Solved

IIS 7.5 Crash - Analysis

Posted on 2013-01-08
3
1,029 Views
Last Modified: 2013-01-29
Hi,

Ive noticed in my event log a lot of issues, I ran a IIS debug and got

Type of Analysis Performed   Crash Analysis 
Machine Name   D20-S405 
Operating System   Windows Server 2008 R2 Service Pack 1 
Number Of Processors   2 
Process ID   4740 
Process Image   C:\Windows\SysWOW64\inetsrv\w3wp.exe 
System Up-Time   05:54:39 
Process Up-Time   00:06:03 


Thread 2 - System ID 3088
Entry point   ntdll!TppWorkerThread 
Create time   1/3/2013 5:51:14 AM 
Time spent in user mode   0 Days 0:0:0.0 
Time spent in kernel mode   0 Days 0:0:0.46 


.NET Call Stack

Full Call Stack

Function     Arg 1     Arg 2     Arg 3     Arg 4   Source 
ntdll!RtlReportCriticalFailure+57     c0000374     774e4268     00c1f758     774af6a9    
ntdll!RtlpReportHeapFailure+21     00000002     76b13c9f     00000000     00030000    
ntdll!RtlpLogHeapFailure+a1     00000008     00030000     03a93748     00000000    
ntdll!RtlFreeHeap+64     00030000     00000000     03a93750     9e013059    
msvcrt!free+cd     03a93750     022fa1a8     0287854a     022fa338    
php5ts!zend_hash_graceful_reverse_destroy+2e     10000000     00000000     00000000     1000260d    
ntdll!LdrpCallInitRoutine+14     1000260d     10000000     00000000     00000000    
ntdll!LdrpUnloadDll+375     10000000     00c1f90c     76b132eb     6e39e0b8    
ntdll!LdrUnloadDll+4a     10000000     00000000     00c1f954     6e394695    
KERNELBASE!FreeLibrary+15     10000000     02111960     6e3946b7     02111960    
filter+4695     00000001     00000003     00dfe6a0     6e395487    
filter+5456     00000001     02111428     6e5d3816     003f2de4    
filter!RegisterModule+239     02111178     6e5be132     02111178     6e5be18c    
iiscore!CONTEXT_CONTAINER::~CONTEXT_CONTAINER+17     02111178     6e5be18c     02111178     00c1f9d0    
iiscore!W3_SITE::~W3_SITE+1d     02111178     00c1f9d0     6e5c1fbc     00000001    
iiscore!W3_SITE::`scalar deleting destructor'+d     00000001     003d69d0     6e5cf80f     00c1f9fc    
iiscore!W3_SITE::DereferenceSiteInfo+20     00c1f9fc     722b7f37     02111178     ffffffff    
iiscore!W3_SITE_TABLE_BY_NAME::AddRefRecord+3d     02111178     ffffffff     00000000     00e028c4    
iisutil!CLKRLinearHashTable::_Clear+6f     00000001     00e02974     00e02320     6e5bb2b5    
iisutil!CLKRHashTable::Clear+1f     00e02974     00e02320     6e5bd24c     00da7354    
iiscore!W3_SERVER::TerminateGlobalModules+1b     00da7354     00da7380     00da7354     00000000    
iiscore!W3_SERVER::Terminate+16c     02110d78     6e5b52c0     00c1fa60     724a9a60    
iiscore!IISCORE_PROTOCOL_MANAGER::StopListenerChannel+58     02110d84     02110d78     00000000     00000000    
w3wphost!LISTENER_CHANNEL::HandleStopListenerChannel+65     00000000     00d8bd18     724a42e4     00409280    
w3wphost!LISTENER_CHANNEL_STOP_WORKITEM::ExecuteWorkItem+10     00409280     00c1faec     774494d2     00d8bd18    
w3wphost!W3WP_HOST::ExecuteWorkItem+10     00d8bd18     76b1312b     003396f0     00000002    
ntdll!RtlpTpWorkCallback+11d     00d8bd18     00409280     76b1378b     00000000    
ntdll!TppWorkerThread+572     003396e8     00c1fc98     77419ef2     003396e8    
kernel32!BaseThreadInitThunk+e     003396e8     76b1375f     00000000     00000000    
ntdll!__RtlUserThreadStart+70     77433e45     003396e8     ffffffff     774a736f    
ntdll!_RtlUserThreadStart+1b     77433e45     003396e8     00000000     00000000    


Exception Information
In w3wp__domain.com(domain)(2.0)(pool)__PID__4740__Date__01_03_2013__Time_05_57_15AM__93__Second_Chance_Exception_C0000374.dmp the assembly instruction at ntdll!RtlReportCriticalFailure+57 in C:\Windows\SysWOW64\ntdll.dll from Microsoft Corporation has caused an unknown exception (0xc0000374) on thread 2

Module Information 
Image Name: C:\Windows\SysWOW64\ntdll.dll   Symbol Type:  PDB 
Base address: 0x00905a4d   Time Stamp:  Thu Nov 17 06:28:47 2011  
Checksum: 0x00006f00   Comments:   
COM DLL: False   Company Name:  Microsoft Corporation 
ISAPIExtension: False   File Description:  NT Layer DLL 
ISAPIFilter: False   File Version:  6.1.7601.17725 (win7sp1_gdr.111116-1503) 
Managed DLL: False   Internal Name:  ntdll.dll 
VB DLL: False   Legal Copyright:  © Microsoft Corporation. All rights reserved. 
Loaded Image Name:  ntdll.dll   Legal Trademarks:   
Mapped Image Name:     Original filename:  ntdll.dll 
Module name:  ntdll   Private Build:   
Single Threaded:  False   Product Name:  Microsoft® Windows® Operating System 
Module Size:  1.50 MBytes   Product Version:  6.1.7601.17725 
Symbol File Name:  c:\symcache\wntdll.pdb\D74F79EB1F8D4A45ABCD2F476CCABACC2\wntdll.pdb   Special Build:  & 

Open in new window


Does this mean anythign to anyone? As ive tried looking it up and didnt get any answers
0
Comment
Question by:Phil Pearce
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 78

Expert Comment

by:arnold
ID: 38757921
0
 
LVL 1

Author Comment

by:Phil Pearce
ID: 38758708
Hi, thanks for the reply

Before I read the lot the title is "How To: Collect a Crash dump of an IIS worker process on IIS 7.0 (and above) "

Ive already collected the dump and analysed it and the results were above?


or should I continue reading?
0
 
LVL 78

Accepted Solution

by:
arnold earned 500 total points
ID: 38758899
0

Featured Post

Why You Need a DevOps Toolchain

IT needs to deliver services with more agility and velocity. IT must roll out application features and innovations faster to keep up with customer demands, which is where a DevOps toolchain steps in. View the infographic to see why you need a DevOps toolchain.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Prologue It is often required to host multiple websites on a single instance of IIS, mostly in development environments instead of on production servers. I am sure it is not much a preferred solution on production servers but this is at least a pos…
As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question