[THIN] Re: Anyone ever had servers hang with a STOP error involving tcpip.sys

  • From: "Jaimes, Leon" <Leon.Jaimes@xxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Mon, 1 Dec 2003 13:18:16 -0700

SP3 for win2k and sp2 for MetaFrame XPe.
I uninstalled VS off of 2 of the 4 that crashed and everything has been
running fine on all 4 so I agree that VS isn't the issue unless it only
crashes when there are 4 servers with it running?  problem not.   I'll keep
hunting
Thanks
Leon

-----Original Message-----
From: Ryan Lambert [mailto:rlambert@xxxxxxxxxxxxxxx] 
Sent: Monday, December 01, 2003 1:05 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error involving
tcpip.sys



Leon,

 

I would not scan outbound. But that's more like a driver/compatibility
issueddk_bug_check_0xd1_bug, what you are seeing. I don't think it's related
-- but you could attempt to exclude tcpip.sys if you really believe that AV
is the issue (which personally, I don't).

 

What Service Pack are you on? 

 

-----Original Message-----
From: Jaimes, Leon [mailto:Leon.Jaimes@xxxxxxxx] 
Sent: Monday, December 01, 2003 2:29 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error involving
tcpip.sys

 

So... I'm a dumb arse admin who needs a little help with this,

Are you saying that the ie scan is possibly causing the problem?

If so is it the the inbound and outbound or one or the other?

Am I incorrect in thinking that IE is a high risk process?

Do you have any other tuning tips that might help me?  

Thanks in advance

Leon

-----Original Message-----
From: Rowlandson, John [mailto:John.Rowlandson@xxxxxxxxxxxxx] 
Sent: Wednesday, November 26, 2003 3:38 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error involving
tcpip.sys

Mallesons Stephen Jaques
www.mallesons.com

Confidential communication

 

 

mcafee (and other av programs) dont kill servers, its dumb arse admins who
dont know how to configure it and leave it at default settings that kill
servers.

 

ie scan inbound and outbound by default, why would you do that?

 

i have mcafee 7.1 on 80 servers so far, file servers, citrix 2000, citrix
2003, flie clusters, web clusters, exchange servers, you name it.

 

 

John Rowlandson
Technical Support Specialist
Mallesons Stephen Jaques
Sydney
T +61 2 9296 3653
F +61 2 9296 3999
john.rowlandson@xxxxxxxxxxxxx <mailto:john.rowlandson@xxxxxxxxxxxxx> 

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf
Of Roger Riggins
Sent: Thursday, 27 November 2003 1:52 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error involving
tcpip.sys

I'd put money on it that McCrappy AV is the culprit. I'd call NAI first. If
they can't help, I'd reapply your service pack. If that doesn't work, I'd
roll back to your previous AV. 

 

Good luck!

R

 

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Jaimes, Leon
Sent: Tuesday, November 25, 2003 7:39 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error involving
tcpip.sys

 

Raff, 

We have a temp monitor that is reporting 77o F which is within the specs.
Both the affected and unaffected servers are in the same cabinet at a
hosting facility so I think the environment is ok.  They all are on the same
subnet.  The only software changes were installing the Virus Scan, but we
had let it run on one server for about a week with no problems, then did the
others.  It is configured identically for each server and is on all 6.
There have not been any updates to the hard/firm/software other than that in
the past month.  3 of the servers that went down are identical in hardware
to one that didn't, these all have dual 10/100 nics and the 4th that went
down is a newer server that has dual 10/100/1000 nics  The drivers are all
up to date and identical for the 10/100s.

Thanks

 

-----Original Message-----
From: Steve Raffensberger [mailto:sraffens1@xxxxxxxxxxx] 
Sent: Tuesday, November 25, 2003 6:26 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error involving
tcpip.sys

Leon,

 

I would also check outside the boxes for clues. When multiple boxes take a
dump together, there is usually an external cause.  Are the three affected
servers on the same subnet or network switch and different from the
unaffected ones? Has anyone made any hard/firm/software changes to network
equipment that is in contact with the affected servers? Do the affected
servers all get their electrical power from the same PDU and the unaffected
ones differ?

 

Inside the boxes...do the affected servers share the same NIC's while
unaffected servers differ? NIC drivers?

 

HTH,

 

Raff

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf
Of Jaimes, Leon
Sent: Tuesday, November 25, 2003 8:05 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Anyone ever had servers hang with a STOP error involving
tcpip.sys

Hello List

I just had all three of my Citrix application servers crash.  It was about
30 min. between the first 2 and then about an hour till the 3rd went down.
We brought in a 4th that we keep as a backup and it took about 15 min. for
it to do the same.

We are running W2K SP3 with Citrix MetaFrame XPe FR2 on IBM xSeries 330
servers with dual Netfinity NICs that are teamed.

The most recent change that is consistent with all servers is that we
installed Virus Scan v7 on all of them.  We have a Data Store server and a
file server both of which are fine.  The only ones that don't server the
published desktop.

This is about the 5th time this has happened, but never to all at once like
this.

This is the message.

STOP: 0X000000D1 (0X00000006,0X00000002,0X00000001,0XBFA239A9)
DRIVER_IRQL_NOT_LESS_OR_EQUAL
ADDRESS BFA239A9 BASE AT BFA29000, DATESTAMP 3cdaee1a - tcpip.sys

I got this off the blue screen, but it also has come up as a console message
on them after they hang/crash.

I already tried uninstalling and reinstalling TCP/IP and the NIC drivers are
up to date.

Also if anyone has any opinions on Teaming good or bad I would be
interested.

Thanks

Leon Jaimes 
PPRM Information Technology Department 
(303) 813-7614 
< <mailto:leon.jaimes@xxxxxxxx> mailto:leon.jaimes@xxxxxxxx> 

 

 Notice of Confidentiality:
This e-mail and any attachments may contain privileged and/or confidential
information. This e-mail is intended solely for the use of the individual or
entity to which it is addressed. If you are not the intended recipient of
this e-mail, you are hereby notified that any copying, distribution,
dissemination or action taken in relation to the contents of this e-mail and
any of its attachments is strictly prohibited and may be unlawful. If you
have received this e-mail in error, please notify the sender immediately and
permanently delete the original e-mail and destroy any copies or printouts
of this e-mail as well as any attachments. Please note Lutheran Services in
Iowa does not endorse any opinions, conclusions or other information
contained within this message that does not pertain to official business.

Other related posts: