Re: Proxy service failed.

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 18 Sep 2004 09:59:25 -0700

Hi John,

The "1000" event told you which component caused the fault: "dsecisa.dll".
I got a $ that says this is "Download SECurity".
Try disabling it and see if this reoccurs.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!

----- Original Message ----- 
From: "John Tolmachoff (Lists)" <johnlist@xxxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Saturday, September 18, 2004 01:08
Subject: [isalist] Proxy service failed.


http://www.ISAserver.org

Today (well it was Friday) the web proxy service failed at 3:30 PM this is
the first time this has done this. At 11:30, I restarted the service and
then checked everything out. I restarted the server and the error occurred
again. However, I had set the recovery options on the service to restart on
1 and 2 fail, and it is now running.

GFI Download security version 2.2 is installed as well as Burstek Web Filter
version 5.30.04 and Log analyzer.

Nothing has changed on the server in about 10 days.

Below are the event logs. I did some searching and the only thing I found
are some posts related to moving GFI Download security to a higher priority
(From May of 2004) and possibly pointing at Web Sense.

Any one have any ideas on what to look at?

Application logs:

______________________________________________________
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 9/17/2004
Time: 3:33:17 PM
User: N/A
Computer: SRV6
Description:
Faulting application w3proxy.exe, version 3.0.1200.365, faulting module
dsecisa.dll, version 1.0.0.12, fault address 0x00012c46.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 77 33 70   ure  w3p
0018: 72 6f 78 79 2e 65 78 65   roxy.exe
0020: 20 33 2e 30 2e 31 32 30    3.0.120
0028: 30 2e 33 36 35 20 69 6e   0.365 in
0030: 20 64 73 65 63 69 73 61    dsecisa
0038: 2e 64 6c 6c 20 31 2e 30   .dll 1.0
0040: 2e 30 2e 31 32 20 61 74   .0.12 at
0048: 20 6f 66 66 73 65 74 20    offset 
0050: 30 30 30 31 32 63 34 36   00012c46
_______________________________________________________
Event Type: Error
Event Source: Microsoft ISA Server Control
Event Category: None
Event ID: 14079
Date: 9/17/2004
Time: 3:35:17 PM
User: N/A
Computer: SRV6
Description:
Due to an unexpected error, the service w3proxy stopped responding to all
requests. This occurred 1 time(s) in the past 0:07 hours. Try to stop the
service or kill the corresponding process if it does not respond, and start
it again. Check the Event Viewer for related error messages.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
_____________________________________________________
Event Type: Information
Event Source: Microsoft Web Proxy
Event Category: None
Event ID: 14186
Date: 9/18/2004
Time: 12:33:29 AM
User: N/A
Computer: SRV6
Description:
The Web Proxy Service was started successfully.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
__________________________________________________
Event Type: Information
Event Source: Application Error
Event Category: (100)
Event ID: 1004
Date: 9/18/2004
Time: 12:37:46 AM
User: N/A
Computer: SRV6
Description:
Reporting queued error: faulting application w3proxy.exe, version
3.0.1200.365, faulting module dsecisa.dll, version 1.0.0.12, fault address
0x00012c46.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 77 33 70   ure  w3p
0018: 72 6f 78 79 2e 65 78 65   roxy.exe
0020: 20 33 2e 30 2e 31 32 30    3.0.120
0028: 30 2e 33 36 35 20 69 6e   0.365 in
0030: 20 64 73 65 63 69 73 61    dsecisa
0038: 2e 64 6c 6c 20 31 2e 30   .dll 1.0
0040: 2e 30 2e 31 32 20 61 74   .0.12 at
0048: 20 6f 66 66 73 65 74 20    offset 
0050: 30 30 30 31 32 63 34 36   00012c46
___________________________________________________
Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1001
Date: 9/18/2004
Time: 12:39:24 AM
User: N/A
Computer: SRV6
Description:
Fault bucket 118664497.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 42 75 63 6b 65 74 3a 20   Bucket: 
0008: 31 31 38 36 36 34 34 39   11866449
0010: 37 0d 0a                  7..     

>From the System log:

Event Type: Information
Event Source: Disk
Event Category: None
Event ID: 119
Date: 9/17/2004
Time: 3:32:02 PM
User: N/A
Computer: SRV6
Description:
The driver for device \Device\Harddisk0\DR0 delayed non-paging Io requests
for 30 ms to recover from a low memory condition.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 04 00 00 00 02 00 52 00   ......R.
0008: 00 00 00 00 77 00 04 40   ....w..@
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
_______________________________________________

Event Type: Information
Event Source: Disk
Event Category: None
Event ID: 119
Date: 9/17/2004
Time: 3:32:02 PM
User: N/A
Computer: SRV6
Description:
The driver for device \Device\Harddisk1\DR1 delayed non-paging Io requests
for 30 ms to recover from a low memory condition.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 04 00 00 00 02 00 52 00   ......R.
0008: 00 00 00 00 77 00 04 40   ....w..@
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........
___________________________________________________

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7034
Date: 9/17/2004
Time: 3:33:23 PM
User: N/A
Computer: SRV6
Description:
The Microsoft Web Proxy service terminated unexpectedly.  It has done this 1
time(s).

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You




------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



Other related posts: