Hi all, I am having some trouble with IIS. It seems to be restarting
itself a lot. IISSTATE in "-sc" mode doesn't dump a log file when it
happens, I just get a lot of errors like:
80070005,800706d5,800706be,800706ba,800706bf on the console. Below is
my log file for inetinfo with iisstate.exe -p <pid> -d.

Any imediate help would be greatly appreciated. Thanks! Scott

Opened log file 'C:\iisstate\output\IISState-3972.log'

***********************
Starting new log output
IISState version 3.1

Tue Sep 30 10:58:14 2003

OS = Windows 2000
Executable: inetinfo.exe
PID = 3972

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 7a8
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\ntdll.dll -
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\ADVAPI32.dll -
*** ERROR: Module load completed but symbols could not be loaded for
C:\WINNT\System32\inetsrv\inetinfo.exe
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0006f910 7c2e0135 ntdll!ZwReadFile+0xb
01 0006f93c 7c2dffbb ADVAPI32!StartServiceCtrlDispatcherW+0x509
02 0006f9b8 7c2e1995 ADVAPI32!StartServiceCtrlDispatcherW+0x38f
03 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x72
04 0006fd30 01001e94 inetinfo+0x2884
05 77e179ec 2474ff50 inetinfo+0x1e94
06 0c24448d 00000000 0x2474ff50




Thread ID: 1
System Thread ID: c74
Kernel Time: 0:0:0.31
User Time: 0:0:0.93
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\KERNEL32.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 005dfd44 7c4f1b1b ntdll!NtWaitForSingleObject+0xb
01 00000001 00000000 KERNEL32!WaitForSingleObject+0xf




Thread ID: 2
System Thread ID: c88
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\USER32.dll -
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\IisRTL.DLL -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0071feac 77e13990 ntdll!NtWaitForMultipleObjects+0xb
01 0071ff08 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0xe0
02 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
03 00233c38 000003e9
IisRTL!ALLOC_CACHE_HANDLER::SetLookasideCleanupInterval+0xe4




Thread ID: 3
System Thread ID: fc0
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0075feac 77e13990 ntdll!NtWaitForMultipleObjects+0xb
01 0075ff08 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0xe0
02 0075ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
03 00233ce8 000003ea
IisRTL!ALLOC_CACHE_HANDLER::SetLookasideCleanupInterval+0xe4




Thread ID: 4
System Thread ID: d40
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\RPCRT4.DLL -
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\ole32.dll -
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00bbff74 77d56d9e ntdll!NtReplyWaitReceivePortEx+0xb
01 00bbffa8 77d41c6c RPCRT4!TowerConstruct+0xa97d
02 00bbffb4 7c4e987c RPCRT4!I_RpcServerInqTransportType+0x1a0
03 00bbffec 00000000 KERNEL32!SetThreadExecutionState+0x227




Thread ID: 5
System Thread ID: c1c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00bfff7c 7c4fac79 ntdll!ZwDelayExecution+0xb
01 00007530 00000000 KERNEL32!Sleep+0xb




Thread ID: 6
System Thread ID: 102c
Kernel Time: 0:0:0.140
User Time: 0:0:0.218
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\System32\inetsrv\INFOCOMM.DLL -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00e4fc6c 77e13990 ntdll!NtWaitForMultipleObjects+0xb
01 00e4fcc8 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0xe0
02 00e4fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
03 00232534 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209




Thread ID: 7
System Thread ID: fa4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\System32\inetsrv\ISATQ.DLL -
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00f8ff88 6d7029ef ntdll!NtRemoveIoCompletion+0xb
01 00f8ffb4 7c4e987c ISATQ!CDirMonitor::RemoveEntry+0x183
02 00f8ffec 00000000 KERNEL32!SetThreadExecutionState+0x227




Thread ID: 8
System Thread ID: c68
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00fcff7c 6d702957 ntdll!NtRemoveIoCompletion+0xb
01 7c30fcf9 e65868ff ISATQ!CDirMonitor::RemoveEntry+0xeb
02 6aec8b55 00000000 0xe65868ff




Thread ID: 9
System Thread ID: 1020
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0104ff7c 6d702957 ntdll!NtRemoveIoCompletion+0xb
01 7c30fcf9 e65868ff ISATQ!CDirMonitor::RemoveEntry+0xeb
02 6aec8b55 00000000 0xe65868ff




Thread ID: 10
System Thread ID: cb0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 011cfee4 77d809da ntdll!NtRemoveIoCompletion+0xb
01 011cff20 77d50ede RPCRT4!I_RpcTransGetAddressList+0x304c
02 011cff74 77d50d17 RPCRT4!TowerConstruct+0x4abd

Now, you should try to post this at .iis
the author - Pat will help you analyze it.

and I see most of the threads are idle,
and it seems like you don't have the symbols file.
can your machine access the net ? if yes,
when you run the tool, it will auto download required
symbols file.

--
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...



[quoted text, click to view]