partial get file size limit

TheMSsForum.com: The Microsoft Software Forum

  • The MSS Forum ‹ IIS
    • Archive
      • Biz
      • MCSE
      • CRM
      • Drivers
      • Framework
      • ADO
      • ASP
      • Compact
      • Forms
      • Dotnet
      • C#
      • VB
      • FontpageGen
      • Excel
      • WorkSheet
      • Exchange
      • Setup
      • Fox
      • Fontpage
      • ASP
      • IIS
      • Entourage
      • Money
      • Messanger
      • PocketPC
      • Powerpoint
      • Project
      • Publisher
      • Excel
      • VB
      • Security
      • Portal
      • Services
      • SQLServerDev
      • SVCS
      • SQLServer
      • VB
      • VC
      • MFC
      • ExcelGen
    • Previous
      • 1
        • w3wp.exe Hanging - IISState log We are upgrading from W2K/IIS5 to Win2003/IIS6 Our web service methods on our web server use remoting to get data from components on our app server. This setup has been workgin fine in IIS5. In our new servers, we are getting a consistent hang of w3ws.exe. Typically it will have ~60 threads 80M memory at the time. W3WS.exe is raising this error in the system event log Application popup: w3wp.exe - Application Error : The instruction at "0x77bc6f76" referenced memory at "0x00000000". The memory could not be "read". Click on OK to terminate the program Click on CANCEL to debug the program I am appending the IISstate log for the w3wp process. (I have clipped some out to fit in th 30k line limit) Any ideas would be much appreciated Opened log file 'C:\IISState\output\IISState-1940.log' *********************** Starting new log output IISState version 3.3.1 Wed May 25 16:11:15 2005 OS = Windows 2003 Server Executable: w3wp.exe PID = 1940 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 884 Kernel Time: 0:0:0.78 User Time: 0:0:0.31 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0006fc08 7c822124 ntdll!KiFastSystemCallRet 01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12 04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10 05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d 06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd 07 0006ff0c 0100187c w3core!UlW3Start+0x26e 08 0006ff44 01001a23 w3wp!wmain+0x22a 09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23 Thread ID: 1 System Thread ID: bf8 Kernel Time: 0:0:0.46 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 009eff9c 7c821364 ntdll!KiFastSystemCallRet 01 009effa0 7c81fe26 ntdll!NtDelayExecution+0xc 02 009effb8 77e66063 ntdll!RtlpTimerThread+0x47 03 009effec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 2 System Thread ID: 840 Kernel Time: 0:0:0.31 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 00a2ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 00a2ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 00a2ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 00a2ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 3 System Thread ID: 930 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00aafe18 7c821c54 ntdll!KiFastSystemCallRet 01 00aafe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 00aaff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 00aaff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 00aaffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 00aaffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 06 00aaffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 8 System Thread ID: 88c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 00e2fcec 7c822114 ntdll!KiFastSystemCallRet 01 00e2fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc 02 00e2ffb8 77e66063 ntdll!RtlpWaitThread+0x161 03 00e2ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 9 System Thread ID: 98c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 017ffa84 7c822124 ntdll!KiFastSystemCallRet 01 017ffa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 017ffaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 017ffb0c 5a3b8147 kernel32!WaitForSingleObject+0x12 04 017fffb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126 05 017fffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 10 System Thread ID: f1c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0183ff70 7c821364 ntdll!KiFastSystemCallRet 01 0183ff74 77c5fa28 ntdll!NtDelayExecution+0xc 02 0183ff8c 77c5f824 RPCRT4!TIMER::Wait+0x2b 03 0183ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0xe8 04 0183ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 05 0183ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 11 System Thread ID: a98 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0187ff8c 7c821364 ntdll!KiFastSystemCallRet 01 0187ff90 7c815267 ntdll!NtDelayExecution+0xc 02 0187ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f 03 0187ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 12 System Thread ID: 54c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker succeeded Loaded Son of Strike data table version 5 from "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll" Thread 12 Not a managed thread. Begin System Thread Information # ChildEBP RetAddr 00 01a6fe70 7c822114 ntdll!KiFastSystemCallRet 01 01a6fe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 01a6ff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 01a6ff38 791d283b kernel32!WaitForMultipleObjects+0x18 04 01a6ffa0 791d27b2 mscorwks!DebuggerRCThread::MainLoop+0x90 05 01a6ffb0 791d453a mscorwks!DebuggerRCThread::ThreadProc+0x68 06 01a6ffb8 77e66063 mscorwks!DebuggerRCThread::ThreadProcStatic+0xb 07 01a6ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 13 System Thread ID: a18 Kernel Time: 0:0:0.62 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 13 ESP EIP Begin System Thread Information # ChildEBP RetAddr 00 01b4fdf8 7c822114 ntdll!KiFastSystemCallRet 01 01b4fdfc 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 01b4fea4 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 01b4fec0 792650ff kernel32!WaitForMultipleObjects+0x18 04 01b4fee0 791b9872 mscorwks!WaitForFinalizerEvent+0x5a 05 01b4ff24 791cede0 mscorwks!GCHeap::FinalizerThreadStart+0x96 06 01b4ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x44 07 01b4ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 14 System Thread ID: 9c0 Kernel Time: 0:0:0.78 User Time: 0:0:0.15 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 14 ESP EIP Begin System Thread Information # ChildEBP RetAddr 00 01ceff74 792ee237 mscorwks!ThreadpoolMgr::DeactivateNthWait+0x1 01 01ceff8c 792ee409 mscorwks!ThreadpoolMgr::ProcessWaitCompletion+0x17 02 01ceffb8 77e66063 mscorwks!ThreadpoolMgr::WaitThreadStart+0x7c 03 01ceffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 15 System Thread ID: d44 Kernel Time: 0:0:0.93 User Time: 0:0:0.93 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 15 Not a managed thread. Begin System Thread Information # ChildEBP RetAddr 00 0206feb0 7c821364 ntdll!KiFastSystemCallRet 01 0206feb4 77e42439 ntdll!NtDelayExecution+0xc 02 0206ff1c 77e424b7 kernel32!SleepEx+0x68 03 0206ff2c 792edf9e kernel32!Sleep+0xf 04 0206ffb8 77e66063 mscorwks!ThreadpoolMgr::GateThreadStart+0x54 05 0206ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 16 System Thread ID: 6c8 Kernel Time: 0:0:10.187 User Time: 0:0:4.453 IISState has detected that this thread has thrown an unhandled exception and is about to crash. IISState will now attempt to display the original faulting stack. .cxr 20af744 # ChildEBP RetAddr 00 020afa0c 5a39f9a2 msvcrt!_purecall+0xb 01 020afb50 5a32cf84 w3core!ISAPI_REQUEST::SendResponseHeaders+0x5d 02 020afb78 5a3218b5 w3isapi!SSFSendResponseHeader+0xe0 03 020afbe8 79e76100 w3isapi!ServerSupportFunction+0x351 04 020afc0c 79e7637c aspnet_isapi!HttpCompletion::ReportHttpError+0x3a 05 020afe50 79e7619c aspnet_isapi!HttpCompletion::ProcessRequestInManagedCode+0x1d1 06 020afe5c 79e8e244 aspnet_isapi!HttpCompletion::ProcessCompletion+0x24 07 020afe70 792ed3e2 aspnet_isapi!CorThreadPoolWorkitemCallback+0x13 08 020afe84 792ed5db mscorwks!ThreadpoolMgr::ExecuteWorkRequest+0x19 09 020afea4 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x129 0a 020affb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44 0b 020affec 00000000 kernel32!BaseThreadStart+0x34 **Current Stack State** Other information: Thread is throwing an exception. Checking for known issues. *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll - *** WARNING: Unable to verify checksum for D:\PBWeb\Filters\UrlMapFilter.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for D:\PBWeb\Filters\UrlMapFilter.dll - *** ERROR: Module load completed but symbols could not be loaded for c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\USER32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\VERSION.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ADVAPI32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\msi.dll - *** WARNING: Unable to verify checksum for c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_eb2d8503\mscorlib.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_eb2d8503\mscorlib.dll *** WARNING: Unable to verify checksum for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\58d42327\990f262b\assembly\dl2\870d2a06\00b60a49_b24ac501\webqueries.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\58d42327\990f262b\assembly\dl2\870d2a06\00b60a49_b24ac501\webqueries.dll Thread Type: Other # ChildEBP RetAddr 00 020af3a4 7c821b74 ntdll!KiFastSystemCallRet 01 020af3a8 77e999ea ntdll!NtRaiseHardError+0xc 02 020af614 77e840a1 kernel32!UnhandledExceptionFilter+0x4b4 03 020af61c 77e6b7f9 kernel32!BaseThreadStart+0x4a 04 020af644 7c82eeb2 kernel32!_except_handler3+0x61 05 020af668 7c82ee84 ntdll!ExecuteHandler2+0x26 06 020af710 7c82ecc6 ntdll!ExecuteHandler+0x24 07 020af730 77bc6f76 ntdll!KiUserExceptionDispatcher+0xe 08 020af7f8 77bc6f76 msvcrt!_purecall+0xb Thread ID: 17 System Thread ID: 5b0 Kernel Time: 0:0:0.31 User Time: 0:0:0.15 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 17 Not a managed thread. Begin System Thread Information # ChildEBP RetAddr 00 0428ff38 7c821364 ntdll!KiFastSystemCallRet 01 0428ff3c 77e42439 ntdll!NtDelayExecution+0xc 02 0428ffa4 792ee51d kernel32!SleepEx+0x68 03 0428ffb8 77e66063 mscorwks!ThreadpoolMgr::TimerThreadStart+0x30 04 0428ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 21 System Thread ID: af4 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 21 ESP EIP 00aefaf4 7c82ed54 [FRAME: ECallMethodFrame] [DEFAULT] Boolean System.Threading.WaitHandle.WaitOneNative(I,UI4,Boolean) 00aefb08 799e4bb1 [DEFAULT] [hasThis] Boolean System.Threading.WaitHandle.WaitOne(I4,Boolean) 00aefb3c 01f9ae60 [DEFAULT] Void System.EnterpriseServices.ServicedComponentProxy.QueueCleaner() 00aefd44 7923c069 [FRAME: GCFrame] Begin System Thread Information # ChildEBP RetAddr 00 00aef94c 7c822114 ntdll!KiFastSystemCallRet 01 00aef950 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 00aef9f8 7929a834 kernel32!WaitForMultipleObjectsEx+0x11a 03 00aefa28 7929ad95 mscorwks!Thread::DoAppropriateWaitWorker+0xc1 04 00aefa7c 79339ff6 mscorwks!Thread::DoAppropriateWait+0x46 05 00aefac4 01e74df0 mscorwks!WaitHandleNative::CorWaitOneNative+0x6f WARNING: Frame IP not in any known module. Following frames may be wrong. 06 00aefb30 01f9ae60 0x1e74df0 07 00aefb40 7923e0bc 0x1f9ae60 08 00aefc50 7923e2a7 mscorwks!MethodDesc::CallDescr+0x1b8 09 00aefd0c 7923e315 mscorwks!MethodDesc::CallDescr+0x4f 0a 00aefd34 792e9207 mscorwks!MethodDesc::Call+0x97 0b 00aefd80 792e92d6 mscorwks!ThreadNative::KickOffThread_Worker+0x9d 0c 00aefe24 791cede0 mscorwks!ThreadNative::KickOffThread+0xc2 0d 00aeffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x44 0e 00aeffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 22 System Thread ID: 8fc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 22 ESP EIP 0598fa24 7c82ed54 [FRAME: ECallMethodFrame] [DEFAULT] Boolean System.Threading.WaitHandle.WaitOneNative(I,UI4,Boolean) 0598fa38 799e4bb1 [DEFAULT] [hasThis] Boolean System.Threading.WaitHandle.WaitOne(I4,Boolean) 0598fa6c 04be654f [DEFAULT] Void System.EnterpriseServices.ServicedComponentProxy.QueueCleaner() 0598fc74 7923c069 [FRAME: GCFrame] 0598fcbc 7923c069 [FRAME: ContextTransitionFrame] Begin System Thread Information # ChildEBP RetAddr 00 0598f87c 7c822114 ntdll!KiFastSystemCallRet 01 0598f880 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0598f928 7929a834 kernel32!WaitForMultipleObjectsEx+0x11a 03 0598f958 7929ad95 mscorwks!Thread::DoAppropriateWaitWorker+0xc1 04 0598f9ac 79339ff6 mscorwks!Thread::DoAppropriateWait+0x46 05 0598f9f4 01e74df0 mscorwks!WaitHandleNative::CorWaitOneNative+0x6f WARNING: Frame IP not in any known module. Following frames may be wrong. 06 0598fa60 04be654f 0x1e74df0 07 0598fa70 7923e0bc 0x4be654f 08 0598fb80 7923e2a7 mscorwks!MethodDesc::CallDescr+0x1b8 09 0598fc3c 7923e315 mscorwks!MethodDesc::CallDescr+0x4f 0a 0598fc64 792e9207 mscorwks!MethodDesc::Call+0x97 0b 0598fcb0 7929cc30 mscorwks!ThreadNative::KickOffThread_Worker+0x9d 0c 0598fcf8 792e92cf mscorwks!Thread::DoADCallBack+0x5c 0d 0598fda4 791cede0 mscorwks!ThreadNative::KickOffThread+0xbb 0e 0598ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x44 0f 0598ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 23 System Thread ID: cc8 Kernel Time: 0:0:0.906 User Time: 0:0:0.765 *** ERROR: Module load completed but symbols could not be loaded for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\58d42327\990f262b\assembly\dl2\a39eb4bd\802dd7ff_5dc0c401\pdflib_dotnet.dll IISState has detected that this thread has thrown an unhandled exception and is about to crash. IISState will now attempt to display the original faulting stack. .cxr 6d7ed44 # ChildEBP RetAddr 00 06d7f00c 5a39f9a2 msvcrt!_purecall+0xb 01 06d7f150 5a32cf84 w3core!ISAPI_REQUEST::SendResponseHeaders+0x5d 02 06d7f178 5a3218b5 w3isapi!SSFSendResponseHeader+0xe0 03 06d7f1e8 79e76100 w3isapi!ServerSupportFunction+0x351 04 06d7f20c 79e7637c aspnet_isapi!HttpCompletion::ReportHttpError+0x3a 05 06d7f450 79e7619c aspnet_isapi!HttpCompletion::ProcessRequestInManagedCode+0x1d1 06 06d7f45c 79e8e244 aspnet_isapi!HttpCompletion::ProcessCompletion+0x24 07 06d7f470 792ed3e2 aspnet_isapi!CorThreadPoolWorkitemCallback+0x13 08 06d7f484 792ed5db mscorwks!ThreadpoolMgr::ExecuteWorkRequest+0x19 09 06d7f4a4 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x129 0a 06d7ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44 0b 06d7ffec 00000000 kernel32!BaseThreadStart+0x34 **Current Stack State** Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 23 ESP EIP Begin System Thread Information # ChildEBP RetAddr 00 06d7e664 7c821b74 ntdll!KiFastSystemCallRet 01 06d7e668 77e999ea ntdll!NtRaiseHardError+0xc 02 06d7e8d4 01001623 kernel32!UnhandledExceptionFilter+0x4b4 03 06d7e8f0 7c35f0c3 w3wp!WpUnhandledExceptionFilter+0x3d WARNING: Stack unwind information not available. Following frames may be wrong. 04 06d7e9a0 792b0e99 MSVCR71!_unDNameEx+0x764 05 06d7e9b0 0466ae68 mscorwks!COMUnhandledExceptionFilter+0xd 06 06d7ec14 77e840a1 pdflib_dotnet+0xaae68 07 06d7ec1c 77e6b7f9 kernel32!BaseThreadStart+0x4a 08 06d7ec44 7c82eeb2 kernel32!_except_handler3+0x61 09 06d7ec68 7c82ee84 ntdll!ExecuteHandler2+0x26 0a 06d7ed10 7c82ecc6 ntdll!ExecuteHandler+0x24 0b 06d7ed30 77bc6f76 ntdll!KiUserExceptionDispatcher+0xe 0c 06d7edf8 77bc6f76 msvcrt!_purecall+0xb Thread ID: 24 System Thread ID: d30 Kernel Time: 0:0:0.93 User Time: 0:0:0.15 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01aaff24 7c821bf4 ntdll!KiFastSystemCallRet 01 01aaff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 01aaff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 01aaff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 01aaffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 01aaffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 01aaffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 25 System Thread ID: 644 Kernel Time: 0:0:0.46 User Time: 0:0:0.62 IISState has detected that this thread has thrown an unhandled exception and is about to crash. IISState will now attempt to display the original faulting stack. .cxr 440f2c4 # ChildEBP RetAddr 00 0440f58c 5a39f9a2 msvcrt!_purecall+0xb 01 0440f6d0 5a32cf84 w3core!ISAPI_REQUEST::SendResponseHeaders+0x5d 02 0440f6f8 5a3218b5 w3isapi!SSFSendResponseHeader+0xe0 03 0440f768 79e76100 w3isapi!ServerSupportFunction+0x351 04 0440f78c 79e7637c aspnet_isapi!HttpCompletion::ReportHttpError+0x3a 05 0440f9d0 79e7619c aspnet_isapi!HttpCompletion::ProcessRequestInManagedCode+0x1d1 06 0440f9dc 79e8e244 aspnet_isapi!HttpCompletion::ProcessCompletion+0x24 07 0440f9f0 792ed3e2 aspnet_isapi!CorThreadPoolWorkitemCallback+0x13 08 0440fa04 792ed5db mscorwks!ThreadpoolMgr::ExecuteWorkRequest+0x19 09 0440fa24 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x129 0a 0440ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44 0b 0440ffec 00000000 kernel32!BaseThreadStart+0x34 **Current Stack State** Other information: Thread is throwing an exception. Checking for known issues. *** WARNING: Unable to verify checksum for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\58d42327\990f262b\assembly\dl2\cf7ecd76\00d7125b_f850c501\portalui.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\58d42327\990f262b\assembly\dl2\cf7ecd76\00d7125b_f850c501\portalui.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\OLEAUT32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\mscoree.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\cryptnet.dll - Thread Type: Other # ChildEBP RetAddr 00 0440ef24 7c821b74 ntdll!KiFastSystemCallRet 01 0440ef28 77e999ea ntdll!NtRaiseHardError+0xc 02 0440f194 77e840a1 kernel32!UnhandledExceptionFilter+0x4b4 03 0440f19c 77e6b7f9 kernel32!BaseThreadStart+0x4a 04 0440f1c4 7c82eeb2 kernel32!_except_handler3+0x61 05 0440f1e8 7c82ee84 ntdll!ExecuteHandler2+0x26 06 0440f290 7c82ecc6 ntdll!ExecuteHandler+0x24 07 0440f2b0 77bc6f76 ntdll!KiUserExceptionDispatcher+0xe 08 0440f378 77bc6f76 msvcrt!_purecall+0xb Thread ID: 54 System Thread ID: f54 Kernel Time: 0:0:0.62 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 54 ESP EIP Begin System Thread Information # ChildEBP RetAddr 00 09b8f778 7c822124 ntdll!KiFastSystemCallRet 01 09b8f77c 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 09b8f7ec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 09b8f800 792ed4ec kernel32!WaitForSingleObject+0x12 04 09b8f824 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a 05 09b8ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44 06 09b8ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 55 System Thread ID: 484 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0990ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0990ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0990ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0990ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 56 System Thread ID: 940 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 09a4ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 09a4ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 09a4ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 09a4ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 57 System Thread ID: a2c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0960ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0960ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0960ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0960ffec 00000000 kernel32!BaseThreadStart+0x34 *****SUMMARY***** -- Jonathan Steinberg Banc of America Securities Prime Brokerage Services Tag: partial get file size limit Tag: 363285
      • 2
        • Administer IIS Hi everyone, is it true that to administer IIS you have to be a local administrator of the machine? Thanks a lot to everyone, Ivan Mckenzie Tag: partial get file size limit Tag: 363282
      • 3
        • HostHeader Q I have a single IP and want to host 3 multiple sites on it www.a.com www.b.com www.c.com I can use host header value to distinguish them right? do I have to register all these domain names too??? Can someone throw an insight how to host 3 websites on a single IP and what needs to be done besides changing host records? TIA Tag: partial get file size limit Tag: 363271
      • 4
        • LsaRegisterLogonProcess : Access Denied Hi all, I'm using the LSALogonUser (s4uLogon). I'm trying to connect with the LsaRegisterLogonProcess but this one fails (STATUS_PORT_CONNECTION_REFUSED) even if my calling process (account define in the Application Pool) have the SeTcbPrivilege (Act as part of operating system). I'm definetly need a token with SecurityImpersonation as Impersonation level (using LsaConnectUntrusted give me a SecurityIdentification, not enough for impersonation). The account is define in my AD (Service account), localy the SeTcbPrivilege is OK, this account is also domain controller. is running the w3s service. I'm using the Windows Authentication mode (IIS 6) and i'm running on a win2003 box. please tell me how to connect with LsaRegisterLogonProcess. Thanks a lot, FT Tag: partial get file size limit Tag: 363270
      • 5
        • IISSTATE Log Any help will be greatly appreciated Opened log file 'D:\iisstate\output\IISState-1392.log' *********************** Starting new log output IISState version 3.3.1 Wed May 25 11:57:39 2005 OS = Windows 2003 Server Executable: inetinfo.exe PID = 1392 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 718 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0006f99c 7c821b84 ntdll!KiFastSystemCallRet 01 0006f9a0 77e41942 ntdll!NtReadFile+0xc 02 0006fa08 77f795ab kernel32!ReadFile+0x16c 03 0006fa34 77f7943c ADVAPI32!ScGetPipeInput+0x2a 04 0006faa8 77fb2ec9 ADVAPI32!ScDispatcherLoop+0x51 05 0006fcec 010027be ADVAPI32!StartServiceCtrlDispatcherA+0x93 06 0006fe1c 01002969 inetinfo!StartDispatchTable+0x277 07 0006ff44 0100339d inetinfo!main+0x117 08 0006ffc0 77e523cd inetinfo!mainCRTStartup+0x12f 09 0006fff0 00000000 kernel32!BaseProcessStart+0x23 Thread ID: 1 System Thread ID: 6ec Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0082fb3c 7c822124 ntdll!KiFastSystemCallRet 01 0082fb40 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0082fbb0 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0082fbc4 5a36467a kernel32!WaitForSingleObject+0x12 04 0082fbd4 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10 05 0082fbdc 5a3af41d w3dt!UlAtqStartListen+0x2d 06 0082fbec 5a3bc259 w3core!W3_SERVER::StartListen+0xbd 07 0082fe40 01002c3c w3core!UlW3Start+0x26e 08 0082fea4 01002ed7 inetinfo!LaunchWorkerProcess+0x159 09 0082ffb8 77e66063 inetinfo!W3SVCThreadEntry+0x55 0a 0082ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 2 System Thread ID: 8dc Kernel Time: 0:0:0.15 User Time: 0:0:0.46 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0086fcb8 7c822124 ntdll!KiFastSystemCallRet 01 0086fcbc 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0086fd2c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0086fd40 649f26a4 kernel32!WaitForSingleObject+0x12 04 0086fd68 010024b3 iisadmin!ServiceEntry+0x28a 05 0086ffa4 77f79348 inetinfo!InetinfoStartService+0x2cc 06 0086ffb8 77e66063 ADVAPI32!ScSvcctrlThreadA+0x21 07 0086ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 3 System Thread ID: bfc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00c3ff9c 7c821364 ntdll!KiFastSystemCallRet 01 00c3ffa0 7c81fe26 ntdll!NtDelayExecution+0xc 02 00c3ffb8 77e66063 ntdll!RtlpTimerThread+0x47 03 00c3ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 4 System Thread ID: 1d4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 00d4feac 7c822114 ntdll!KiFastSystemCallRet 01 00d4feb0 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 00d4ff58 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 00d4ff74 56f951ef kernel32!WaitForMultipleObjects+0x18 04 00d4ffa0 56f96a06 COADMIN!NOTIFY_CONTEXT::GetNextContext+0x67 05 00d4ffb8 77e66063 COADMIN!NOTIFY_CONTEXT::NotifyThreadProc+0x5f 06 00d4ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 5 System Thread ID: 584 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0165fea4 7c822114 ntdll!KiFastSystemCallRet 01 0165fea8 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0165ff50 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 0165ff6c 620b4524 kernel32!WaitForMultipleObjects+0x18 04 0165ffac 620b48d0 metadata!CListenerController::Listen+0x29 05 0165ffb8 77e66063 metadata!StartListenerThread+0x1a 06 0165ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 6 System Thread ID: abc Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 017dfea8 7c822114 ntdll!KiFastSystemCallRet 01 017dfeac 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 017dff54 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 017dff70 6ee3a890 kernel32!WaitForMultipleObjects+0x18 04 017dffac 6ee3ab2f IISCFG!CListener::Listen+0x23 05 017dffb8 77e66063 IISCFG!CListener::ListenerThreadStart+0x36 06 017dffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 7 System Thread ID: 928 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0171fcb4 7c822124 ntdll!KiFastSystemCallRet 01 0171fcb8 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0171fd28 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0171fd3c 5a31201a kernel32!WaitForSingleObject+0x12 04 0171fd5c 5a3120eb w3ssl!HTTPFilterServiceMain+0x8a 05 0171fd68 010024b3 w3ssl!ServiceEntry+0x9 06 0171ffa4 77f79348 inetinfo!InetinfoStartService+0x2cc 07 0171ffb8 77e66063 ADVAPI32!ScSvcctrlThreadA+0x21 08 0171ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 8 System Thread ID: 8ac Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0175febc 7c822114 ntdll!KiFastSystemCallRet 01 0175fec0 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0175ff68 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 0175ff84 5a312964 kernel32!WaitForMultipleObjects+0x18 04 0175ffb0 5a311f82 w3ssl!SCM_MANAGER::RunService+0xc4 05 0175ffb8 77e66063 w3ssl!HTTPFilterServiceThreadProc+0x39 06 0175ffc4 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 9 System Thread ID: cbc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01a5ff20 7c822124 ntdll!KiFastSystemCallRet 01 01a5ff24 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 01a5ff94 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 01a5ffa8 5b64add1 kernel32!WaitForSingleObject+0x12 04 01a5ffb8 77e66063 strmfilt!CERT_STORE::DeletionWorkerThread+0x1a 05 01a5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 10 System Thread ID: bc0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01a9fcec 7c822114 ntdll!KiFastSystemCallRet 01 01a9fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc 02 01a9ffb8 77e66063 ntdll!RtlpWaitThread+0x161 03 01a9ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 11 System Thread ID: f08 Kernel Time: 0:0:8.593 User Time: 0:0:27.890 Thread Type: Other # ChildEBP RetAddr 00 01b5ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 01b5ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 01b5ff54 5b65160e kernel32!GetQueuedCompletionStatus+0x29 03 01b5ff8c 5b65182c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 01b5ffa0 5b650f6c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 01b5ffb8 77e66063 strmfilt!THREAD_MANAGER::ThreadManagerThread+0x39 06 01b5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 12 System Thread ID: 280 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01b9fbb8 7c822114 ntdll!KiFastSystemCallRet 01 01b9fbbc 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 01b9fc64 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 01b9fcc0 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 01b9fcdc 6c7d63d5 USER32!MsgWaitForMultipleObjects+0x1f 05 01b9fd28 6930e66a INFOCOMM!IIS_SERVICE::StartServiceOperation+0x231 06 01b9fd68 010024b3 ftpsvc2!ServiceEntry+0xae 07 01b9ffa4 77f79348 inetinfo!InetinfoStartService+0x2cc 08 01b9ffb8 77e66063 ADVAPI32!ScSvcctrlThreadA+0x21 09 01b9ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 13 System Thread ID: eec Kernel Time: 0:0:0.687 User Time: 0:0:0.218 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01ecff50 7c821bf4 ntdll!KiFastSystemCallRet 01 01ecff54 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 01ecff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x29 03 01ecffb8 77e66063 ISATQ!AtqPoolThread+0x40 04 01ecffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 14 System Thread ID: d74 Kernel Time: 0:0:0.31 User Time: 0:0:0.93 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01f0ff50 7c821bf4 ntdll!KiFastSystemCallRet 01 01f0ff54 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 01f0ff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x29 03 01f0ffb8 77e66063 ISATQ!AtqPoolThread+0x40 04 01f0ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 15 System Thread ID: 16c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0220fe18 7c821c54 ntdll!KiFastSystemCallRet 01 0220fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 0220ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 0220ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 0220ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 0220ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 06 0220ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 16 System Thread ID: cb8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0224fec4 7c822114 ntdll!KiFastSystemCallRet 01 0224fec8 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0224ff70 69308dc4 kernel32!WaitForMultipleObjectsEx+0x11a 03 0224ffb8 77e66063 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x33 04 0224ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 17 System Thread ID: 254 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Listener # ChildEBP RetAddr 00 022cfe0c 7c822124 ntdll!KiFastSystemCallRet 01 022cfe10 71b23a09 ntdll!NtWaitForSingleObject+0xc 02 022cfe4c 71b23a52 mswsock!SockWaitForSingleObject+0x19d 03 022cff3c 71c0470c mswsock!WSPSelect+0x380 04 022cff8c 63ec4696 WS2_32!select+0xb9 05 022cffb4 63ec4700 ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22 06 022cffb8 77e66063 ISATQ!BmonThreadFunc+0x9 07 63ec4700 8b575600 kernel32!BaseThreadStart+0x34 WARNING: Frame IP not in any known module. Following frames may be wrong. 