what applications have you got running?

Have a look at the iis server log files - see if the crash tends to coincide with a particular script request.  sound like any kind of custom COM or other object is a likley culprit.

cheers.

Applications running are IIS6 and cerebrus FTP server, we have had this problem for almost 4 months now but since swithcing 100 more ppl to this server the crash happens every 3 minutes where as before it was only every hour or so and when it crashes the worker process ppl just think there session timed out. Now it is become critical that I find what is causing the crash. I am at my wits end on how to find what is causign the crash.  I checked the server logs but nothing is out of the ordinary there.

Hello,

by application, i refer to "web application", like 'outlook web access" or a sharepoint service site, or a cutom asp database application etc.

Is there any special function that might be using a custom COM element maybe?

Can the users see which page seems to 'time out' the most often?  is it a long running database query or something?

Also, you refer to moving to a new server, was it previously running on iis5 perhaps?

Cheers.

Ok there are many like applicatiosn running and probably 100 people accessing the intranet, so theres relaly no way to tell whos page is timing out the most often, when the wrokerprocess crashes it comes up with a big error message saying an unknown exception occurred. There must be a way to catch this crash using a debug tool to fidn the application component that is crashing, but htats where i mlost, I have tried using the iishang /crash agent and have no clue what it is im doing

Sometimes processes will jsut hang aand everyones pages will stop loading
there must be someone out there who knows how to ddebug this Davedietz where are you!?!? :D

>> Davedietz where are you!?!?

Dave is on holidays with (apparently) strict instructions from the-one-who-must-be-obeyed to stay away from all computers ;-)

But yes - try Raymod's suggestion.

Cheers.

You cannot download it unless you are a part of the microsoft beta group, and they arnt accepting any members right now apparently.
Can someone pointme to a mirror of this file or email me the file?

thanks!

nm im stupid, didnt see the "USE THIS GUEST ID"
heh.

ok so I get way more info now but still cant find the bloody problem, here are 3 crashes, can anyone see what might be causing it?


Type Description Recommendation
  Error In w3wp__PID__4776__Date__08_12_2005__Time_11_14_54AM__303__Second_Chance_Exception_E0434F4D.dmp the assembly instruction at kernel32!RaiseException+53 in C:\WINDOWS\system32\kernel32.dll from Microsoft Corporation has caused an unknown exception (0xe0434f4d) on thread 6
 
An exception thrown by Kernel32!RaiseException usually indicates a problem with another module. Please review the stack for the faulting thread (6) further to determine which module actually threw the exception raised by Kernel32.dll.


 
  Error In w3wp__PID__4356__Date__08_12_2005__Time_10_55_28AM__284__Second_Chance_Exception_E0434F4D.dmp the assembly instruction at kernel32!RaiseException+53 in C:\WINDOWS\system32\kernel32.dll from Microsoft Corporation has caused an unknown exception (0xe0434f4d) on thread 7
 
An exception thrown by Kernel32!RaiseException usually indicates a problem with another module. Please review the stack for the faulting thread (7) further to determine which module actually threw the exception raised by Kernel32.dll.


 
  Error In w3wp__PID__1364__Date__08_12_2005__Time_10_50_32AM__416__Second_Chance_Exception_C0020001.dmp the assembly instruction at kernel32!RaiseException+53 in C:\WINDOWS\system32\kernel32.dll from Microsoft Corporation has caused an unknown exception (0xc0020001) on thread 0
 
An exception thrown by Kernel32!RaiseException usually indicates a problem with another module. Please review the stack for the faulting thread (0) further to determine which module actually threw the exception raised by Kernel32.dll.


 
  Information DebugDiag determined that this dump file (w3wp__PID__4356__Date__08_12_2005__Time_10_55_28AM__284__Second_Chance_Exception_E0434F4D.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the IISAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True.  
  Information DebugDiag determined that this dump file (w3wp__PID__4776__Date__08_12_2005__Time_11_14_54AM__303__Second_Chance_Exception_E0434F4D.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the IISAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True.  
  Information DebugDiag determined that this dump file (w3wp__PID__1364__Date__08_12_2005__Time_10_50_32AM__416__Second_Chance_Exception_C0020001.dmp) is a crash dump and did not perform any hang analysis. If you wish to enable combined crash and hang analysis for crash dumps, edit the IISAnalysis.asp script (located in the DebugDiag\Scripts folder) and set the g_DoCombinedAnalysis constant to True.  
 
