NT4.0 Server (SP6a) - IIS (inetinfo.exe) causing CPU to hit 100%.  Which virtual site is causing it?

Posted on 2003-03-24
Medium Priority
Last Modified: 2007-12-19
We have an NT 4.0 Server (SP6a) which is running about 100 websites.  Over the last few weeks on an almost daily basis the CPU hits 100% and stays there.  The server slows to a crawl and there is nothing you can do but reboot.

It is the inetinfo.exe process which takes all the CPU and it happens during the day, never at night. This therefore leads me to the conclusion that one of our customers is running some rogue ASP code, not opening/closing DB connections properly or something else more sinister is going on (like a DOS attack).

I've tried using Performance Monitor to track down the problem but can't seem to find the right things to monitor to pin-point the source of the CPU drain.  What should I be monitoring and once I identify threads/processes causing the cpu hit how do I then match them with the offending virtual site?

Question by:Trevor013097
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
LVL 10

Expert Comment

ID: 8194611
LVL 10

Accepted Solution

AndresM earned 2000 total points
ID: 8194615
HOWTO: Troubleshoot a High-CPU-Utilization "Hang" in Internet Information Services (Q253603)

Author Comment

ID: 8282633
I solved the problem in the end.

However I have to say that I was very disappointed by the EE response, especially as this was a 500 point question.  The articles posted where easily found by searching on Google, I had already found the IISFAQ article.

I ended up searching the files of all the sites on the server to see which ones had been modified in the last 2 months.  Then cross-referenced that against log files for the short list of sites to see which had access during the periods of high CPU use.  This then gave me a short-short-list of suspect sites.

I then ran each of these sites (about 10) in isolated memory processes which meant they each had their own unique PID I could track in task manager.  When I saw the CPU hit 100% I checked which instance of mtx.exe was casuing it and then ran Windows Debugger.  Attached to the process caussing the CPU hit and identified the out-of-process website causing the problem.  Job done, site shutdown.

When offering 500 points for a question I expect a level of response to justify the 500 points.  As it happened I had only one EE expert respond and without any detailed answer, although it was only posted as a comment.

Having answered my own question to what I have discovered is a common problem when isolating trouble sites in II4 I would like this to go into the PAQ.  However I don't want to give 500 points for little or no real help.  I propose therefore for experts to post their own tips and tricks for improving IIS performance.  The best and most useful I will give an A grade and the 500 points to.

LVL 10

Expert Comment

ID: 8283622
If you don't provide feedback, it is very hard to know that my comment was unusefull for you...
In fact, I though that this question was abandoned...

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question