08 04c2c033 00000000 0x8b575600 Thread ID: 18 System Thread ID: ff8 Kernel Time: 0:0:11.828 User Time: 0:0:3.531 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0240ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0240ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0240ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0240ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0240ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0240ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0240ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 19 System Thread ID: 410 Kernel Time: 0:0:0.453 User Time: 0:0:0.125 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0244ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0244ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0244ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0244ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0244ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0244ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0244ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 20 System Thread ID: 398 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0248ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0248ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0248ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0248ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0248ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0248ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0248ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 21 System Thread ID: fa4 Kernel Time: 0:0:12.0 User Time: 0:0:3.796 Thread Type: HTTP Listener # ChildEBP RetAddr 00 024cff24 7c821bf4 ntdll!KiFastSystemCallRet 01 024cff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 024cff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 024cff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 024cffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 024cffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 024cffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 22 System Thread ID: 5d4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 02f5fa84 7c822124 ntdll!KiFastSystemCallRet 01 02f5fa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 02f5faf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 02f5fb0c 5a3b8147 kernel32!WaitForSingleObject+0x12 04 02f5ffb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126 05 02f5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 23 System Thread ID: e1c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 021cfe18 7c821c54 ntdll!KiFastSystemCallRet 01 021cfe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 021cff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 021cff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 021cffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 021cffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 06 021cffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 24 System Thread ID: eb4 Kernel Time: 0:0:0.140 User Time: 0:0:0.375 Thread Type: Other # ChildEBP RetAddr 00 0234ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0234ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0234ff54 5b65160e kernel32!GetQueuedCompletionStatus+0x29 03 0234ff8c 5b65182c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0234ffa0 5b650f6c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0234ffb8 77e66063 strmfilt!THREAD_MANAGER::ThreadManagerThread+0x39 06 0234ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 25 System Thread ID: c78 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0179ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0179ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0179ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0179ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 26 System Thread ID: bd0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0385feac 7c821bf4 ntdll!KiFastSystemCallRet 01 0385feb0 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0385fedc 77c604c3 kernel32!GetQueuedCompletionStatus+0x29 03 0385ff18 77c60655 RPCRT4!COMMON_ProcessCalls+0xa1 04 0385ff84 77c5f9f1 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x117 05 0385ff8c 77c5f7dd RPCRT4!ProcessIOEventsWrapper+0xd 06 0385ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 07 0385ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 08 0385ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 27 System Thread ID: 8e0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00c7ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 00c7ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 00c7ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 00c7ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 28 System Thread ID: c1c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0230ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0230ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0230ff54 5b65160e kernel32!GetQueuedCompletionStatus+0x29 03 0230ff8c 5b65182c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0230ffa0 5b650f6c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0230ffb8 77e66063 strmfilt!THREAD_MANAGER::ThreadManagerThread+0x39 06 0230ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 29 System Thread ID: f8c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0169ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0169ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0169ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0169ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 30 System Thread ID: cd8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0238ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0238ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0238ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0238ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 31 System Thread ID: 9f4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 023cff70 7c821bf4 ntdll!KiFastSystemCallRet 01 023cff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 023cffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 023cffec 00000000 kernel32!BaseThreadStart+0x34 ***** Dump name is formatted as: PID-Timestamp.dmp Creating D:\iisstate\output\1392-1117036670.dmp - mini user dump ***** Closing open log file D:\iisstate\output\IISState-1392.log Tag: partial get file size limit Tag: 363269
      • 6
        • Display PHP page In the past our web site was php based. At that time a manual was produced that contained a link to one of the php pages. Our new web site is completely html/xml. Obviously the link to the php page no longer works. Is there a way I could place a file on this server with a php extension that match the link but would redirect to the current html file without installing php on the server? Thanks Tag: partial get file size limit Tag: 363268
      • 7
        • How to redirect request to loadbalancer??? We will be distributing a webapp with a Tomcat appserver cluster. We wish to redirect requests sent to http://<client URL>/Acuity/* to http://<client URL>:<the load balancer port number> How do we redirect requests for a specific URL pattern to a port??? Tag: partial get file size limit Tag: 363267
      • 8
        • Can't add ISAPI Extension to IIS 5, Windows XP I'm running IIS 5.1 on a Windows XP box. When I try to add an ISAPI extension (.*, aspnet_isapi.dll) the OK button is not enabled, and I can't determine how to enable it. My account is an administrator account on the machine. I replicated this on someone else's Windows XP box, and another developer on our team was able to add the extension running IIS on Win2K. Any help on how to add the ISAPI extension would be appreciated. Tag: partial get file size limit Tag: 363263
      • 9
        • Where is the IIS migration utility? I need to migrate an IIS 4 to IIS 6 website. It is all FP 2002 extensions. I can't find the migration utility on the web. Can someone post the url where it is? Thanks. Tag: partial get file size limit Tag: 363262
      • 10
        • Querying against catalogs created on a remote server Hi, I am using Microsoft's indexing service to search for content in my website. How can I query against remote server catalog? What is the path I need to use? I need to call a catalog which is created on a d/f sever and on my page which does the search. Here is the query I am using in my asp.net page Dim strCatalog As String strCatalog = "TextSearch" Dim strQuery As String strQuery = "Select doctitle, vpath, path, rank, characterization from SCOPE() where FREETEXT(Contents, '" + TextBox1.Text + "') order by rank desc " Dim connString As String = "Provider=MSIDXS.1;Integrated Security .='';Data Source='" & strCatalog & "'" Please help! Tag: partial get file size limit Tag: 363261
      • 11
        • url scan in iis 6.0? I have an imaging web app that sends image files to an IE plug-in viewer as a url. When running the app in iis 5.0, the image would not show up in the viewer. I discovered that url scan was not allowing this action. I uninstalled url scan and the image file appeared in the viewer. Now we have upgraded to iis 6.0 and I'm having the same problem. Only, there is no url scan (that I'm aware of) running. Can someone tell me if some form of url scan is running behind the scenes and if so, how do I stop it? I have also looked into URL Authorization, but my application requires anonymous access, so this nullifies the use of URL auth..... any help would be appreciated thanks jay Tag: partial get file size limit Tag: 363257
      • 12
        • Server stops responding on network I have a Win2K3 Enterprise server hosting a few ASP.NET apps. The server has 3 ethernet adapters. One adapter has a public address(static) that is tied to a domain name. I can access the server, but at random intervals, it will stop responding. I can not ping the server or access it THROUGH THAT ETHERNET ADAPTER. However, i can get to the computer via a router with port forwarding to another ethernet adapter. The ONLY way i can get the "websites/ASP.NET apps" back up is to disable/enable the adapter or do a repair on it. I have another server with similar configuration that this happens to on similar intervals. I have checked my code in the apps running and everything *seems* OK, but i would think that the system should be able to recover from faulty code. This has been going on for over a year now, i am getting desperate!!!! Any help is GREATLY appreciated! Tag: partial get file size limit Tag: 363256
      • 13
        • is frontpage server extension a requirement for webdav? Hi, I posted a question earlier in this group regarding the authenication configuration of webdav. I am actually still working on the problem and would like to know if Frontpage server extension 2002 a requirement for webdav (using webfolder to access the virtual directory)? Thanks om Tag: partial get file size limit Tag: 363255
      • 14