 


 
 Analysis Details  
  Table Of Contents
w3wp__PID__1364__Date__08_12_2005__Time_10_50_32AM__416__Second_Chance_Exception_C0020001.dmp

   Faulting Thread

   Faulting Module Information



w3wp__PID__4356__Date__08_12_2005__Time_10_55_28AM__284__Second_Chance_Exception_E0434F4D.dmp

   Faulting Thread

   Faulting Module Information



w3wp__PID__4776__Date__08_12_2005__Time_11_14_54AM__303__Second_Chance_Exception_E0434F4D.dmp

   Faulting Thread

   Faulting Module Information




Report for w3wp__PID__1364__Date__08_12_2005__Time_10_50_32AM__416__Second_Chance_Exception_C0020001.dmp
Type of Analysis Performed   Crash Analysis
Machine Name   GOLOM
Operating System   Windows Server 2003 Service Pack 1
Number Of Processors   4
Process ID   1364
Process Image   c:\WINDOWS\system32\inetsrv\w3wp.exe
System Up-Time   0 day(s) 22:28:58
Process Up-Time   0 day(s) 00:13:07


Thread 0 - System ID 924
Entry point   w3wp!wmainCRTStartup
Create time   8/12/2005 10:37:25 AM
Time spent in user mode   0 Days 0:0:0.93
Time spent in kernel mode   0 Days 0:0:0.93






Function   Source
kernel32!RaiseException+53    
mscorsvr!ReleaseFusionInterfaces+100a    
mscorsvr!ReleaseFusionInterfaces+1c7e4    
mscorsvr!ReleaseFusionInterfaces+33fc9    
crqe+c7f8    
crqe+d3c8    
crqe+ba07    
crqe+e0ed    
ntdll!LdrpCallInitRoutine+14    
ntdll!LdrShutdownProcess+130    
kernel32!_ExitProcess+43    
kernel32!ExitProcess+14    
mscorsvr!GetMetaDataPublicInterfaceFromInternal+bc04    
mscorsvr!GetMetaDataPublicInterfaceFromInternal+bbce    
mscoree!CorExitProcess+46    
msvcrt!__crtExitProcess+29    
msvcrt!_cinit+d2    
msvcrt!exit+11    
w3wp!wmainCRTStartup+140    
kernel32!BaseProcessStart+23    




In w3wp__PID__1364__Date__08_12_2005__Time_10_50_32AM__416__Second_Chance_Exception_C0020001.dmp the assembly instruction at kernel32!RaiseException+53 in C:\WINDOWS\system32\kernel32.dll from Microsoft Corporation has caused an unknown exception (0xc0020001) on thread 0

Module Information
Image Name: C:\WINDOWS\system32\kernel32.dll   Symbol Type:  PDB
Base address: 0x77e40000   Time Stamp:  Thu Mar 24 19:30:42 2005  
Checksum: 0x0010c135   Comments:  
COM DLL: False   Company Name:  Microsoft Corporation
ISAPIExtension: False   File Description:  Windows NT BASE API Client DLL
ISAPIFilter: False   File Version:  5.2.3790.1830 (srv03_sp1_rtm.050324-1447)
Managed DLL: False   Internal Name:  kernel32
VB DLL: False   Legal Copyright:  © Microsoft Corporation. All rights reserved.
Loaded Image Name:  kernel32.dll   Legal Trademarks:  
Mapped Image Name:     Original filename:  kernel32
Module name:  kernel32   Private Build:  
Single Threaded:  False   Product Name:  Microsoft® Windows® Operating System
Module Size:  1.01 MBytes   Product Version:  5.2.3790.1830
Symbol File Name:  c:\symcache\kernel32.pdb\75CFE96517E5450DA600C870E95399FF2\kernel32.pdb   Special Build:  &





