Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 692
  • Last Modified:

NT4.0 Server (SP6a) - IIS (inetinfo.exe) causing CPU to hit 100%. Which virtual site is causing it?

We have an NT 4.0 Server (SP6a) which is running about 100 websites.  Over the last few weeks on an almost daily basis the CPU hits 100% and stays there.  The server slows to a crawl and there is nothing you can do but reboot.

It is the inetinfo.exe process which takes all the CPU and it happens during the day, never at night. This therefore leads me to the conclusion that one of our customers is running some rogue ASP code, not opening/closing DB connections properly or something else more sinister is going on (like a DOS attack).

I've tried using Performance Monitor to track down the problem but can't seem to find the right things to monitor to pin-point the source of the CPU drain.  What should I be monitoring and once I identify threads/processes causing the cpu hit how do I then match them with the offending virtual site?

Trevor.
0
Trevor013097
Asked:
Trevor013097
  • 3
1 Solution
 
AndresMCommented:
0
 
AndresMCommented:
HOWTO: Troubleshoot a High-CPU-Utilization "Hang" in Internet Information Services (Q253603)
http://www.iisfaq.com/default.aspx?View=A469&P=18
0
 
Trevor013097Author Commented:
I solved the problem in the end.

However I have to say that I was very disappointed by the EE response, especially as this was a 500 point question.  The articles posted where easily found by searching on Google, I had already found the IISFAQ article.

I ended up searching the files of all the sites on the server to see which ones had been modified in the last 2 months.  Then cross-referenced that against log files for the short list of sites to see which had access during the periods of high CPU use.  This then gave me a short-short-list of suspect sites.

I then ran each of these sites (about 10) in isolated memory processes which meant they each had their own unique PID I could track in task manager.  When I saw the CPU hit 100% I checked which instance of mtx.exe was casuing it and then ran Windows Debugger.  Attached to the process caussing the CPU hit and identified the out-of-process website causing the problem.  Job done, site shutdown.

When offering 500 points for a question I expect a level of response to justify the 500 points.  As it happened I had only one EE expert respond and without any detailed answer, although it was only posted as a comment.

Having answered my own question to what I have discovered is a common problem when isolating trouble sites in II4 I would like this to go into the PAQ.  However I don't want to give 500 points for little or no real help.  I propose therefore for experts to post their own tips and tricks for improving IIS performance.  The best and most useful I will give an A grade and the 500 points to.

Trevor.
0
 
AndresMCommented:
If you don't provide feedback, it is very hard to know that my comment was unusefull for you...
In fact, I though that this question was abandoned...
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now