        • IIS / SQL Server impersonation Hi I am attempting to implement impersonation from a windows application to a SQL Server database via a remoting middleware application(hosted in IIS 6 on W2003 Server). I have configured the host virtual directory in IIS to require windows authentication, and anyonymous access is off. Web.config specifies the following: <system.web> <authentication mode="Windows" /> <identity impersonate="true"/> </system.web> (In addition to the remoting configuration.) On the clients app.config I have: <channel ref="http" useDefaultCredentials="true"> <clientProviders> <formatter ref="binary"/> </clientProviders> </channel> Finally, the database permits Windows Authentication. When I try and open a connection to SQL Server (2000): conn.ConnectionString = @"Trusted_Connection=Yes;Persist Security Info=False;Initial Catalog=xxxxxxx;Data Source=xxxxxxx"; conn.Open(); I have tried variations on this which include the "Integrated Security = SSPI" property. In all cases, I get the following: Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. (The SQL server machine is on a separate box, which may be relevant. I have seen a number of posts around this) I have tried a couple of other things including elevating the Trust level of the assembly to Full. Adding the 'Act as Part of the Operating System' privilege to the ASPNET account. These were pretty much grabbing at straws. I have seen some posts around creating mirrored user accounts with appropriate privileges on both the web and db server, then getting IIS to run under this account. But this kind of defeats the purpose, I think. Essentially I want to impersonate the authenticating Windows user seamlessly to the database. I am aware of the connection pooling inefficiency. This is not my desired solution. The client requires it.... I have tried programmatically forcing the impersonation: public string ImpersonateProcess() { string stemp = "Initial Identity: " + WindowsIdentity.GetCurrent().Name; System.Security.Principal.WindowsImpersonationContext impersonationContext; impersonationContext = ((System.Security.Principal.WindowsIdentity)HttpContext.Current.User.Identity).Impersonate(); stemp += " Now Impersonating " + WindowsIdentity.GetCurrent().Name; impersonationContext.Undo() ; return stemp ; } this test method returns the following: Initial Identity: xxx\xxxxxxxxx Now Impersonating xxx\xxxxxxxxx ( where xxx\xxxxxxxxx is my domain\logon. If i run the following method: public string GetServerString() { // Use the HttpContext to acquire what IIS thinks the client's identity is. string temp = HttpContext.Current.User.Identity.Name; temp +=WindowsIdentity.GetCurrent().Name; temp +=" "+WindowsIdentity.GetCurrent().AuthenticationType; temp +=" "+WindowsIdentity.GetCurrent().IsAuthenticated; temp +=" "+WindowsIdentity.GetCurrent().IsAnonymous; temp +=" "+WindowsIdentity.GetCurrent().Token; temp +=" "+WindowsIdentity.GetCurrent().IsSystem; if (temp == null || temp.Equals(string.Empty)) { temp = "**unavailable**"; } return "Hi there. You are being served by instance number: " + InstanceHash.ToString() + ". Your alias is: " + temp ; } I get this: Hi there. You are being served by instance number: 55. Your alias is: xxx\xxxxxxxxx xxx\xxxxxxxxx NTLM True False 1076 False It seems clear to me that my security token is flowing to the remoting application. It even looks like impersonation is occurring correctly (since the Initial WindowsIdentity is mine. However... no database access. If I run the remoting application locally in IIS (5, admittedly) I can access the database. <sigh> Any help gratefully received, Thanks Matthew Tag: partial get file size limit Tag: 363254
      • 15
        • IIS Hangs... Hi, IIS hangs when my COM Object attempts to Connect to the SQL Database. This particular COM Object is being called from another COM Object and that is when IIS Hangs. This happens only on a Windows 2003 Server. IDE is unfortunately J++. Thanks in advance. Tag: partial get file size limit Tag: 363253
      • 16
        • IISState questions Hello all, I am troubleshooting a problem with IIS. Basically a site is stopping during the middle of the day, once a day, and has been happening for about a week. I wanted to use IISState to monitor my IIS process and watch for a hard crash. I attempted to to do this, and my results are below. I am guessing that I am getting this because I have an ISAPI filter installed that does not have a Microft symbol available. Is this correct? If so, how do I get around this in my troubleshooting? The filter is required and is written by another department, and they have had difficulties producing a symbol for their DLL. I do have the Microsoft symbols installed. Thanks, Jay C:\iisstate>iisstate -p 2804 -hc Symbol search path is: SRV*C:\iisstate\symbols*http://msdl.microsoft.com/download/symbols Microsoft (R) Windows Debugger Version 6.2.0013.1 Copyright (c) Microsoft Corporation. All rights reserved. Cannot debug pid 2804, Win32 error 5 "Access is denied." sxd av WARNING: The debugger does not have a current process or thread WARNING: Many commands will not work WaitForEvent failed, 0x8000FFFF C:\iisstate> Tag: partial get file size limit Tag: 363251
      • 17
        • iisadmpwd error page not found hi i have setup the iisadmpwd as described in microsoft article, but i receive: The page cannot be found The page you are looking for might have been removed, had its name changed, or is temporarily unavailable. -------------------------------------------------------------------------------- Please try the following: a.. Make sure that the Web site address displayed in the address bar of your browser is spelled and formatted correctly. b.. If you reached this page by clicking a link, contact the Web site administrator to alert them that the link is incorrectly formatted. c.. Click the Back button to try another link. HTTP Error 404 - File or directory not found. Internet Information Services (IIS) -------------------------------------------------------------------------------- Technical Information (for support personnel) a.. Go to Microsoft Product Support Services and perform a title search for the words HTTP and 404. b.. Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled Web Site Setup, Common Administrative Tasks, and About Custom Error Messages. any idea on what to do? i can't find detailed info on how to setup the password change of domain from web thanks Tag: partial get file size limit Tag: 363249
      • 18
        • Newbie: Fixing IIS and Installing PHP Sorry about this: crossposting from IISResources Alright I'm not at the server computer at the exact moment so I don't have any ability to take screenshots or give exact errors for a couple hours. I started this week working on trying to set up PHP and MySQL on a server that we have internally. The server already had a working IIS client running a website. The IP to the machine is 151.204.233.138. The website that was running is http://151.204.233.138/falmouthgis/default.htm located on the machine in d:\ArcGIS\Website\ or something like that. I attempted to install PHP and at first, it seemed alright. I could access a phpinfo(); command in my wwwroot directory (c:\Inetpub\wwwroot). Also, an index.html with something like 'Test' in it worked as well. Last night (yesterday afternoon), the website froze. I fixed that when I looked at the server because I put the wrong filename to the browscap file. That was fine. I then tried to fix the problem with authentication. I figured out (from reading this entire forum, heh) that the problem was that Anonymous Access was not working as I wanted it to. So I went in and tried to fix the problem. After going through maybe 5-10 forum posts on this website, all with different suggestions, I am now at the point where anonymous access seems to not work at all, and I'm not even getting a login screen anymore, just a 401 error. Sadly, I have Local Service at the moment for the Application Pool Identity, and would like to change it back to Network Services when possible (I tried a tip from another topic post to no avail. http://www.iis-resources.com/modules/newbb/viewtopic.php?topic_id=3149&forum=5) Currently, I'm totally 1000% confused on what's going on and I have no clue how to fix any of it. I currently have AuthDiag giving me a Kerberos error saying that the username has to be on the domain. I also had (until I did the above link) errors about IIS subauthentication. I'll post the AuthDiag information when I get back to the server as well as any other information anybody wants me to post. Thanks for the help and sorry for being such a newbie. *UPDATE 1* As of this moment: 1. wwwroot directory works fine (iisstart.htm and test.php) 2. all other websites (townsite and falmouthgis) are giving 401 errors **AuthDiag Log taken out due to post length** Thanks if you can help at all! Tag: partial get file size limit Tag: 363248
      • 19
        • Cannot find iisadmin.mfl durring IIS 6.0 Install I have a clean W2K3 SP1 machine and via the Mange Your Server app, I am trying to install IIS. I keeps looking for several files that are not on the CD, or in the Service pack, one of which I have listed in the subject. I have searched Microsoft, MSN, and google with the only reference showing up to a probelm with mofcomp.exe and service pack 1: http://tinyurl.com/8k8mu. Has anyone else seen this, know where I can get some info, or have a fix? Thanks! Tag: partial get file size limit Tag: 363245
      • 20
        • IIS 401 - Unauthorized to access the document Sometimes (wery rarely) the following error occurs on trying to access the ASP (the same ASP file in all cases). ========================================== FW-1 at prb001002: Unauthorized to access the document. Authorization is needed for FW-1 ========================================== This error occurs for different users in different times. For example, the link can be successfully opened for 200-300 times for the same user and then one time it will return the error. The authentication is set to Anonymous. The ASP file called has call to Server-side ActiveX in its code. Does anybody have any ideas of why that can happen? Thanks, Denis Tag: partial get file size limit Tag: 363243
      • 21
        • Migrate IIS from C: to E: We'd like to migrate our c:\inetpub folder in it's entirety to e:\inetpub for disk space reasons. I know we can create a new site and re-publish the applications but that is a poor way to make a copy. Can we just use Robocopy to copy the entire folder structure with security and then change the home folder in IIS admin? What about shares on the wwwroot folder? What about virtual folders within the default web site? What about metadata? I noticed references to IISSYNC - could this be used for this purpose? Thanks, Rob. Tag: partial get file size limit Tag: 363242
      • 22
        • IIS 6.0 Problem with a badly formed (but valid) http header Dear All, We are using a hardware that generates an http request with a custom header and sends it to an IIS 6.0 web server. Although the header seems to conform to http rfc, we can't extract a correct header on the IIS side. Please use the following to regenerate the problem: 1. Create form.asp with the following content and put it somewhere in the IIS: form.asp ------------------------------------------------------- <% Response.Write Request.ServerVariables("ALL_RAW") %> ------------------------------------------------------- 2. Download wfetch from http://support.microsoft.com/kb/284285/EN-US/ 3. Send an HTTP/1.1 request using GET method to the above form.asp with the following header Accept: */*\r\n HOST: 1.2.3.4\r\n Test_Header: 000...(64 characters)...0\r\n 111...(64 characters)...1\r\n 222...(64 characters)...2\r\n 333...(64 characters)...3\r\n 444...(64 characters)...4\r\n 555...(64 characters)...5\r\n 666...(64 characters)...6\r\n 777...(64 characters)...7\r\n 888...(64 characters)...8\r\n 999...(64 characters)...9\r\n AAA...(64 characters)...A\r\n BBB...(64 characters)...B\r\n CCC...(64 characters)...C\r\n DDD...(64 characters)...D\r\n EEE...(64 characters)...E\r\n FFF...(64 characters)...F\r\n 000...(64 characters)...0\r\n 111...(64 characters)...1\r\n 222...(64 characters)...2\r\n 333...(64 characters)...3\r\n 444...(64 characters)...4\r\n 555...(64 characters)...5\r\n 666...(64 characters)...6\r\n 777...(64 characters)...7\r\n 888...(64 characters)...8\r\n 999...(64 characters)...9\r\n AAA...(64 characters)...A\r\n BBB...(64 characters)...B\r\n CCC...(64 characters)...C\r\n DDD...(64 characters)...D\r\n EEE...(64 characters)...E\r\n FFF...(64 characters)...F\r\n \r\n Each line of the Test_Header value has an space then 64 repetitions of the same character and then \r\n (I didn't put the actual header here because I wasn't sure about the text formatting in the newgroups). 4. It seems that the above header conforms to HTTP standard (as it is claimed by the vendor of the hardware), you can refer to RFC of HTTP/1.1 (RFC2616), Section 2.2 "Basic Rules", third paragraph: .... HTTP/1.1 header field values can be folded onto multiple lines if the continuation line begins with a space or horizontal tab. All linear white space, including folding, has the same semantics as SP. A recipient MAY replace any linear white space with a single SP before interpreting the field value or forwarding the message downstream. .... 5. When the page is returned from IIS, there are extra bytes (in my case 40 bytes) inserted in the middle of the header (checking tcpdump it seems the problem happens whenever the http request is sent using more than one tcp packet and the extra bytes are inserted between the data from the two tcp packets). 6. Sending the same header as above but removing the \r\n and spaces seems to resolve the problem. A. Is this a known bug in IIS ? B. Is there any fix/patch for that ? C. Supposing that I can't change the way that the header is inserted, is there a way that I can change the header and remove the extra formatting before IIS handles the header incorrectly ? Sorry for the long post. Thanks in advance, Tag: partial get file size limit Tag: 363241
      • 23
        • File Upload on IIS6 on Win 2003 I am migrating a web from NT 4.0 to win 2003. all of the asp use cpshost.dll to upload files to win2003. how can I get the cpshost.dll for win2003? Thank you in advance Tag: partial get file size limit Tag: 363235
      • 24
