Page cannot be displayed

after doing some reading on the connections_refused it looks like its
actually a shortage of non paged pool which is a kernal mode resource. this
means that its probably a drivers thats causing this issue.

the post i had given you before from David Wang has some pretty good
directions.
http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Diagnose-IIS...ailing-

if this is a 2k3 server then you can easily run poolmon and get a screen
capture of whats going on.

once IIS stops responding to requests run the poolmon -b as David states and
look for the largest user of NPP.

from what i can tell the only time you should see the Connections_Refused is
in the case of a shortage of NPP. http://support.microsoft.com/?id=820729

based on the snapshot you gave me of your paged and non paged this shouldnt
be the case, but i suspect the numbers you gave me for PP and NPP were
before the system became unstable (shortly after a reboot)

now based on the fact that this seems to die fairly quick when you enable
the second nic there is a pretty decent chance that updating your NIC
drivers may fix this. I would suggest that if you dont feel comfortable
really digging in to this that you just go find the newest drivers for
everything you have and perhaps disable any services you dont use to
minimize the need of NPP.

If you do want to dig in to this get the poolmon info and we can take it
from there.

Justin


"Fiona" <Fiona.RemoveThis@discussions.microsoft.com> wrote in message
news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
> Hi Justin,
>
> I'm not sure which ones to run but the website is still not working unless
> I
> disable the second nic.
>
> WFetch gives:
>
> Failed to negotiate secure connection with localhost - port 443
>
> While SSL Diagnostics gives:
>
> System time: Mon, 05 Nov 2007 11:58:03 GMT
> ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
> version:
> 1.1:34.0
> CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
> ProcessorArchitecture: x86
> OS: Windows 2003 Service Pack 2
> IIS6 - World Wide Web Publishing (W3SVC) service is installed
>
> [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
> ImagePath = C:\WINDOWS\system32\lsass.exe
> Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
> EnableKernelSsl = False(default)
> strmfilt.dll loaded into process 524 (lsass.exe)
>
> [ SChannel Info ]
> ServerCacheEntries = 0
> ServerActiveEntries = 0
> ServerHandshakes = 16
> ServerReconnects = 360
> CacheSize = 10000
>
> [ W3SVC/1 ]
> ServerComment = Default Web Site
> ServerAutoStart = True
> ServerState = Server started
> #Impersonated server account
> SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d 98 15 c8
> SSLStoreName = MY
> #CertName = mh30-hq-it
> #You have a private key that corresponds to this certificate
> #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e956-4566-af96-71396eb73226'
> #ProvName='Microsoft RSA SChannel Cryptographic Provider'
> ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
> #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT, CN=mh30-hq-it
> #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
> #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
> CertVerifyCertificateChainPolicy succeeded
> SecureBindings = 10.180.2.30:443:
>
> [ W3SVC/1/ROOT/_private ]
> AccessSSLFlags = 0 (0x0)
>
> [ W3SVC/1/ROOT/_vti_cnf ]
> AccessSSLFlags = 0 (0x0)
>
> [ W3SVC/1/ROOT/_vti_log ]
> AccessSSLFlags = 0 (0x0)
>
> [ W3SVC/1/ROOT/_vti_pvt ]
> AccessSSLFlags = 0 (0x0)
>
> [ W3SVC/1/ROOT/_vti_script ]
> AccessSSLFlags = 0 (0x0)
>
> Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
>
>
> "Justin Rich" wrote:
>
>> nevermind comfort zone, this is getting out of my support realm!
>>
>> i would say, since the page pool is so low, its not an issue here.
>>
>> i would imagine, that since David suggested that its normally page pool
>> that
>> causes this issue that its some type of resource shortage.
>>
>> your next step would be to run iisdiag stuff. which ive done rarely and i
>> may not be the best person to ask.
>>
>> off hand i cant give you directions but if you can figure out and run a
>> iisdiag i can probably analyze the file for you to see if i can spot
>> anything.
>>
>> Justin
>>
>>
>> "Fiona" <Fiona.RemoveThis@discussions.microsoft.com> wrote in message
>> news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
>> > This is starting to get out of my comfort zone.
>> >
>> > The paged is 133820
>> > Non paged is 109916
>> >
>> > I haven't managed to find anything else about one nic being enabled or
>> > disabled affecting IIS though.
>> >
>> > Fiona
>> >
>> > "Justin Rich" wrote:
>> >
>> >> wow... hmm
>> >>
>> >> thats a new one to me..
>> >> David Wang has a blog post about this.
>> >> http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Diagnose-IIS...ailing-
>> >>
>> >> it looks like its saying its from a shortage of page pool memory which
>> >> can
>> >> be a bear to deal with. his blog post has a bit of a walk through and
>> >> some
>> >> KB's to refer to.
>> >>
>> >> before digging to deep, open up task manager and go to the performance
>> >> tab.
>> >> under kernel memory you will see values for paged and non paged. the
>> >> one
>> >> you
>> >> care about is the paged pool. if you have anything in the area of
>> >> 280+MB
>> >> of
>> >> page pool then chances are a shortage of page pool is your issue and
>> >> your
>> >> going to have some work on your hands trying to figure this one out.
>> >>
>> >>
>> >>
>> >> "Fiona" <Fiona.RemoveThis@discussions.microsoft.com> wrote in message
>> >> news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
>> >> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
>> >> >
>> >> > The httperr log shows:
>> >> >
>> >> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
>> >> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
>> >> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
>> >> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
>> >> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
>> >> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
