[THIN] Re: Anyone ever had servers hang with a STOP error involving tcpip.sys
- From: "Rowlandson, John" <John.Rowlandson@xxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Tue, 2 Dec 2003 09:31:11 +1100
Mallesons Stephen Jaques
www.mallesons.com
Confidential communication
love is a strong word for a computer program ;)
i just know from my experience that it does work if setup properly.
there are a few MS articles on increasing buffers that we had to do on our A-A
fileclusters with 1.2Tb of disk behind them with AV turned on.
but all in all it does work.
the intel proset drivers upgrade sucks, i usually have to remove the older
version totally, reboot (without network access as nics are gone) and then
install proset II
JOhn
John Rowlandson
Technical Support Specialist
Mallesons Stephen Jaques
Sydney
T +61 2 9296 3653
F +61 2 9296 3999
john.rowlandson@xxxxxxxxxxxxx
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On
Behalf Of Chris Lynch
Sent: Tuesday, 2 December 2003 9:26 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error
involving tcpip.sys
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Not to butt in here, but I know how much John loves McAfee (NAI) AV, I have
always had issues with McAfee. Both at the server and workstation level.
When was the last DAT update? Have you attempted to manually apply a
SuperDAT? I know that fixes "some" issues like this in the past for me.
Might want to try that.
Chris
- -----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Ryan Lambert
Sent: Monday, December 01, 2003 1:16 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error involving
tcpip.sys
That's interesting. Is it a load balanced team on the NICs, or a failover
team?
- -----Original Message-----
From: Jaimes, Leon [mailto:Leon.Jaimes@xxxxxxxx]
Sent: Monday, December 01, 2003 3:18 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error involving
tcpip.sys
SP3 for win2k and sp2 for MetaFrame XPe.
I uninstalled VS off of 2 of the 4 that crashed and everything has been
running fine on all 4 so I agree that VS isn't the issue unless it only
crashes when there are 4 servers with it running? problem not. I'll keep
hunting
Thanks
Leon
-----Original Message-----
From: Ryan Lambert [mailto:rlambert@xxxxxxxxxxxxxxx]
Sent: Monday, December 01, 2003 1:05 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error
involving tcpip.sys
Leon,
I would not scan outbound. But that's more like a
driver/compatibility issue, what you are seeing. I don't think it's related
-- but you could attempt to exclude tcpip.sys if you really believe that AV
is the issue (which personally, I don't).
What Service Pack are you on?
-----Original Message-----
From: Jaimes, Leon [mailto:Leon.Jaimes@xxxxxxxx]
Sent: Monday, December 01, 2003 2:29 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error
involving tcpip.sys
So... I'm a dumb arse admin who needs a little help with this,
Are you saying that the ie scan is possibly causing the problem?
If so is it the the inbound and outbound or one or the other?
Am I incorrect in thinking that IE is a high risk process?
Do you have any other tuning tips that might help me?
Thanks in advance
Leon
-----Original Message-----
From: Rowlandson, John
[mailto:John.Rowlandson@xxxxxxxxxxxxx]
Sent: Wednesday, November 26, 2003 3:38 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang with a STOP
error involving tcpip.sys
Mallesons Stephen Jaques
www.mallesons.com
Confidential communication
mcafee (and other av programs) dont kill servers, its dumb
arse admins who dont know how to configure it and leave it at default
settings that kill servers.
ie scan inbound and outbound by default, why would you do
that?
i have mcafee 7.1 on 80 servers so far, file servers, citrix
2000, citrix 2003, flie clusters, web clusters, exchange servers, you name
it.
John Rowlandson
Technical Support Specialist
Mallesons Stephen Jaques
Sydney
T +61 2 9296 3653
F +61 2 9296 3999
john.rowlandson@xxxxxxxxxxxxx
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx
[mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Roger Riggins
Sent: Thursday, 27 November 2003 1:52 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang
with a STOP error involving tcpip.sys
I'd put money on it that McCrappy AV is the culprit.
I'd call NAI first. If they can't help, I'd reapply your service pack. If
that doesn't work, I'd roll back to your previous AV.
Good luck!