        • Please review IIS State Dump I have IIS 6.0 W2K3 no SP1. I have a few instances that the app stops, with this type of error in event logs: A process serving application pool "DefaultAppPool" exceeded time limits during shut down." The appl makes connections to a SQL database which is located on another server. Please tell me whether it is a jet db similar to other posts or exceeded time limit from IIS configuration or bad code writing. I removed several threads (I think same data) due to post length restriction. Thank you. Opened log file 'D:\iisstate\output\IISState-996.log' Starting new log output IISState version 3.3.1 Tue May 24 13:02:48 2005 OS = Windows 2003 Server Executable: w3wp.exe PID = 996 Thread ID: 0 System Thread ID: f44 Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0006fe58 77f43741 SharedUserData!SystemCallStub+0x4 01 0006fe5c 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0006fecc 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0006fedc 5a3635ae kernel32!WaitForSingleObject+0xf 04 0006feec 5a364d7d w3dt!WP_CONTEXT::RunMainThreadLoop+0xe 05 0006fef4 5a3a1d98 w3dt!UlAtqStartListen+0x2d 06 0006ff00 5a3a5d54 w3core!W3_SERVER::StartListen+0x8e 07 0006ff0c 010017af w3core!UlW3Start+0xea 08 0006ff44 0100195e w3wp!wmain+0x236 09 0006ffc0 77e4f38c w3wp!wmainCRTStartup+0x12f 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23 Thread ID: 1 System Thread ID: 1290 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 009fff9c 77f4262b SharedUserData!SystemCallStub+0x4 01 009fffa0 77f6b5b2 ntdll!NtDelayExecution+0xc 02 009fffb8 77e4a990 ntdll!RtlpTimerThread+0x45 03 009fffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 2 System Thread ID: 1594 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 00a3ff70 77f430c7 SharedUserData!SystemCallStub+0x4 01 00a3ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc 02 00a3ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b 03 00a3ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 4 System Thread ID: 1620 Kernel Time: 0:0:0.296 User Time: 0:0:0.406 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00ceff28 77f430c7 SharedUserData!SystemCallStub+0x4 01 00ceff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc 02 00ceff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27 03 00ceff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31 04 00ceffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21 05 00ceffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35 06 00ceffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 8 System Thread ID: 17e8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0172ff14 77f43741 SharedUserData!SystemCallStub+0x4 01 0172ff18 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0172ff88 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0172ff98 5a3a51f7 kernel32!WaitForSingleObject+0xf 04 0172ffb8 77e4a990 w3core!HTTP_COMPRESSION::CompressionThread+0x85 05 0172ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 9 System Thread ID: 760 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 0176fe20 77f4313f SharedUserData!SystemCallStub+0x4 01 0176fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc 02 0176ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193 03 0176ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9 04 0176ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c 05 0176ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17 06 0176ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 10 System Thread ID: d98 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 017aff8c 77f4262b SharedUserData!SystemCallStub+0x4 01 017aff90 77f6f0fc ntdll!NtDelayExecution+0xc 02 017affb8 77e4a990 ntdll!RtlpIOWorkerThread+0x3d 03 017affec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 11 System Thread ID: 1d4 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0191fe40 77f430c7 SharedUserData!SystemCallStub+0x4 01 0191fe44 77e430bc ntdll!ZwRemoveIoCompletion+0xc 02 0191fe70 791dbec4 kernel32!GetQueuedCompletionStatus+0x27 03 0191fea4 791dbe6e mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x49 04 0191ffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 05 0191ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 12 System Thread ID: 1048 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0195feb4 77f4262b SharedUserData!SystemCallStub+0x4 01 0195feb8 77e418ea ntdll!NtDelayExecution+0xc 02 0195ff20 77e416ee kernel32!SleepEx+0x68 03 0195ff2c 791b1753 kernel32!Sleep+0xb 04 0195ffb8 77e4a990 mscorsvr!ThreadpoolMgr::GateThreadStart+0x54 05 0195ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 13 System Thread ID: 164c Kernel Time: 0:0:2.187 User Time: 0:0:14.562 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 0199f530 77f43741 SharedUserData!SystemCallStub+0x4 01 0199f534 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 0199f570 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 0199f578 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 0199f594 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 14 System Thread ID: 920 Kernel Time: 0:0:3.718 User Time: 0:0:17.890 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 019df51c 77f43741 SharedUserData!SystemCallStub+0x4 01 019df520 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 019df55c 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 019df564 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 019df580 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 16 System Thread ID: 6f8 Kernel Time: 0:0:0.546 User Time: 0:0:37.437 Thread Type: Other # ChildEBP RetAddr 00 0c7aff10 77f43741 SharedUserData!SystemCallStub+0x4 01 0c7aff14 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0c7aff84 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0c7aff94 7920198c kernel32!WaitForSingleObject+0xf 04 0c7affac 79244fbe mscorsvr!gc_heap::gc_thread_function+0x22 05 0c7affb8 77e4a990 mscorsvr!gc_heap::gc_thread_stub+0x1e 06 0c7affec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 17 System Thread ID: 1258 Kernel Time: 0:0:0.328 User Time: 0:0:31.250 Thread Type: Other # ChildEBP RetAddr 00 0c7efe10 77f43741 SharedUserData!SystemCallStub+0x4 01 0c7efe14 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0c7efe84 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0c7efe94 7920198c kernel32!WaitForSingleObject+0xf 04 0c7efeac 79244fbe mscorsvr!gc_heap::gc_thread_function+0x22 05 0c7effb8 77e4a990 mscorsvr!gc_heap::gc_thread_stub+0x1e 06 0c7effec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 18 System Thread ID: 1288 Kernel Time: 0:0:0.140 User Time: 0:0:1.140 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 0c82fbcc 77f43741 SharedUserData!SystemCallStub+0x4 01 0c82fbd0 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 0c82fc0c 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 0c82fc14 70cff3b9 ntdll!RtlEnterCriticalSection+0x46 04 0c82fca8 7920841d gdiplus!GdipDeleteFontFamily+0x36 05 0c82fd34 792084e5 mscorsvr!MethodTable::CallFinalizer+0xee 06 0c82fd48 79207f69 mscorsvr!CallFinalizer+0x84 07 0c82fde0 7920857d mscorsvr!CallFinalizer+0x255 08 0c82fdf4 791b4de8 mscorsvr!GCHeap::RestartEE+0x73 09 0c82fe3c 79208550 mscorsvr!Thread::DoADCallBack+0x5c 0a 0c82fedc 79207d21 mscorsvr!CallFinalizer+0x2fa 0b 0c82ff24 7922d5e1 mscorsvr!GCHeap::FinalizerThreadStart+0xc2 0c 0c82ffb8 77e4a990 mscorsvr!Thread::intermediateThreadProc+0x44 0d 0c82ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 19 System Thread ID: 1408 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 0c87ff14 77f43741 SharedUserData!SystemCallStub+0x4 01 0c87ff18 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0c87ff88 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0c87ff98 70a05c99 kernel32!WaitForSingleObject+0xf 04 0c87ffb4 70a0625a asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x19 05 0c87ffb8 77e4a990 asp!CApplnCleanupMgr::ApplnCleanupThread+0xa 06 0c87ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 21 System Thread ID: 68c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 0c9ffefc 77f43741 SharedUserData!SystemCallStub+0x4 01 0c9fff00 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0c9fff70 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0c9fff80 709f4800 kernel32!WaitForSingleObject+0xf 04 0c9fffb4 77f5cd6b asp!CViperReqManager::WatchThread+0x65 Thread ID: 28 System Thread ID: 176c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0ce8ff38 77f4262b SharedUserData!SystemCallStub+0x4 01 0ce8ff3c 77e418ea ntdll!NtDelayExecution+0xc 02 0ce8ffa4 791b4f99 kernel32!SleepEx+0x68 03 0ce8ffb8 77e4a990 mscorsvr!ThreadpoolMgr::TimerThreadStart+0x30 04 0ce8ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 29 System Thread ID: 194 Kernel Time: 0:0:4.328 User Time: 0:0:30.640 Other information: Thread is waiting for a lock to be released. Looking for lock owner.Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 0cf7f31c 77f43741 SharedUserData!SystemCallStub+0x4 01 0cf7f320 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 0cf7f35c 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 0cf7f364 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 0cf7f380 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 30 System Thread ID: 7b4 Kernel Time: 0:0:2.437 User Time: 0:0:14.0 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 0d67f584 77f43741 SharedUserData!SystemCallStub+0x4 01 0d67f588 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 0d67f5c4 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 0d67f5cc 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 0d67f5e8 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 33 System Thread ID: af4 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0e0fff24 77f4262b SharedUserData!SystemCallStub+0x4 01 0e0fff28 77e418ea ntdll!NtDelayExecution+0xc 02 0e0fff90 79230bfc kernel32!SleepEx+0x68 03 0e0fffb8 77e4a990 mscorsvr!ThreadpoolMgr::WaitThreadStart+0x45 04 0e0fffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 37 System Thread ID: 17ec Kernel Time: 0:0:0.0 User Time: 0:0:0.31 Thread Type: Other # ChildEBP RetAddr 00 0eb1ff10 77f43741 SharedUserData!SystemCallStub+0x4 01 0eb1ff14 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0eb1ff84 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0eb1ff94 0e9338a9 kernel32!WaitForSingleObject+0xf 04 0eb1ffb8 77e4a990 oledb32!ReleaseResourceThread+0x54 05 0eb1ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 38 System Thread ID: 1690 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0eb5ff08 77f43741 SharedUserData!SystemCallStub+0x4 01 0eb5ff0c 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0eb5ff7c 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0eb5ff8c 0e9338b9 kernel32!WaitForSingleObject+0xf 04 0eb5ffb8 77e4a990 oledb32!ResetResourceThread+0x84 05 0eb5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 49 System Thread ID: 5fc Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0f9bff14 77d06718 SharedUserData!SystemCallStub+0x4 01 0f9bff34 771bb5a9 USER32!NtUserGetMessage+0xc 02 0f9bff74 771bb527 ole32!CDllHost::STAWorkerLoop+0x70 03 0f9bff90 771bb472 ole32!CDllHost::WorkerThread+0xc6 04 0f9bff94 771625ea ole32!DLLHostThreadEntry+0x9 05 0f9bff9c 77160000 ole32!CRpcThread::WorkerLoop+0x1e 06 0f9bffac 77162653 ole32!_imp__InstallApplication <PERF> (ole32+0x0) 07 0f9bffb8 77e4a990 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1f 08 0f9bffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 74 System Thread ID: ac8 Kernel Time: 0:0:1.953 User Time: 0:0:11.890 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 10a2f030 77f43741 SharedUserData!SystemCallStub+0x4 01 10a2f034 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 10a2f070 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 10a2f078 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 10a2f094 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 86 System Thread ID: 139c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 1272fe20 77f4313f SharedUserData!SystemCallStub+0x4 01 1272fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc 02 1272ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193 03 1272ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9 04 1272ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c 05 1272ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17 06 1272ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 87 System Thread ID: 13bc Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 138cf4c0 77f430c7 SharedUserData!SystemCallStub+0x4 01 138cf4c4 77e430bc ntdll!ZwRemoveIoCompletion+0xc 02 138cf4f0 791dbec4 kernel32!GetQueuedCompletionStatus+0x27 03 138cf524 791dbe6e mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x49 04 138cffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 05 138cffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 88 System Thread ID: f5c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 14fdf340 77f430c7 SharedUserData!SystemCallStub+0x4 01 14fdf344 77e430bc ntdll!ZwRemoveIoCompletion+0xc 02 14fdf370 791dbec4 kernel32!GetQueuedCompletionStatus+0x27 03 14fdf3a4 791dbe6e mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x49 04 14fdffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 05 14fdffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 89 System Thread ID: 145c Kernel Time: 0:0:0.828 User Time: 0:0:5.62 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 155ae91c 77f43741 SharedUserData!SystemCallStub+0x4 01 155ae920 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 155ae95c 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 155ae964 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 155ae980 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 90 System Thread ID: 3b0 Kernel Time: 0:0:1.109 User Time: 0:0:5.671 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 16c7f630 77f43741 SharedUserData!SystemCallStub+0x4 01 16c7f634 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 16c7f670 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 16c7f6e8 71c0134f mswsock!WSPRecv+0x1f0 04 16c7f724 71bb1151 WS2_32!WSARecv+0x75 05 16c7f750 6d56130e WSOCK32!recv+0x31 06 16c7f790 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 16c7f83c 0dc037a1 0xdbe04a1 08 16c7f8e8 0dc0cc1a 0xdc037a1 09 16c7f900 0dc0c8c5 0xdc0cc1a 0a 16c7f968 0dafab9e 0xdc0c8c5 0b 16c7f998 0dafab1f 0xdafab9e 0c 16c7fa00 791b33ec 0xdafab1f 0d 16c7fa08 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 16c7fb18 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 16c7fbd4 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 16c7fbfc 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 16c7fcb0 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 16c7fcc4 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 16c7fd0c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 16c7fdc8 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 16c7fddc 791b59a5 