[THIN] Re: Anyone ever had servers hang with a STOP error involving tcpip.sys

  • From: "Chris Lynch" <lynch00@xxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Mon, 1 Dec 2003 14:28:22 -0800

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

One word of advice when using the ProSET software and teaming:

Never ghost a machine that has a team configured.  Always use the ProSET
software to create AND delete a team.  NEVER use load balancing.  If you
need a "fatter pipe", then do EtherChannel or 802.1q.  Otherwise just do
failover. 

- -----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Jaimes, Leon
Sent: Monday, December 01, 2003 1:45 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error involving
tcpip.sys

load balanced using Intel proset, which I think I might do away with and
switch to no teaming.  One of the servers I can't even open the Intel
proset, I had this problem trying to upgrade this software a few months ago
and ended up having to restore the server form ghost.

        -----Original Message-----
        From: Ryan Lambert [mailto:rlambert@xxxxxxxxxxxxxxx] 
        Sent: Monday, December 01, 2003 2:16 PM
        To: thin@xxxxxxxxxxxxx
        Subject: [THIN] Re: Anyone ever had servers hang with a STOP error
involving tcpip.sys
        
        

        That's interesting. Is it a load balanced team on the NICs, or a
failover team?

         

        -----Original Message-----
        From: Jaimes, Leon [mailto:Leon.Jaimes@xxxxxxxx] 
        Sent: Monday, December 01, 2003 3:18 PM
        To: 'thin@xxxxxxxxxxxxx'
        Subject: [THIN] Re: Anyone ever had servers hang with a STOP error
involving tcpip.sys

         

        SP3 for win2k and sp2 for MetaFrame XPe.

        I uninstalled VS off of 2 of the 4 that crashed and everything has
been running fine on all 4 so I agree that VS isn't the issue unless it only
crashes when there are 4 servers with it running?  problem not.   I'll keep
hunting

        Thanks

        Leon

                -----Original Message-----
                From: Ryan Lambert [mailto:rlambert@xxxxxxxxxxxxxxx] 
                Sent: Monday, December 01, 2003 1:05 PM
                To: thin@xxxxxxxxxxxxx
                Subject: [THIN] Re: Anyone ever had servers hang with a STOP
error involving tcpip.sys

                Leon,

                 

                I would not scan outbound. But that's more like a
driver/compatibility issue, what you are seeing. I don't think it's related
-- but you could attempt to exclude tcpip.sys if you really believe that AV
is the issue (which personally, I don't).

                 

                What Service Pack are you on? 

                 

                -----Original Message-----
                From: Jaimes, Leon [mailto:Leon.Jaimes@xxxxxxxx] 
                Sent: Monday, December 01, 2003 2:29 PM
                To: 'thin@xxxxxxxxxxxxx'
                Subject: [THIN] Re: Anyone ever had servers hang with a STOP
error involving tcpip.sys

                 

                So... I'm a dumb arse admin who needs a little help with
this,

                Are you saying that the ie scan is possibly causing the
problem?

                If so is it the the inbound and outbound or one or the
other?

                Am I incorrect in thinking that IE is a high risk process?

                Do you have any other tuning tips that might help me?  

                Thanks in advance

                Leon

                        -----Original Message-----
                        From: Rowlandson, John
[mailto:John.Rowlandson@xxxxxxxxxxxxx] 
                        Sent: Wednesday, November 26, 2003 3:38 PM
                        To: thin@xxxxxxxxxxxxx
                        Subject: [THIN] Re: Anyone ever had servers hang
with a STOP error involving tcpip.sys

                        Mallesons Stephen Jaques
                        www.mallesons.com
                        
                        Confidential communication

                         

                         

                        mcafee (and other av programs) dont kill servers,
its dumb arse admins who dont know how to configure it and leave it at
default settings that kill servers.

                         

                        ie scan inbound and outbound by default, why would
you do that?

                         

                        i have mcafee 7.1 on 80 servers so far, file
servers, citrix 2000, citrix 2003, flie clusters, web clusters, exchange
servers, you name it.

                         

                         

                        John Rowlandson
                        Technical Support Specialist
                        Mallesons Stephen Jaques
                        Sydney
                        T +61 2 9296 3653
                        F +61 2 9296 3999
                        john.rowlandson@xxxxxxxxxxxxx

                                -----Original Message-----
                                From: thin-bounce@xxxxxxxxxxxxx
[mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Roger Riggins
                                Sent: Thursday, 27 November 2003 1:52 AM
                                To: thin@xxxxxxxxxxxxx
                                Subject: [THIN] Re: Anyone ever had servers
hang with a STOP error involving tcpip.sys

                                I'd put money on it that McCrappy AV is the
culprit. I'd call NAI first. If they can't help, I'd reapply your service
pack. If that doesn't work, I'd roll back to your previous AV. 

                                 

                                Good luck!

