Solved

Intermittent server rebooting

Posted on 2008-10-14
18
3,482 Views
Last Modified: 2013-12-05
I have a new server, ML570 G4 Proliant, that has been chugging along fine for the last few months.  However, just recently - probably within the last several weeks - I've been noticing in the event log, at seemingly random times, "The previous system shutdown at <time> on <date> was unexpected"  EVENT ID 6008.  The only thing I can think of that has change is Retrospect Enterprise Server 7.6 was installed to back up files to a network share (one folder in the backup que is 720k files); however, retrospect will say in it's internal log "backup script <name> ran successfully on <time>" so I don't think it's due to teh backup software.  Yet then it will say "execution terminated  unexpectedly possibly due to power failure or system crash"  I've include two screen shots of the event viewer errors
xcelera-shutdown2.JPG
xcelera-nic-problem.JPG
0
Comment
Question by:netfriendsinc
  • 9
  • 3
  • 3
  • +1
18 Comments
 
LVL 2

Expert Comment

by:CPAsAdmin
ID: 22712774
I would be checking the UPS for problems. Weak batteries, excessive load. Move the server to a different UPS or to the Wall. Did the problem follow the server?
0
 

Author Comment

by:netfriendsinc
ID: 22712831
It's connected to an older UPS but the batteries are only 2 months old, as I had to replace them - no the server did not have this issue when installed, only last couple of weeks.  I'll try and change power sources though, it's worth a shot ;)
0
 
LVL 32

Expert Comment

by:aleghart
ID: 22712954
I'd suspect the backup.  If you can, suspend the schedule to see if it goes away.
Is this daily, or weekly?
0
 

Author Comment

by:netfriendsinc
ID: 22713249
It's nightly at 10pm - i'll stop the service and see if it makes a different - any thoughts on the SNMP Trap error in the event viewer logs?
0
 

Author Comment

by:netfriendsinc
ID: 22715192
i'll report back tomorrow on this topic and let you know if stopping the retrospect services did the trick..thanks guys!
0
 

Author Comment

by:netfriendsinc
ID: 22715255
I noticed this information snippet in the event viewer - the file that it says to look at is over 2GB and will not open with notepad as there is not enough memory to view it (8GB of ram installed currently)...not sure if this is important or not..
xcelera-bug-dump.JPG
0
 
LVL 32

Expert Comment

by:aleghart
ID: 22716366
Sorry, I've not been brave (or foolish) enough to try to open a memory dump in Notepad.  :)
There are tools to parse sections and read them out, or break them into smaller files.
But, never having done that, I couldn't report on an effective means of using it to troubleshoot.
0
 

Author Comment

by:netfriendsinc
ID: 22722381
After shutting down the Retrospect services yesterday afternoon, the server has yet to reboot - looks like it may have been that folder containing 720k files that is choking it..does that sound like a possibliity?  That retrospect could 'choke' on a large number of files?
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 

Author Comment

by:netfriendsinc
ID: 22722901
Server just rebooted again with all retrospect services stopped :(
0
 

Author Comment

by:netfriendsinc
ID: 22723669
I decided to disable SNMP as it sucks in 2000; will report back tomorrow with an update
0
 

Author Comment

by:netfriendsinc
ID: 22734312
disabling SNMP did not work - server rebooted again this morning; switched to a different UPS like earlier suggested.  I'll keep you updated.  
0
 

Author Comment

by:netfriendsinc
ID: 22744487
So changing power scources did nothing to help; any ideas?  Am i talking to myself here?
0
 
LVL 32

Accepted Solution

by:
aleghart earned 250 total points
ID: 22745857
Another physical issue to consider is drive failure.  With running W2K, what are the ages of the drives?  Desktop drives in an always-on server will last 3 years.

High temperature may be cycling the computer.
0
 

Expert Comment

by:Healthcareath
ID: 22829310
We have 5 ML 570 servers that randomly reboot with event ID 6008. I am trying AGAIN to get to the bottom of this and came across your post.

One of these servers that we have was running Server 2000 we got Microsoft to look at the issue and it needed a hotfix that we could not get from them because we had not taken out a Microsoft extended hotfix agreement in 2005 but as Windows 2000 is no longer supported we cannot purchase one of these agreements or get the necessary hotfix.

Apparently there is a problem with Windows 2000 running on this server. This can happen on a computer that is using an Intel Dual-Core Xeon 7100 series CPU. However, the problem could also occur with other dual-core processors that use an L3 cache.

We installed Server 2003 and the server has now only rebooted once since (In about 6 months).  It is just the other 4 servers running server 2003 we now have to stop rebooting randomly.

If it helps we our servers are in an air conditioned server room with no temperature issues, three of the servers are SAN attached but the two that are not also reboot randomly. We have noticed that they reboot at a similar time so it is possible that it could be a backup job. It does not happen on our ML 570 G4 that is running ESX 3.5 so I believe that the issue might be a microsoft issue.

0
 

Assisted Solution

by:Healthcareath
Healthcareath earned 250 total points
ID: 22829660
This was what would happen before we upgraded to 2003 then it turned into the crash eventid 6008

http://support.microsoft.com/kb/924439/en-us
0
 

Expert Comment

by:Healthcareath
ID: 23103433
0

Featured Post

Why do Marketing keep bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

Join & Write a Comment

Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
Microservice architecture adoption brings many advantages, but can add intricacy. Selecting the right orchestration tool is most important for business specific needs.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now