Report for w3wp__PID__4356__Date__08_12_2005__Time_10_55_28AM__284__Second_Chance_Exception_E0434F4D.dmp
Type of Analysis Performed   Crash Analysis
Machine Name   GOLOM
Operating System   Windows Server 2003 Service Pack 1
Number Of Processors   4
Process ID   4356
Process Image   c:\WINDOWS\system32\inetsrv\w3wp.exe
System Up-Time   0 day(s) 22:33:46
Process Up-Time   0 day(s) 00:04:36


Thread 7 - System ID 3256
Entry point   w3tp!THREAD_MANAGER::ThreadManagerThread
Create time   8/12/2005 10:50:52 AM
Time spent in user mode   0 Days 0:0:0.15
Time spent in kernel mode   0 Days 0:0:0.46






Function   Source
kernel32!RaiseException+53    
mscorsvr!GetAssemblyMDImport+2e1d4    
mscorsvr!GetAssemblyMDImport+2e157    
mscorsvr!GetAssemblyMDImport+2e10b    
mscorsvr!CoEEShutDownCOM+12dc1    
mscorsvr!GetMetaDataPublicInterfaceFromInternal+7e73    
ntdll!ExecuteHandler2+26    
ntdll!ExecuteHandler+24    
ntdll!KiUserExceptionDispatcher+e    
kernel32!RaiseException+53    
mscorsvr!GetAssemblyMDImport+2e1d4    
mscorsvr!GetMetaDataPublicInterfaceFromInternal+5d70    
mscorlib_79990000+1c288    
39423ae    
mscorsvr!Ordinal76+1c3c8    
mscorsvr!ReleaseFusionInterfaces+33edb    
39423eb    
w3core!W3_ISAPI_HANDLER::IsapiOnCompletion+71    
w3core!W3_ISAPI_HANDLER::OnCompletion+8d    
w3core!W3_HANDLER::MainOnCompletion+52    
w3core!W3_CONTEXT::ExecuteHandlerCompletion+23    
w3core!W3_MAIN_CONTEXT::DoWork+91    
w3core!W3_MAIN_CONTEXT::OnIoCompletion+37    
w3dt!UL_NATIVE_REQUEST::DoStateProcess+48    
w3dt!UL_NATIVE_REQUEST::DoWork+7f    
w3dt!OverlappedCompletionRoutine+1a    
w3tp!THREAD_POOL_DATA::ThreadPoolThread+73    
w3tp!THREAD_POOL_DATA::ThreadPoolThread+24    
w3tp!THREAD_MANAGER::ThreadManagerThread+39    
kernel32!BaseThreadStart+34    




In w3wp__PID__4356__Date__08_12_2005__Time_10_55_28AM__284__Second_Chance_Exception_E0434F4D.dmp the assembly instruction at kernel32!RaiseException+53 in C:\WINDOWS\system32\kernel32.dll from Microsoft Corporation has caused an unknown exception (0xe0434f4d) on thread 7

Module Information
Image Name: C:\WINDOWS\system32\kernel32.dll   Symbol Type:  PDB
Base address: 0x77e40000   Time Stamp:  Thu Mar 24 19:30:42 2005  
Checksum: 0x0010c135   Comments:  
COM DLL: False   Company Name:  Microsoft Corporation
ISAPIExtension: False   File Description:  Windows NT BASE API Client DLL
ISAPIFilter: False   File Version:  5.2.3790.1830 (srv03_sp1_rtm.050324-1447)
Managed DLL: False   Internal Name:  kernel32
VB DLL: False   Legal Copyright:  © Microsoft Corporation. All rights reserved.
Loaded Image Name:  kernel32.dll   Legal Trademarks:  
Mapped Image Name:     Original filename:  kernel32
Module name:  kernel32   Private Build:  
Single Threaded:  False   Product Name:  Microsoft® Windows® Operating System
Module Size:  1.01 MBytes   Product Version:  5.2.3790.1830
Symbol File Name:  c:\symcache\kernel32.pdb\75CFE96517E5450DA600C870E95399FF2\kernel32.pdb   Special Build:  &





