Server Randomly Stops Accepting HTTP Requests - No Logs

Posted on 2009-04-20
Last Modified: 2012-08-14

We have a server that about once a week, stops responding to HTTP requests.

When we telnet to the IP on port 80, the second you hit any key on the keyboard it disconnects. In IE, you just get page cannot be displayed. Even when trying locally on the server itself, with public & I am, however, able to telnet to port 25 and connect to the SMTP server while this is occuring.

IIS Reset does nothing. There is nothing in any event viewer log that indicates any problems. The request obviously isn't logged in IIS logs either.

The only way to restore HTTP access is by rebooting.

This is a Windows Server 2003 Enterprise Edition server with SP2/R2. This server is part of an Active/Passive SQL Failover Cluster.

How can we troubleshoot why the server stops responding to HTTP requests?

How can we troubleshoot this when it is not happening? (just rebooted to fix)

I've put network monitor on the server but it doesn't appear to register any
connections on the IP, netstat doesn't show anything either.

I've just now put WireShark on monitoring all TCP/UDP Port 80 connections, but I suspect that when this happens it simply will not show up - then what?

Any insight would be appreciated,
Question by:brock_hensley
    LVL 5

    Accepted Solution


    I have seen this happen when there is a leak in the non-paged memory pool on  the IIS server, only saw event logs if we left the server on for a day after IIS stopped responding

    on one customers site it was due to a AV installation.
    LVL 11

    Expert Comment

    Could there be a port leak?

    "NETSTAT -o"

    LVL 38

    Expert Comment

    Sounds like intermittent DNS.

    How many nics do you have on the server? Are the preferred DNS servers your internal DNS servers?
    Also could something other than your Windows DNS server be supplying DNS, like  your router?
    LVL 1

    Author Comment


    Http.sys stopped accepting connections due to Non-paged Pool memory limit being hit.

    Removed /3GB switch from boot.ini file to resolve issue.
    LVL 5

    Expert Comment


    As the the question posted was looking for "any insight" in the issue with the IIS servers lack of response, and my post pointed to the issue occurring because of low (leaking) "non-paged memory pool" with links to information on how to monitor the "non-paged memory pool" usage.  As the posters resolution to the issue also pointed to a non-paged memory pool issue, can I get a moderator review on this issue?
    LVL 1

    Author Closing Comment

    Pointed me in right direction, thanks.

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    Join & Write a Comment

    Suggested Solutions

    What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
    Introduction and Prerequisites This article describes methods for detecting whether a client browser accepts and returns HTTP cookies and whether the client browser runs JavaScript.  Most client browsers will, by default, be configured to use cooki…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now