                                R

                                 

                                -----Original Message-----
                                From: thin-bounce@xxxxxxxxxxxxx
[mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Jaimes, Leon
                                Sent: Tuesday, November 25, 2003 7:39 PM
                                To: 'thin@xxxxxxxxxxxxx'
                                Subject: [THIN] Re: Anyone ever had servers
hang with a STOP error involving tcpip.sys

                                 

                                Raff, 

                                We have a temp monitor that is reporting 77o
F which is within the specs.  Both the affected and unaffected servers are
in the same cabinet at a hosting facility so I think the environment is ok.
They all are on the same subnet.  The only software changes were installing
the Virus Scan, but we had let it run on one server for about a week with no
problems, then did the others.  It is configured identically for each server
and is on all 6.  There have not been any updates to the hard/firm/software
other than that in the past month.  3 of the servers that went down are
identical in hardware to one that didn't, these all have dual 10/100 nics
and the 4th that went down is a newer server that has dual 10/100/1000 nics
The drivers are all up to date and identical for the 10/100s.

                                Thanks

                                 

                                -----Original Message-----
                                From: Steve Raffensberger
[mailto:sraffens1@xxxxxxxxxxx] 
                                Sent: Tuesday, November 25, 2003 6:26 PM
                                To: thin@xxxxxxxxxxxxx
                                Subject: [THIN] Re: Anyone ever had servers
hang with a STOP error involving tcpip.sys

                                        Leon,

                                         

                                        I would also check outside the boxes
for clues. When multiple boxes take a dump together, there is usually an
external cause.  Are the three affected servers on the same subnet or
network switch and different from the unaffected ones? Has anyone made any
hard/firm/software changes to network equipment that is in contact with the
affected servers? Do the affected servers all get their electrical power
from the same PDU and the unaffected ones differ?

                                         

                                        Inside the boxes...do the affected
servers share the same NIC's while unaffected servers differ? NIC drivers?

                                         

                                        HTH,

                                         

                                        Raff

                                                -----Original Message-----
                                                From:
thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of
Jaimes, Leon
                                                Sent: Tuesday, November 25,
2003 8:05 PM
                                                To: 'thin@xxxxxxxxxxxxx'
                                                Subject: [THIN] Anyone ever
had servers hang with a STOP error involving tcpip.sys

                                                Hello List

                                                I just had all three of my
Citrix application servers crash.  It was about 30 min. between the first 2
and then about an hour till the 3rd went down.  We brought in a 4th that we
keep as a backup and it took about 15 min. for it to do the same.

                                                We are running W2K SP3 with
Citrix MetaFrame XPe FR2 on IBM xSeries 330 servers with dual Netfinity NICs
that are teamed.

                                                The most recent change that
is consistent with all servers is that we installed Virus Scan v7 on all of
them.  We have a Data Store server and a file server both of which are fine.
The only ones that don't server the published desktop.

                                                This is about the 5th time
this has happened, but never to all at once like this.

                                                This is the message.

                                                STOP: 0X000000D1
(0X00000006,0X00000002,0X00000001,0XBFA239A9) DRIVER_IRQL_NOT_LESS_OR_EQUAL
                                                ADDRESS BFA239A9 BASE AT
BFA29000, DATESTAMP 3cdaee1a - tcpip.sys

                                                I got this off the blue
screen, but it also has come up as a console message on them after they
hang/crash.

                                                I already tried uninstalling
and reinstalling TCP/IP and the NIC drivers are up to date.

                                                Also if anyone has any
opinions on Teaming good or bad I would be interested.

                                                Thanks

                                                Leon Jaimes 
                                                PPRM Information Technology
Department 
                                                (303) 813-7614 
                                                <mailto:leon.jaimes@xxxxxxxx
<mailto:leon.jaimes@xxxxxxxx> > 

                                                 

                                 Notice of Confidentiality:
                                This e-mail and any attachments may contain
privileged and/or confidential information. This e-mail is intended solely
for the use of the individual or entity to which it is addressed. If you are
not the intended recipient of this e-mail, you are hereby notified that any
copying, distribution, dissemination or action taken in relation to the
contents of this e-mail and any of its attachments is strictly prohibited
and may be unlawful. If you have received this e-mail in error, please
notify the sender immediately and permanently delete the original e-mail and
destroy any copies or printouts of this e-mail as well as any attachments.
Please note Lutheran Services in Iowa does not endorse any opinions,
conclusions or other information contained within this message that does not
pertain to official business.


-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3
Comment: Public PGP Key for Chris Lynch.

iQA/AwUBP8vAhW9fg+xq5T3MEQKowgCg8+aid3XVhjCmxPDjhhmu2nstUf0AoLlZ
K728lhHgRgKVvnG4xCKQvv4A
=Dium
-----END PGP SIGNATURE-----


********************************************************
This Week's Sponsor - ThinPrint .Print Server Engine
Thinprint can help you save money, protect resources, 
simplify administration, save time and increase 
flexibility by solving all of your printing needs.
http://www.thinprint.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
Domains currently for sale by The Kenzig Group
http://www.kenzig.com/serv01.htm
New Site: Free Weblogs!
http://www.blogvortex.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm

Other related posts: