Solved

Server crash analysis - PFRO logs?

Posted on 2014-02-27
6
2,979 Views
Last Modified: 2014-05-02
Hey Everyone,

I recently had a server crash and unfortunately no dump was taken and the event logs haven't yielded much at all as far as a possible cause.  I did however, find a PFRO.log file in the root of C: that has some interesting "rebootrequired" messages that logged almost exactly when the server crashed.  Does anyone know what these could be point towards or what the PFRO.log file itself signifies?

2/11/2014 13:33:18 - PFRO Error:
\??\C:\CA\CAPKI\CAPKI\RebootRequired, |delete operation|,
0xc0000034
2/11/2014 13:33:18 - PFRO Error:
\??\C:\CA\CAPKI\CAPKI\RebootRequired, |delete operation|,
0xc0000034
2/11/2014 13:33:18 - PFRO Error:
\??\C:\CA\CAPKI\CAPKI\RebootRequired, |delete operation|,
0xc0000034
2/11/2014 13:33:18 - PFRO Error:
\??\C:\CA\CAPKI\CAPKI\RebootRequired, |delete operation|,
0xc0000034
2/11/2014 13:33:18 - 12 Successful PFRO operations

Open in new window


Thanks in advance
0
Comment
Question by:blinkme323
  • 3
  • 3
6 Comments
 
LVL 13

Accepted Solution

by:
Santosh Gupta earned 500 total points
ID: 39891827
Hi,

CAPKI is CA ARCserve Backup agent. it seems CA has initiated the reboot. check the agent and update if required.
0
 

Author Comment

by:blinkme323
ID: 39892154
Thanks!  So are we certain that the message indicates that a reboot was intitiated or was it possibly resultant of the crash?
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39892261
yes, it indicates the reboot required not crash.
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:blinkme323
ID: 39892313
So would it then kick off the reboot automatically?  Or is it just saying, "I need a reboot to rename these files" and then it will just occur the next time the server is rebooted?  Sorry for the questions, but I'm just trying to figure out the PFRO logic and whether it would reboot automatically.
0
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39892336
pls check the agent options/settings for reboot. I must ask about reboot.
0
 

Author Comment

by:blinkme323
ID: 39903882
The only reference I can find to the "crash" is in the event logs.  No dump or any other trace is out there:

Event Type:      Error
Event Source:      EventLog
Event Category:      None
Event ID:      6008
Date:            2/21/2014
Time:            1:31:25 PM
User:            N/A
Computer:      xxxxxxxxxxxxxx
Description:
The previous system shutdown at 1:31:25 PM on ¿2/¿21/¿2014 was unexpected.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Know what services you can and cannot, should and should not combine on your server.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question