Report for w3wp__PID__4776__Date__08_12_2005__Time_11_14_54AM__303__Second_Chance_Exception_E0434F4D.dmp
Type of Analysis Performed   Crash Analysis
Machine Name   GOLOM
Operating System   Windows Server 2003 Service Pack 1
Number Of Processors   4
Process ID   4776
Process Image   c:\WINDOWS\system32\inetsrv\w3wp.exe
System Up-Time   0 day(s) 22:53:12
Process Up-Time   0 day(s) 00:19:24


Thread 6 - System ID 2292
Entry point   w3tp!THREAD_MANAGER::ThreadManagerThread
Create time   8/12/2005 10:55:30 AM
Time spent in user mode   0 Days 0:0:0.78
Time spent in kernel mode   0 Days 0:0:0.78






Function   Source
kernel32!RaiseException+53    
mscorsvr!GetAssemblyMDImport+2e1d4    
mscorsvr!GetAssemblyMDImport+2e157    
mscorsvr!GetAssemblyMDImport+2e10b    
mscorsvr!CoEEShutDownCOM+12dc1    
mscorsvr!GetMetaDataPublicInterfaceFromInternal+7e73    
ntdll!ExecuteHandler2+26    
ntdll!ExecuteHandler+24    
ntdll!KiUserExceptionDispatcher+e    
kernel32!RaiseException+53    
mscorsvr!GetAssemblyMDImport+2e1d4    
mscorsvr!GetMetaDataPublicInterfaceFromInternal+5d70    
mscorlib_79990000+1c288    
1a0555e    
mscorsvr!Ordinal76+1c3c8    
mscorsvr!ReleaseFusionInterfaces+33edb    
1a0559b    
w3core!W3_ISAPI_HANDLER::IsapiOnCompletion+71    
w3core!W3_ISAPI_HANDLER::OnCompletion+8d    
w3core!W3_HANDLER::MainOnCompletion+52    
w3core!W3_CONTEXT::ExecuteHandlerCompletion+23    
w3core!W3_MAIN_CONTEXT::DoWork+91    
w3core!W3_MAIN_CONTEXT::OnIoCompletion+37    
w3dt!UL_NATIVE_REQUEST::DoStateProcess+48    
w3dt!UL_NATIVE_REQUEST::DoWork+7f    
w3dt!OverlappedCompletionRoutine+1a    
w3tp!THREAD_POOL_DATA::ThreadPoolThread+73    
w3tp!THREAD_POOL_DATA::ThreadPoolThread+24    
w3tp!THREAD_MANAGER::ThreadManagerThread+39    
kernel32!BaseThreadStart+34    




In w3wp__PID__4776__Date__08_12_2005__Time_11_14_54AM__303__Second_Chance_Exception_E0434F4D.dmp the assembly instruction at kernel32!RaiseException+53 in C:\WINDOWS\system32\kernel32.dll from Microsoft Corporation has caused an unknown exception (0xe0434f4d) on thread 6

Module Information
Image Name: C:\WINDOWS\system32\kernel32.dll   Symbol Type:  PDB
Base address: 0x77e40000   Time Stamp:  Thu Mar 24 19:30:42 2005  
Checksum: 0x0010c135   Comments:  
COM DLL: False   Company Name:  Microsoft Corporation
ISAPIExtension: False   File Description:  Windows NT BASE API Client DLL
ISAPIFilter: False   File Version:  5.2.3790.1830 (srv03_sp1_rtm.050324-1447)
Managed DLL: False   Internal Name:  kernel32
VB DLL: False   Legal Copyright:  © Microsoft Corporation. All rights reserved.
Loaded Image Name:  kernel32.dll   Legal Trademarks:  
Mapped Image Name:     Original filename:  kernel32
Module name:  kernel32   Private Build:  
Single Threaded:  False   Product Name:  Microsoft® Windows® Operating System
Module Size:  1.01 MBytes   Product Version:  5.2.3790.1830
Symbol File Name:  c:\symcache\kernel32.pdb\75CFE96517E5450DA600C870E95399FF2\kernel32.pdb   Special Build:  &
 
 

Not sure about it. You can get better help analyzing this by posting to the following newsgroup:
news.microsoft.com
microsoft.public.inetserver.iis

Good luck!

Currently I have a 350 dollar support call logged with MS. Im still waiting for them to analyze the dump files...

http://support.microsoft.com/default.aspx?scid=kb;en-us;913384