[THIN] Re: Anyone ever had servers hang with a STOP error involving tcpip.sys

  • From: "Roger Riggins" <roger.riggins@xxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Wed, 26 Nov 2003 08:51:43 -0600

I'd put money on it that McCrappy AV is the culprit. I'd call NAI first.
If they can't help, I'd reapply your service pack. If that doesn't work,
I'd roll back to your previous AV. 

 

Good luck!

R

 

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Jaimes, Leon
Sent: Tuesday, November 25, 2003 7:39 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error
involving tcpip.sys

 

Raff, 

We have a temp monitor that is reporting 77o F which is within the
specs.  Both the affected and unaffected servers are in the same cabinet
at a hosting facility so I think the environment is ok.  They all are on
the same subnet.  The only software changes were installing the Virus
Scan, but we had let it run on one server for about a week with no
problems, then did the others.  It is configured identically for each
server and is on all 6.  There have not been any updates to the
hard/firm/software other than that in the past month.  3 of the servers
that went down are identical in hardware to one that didn't, these all
have dual 10/100 nics and the 4th that went down is a newer server that
has dual 10/100/1000 nics  The drivers are all up to date and identical
for the 10/100s.

Thanks

 

-----Original Message-----
From: Steve Raffensberger [mailto:sraffens1@xxxxxxxxxxx] 
Sent: Tuesday, November 25, 2003 6:26 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Anyone ever had servers hang with a STOP error
involving tcpip.sys

        Leon,

         

        I would also check outside the boxes for clues. When multiple
boxes take a dump together, there is usually an external cause.  Are the
three affected servers on the same subnet or network switch and
different from the unaffected ones? Has anyone made any
hard/firm/software changes to network equipment that is in contact with
the affected servers? Do the affected servers all get their electrical
power from the same PDU and the unaffected ones differ?

         

        Inside the boxes...do the affected servers share the same NIC's
while unaffected servers differ? NIC drivers?

         

        HTH,

         

        Raff

                -----Original Message-----
                From: thin-bounce@xxxxxxxxxxxxx
[mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Jaimes, Leon
                Sent: Tuesday, November 25, 2003 8:05 PM
                To: 'thin@xxxxxxxxxxxxx'
                Subject: [THIN] Anyone ever had servers hang with a STOP
error involving tcpip.sys

                Hello List

                I just had all three of my Citrix application servers
crash.  It was about 30 min. between the first 2 and then about an hour
till the 3rd went down.  We brought in a 4th that we keep as a backup
and it took about 15 min. for it to do the same.

                We are running W2K SP3 with Citrix MetaFrame XPe FR2 on
IBM xSeries 330 servers with dual Netfinity NICs that are teamed.

                The most recent change that is consistent with all
servers is that we installed Virus Scan v7 on all of them.  We have a
Data Store server and a file server both of which are fine.  The only
ones that don't server the published desktop.

                This is about the 5th time this has happened, but never
to all at once like this.

                This is the message.

                STOP: 0X000000D1
(0X00000006,0X00000002,0X00000001,0XBFA239A9)
DRIVER_IRQL_NOT_LESS_OR_EQUAL
                ADDRESS BFA239A9 BASE AT BFA29000, DATESTAMP 3cdaee1a -
tcpip.sys

                I got this off the blue screen, but it also has come up
as a console message on them after they hang/crash.

                I already tried uninstalling and reinstalling TCP/IP and
the NIC drivers are up to date.

                Also if anyone has any opinions on Teaming good or bad I
would be interested.

                Thanks

                Leon Jaimes 
                PPRM Information Technology Department 
                (303) 813-7614 
                <mailto:leon.jaimes@xxxxxxxx
<mailto:leon.jaimes@xxxxxxxx> > 

                 


Notice of Confidentiality:
This e-mail and any attachments may contain privileged and/or confidential 
information. This e-mail is intended solely for the use of the individual or 
entity to which it is addressed. If you are not the intended recipient of this 
e-mail, you are hereby notified that any copying, distribution, dissemination 
or action taken in relation to the contents of this e-mail and any of its 
attachments is strictly prohibited and may be unlawful. If you have received 
this e-mail in error, please notify the sender immediately and permanently 
delete the original e-mail and destroy any copies or printouts of this e-mail 
as well as any attachments. Please note Lutheran Services in Iowa does not 
endorse any opinions, conclusions or other information contained within this 
message that does not pertain to official business.

Other related posts: