RE: Rebuild problems
- From: Jim Harrison <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 23 Jan 2004 05:56:38 -0800
Consider it written - nice bit of sleuthing!
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
On Fri, 23 Jan 2004 06:51:25 -0500
"Dan Bartley" <bartleyd@xxxxxxxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org
This particular environment does not have a monitoring system, it is a
small scale deployment of everything (3 servers, 5 workstation). So the
first step required constant monitoring of the event logs on the ISA
server. Mostly I use it as a test bed.
After almost 2 weeks of watching, I found an error in the system log
that simply said "The ACPI has attempted to read or write to a memory
space already in use". Then it was just matching work. I was able to
twice match that error with things on the ISA server becoming unstable
(such as a web rule stopped working) and in one case was able to match
that error with an outright crash of the web proxy. To be sure, I had my
oldest son, who is a lead programmer for Mack Trucks, come over and do a
memory map for me. Sure enough, memory space Web Proxy was using was
attempting to be read/write from the ACPI BIOS.
As it turned out the ACPI was doing that quite often, but was rarely
generating a system error. Checked for firmware, found a slightly newer
version, applied it and ACPI suddenly knew how to allocate unused
memory.
So, the encapsulated version:
If web publishing related rules, site and content rules, permissions
applied to them, etc work sporadically or the system shows brief and
unexplained web proxy crashes (I assume this could be any of the ISA
services, it was just Web in this case) check for any system level
drivers or services that might be attempting to access the same memory
space. There should, at some point, be a system log entry generated that
says, "'system service name' has attempted to read or write to memory
space already in use" or something similar. If this is present make sure
you have the latest firmware or drivers.
Best Regards,
Dan Bartley
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Friday, January 23, 2004 00:59
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Rebuild problems
http://www.ISAserver.org
What was the clicker for you?
Sounds like good KB fodder, yano!
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
On Thu, 22 Jan 2004 20:11:16 -0500
"Dan Bartley" <bartleyd@xxxxxxxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org
I actually had complete trust in ISA. That was what boggled me. I've
been running it for over 2 years, multiple builds and playing with
rules, etc. I knew everything was right and there was no reason, from
ISA's perspective, that it should not be working. Was a hard one to find
though, I found one obscure error that tipped me off, took almost 2
weeks to surface.
Best Regards,
Dan Bartley
_____
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Thursday, January 22, 2004 18:00
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Rebuild problems
http://www.ISAserver.org
Hi Dan,
Thanks for the follow up on this! That was quite an interesting find.
Good to hear that its not ISA's fault. Poor ISA, its the "sin eater" of
network connectivity issues :)
Thanks!
Tom
_____
From: Dan Bartley [mailto:bartleyd@xxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, January 21, 2004 9:51 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Rebuild problems
http://www.ISAserver.org
Just wanted to do a final follow up on my original post for the benefit
of the knowledge archives.
Everything I described below was related to a problem with the web
proxy. After a couple more weeks of watching and tracking errors, I
discovered that the BIOS ACPI (MSI P3 motherboard) of the replacement
machine was trying to read/write to memory space used by the web proxy
service. It caused unpredictable behavior and occasional crash of the
web proxy. BIOS update fixed the ACPI and all the errors, proxy crashes
and random problems went away. Sometimes the problem is right at the
front door instead of the upstairs hallway closet.
I had to work at this one.
Best Regards,
Dan Bartley
o unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
bartleyd@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
