Param#2 Param#3 Param#4 Function Name
010eff90 005e1cbf 00000002 002fe208 00000000 ffffffff ntdll!NtWaitForMultipleObjects
------------------------------------------------
James V. Fields
Network Operating System Analyst II
Blue Cross Blue Shield of Florida
Internet E-mail: [EMAIL PROTECTED]
Phone: (904) 905-8048
affiliate companies are not responsible for errors or omissions in this e-mail message. Any personal comments made in this e-mail do not reflect the views of Blue Cross Blue Shield of Florida, Inc.