R
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx
[mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Jaimes, Leon
Sent: Tuesday, November 25, 2003 7:39 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Anyone ever had servers hang
with a STOP error involving tcpip.sys
Raff,
We have a temp monitor that is reporting 77o F which
is within the specs. Both the affected and unaffected servers are in the
same cabinet at a hosting facility so I think the environment is ok. They
all are on the same subnet. The only software changes were installing the
Virus Scan, but we had let it run on one server for about a week with no
problems, then did the others. It is configured identically for each server
and is on all 6. There have not been any updates to the hard/firm/software
other than that in the past month. 3 of the servers that went down are
identical in hardware to one that didn't, these all have dual 10/100 nics
and the 4th that went down is a newer server that has dual 10/100/1000 nics
The drivers are all up to date and identical for the 10/100s.
Thanks
-----Original Message-----
From: Steve Raffensberger
[mailto:sraffens1@xxxxxxxxxxx]
Sent: Tuesday, November 25, 2003 6:26 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang
with a STOP error involving tcpip.sys
Leon,
I would also check outside the boxes for
clues. When multiple boxes take a dump together, there is usually an
external cause. Are the three affected servers on the same subnet or
network switch and different from the unaffected ones? Has anyone made any
hard/firm/software changes to network equipment that is in contact with the
affected servers? Do the affected servers all get their electrical power
from the same PDU and the unaffected ones differ?
Inside the boxes...do the affected servers
share the same NIC's while unaffected servers differ? NIC drivers?
HTH,
Raff
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx
[mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Jaimes, Leon
Sent: Tuesday, November 25, 2003
8:05 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Anyone ever had
servers hang with a STOP error involving tcpip.sys
Hello List
I just had all three of my Citrix
application servers crash. It was about 30 min. between the first 2 and
then about an hour till the 3rd went down. We brought in a 4th that we keep
as a backup and it took about 15 min. for it to do the same.
We are running W2K SP3 with Citrix
MetaFrame XPe FR2 on IBM xSeries 330 servers with dual Netfinity NICs that
are teamed.
The most recent change that is
consistent with all servers is that we installed Virus Scan v7 on all of
them. We have a Data Store server and a file server both of which are fine.
The only ones that don't server the published desktop.
This is about the 5th time this has
happened, but never to all at once like this.
This is the message.
STOP: 0X000000D1
(0X00000006,0X00000002,0X00000001,0XBFA239A9) DRIVER_IRQL_NOT_LESS_OR_EQUAL
ADDRESS BFA239A9 BASE AT BFA29000,
DATESTAMP 3cdaee1a - tcpip.sys
I got this off the blue screen, but
it also has come up as a console message on them after they hang/crash.
I already tried uninstalling and
reinstalling TCP/IP and the NIC drivers are up to date.
Also if anyone has any opinions on
Teaming good or bad I would be interested.
Thanks
Leon Jaimes
PPRM Information Technology
Department
(303) 813-7614
<mailto:leon.jaimes@xxxxxxxx
<mailto:leon.jaimes@xxxxxxxx> >
Notice of Confidentiality:
This e-mail and any attachments may contain
privileged and/or confidential information. This e-mail is intended solely
for the use of the individual or entity to which it is addressed. If you are
not the intended recipient of this e-mail, you are hereby notified that any
copying, distribution, dissemination or action taken in relation to the
contents of this e-mail and any of its attachments is strictly prohibited
and may be unlawful. If you have received this e-mail in error, please
notify the sender immediately and permanently delete the original e-mail and
destroy any copies or printouts of this e-mail as well as any attachments.
Please note Lutheran Services in Iowa does not endorse any opinions,
conclusions or other information contained within this message that does not
pertain to official business.
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3
Comment: Public PGP Key for Chris Lynch.
iQA/AwUBP8vAE29fg+xq5T3MEQJxEACfX7ES6d91x9KnXQETGlp+x6gkXzkAoOeO
NhbWXL2A3qVpbPsTN5eXInfb
=+fMN
-----END PGP SIGNATURE-----
********************************************************
This Week's Sponsor - ThinPrint .Print Server Engine
Thinprint can help you save money, protect resources,
simplify administration, save time and increase
flexibility by solving all of your printing needs.
http://www.thinprint.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
Domains currently for sale by The Kenzig Group
http://www.kenzig.com/serv01.htm
New Site: Free Weblogs!
http://www.blogvortex.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - ThinPrint .Print Server Engine
Thinprint can help you save money, protect resources,
simplify administration, save time and increase
flexibility by solving all of your printing needs.
http://www.thinprint.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
Domains currently for sale by The Kenzig Group
http://www.kenzig.com/serv01.htm
New Site: Free Weblogs!
http://www.blogvortex.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
