Solved

How to read Dr.Watson log

Posted on 2009-04-09
7
1,103 Views
Last Modified: 2013-12-14
Could anyone tell me how to read this the following extract from Dr.Watson's log? and how to locate the cause of problem?

The log was extracted from Dr.Watson, under Windows 2000. The crash incident happened on an application which is an expert system communicating via corba with a central server.

function: RaiseException

        7c4ea4c8 8bc8             mov     ecx,eax

        7c4ea4ca 48               dec     eax

        7c4ea4cb 85c9             test    ecx,ecx

        7c4ea4cd 7408             jz      LocalLock+0x935 (7c4f31d7)

        7c4ea4cf 8d4801           lea     ecx,[eax+0x1]          ds:0f479a36=????????

        7c4ea4d2 8d7dc4           lea     edi,[ebp+0xc4]         ss:0f479a86=????????

        7c4ea4d5 f3a5            rep  movsd ds:0ebffbe0=0ebffc3c es:0ebffb70=0ebffbb8

        7c4ea4d7 8d45b0           lea     eax,[ebp+0xb0]         ss:0f479a86=????????

        7c4ea4da 50               push    eax

        7c4ea4db ff1568144e7c     call    dword ptr [7c4e1468]   ds:7c4e1468=77fb16c8

FAULT ->7c4ea4e1 e966170300       jmp     SuspendThread+0x3c (7c51bc4c)
 

*----> Stack Back Trace <----*
 

FramePtr ReturnAd Param#1  Param#2  Param#3  Param#4  Function Name

0EBFFBA0 10209499 E06D7363 00000001 00000003 0EBFFBD4 kernel32!RaiseException 

0EBFFBE0 67DD50DC 0EBFFBF0 67E19A60 41540004 00000001 !CxxThrowException 

0EBFFC3C 67DD56E0 41540004 00000001 10264700 67E74088 omniORB402_rtd!omni::giopStream::CommFailure::_raise 

0EBFFC64 67DD59FE FFFFFFFF 67E74088 00000339 03A59028 omniORB402_rtd!omni::giopStream::errorOnReceive 

0EBFFD04 67DE7456 0175CC98 0EBFFD1C 67D71141 0EBFFD3C omniORB402_rtd!omni::giopStream::inputMessage 

0EBFFD18 67DE7A36 03C09AE4 00000000 0175CC98 67D71000 omniORB402_rtd!omni::giopImpl12::inputNewServerMessage 

0EBFFD3C 67DDC80C 03C09AE4 67DE8037 0016EBA8 001635D0 omniORB402_rtd!omni::giopImpl12::inputMessageBegin 

0EBFFE04 67DDAC1F 0EBFFE28 0EBFFE28 0EBFFE34 0EBFFE34 omniORB402_rtd!omni::GIOP_S::dispatcher 

0EBFFEC0 67DDA683 0EBFFEDC 0EBFFEE8 0EBFFEE8 67DDA726 omniORB402_rtd!omni::giopWorker::real_execute 

0EBFFED0 67DDA726 03A40E18 67E10898 03A40E18 00000000 omniORB402_rtd!omni::giopWorkerInfo::run 

0EBFFEE8 67D9CB3E 0016EBA8 001635D0 03C09980 814CE020 omniORB402_rtd!omni::giopWorker::execute 

0EBFFF38 67D9C253 0EBFFF54 0EBFFF60 0EBFFF60 67D9CD2D omniORB402_rtd!omniAsyncWorker::real_run 

0EBFFF48 67D9CD2D 03A40E70 67E0FDBC 03A40E70 00000000 omniORB402_rtd!omniAsyncWorkerInfo::run 

0EBFFF60 67D71DC6 00000000 00000000 00000001 0016EBA8 omniORB402_rtd!omniAsyncWorker::run 

0EBFFF80 1020BF53 03A40E70 0016EBA8 001635D0 03C09980 omnithread30_rtd!omni_thread_wrapper 

0EBFFFB4 7C4E987C 03C09980 0016EBA8 001635D0 03C09980 !beginthreadex 

0EBFFFEC 00000000 00000000 00000000 00000000 00000000 kernel32!SetThreadExecutionState 
 

*----> Raw Stack Dump <----*

0ebffb48  e0 fb bf 0e 48 6b 25 10 - 63 73 6d e0 01 00 00 00  ....Hk%.csm.....

0ebffb58  00 00 00 00 e1 a4 4e 7c - 03 00 00 00 20 05 93 19  ......N|.... ...

0ebffb68  f0 fb bf 0e 60 9a e1 67 - b8 fb bf 0e 91 81 f9 77  ....`..g.......w

0ebffb78  50 96 f8 77 ff ff ff ff - c8 fb bf 0e c5 dc 20 10  P..w.......... .

0ebffb88  00 00 e8 00 00 00 00 00 - 08 90 a5 03 a8 eb 16 00  ................

0ebffb98  d0 35 16 00 80 99 c0 03 - e0 fb bf 0e 99 94 20 10  .5............ .

0ebffba8  63 73 6d e0 01 00 00 00 - 03 00 00 00 d4 fb bf 0e  csm.............

0ebffbb8  a8 eb 16 00 d0 35 16 00 - 63 73 6d e0 01 00 00 00  .....5..csm.....

0ebffbc8  00 00 00 00 00 00 00 00 - 03 00 00 00 20 05 93 19  ............ ...

0ebffbd8  f0 fb bf 0e 60 9a e1 67 - 3c fc bf 0e dc 50 dd 67  ....`..g<....P.g

0ebffbe8  f0 fb bf 0e 60 9a e1 67 - 04 00 54 41 01 00 00 00  ....`..g..TA....

0ebffbf8  00 35 16 00 88 40 e7 67 - 39 03 00 00 e3 cc dd 67  .5...@.g9......g

0ebffc08  f8 fc bf 0e 88 27 21 10 - d8 73 25 10 c4 b5 20 10  .....'!..s%... .

0ebffc18  80 47 26 10 38 fc bf 0e - 17 29 21 10 09 00 00 00  .G&.8....)!.....

0ebffc28  a8 eb 16 00 d0 35 16 00 - f8 fc bf 0e 5c be e0 67  .....5......\..g

0ebffc38  ff ff ff ff 64 fc bf 0e - e0 56 dd 67 04 00 54 41  ....d....V.g..TA

0ebffc48  01 00 00 00 00 47 26 10 - 88 40 e7 67 39 03 00 00  .....G&..@.g9...

0ebffc58  e4 9a c0 03 04 00 54 41 - 00 00 00 00 04 fd bf 0e  ......TA........

0ebffc68  fe 59 dd 67 ff ff ff ff - 88 40 e7 67 39 03 00 00  .Y.g.....@.g9...

0ebffc78  28 90 a5 03 00 00 00 00 - e4 9a c0 03 e0 9a c0 03  (...............

Open in new window

0
Comment
Question by:heaveneye
  • 4
  • 3
7 Comments
 
LVL 66

Assisted Solution

by:johnb6767
johnb6767 earned 125 total points
ID: 24111529
What app does this module belong to?

omniORB402_rtd

omniORB402_rtd!omni::giopStream::CommFailure::_raise
omniORB402_rtd!omni::giopStream::errorOnReceive

Thats definately the failure in the stack. How does it comunicate with the central server?
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 24111563
Also, if I am not mistaken, the module loaded into this address is the fault.....

7c4ea4e1

0
 

Author Comment

by:heaveneye
ID: 24144274
how to read the stack back trace part?

Function Name
kernel32!RaiseException
!CxxThrowException
omniORB402_rtd!omni::giopStream::CommFailure::_raise
omniORB402_rtd!omni::giopStream::errorOnReceive
omniORB402_rtd!omni::giopStream::inputMessage
omniORB402_rtd!omni::giopImpl12::inputNewServerMessage
omniORB402_rtd!omni::giopImpl12::inputMessageBegin
omniORB402_rtd!omni::GIOP_S::dispatcher
omniORB402_rtd!omni::giopWorker::real_execute
omniORB402_rtd!omni::giopWorkerInfo::run
omniORB402_rtd!omni::giopWorker::execute
omniORB402_rtd!omniAsyncWorker::real_run
omniORB402_rtd!omniAsyncWorkerInfo::run
omniORB402_rtd!omniAsyncWorker::run
omnithread30_rtd!omni_thread_wrapper
!beginthreadex
kernel32!SetThreadExecutionState

In there, from the stack, does it means it fails at SetThreadExecutionState called by Kernel?
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 66

Accepted Solution

by:
johnb6767 earned 125 total points
ID: 24144663
omniORB402_rtd!omni::giopStream::CommFailure::_raise

Then you see the exception......

!CxxThrowException

Read from the bottom up.....

0
 

Author Comment

by:heaveneye
ID: 24145219
This part of exception was happened in Corba OMNIORB 4.0.2, I found that there is a omniORB402_rtd.dll in the omni package's bin folder, so probably omniORB402_rtd is one of its library.

I think I will dig into the application source to try to find out the problem in communication.

One more question in the stack trace, is there any useful information that I can get from the stack trace? e.g. the line
"0EBFFC64 67DD59FE FFFFFFFF 67E74088 00000339 03A59028 omniORB402_rtd!omni::giopStream::errorOnReceive"

I mean the first few chunks of hex numbers...are they representing the return value and first four parameter of function errorOnReceive?
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 24154435
The FramePTR I *believe is equivalent* to the last control transfer in windbg. Shows what process made the calls....

And that should be correc ton the paramaters question.....

Keep in mind, I am not a coder, I have dabbled in learning API/Call stack interpretations, and can limp along.... I cannot answer TOO in depth on programming questions.....

 
0
 

Author Closing Comment

by:heaveneye
ID: 31568409
Thanks for helping me understand the log. I am trying to dig into the source to see what has happened.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

In our object-oriented world the class is a minimal unit, a brick for constructing our applications. It is an abstraction and we know well how to use it. In well-designed software we are not usually interested in knowing how objects look in memory. …
Here is a helpful source code for C++ Builder programmers that allows you to manage and manipulate HTML content from C++ code, while also handling HTML events like onclick, onmouseover, ... Some objects defined and used in this source include: …
THe viewer will learn how to use NetBeans IDE 8.0 for Windows to perform CRUD operations on a MySql database.
The viewer will learn how to synchronize PHP projects with a remote server in NetBeans IDE 8.0 for Windows.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now