mscorsvr!AddTimerCallback+0x10 16 16c7fdf0 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 16c7fe04 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 16c7fe24 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 16c7ffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 16c7ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 91 System Thread ID: 16c4 Kernel Time: 0:0:0.687 User Time: 0:0:3.828 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 16d8f39c 77f43741 SharedUserData!SystemCallStub+0x4 01 16d8f3a0 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 16d8f3dc 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 16d8f3e4 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 16d8f400 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 116 System Thread ID: a24 Kernel Time: 0:0:0.93 User Time: 0:0:1.312 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1aade8b0 77f43741 SharedUserData!SystemCallStub+0x4 01 1aade8b4 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1aade8f0 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1aade968 71c0134f mswsock!WSPRecv+0x1f0 04 1aade9a4 71bb1151 WS2_32!WSARecv+0x75 05 1aade9d0 6d56130e WSOCK32!recv+0x31 06 1aadea10 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1aadeabc 0dc037a1 0xdbe04a1 08 1aadeb68 0dc0cc1a 0xdc037a1 09 1aadeb80 0dc0c8c5 0xdc0cc1a 0a 1aadebe8 0dafab9e 0xdc0c8c5 0b 1aadec18 0dafab1f 0xdafab9e 0c 1aadec80 791b33ec 0xdafab1f 0d 1aadec88 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1aaded98 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1aadee54 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1aadee7c 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1aadef30 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1aadef44 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1aadef8c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1aadf048 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1aadf05c 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1aadf070 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1aadf084 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1aadf0a4 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1aadffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1aadffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 117 System Thread ID: 15e0 Kernel Time: 0:0:0.0 User Time: 0:0:0.187 *** WARNING: Unable to verify checksum for c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_286988f9\mscorlib.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_286988f9\mscorlib.dll Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker succeeded. Loaded Son of Strike data table version 5 from "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll" Thread 117 ESP EIP 1ae2e514 7999c073 [DEFAULT] [hasThis] Object System.Collections.Hashtable.get_Item(Object) c0000005 Exception in C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\sos.dll.ClrStack debugger extension. PC: 6028d1b4 VA: 00134000 R/W: 0 Parameter: 0001003f Begin System Thread Information # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 06660398 0000002f mscorlib_79990000+0xc073 Thread ID: 118 System Thread ID: 1738 Kernel Time: 0:0:0.78 User Time: 0:0:0.218 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1ae8e7b0 77f43741 SharedUserData!SystemCallStub+0x4 01 1ae8e7b4 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1ae8e7f0 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1ae8e868 71c0134f mswsock!WSPRecv+0x1f0 04 1ae8e8a4 71bb1151 WS2_32!WSARecv+0x75 05 1ae8e8d0 6d56130e WSOCK32!recv+0x31 06 1ae8e910 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1ae8e9bc 0dc037a1 0xdbe04a1 08 1ae8ea68 0dc0cc1a 0xdc037a1 09 1ae8ea80 0dc0c8c5 0xdc0cc1a 0a 1ae8eae8 0dafab9e 0xdc0c8c5 0b 1ae8eb18 0dafab1f 0xdafab9e 0c 1ae8eb80 791b33ec 0xdafab1f 0d 1ae8eb88 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1ae8ec98 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1ae8ed54 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1ae8ed7c 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1ae8ee30 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1ae8ee44 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1ae8ee8c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1ae8ef48 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1ae8ef5c 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1ae8ef70 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1ae8ef84 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1ae8efa4 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1ae8ffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1ae8ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 119 System Thread ID: 15a4 Kernel Time: 0:0:0.15 User Time: 0:0:0.31 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1abdf7b0 77f43741 SharedUserData!SystemCallStub+0x4 01 1abdf7b4 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1abdf7f0 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1abdf868 71c0134f mswsock!WSPRecv+0x1f0 04 1abdf8a4 71bb1151 WS2_32!WSARecv+0x75 05 1abdf8d0 6d56130e WSOCK32!recv+0x31 06 1abdf910 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1abdf9bc 0dc037a1 0xdbe04a1 08 1abdfa68 0dc0cc1a 0xdc037a1 09 1abdfa80 0dc0c8c5 0xdc0cc1a 0a 1abdfae8 0dafab9e 0xdc0c8c5 0b 1abdfb18 0dafab1f 0xdafab9e 0c 1abdfb80 791b33ec 0xdafab1f 0d 1abdfb88 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1abdfc98 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1abdfd54 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1abdfd7c 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1abdfe30 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1abdfe44 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1abdfe8c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1abdff48 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1abdff5c 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1abdff70 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1abdff84 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1abdffa4 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1abdffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1abdffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 120 System Thread ID: 1294 Kernel Time: 0:0:0.0 User Time: 0:0:0.62 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1ac4f730 77f43741 SharedUserData!SystemCallStub+0x4 01 1ac4f734 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1ac4f770 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1ac4f7e8 71c0134f mswsock!WSPRecv+0x1f0 04 1ac4f824 71bb1151 WS2_32!WSARecv+0x75 05 1ac4f850 6d56130e WSOCK32!recv+0x31 06 1ac4f890 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1ac4f93c 0dc037a1 0xdbe04a1 08 1ac4f9e8 0dc0cc1a 0xdc037a1 09 1ac4fa00 0dc0c8c5 0xdc0cc1a 0a 1ac4fa68 0dafab9e 0xdc0c8c5 0b 1ac4fa98 0dafab1f 0xdafab9e 0c 1ac4fb00 791b33ec 0xdafab1f 0d 1ac4fb08 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1ac4fc18 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1ac4fcd4 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1ac4fcfc 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1ac4fdb0 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1ac4fdc4 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1ac4fe0c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1ac4fec8 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1ac4fedc 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1ac4fef0 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1ac4ff04 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1ac4ff24 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1ac4ffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1ac4ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 121 System Thread ID: 1284 Kernel Time: 0:0:0.0 User Time: 0:0:0.62 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1ad6f6b0 77f43741 SharedUserData!SystemCallStub+0x4 01 1ad6f6b4 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1ad6f6f0 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1ad6f768 71c0134f mswsock!WSPRecv+0x1f0 04 1ad6f7a4 71bb1151 WS2_32!WSARecv+0x75 05 1ad6f7d0 6d56130e WSOCK32!recv+0x31 06 1ad6f810 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1ad6f8bc 0dc037a1 0xdbe04a1 08 1ad6f968 0dc0cc1a 0xdc037a1 09 1ad6f980 0dc0c8c5 0xdc0cc1a 0a 1ad6f9e8 0dafab9e 0xdc0c8c5 0b 1ad6fa18 0dafab1f 0xdafab9e 0c 1ad6fa80 791b33ec 0xdafab1f 0d 1ad6fa88 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1ad6fb98 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1ad6fc54 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1ad6fc7c 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1ad6fd30 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1ad6fd44 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1ad6fd8c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1ad6fe48 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1ad6fe5c 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1ad6fe70 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1ad6fe84 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1ad6fea4 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1ad6ffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1ad6ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 122 System Thread ID: 8c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 1adaff70 77f430c7 SharedUserData!SystemCallStub+0x4 01 1adaff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc 02 1adaffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b 03 1adaffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 123 System Thread ID: 530 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1b0af630 77f43741 SharedUserData!SystemCallStub+0x4 01 1b0af634 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1b0af670 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1b0af6e8 71c0134f mswsock!WSPRecv+0x1f0 04 1b0af724 71bb1151 WS2_32!WSARecv+0x75 05 1b0af750 6d56130e WSOCK32!recv+0x31 06 1b0af790 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1b0af83c 0dc037a1 0xdbe04a1 08 1b0af8e8 0dc0cc1a 0xdc037a1 09 1b0af900 0dc0c8c5 0xdc0cc1a 0a 1b0af968 0dafab9e 0xdc0c8c5 0b 1b0af998 0dafab1f 0xdafab9e 0c 1b0afa00 791b33ec 0xdafab1f 0d 1b0afa08 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1b0afb18 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1b0afbd4 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1b0afbfc 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1b0afcb0 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1b0afcc4 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1b0afd0c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1b0afdc8 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1b0afddc 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1b0afdf0 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1b0afe04 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1b0afe24 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1b0affb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1b0affec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 124 System Thread ID: b34 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 1b11ff70 77f430c7 SharedUserData!SystemCallStub+0x4 01 1b11ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc 02 1b11ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b 03 1b11ffec 00000000 kernel32!BaseThreadStart+0x34 Tag: partial get file size limit Tag: 363228
      • 25
        • IISState Question Any ideas, suggestion, etc. about what this snippet of an IISState log is trying to tell me? Basically, when I run IISState during a high processor/high Requests Queued event this type of thread seems to be holding a lock (other threads point to this one as the one holding a lock). For some reason it's user time is more than one minute. Earlier post today had no takers. Thanks Thread ID: 9 System Thread ID: 650 Kernel Time: 0:0:37.109 User Time: 0:1:8.328 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0110f6d8 769b245c INFOCOMM!FastFindAnonymousToken+0x24 01 0110f6ec 65f07611 INFOCOMM!TCP_AUTHENT::ClearTextLogon+0x16 02 0110f888 65f03977 w3svc!HTTP_REQ_BASE::LogonUserA+0x67e 03 0110fcac 65f0275a w3svc!HTTP_REQ_BASE::OnRestartRequest+0xa42 04 0110fcec 65f025a4 w3svc!HTTP_REQ_BASE::OnCompleteRequest+0x498 05 0110fd2c 65f02501 w3svc!HTTP_REQ_BASE::UnWrapRequest+0x1f4 06 0110fd4c 65f023b8 w3svc!HTTP_REQ_BASE::OnFillClientReq+0x7a 07 0110fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x99 08 0110fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa 09 0110ff08 65f06b58 w3svc!CreateClient+0x7b 0a 0110ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118 0b 0110ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e 0c 0110ffb4 7c57b388 ISATQ!AtqPoolThread+0x1a8 0d 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52 Tag: partial get file size limit Tag: 363215
    • Next
      • 1
        • Removing the web root application If I click the Remove button on the root web application for a site with only static HTML how does that affect IIS? Does the web site run in a different worker process? Cheers, Colin Tag: partial get file size limit Tag: 363212
      • 2
        • mtx.exe growing out of control Hi, I have NT4.0 with SP6a and IIS. I'm running a simple web server - it's a single ASP page. It accesses a database and displays some data, refreshing every 20 seconds. The thing is, the machine that accesses it needs to be on all the time with the page displayed. What I've found is that my mtx.exe process uses more and more memory and after about a week, I get an ODBC memory allocation error and I have to restart the web server. I'm using ODBC to get to the database. It's an odd one - Advantage Database Server, their ODBC driver. I close my connection and recordset at the end of the page and set the objects to 'nothing'. Everything else is straight ASP, VBScript. No other objects. Anyone have any ideas? Thanks in advance, Ryan Tag: partial get file size limit Tag: 363211
      • 3
        • Redirect Question Bare with me here but I'd like to know how running an IIS server how I can redirect users making any http or https request to first redirect to a page on my server. Then I want them to register/log in and then it passes them back to their original request. If this belongs in another forum, please let me know. Thanks, JG Tag: partial get file size limit Tag: 363210
      • 4
        • admin rights for web masters I manage multiple IIS servers from 4.0 to the latest. We have a group of developers who have the webmaster role and I have worked well with them for many years. I always put them in the local admins group of every web server so they can manage IIS if they need to. 99% of what they use it for is creating www virtuals. I do all the other IIS configuration such as sites, host headers,ssl,ftp setup etc. Now I have a Manager of my department who is of the opinion that developers should not have admin access to servers. If I remove them from the admin group, they cannot use IIS MGR. I looked into scripting virtuals etc, but even that apparently requires admin rights to run. I was curious how other companies handle web masters having admin rights. I wish there was a role I could give them that let them do IIS MGR without being full admins on the box. That would be perfect. We are considering going to a staging server model, but don't have the money or staff to handle managing it. I have about 50 other non admin content updaters using a variety of tools and we really haven't had any issues that necessitate a staging server solution. Any suggestions? Tag: partial get file size limit Tag: 363209
      • 5
        • Iusr account locking out in iis 6.0 I have a iis 6.0 server that the iusr account keeps locking out and was wondering if there was a way to see where the lockout is coming from. I have looked in IIS log files and event viewerand do not see any errors there. What is the best method to trouble shoot this Tag: partial get file size limit Tag: 363208
      • 6
        • Downloading odd file types from IIS6.0 We have a download directory on IIS6.0 2003 and we place .cfg, .bat, .abc, etc... files in it for us to download from other places. They won't. Not even if you right click on one and do a "Save Target As." If you just click on it, it gives a 404 error and the right click error gives a "The file cannot be found" error. Strange thing is that .zip files can be downloaded just fine. Where can I fix this? Thanks. Tag: partial get file size limit Tag: 363207
      • 7
        • Log parser 2.2 physical and virtual directories I'm trying to display both the physical and virtual directories that are in my web server, IIS 5.1. I have been using log parser and its a great tool but I'm a bit stuck. The problem is that it is only outputing certain directories 1) Script 2) Output of Script 3) Actual Virtual and Physical directories. Here is what I have: 1) Script -------- SELECT EXTRACT_TOKEN(ObjectPath,1,'LOCALHOST/') AS [Sites or virtual directories], TO_LOWERCASE(PropertyValue) AS MappedPath FROM IIS://LOCALHOST WHERE (PropertyName = 'Path') AND (PropertyValue LIKE '%SystemDrive%%') AND (ObjectClass NOT LIKE '%Service') AND (ObjectClass NOT LIKE '%WebServer') AND (ObjectPath NOT LIKE '%/W3SVC/Info/%') AND (ObjectPath NOT LIKE '%/MSFTPSVC/Info/%') ------------ 2) Output of script The output is: Sites or virtual directories Path -------------------------------------------------------- W3SVC/1/ROOT c:\inetpub\wwwroot\www W3SVC/1/ROOT/IISHelp c:\windows\help\iishelp W3SVC/1/ROOT/Scripts c:\inetpub\scripts W3SVC/1/ROOT/_vti_bin c:\program files\common files\microsoft shared\web server extensions\40\isapi W3SVC/1/ROOT/Printers c:\windows\web\printers W3SVC/1/ROOT/JRunScripts c:\cfusionmx7\runtime\lib\wsconfig\2 MSFTPSVC/1/ROOT c:\inetpub\ftproot ----------------- 3) Actual virtual and physical directories: ---- W3SVC/1/ROOT W3SVC/1/ROOT/localstart.asp W3SVC/1/ROOT/IISHelp W3SVC/1/ROOT/iisadmin W3SVC/1/ROOT/Scripts W3SVC/1/ROOT/Scripts/Proxy W3SVC/1/ROOT/Scripts/Proxy/w3proxy.dll W3SVC/1/ROOT/_vti_pvt W3SVC/1/ROOT/_vti_log W3SVC/1/ROOT/_private W3SVC/1/ROOT/_vti_txt W3SVC/1/ROOT/_vti_script W3SVC/1/ROOT/_vti_cnf W3SVC/1/ROOT/_vti_bin W3SVC/1/ROOT/Printers W3SVC/1/ROOT/archive W3SVC/1/ROOT/student W3SVC/1/ROOT/phpMyAdmin W3SVC/1/ROOT/JRunScripts W3SVC/1/Filters SmtpSvc/1 SmtpSvc/1 Tag: partial get file size limit Tag: 363206
      • 8
        • IIS5 on win2k Please provide some assistance in troubleshooting iis5 http service timing out. Our site is running w2k, IIS 5 and coldfusion maxman Tag: partial get file size limit Tag: 363204
      • 9
        • WebDAV not working In short, I have read through all the example of setting up a WebDAV folder on XP Pro and 2000 Server. I can get the setup to working properly on my desktop, but have had not luck on 2000 server except when I install FPSE 2002 (but I don't want FPSE just native WebDAV). I have tried removing server extensions as directed to ensure DAV-only and still no luck. Internet Explorer at the server and desktop are giving the "could not open as a web folder, would you like to open in it's default view" message. IIS Lockdown is not installed, execute permission are allowed on the .dll file (can't remember which one) that allows wevdav. Is there anyway to trace the issue? What am I missing if WebDAV is "enabled by default"? FYI, although FrontPage SE have been removed from the virtual servers, Add/Remove programs still has FrontPage SE 2000 SR-1 as an option to uninstall, but it will not let me. Tag: partial get file size limit Tag: 363198
      • 10
        • Locating AV in activex control running on IIS Hi I've have an activex control of mine that is actively called from my IIS server's ASP pages. It runs for quite some time and then it will AV. I'm having trouble locating the source of the AV and cannot reproduce the problem in my dev environment. Does IIS record any stack information or crash dump info that I can check on the server? I'm trying to find the easiest way to locate the source of the failure on the live box. Thanks Richard Tag: partial get file size limit Tag: 363195
      • 11
        • Need some hardware suggestions I am looking to upgrade my router. Currently I have a Linksys vpn/firewall router, but am looking for something to handle more small business type of traffic. I had borrowed a friends Netopia R9100, but could never get it to work on our DSL connection, which is PPPoA instead of the Netopia PPPoE type connection. Does anyone have a good suggestion? Thanks! Steve Tag: partial get file size limit Tag: 363188
      • 12
        • Microsoft's Indexing service Hi, Due to the performance issues in using the microsoft's indexing service, I have decided to use a dedicated server option for indexing. On the dedicated server, can I create a catalog and store its location on a remote computer? If so, how can I do it and what permissions should be set? I guess when I create the directory, I can point to files on the remote computer. And if I have to use the option to increase the memory on the server to increase the indexing service performance, what are the statistics I need to follow, like how much memory is needed to index x number of documents? Basically how can I make sure that by using indexing service, there will not be high resource utilization or increase in cpu usuage to 100%. Please let me know as soon as possible. I am using Windows 2000 professional, IIS 4.0 and Indexing service 2.0. Thanks in advance, Vasantha Tag: partial get file size limit Tag: 363187
      • 13
        • Processors and Requests Queued I think I'm lost in a fog.... when I run IISState against InetInfo.exe during a high-processor (95-99%) high requests queued (40) event on our web server (4 cpu, w2k) the log doesn't show me any pages being handled - always says ASP.dll symbols not found. Unable to locate ASP page Below is a typical IISState log during a high cpu/requests queued event - any suggestions, comments, insight would be appreciated. Thanks Opened log file 'C:\iisstate\output\IISState-904.log' *********************** Starting new log output IISState version 3.3.1 Tue May 24 10:30:45 2005 OS = Windows 2000 Executable: inetinfo.exe PID = 904 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 384 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb 01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181 02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28 03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1 06 0006ff70 01002fbf inetinfo!main+0x654 07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d Thread ID: 1 System Thread ID: 390 Kernel Time: 0:0:0.78 User Time: 0:0:0.31 Thread Type: Other # ChildEBP RetAddr 00 005dfd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb 01 005dfd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 005dfd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf 03 005dfd70 01002440 iisadmin!ServiceEntry+0x156 04 005dffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd 05 005dffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe 06 005dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 2 System Thread ID: 3c8 Kernel Time: 0:1:41.281 User Time: 0:0:15.343 Thread Type: Other # ChildEBP RetAddr 00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 3 System Thread ID: 3cc Kernel Time: 0:1:40.921 User Time: 0:0:17.234 Thread Type: Other # ChildEBP RetAddr 00 0075fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 0075feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0075ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 0075ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d 04 0075ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7 05 0075ffb4 7c57b388 MSVCRT!_endthreadex+0xc1 06 0075ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 4 System Thread ID: 3d0 Kernel Time: 0:1:43.468 User Time: 0:0:16.375 Thread Type: Other # ChildEBP RetAddr 00 0079fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 0079feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0079ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 0079ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d 04 0079ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7 05 0079ffb4 7c57b388 MSVCRT!_endthreadex+0xc1 06 0079ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 5 System Thread ID: 3d4 Kernel Time: 0:2:3.62 User Time: 0:0:18.968 Thread Type: Other # ChildEBP RetAddr 00 007dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 007dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 007dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 007dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d 04 007dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7 05 007dffb4 7c57b388 MSVCRT!_endthreadex+0xc1 06 007dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 6 System Thread ID: 594 Kernel Time: 0:0:0.156 User Time: 0:0:0.31 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 00ecfc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 00ecfc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00ecfcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 00ecfce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d 04 00ecfd30 6b561a78 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00ecfd70 01002440 SMTPSVC!ServiceEntry+0x136 06 00ecffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd 07 00ecffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe 08 00ecffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 7 System Thread ID: 5fc Kernel Time: 0:0:0.15 User Time: 0:0:0.31 Thread Type: Other # ChildEBP RetAddr 00 00f0fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 00f0fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00f0fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 00f0fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d 04 00f0fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00f0fd70 01002440 w3svc!ServiceEntry+0x1b5 06 00f0ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd 07 00f0ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe 08 00f0ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 8 System Thread ID: 638 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 010cff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 010cff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27 02 010cffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32 03 010cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 9 System Thread ID: 650 Kernel Time: 0:0:37.109 User Time: 0:1:8.328 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0110f6d8 769b245c INFOCOMM!FastFindAnonymousToken+0x24 01 0110f6ec 65f07611 INFOCOMM!TCP_AUTHENT::ClearTextLogon+0x16 02 0110f888 65f03977 w3svc!HTTP_REQ_BASE::LogonUserA+0x67e 03 0110fcac 65f0275a w3svc!HTTP_REQ_BASE::OnRestartRequest+0xa42 04 0110fcec 65f025a4 w3svc!HTTP_REQ_BASE::OnCompleteRequest+0x498 05 0110fd2c 65f02501 w3svc!HTTP_REQ_BASE::UnWrapRequest+0x1f4 06 0110fd4c 65f023b8 w3svc!HTTP_REQ_BASE::OnFillClientReq+0x7a 07 0110fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x99 08 0110fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa 09 0110ff08 65f06b58 w3svc!CreateClient+0x7b 0a 0110ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118 0b 0110ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e 0c 0110ffb4 7c57b388 ISATQ!AtqPoolThread+0x1a8 0d 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 10 System Thread ID: 654 Kernel Time: 0:0:21.781 User Time: 0:0:40.734 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0114ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 0114ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0114ffb4 7c57b388 ISATQ!AtqPoolThread+0x40 03 0114ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 11 System Thread ID: 65c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 012cfeb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 012cfee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27 02 012cff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e 03 012cff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99 04 012cff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9 05 012cffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f 06 012cffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 07 012cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 12 System Thread ID: 664 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0164fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 0164fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0164fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17 03 0164ffb4 7c57b388 RTUTILS!TraceServerThread+0xde 04 0164ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 13 System Thread ID: 688 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0169ff20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 0169ff70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0169ff88 701224fa KERNEL32!WaitForMultipleObjects+0x17 03 0169ffb4 7c57b388 exstrace!RegNotifyThread+0x6f 04 0169ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 14 System Thread ID: 68c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 016dff24 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 016dff74 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea 02 016dff8c 70121e6a KERNEL32!WaitForMultipleObjects+0x17 03 016dffb4 7c57b388 exstrace!WriteTraceThread+0x2f 04 016dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 15 System Thread ID: 690 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 018dff0c 685117e0 KERNEL32!InterlockedIncrement+0xd 01 018dff18 685119b4 RWNH!CSimpleCritSection::Enter+0xa 02 018dff3c 6ff28e25 RWNH!CShareLockNH::ExclusiveLock+0x1d 03 018dff80 6ff24c9a FCACHDLL!CLRUList::Expire+0x58 04 018dffa4 6ff2843c FCACHDLL!CacheEx<CFileCacheObject,CFileCacheKey,CFileCacheConstructorBase,void *>::Expire+0x33 05 018dffb4 7c57b388 FCACHDLL!CScheduleThread::ScheduleThread+0x40 06 018dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 16 System Thread ID: 694 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 01a2ff18 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 01a2ff68 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01a2ff80 6b57b026 KERNEL32!WaitForMultipleObjects+0x17 03 01a2ffb4 7c57b388 SMTPSVC!TcpRegNotifyThread+0x136 04 01a2ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 17 System Thread ID: 698 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 01a6ff68 7c599fe4 ntdll!ZwWaitForSingleObject+0xb 01 01a6ff90 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 01a6ffa0 6b57ae5a KERNEL32!WaitForSingleObject+0xf 03 01a6ffb4 7c57b388 SMTPSVC!FreeLibThread+0x1d 04 01a6ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 18 System Thread ID: 6bc Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 01b2ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb 01 01b2ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 01b2ff94 732c3366 KERNEL32!WaitForSingleObject+0xf 03 01b2ffb4 7c57b388 compfilt!CompressionThread+0x29 04 01b2ffc0 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 19 System Thread ID: 6e0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01c4fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb 01 01c4fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8 02 01c4fe08 750312f5 msafd!WSPSelect+0x24e 03 01c4fe6c 6e2b3b6e WS2_32!select+0xe7 04 01c4ffb4 7c57b388 inetsloc!SocketListenThread+0x51 05 01c4ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 20 System Thread ID: 6e4 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 01c8fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 01c8ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 01c8ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9 03 01c8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f 04 01c8ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 05 01c8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 21 System Thread ID: 700 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01cdff54 7c599fe4 ntdll!ZwWaitForSingleObject+0xb 01 01cdff7c 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 01cdff8c 741a99cd KERNEL32!WaitForSingleObject+0xf 03 01cdffb4 7c57b388 aqueue!CSMTP_RETRY_HANDLER::RetryThreadRoutine+0xce 04 01cdffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 22 System Thread ID: 70c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 01d1fed0 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 01d1ff20 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01d1ff38 741900e1 KERNEL32!WaitForMultipleObjects+0x17 03 01d1ff9c 6b56dccd aqueue!CConnMgr::GetNextConnection+0x1da 04 01d1ffb4 7c57b388 SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x23 05 01d1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 23 System Thread ID: 71c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01ddfdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb 01 01ddfe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8 02 01ddff24 750312f5 msafd!WSPSelect+0x24e 03 01ddff88 6d7075bd WS2_32!select+0xe7 04 01ddffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22 05 01ddffb4 7c57b388 ISATQ!BmonThreadFunc+0x9 06 01ddffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 24 System Thread ID: 720 Kernel Time: 0:0:0.31 User Time: 0:0:0.31 Thread Type: Other # ChildEBP RetAddr 00 01e1fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 01e1fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01e1ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 01e1ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d 04 01e1ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42 05 01e1ffb4 7c57b388 MSVCRT!_endthread+0xc6 06 01e1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 25 System Thread ID: 724 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01e5fea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 01e5fef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01e5ff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 01e5ff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d 04 01e5ffb4 7c57b388 w3svc!OleHackThread+0x88 05 01e5ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 26 System Thread ID: 79c Kernel Time: 0:0:20.609 User Time: 0:0:38.765 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 650 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01edf648 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 01edf6bc 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 01edf6c4 769b24a6 ntdll!RtlEnterCriticalSection+0x46 03 01edf6d8 769b245c INFOCOMM!FastFindAnonymousToken+0xe 04 01edf6ec 65f07611 INFOCOMM!TCP_AUTHENT::ClearTextLogon+0x16 05 01edf888 65f03977 w3svc!HTTP_REQ_BASE::LogonUserA+0x67e 06 01edfcac 65f0275a w3svc!HTTP_REQ_BASE::OnRestartRequest+0xa42 07 01edfcec 65f025a4 w3svc!HTTP_REQ_BASE::OnCompleteRequest+0x498 08 01edfd2c 65f02501 w3svc!HTTP_REQ_BASE::UnWrapRequest+0x1f4 09 01edfd4c 65f023b8 w3svc!HTTP_REQ_BASE::OnFillClientReq+0x7a 0a 01edfec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x99 0b 01edfee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa 0c 01edff08 65f06b58 w3svc!CreateClient+0x7b 0d 01edff4c 6d701ad2 w3svc!W3OnConnectEx+0x118 0e 01edff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e 0f 01edffb4 7c57b388 ISATQ!AtqPoolThread+0x1a8 10 01edffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 27 System Thread ID: 7a0 Kernel Time: 0:0:28.328 User Time: 0:0:48.515 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01f1ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 01f1ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 01f1ffb4 7c57b388 ISATQ!AtqPoolThread+0x40 03 01f1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 28 System Thread ID: 7a4 Kernel Time: 0:0:28.109 User Time: 0:0:50.609 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 01f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 01f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40 03 01f5ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 29 System Thread ID: 7ac Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0209ebe0 77f89ebd ntdll!ZwWaitForMultipleObjects+0xb 01 0209ffb4 7c57b388 ntdll!RtlpWaitThread+0x1b9 02 0209ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 30 System Thread ID: 7b4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 020dff1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 020dff6c 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea 02 020dff84 7c121fef KERNEL32!WaitForMultipleObjects+0x17 03 020dffb4 7c57b388 USERENV!NotificationThread+0x5f 04 020dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 31 System Thread ID: 7cc Kernel Time: 0:0:21.468 User Time: 0:0:36.171 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0221ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 0221ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0221ffb4 7c57b388 ISATQ!AtqPoolThread+0x40 03 0221ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 32 System Thread ID: 828 Kernel Time: 0:0:41.265 User Time: 0:1:16.734 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0279ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 0279ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0279ffb4 7c57b388 ISATQ!AtqPoolThread+0x40 03 0279ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 33 System Thread ID: 9b4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 04d8ff08 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 04d8ff58 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea 02 04d8ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17 03 04d8ffb4 7c57b388 comsvcs!CEventDispatcher::PushEvents+0x4e 04 04d8ffc0 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 34 System Thread ID: 1034 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. Remote call is either to a MTA object or object not initialized. Also, possible utility thread. DCOM call being made to Process ID: 2304 Waiting on thread id: ffffffff # ChildEBP RetAddr 00 04dcfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb 01 04dcfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e 02 04dcfba0 77b26c07 RPCRT4!I_RpcSendReceive+0x2c 03 04dcfbc0 77b26ad2 ole32!ThreadSendReceive+0xef 04 04dcfbd8 77b23ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f 05 04dcfc18 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96 06 04dcfc28 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11 07 04dcfc88 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9 08 04dcfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124 09 04dcfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c 0a 04dcff44 77d95136 RPCRT4!NdrClientCall2+0x4f5 0b 04dcff60 77d46e75 RPCRT4!ObjectStublessClient+0x76 0c 04dcff70 787f5818 RPCRT4!ObjectStubless+0xf 0d 04dcffb4 7c57b388 comsvcs!CEventDispatcher::GetEventServerInfoThread+0x118 0e 04dcffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 35 System Thread ID: af4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr 00 04f9ff38 7c59a243 ntdll!NtDelayExecution+0xb 01 04f9ff58 7c59a20e KERNEL32!SleepEx+0x32 02 04f9ff64 79e8de84 KERNEL32!Sleep+0xb 03 04f9ffb4 7c57b388 aspnet_isapi!ThreadGateThreadProc+0x6a 04 04f9ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 36 System Thread ID: 102c Kernel Time: 0:0:0.125 User Time: 0:0:0.296 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr 00 04fdff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 04fdff7c 79e8dda8 KERNEL32!GetQueuedCompletionStatus+0x27 02 04fdffb4 7c57b388 aspnet_isapi!ThreadPoolThreadProc+0x6e 03 04fdffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 37 System Thread ID: 1038 Kernel Time: 0:0:0.171 User Time: 0:0:0.281 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr 00 0502ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 0502ff7c 79e8dda8 KERNEL32!GetQueuedCompletionStatus+0x27 02 0502ffb4 7c57b388 aspnet_isapi!ThreadPoolThreadProc+0x6e 03 0502ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 38 System Thread ID: 9e4 Kernel Time: 0:0:0.78 User Time: 0:0:0.281 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr 00 0506ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 0506ff7c 79e8dda8 KERNEL32!GetQueuedCompletionStatus+0x27 02 0506ffb4 7c57b388 aspnet_isapi!ThreadPoolThreadProc+0x6e 03 0506ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 39 System Thread ID: 103c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: ASP Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. # ChildEBP RetAddr 00 050aff44 7c59a243 ntdll!NtDelayExecution+0xb 01 050aff64 7c59a20e KERNEL32!SleepEx+0x32 02 050aff70 79e7ec63 KERNEL32!Sleep+0xb 03 050aff80 01b6940f aspnet_isapi!MonitorHealth+0x40 04 050affb4 7c57b388 MSVCR71!_endthread+0xaa 05 050affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 40 System Thread ID: a44 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: WebDav Worker Thread # ChildEBP RetAddr 00 05e9ff30 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 05e9ff5c 6b5e9a8c KERNEL32!GetQueuedCompletionStatus+0x27 02 05e9ff8c 6b5e9a44 httpext!CDavWorkerThread::GetWorkCompletion+0x23 03 05e9ffb4 7c57b388 httpext!CDavWorkerThread::ThreadDispatcher+0x30 04 05e9ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 41 System Thread ID: c98 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: WebDav Worker Thread # ChildEBP RetAddr 00 05edff30 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 05edff5c 6b5e9a8c KERNEL32!GetQueuedCompletionStatus+0x27 02 05edff8c 6b5e9a44 httpext!CDavWorkerThread::GetWorkCompletion+0x23 03 05edffb4 7c57b388 httpext!CDavWorkerThread::ThreadDispatcher+0x30 04 05edffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 42 System Thread ID: 10a4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: WebDav Worker Thread # ChildEBP RetAddr 00 05f1ff30 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 05f1ff5c 6b5e9a8c KERNEL32!GetQueuedCompletionStatus+0x27 02 05f1ff8c 6b5e9a44 httpext!CDavWorkerThread::GetWorkCompletion+0x23 03 05f1ffb4 7c57b388 httpext!CDavWorkerThread::ThreadDispatcher+0x30 04 05f1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 43 System Thread ID: fc0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: WebDav Worker Thread # ChildEBP RetAddr 00 05f5ff30 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 05f5ff5c 6b5e9a8c KERNEL32!GetQueuedCompletionStatus+0x27 02