>> >> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
>> >> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
>> >> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
>> >> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
>> >> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
>> >> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
>> >> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
>> >> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
>> >> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
>> >> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
>> >> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
>> >> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
>> >> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
>> >> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
>> >> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
>> >> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
>> >> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
>> >> >
>> >> > Fiona
>> >> >
>> >> >
>> >> > "Justin Rich" wrote:
>> >> >
>> >> >> so the interesting part here is that a telnet connected and kicked
>> >> >> you
>> >> >> out... you'll want to look at the IIS logs now to see why it kicked
>> >> >> you
>> >> >> out.
>> >> >>
>> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
>> >> >> try the telnet again and then look at the logs. it should give some
>> >> >> info
>> >> >> as
>> >> >> to why you are being rejected.
>> >> >>
>> >> >> "Fiona" <Fiona.RemoveThis@discussions.microsoft.com> wrote in message
>> >> >> news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
>> >> >> > Hi Justin,
>> >> >> >
>> >> >> > As suspected the problem has re-occurred.
>> >> >> >
>> >> >> > Netstat -a shows:
>> >> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> > LISTENING
>> >> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> > LISTENING
>> >> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> > LISTENING
>> >> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> > LISTENING
>> >> >> >
>> >> >> > Only one nic has a gateway and is accessible from my desktop
>> >> >> >
>> >> >> > I can ping one nic from my desktop.
>> >> >> >
>> >> >> > The second nic is used for backup and can be pinged from the
>> >> >> > backup
>> >> >> > server.
>> >> >> >
>> >> >> > The website is set to use only one ip, not all unassigned.
>> >> >> >
>> >> >> > When I try telnetting to the ip used for the site it kicks me out
>> >> >> > as
>> >> >> > soon
>> >> >> > as
>> >> >> > I try to type anything.
>> >> >> >
>> >> >> > Pinging via name is successful.
>> >> >> >
>> >> >> > Disabling the second nic has enabled the website again! The day
>> >> >> > before
>> >> >> > yesterday it wouldn't work without a reboot!
>> >> >> >
>> >> >> > I hope you can suggest something as this is extremely frustrating
>> >> >> > and I
>> >> >> > can't keep rebooting the server or disabling the nic as it's used
>> >> >> > for
>> >> >> > backup.
>> >> >> >
>> >> >> > Fiona
>> >> >> >
>> >> >> > "Justin Rich" wrote:
>> >> >> >
>> >> >> >> thanks for the update, good luck
>> >> >> >>
>> >> >> >> "Fiona" <Fiona.RemoveThis@discussions.microsoft.com> wrote in message
>> >> >> >> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
>> >> >> >> > Hi Justin,
>> >> >> >> >
>> >> >> >> > Well this problem seems to have been resolved by installing a
>> >> >> >> > patch
>> >> >> >> > for
>> >> >> >> > Officescan 8, even though the site never gave any indication
>> >> >> >> > that
>> >> >> >> > this
>> >> >> >> > was
>> >> >> >> > a
>> >> >> >> > known fault.
>> >> >> >> >
>> >> >> >> > IIS has been working fine with both nics enabled since last
>> >> >> >> > night's
>> >> >> >> > reboot
>> >> >> >> > whereas before it never labut I'll certainly update you if the
>> >> >> >> > problem
>> >> >> >> > reoccurs.
>> >> >> >> >
>> >> >> >> > I always doubted that something was wrong with the networking
>> >> >> >> > setup
>> >> >> >> > as
>> >> >> >> > it
>> >> >> >> > had been working fine for around 2 years before upgrading the
>> >> >> >> > AV
>> >> >> >> > software,
>> >> >> >> > the other suspect was SP2.
>> >> >> >> >
>> >> >> >> > This was a strange one though.
>> >> >> >> >
>> >> >> >> > Fiona
>> >> >> >> >
>> >> >> >> >
>> >> >> >> > "Justin Rich" wrote:
>> >> >> >> >
>> >> >> >> >> well if you bring up task manager and you can watch IIS grow
>> >> >> >> >> and
>> >> >> >> >> grow
>> >> >> >> >> and
>> >> >> >> >> never release any memory, then, it could possibly be a
>> >> >> >> >> leak...
>> >> >> >> >> but
>> >> >> >> >> i
>> >> >> >> >> doubt
>> >> >> >> >> this would be the results of that. I think i would clean up
>> >> >> >> >> your
>> >> >> >> >> connectivity issues before you try to figure out the IIS
>> >> >> >> >> part. I
>> >> >> >> >> would
>> >> >> >> >> try
>> >> >> >> >> some of the things i had suggested below to get this working.
>> >> >> >> >>
>> >> >> >> >> Also, if you have dual nic's make sure only one of them has a
>> >> >> >> >> gateway.
>> >> >> >> >> if
>> >> >> >> >> both have gateways set you run in to a problem.
>> >> >> >> >>
>> >> >> >> >> try the tests below and let me know the outcome.
>> >> >> >> >>
>> >> >> >> >> from your workstation
>> >> >> >> >> ping both interfaces via ip
>> >> >> >> >> ping via name
>> >> >> >> >>
>> >> >> >> >> from the server
>> >> >> >> >> do a netstat -a and look for the http listening port
>> >> >> >> >>
>> >> >> >> >> from your workstation
>> >> >> >> >> try to open the website root via both IP's and also by name
>> >> >> >> >> use telnet to connect to the webserver (telnet server 80)
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >> >> "Fiona" <Fiona.RemoveThis@discussions.microsoft.com> wrote in message
>> >> >> >> >> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
>> >> >> >> >> > Hi Justin,
>> >> >> >> >> >
>> >> >> >> >> > Well this is odd. Last night the website just wouldn't
>> >> >> >> >> > work
>> >> >> >> >> > at
>> >> >> >> >> > all
>> >> >> >> >> > even
>> >> >> >> >> > though all of the services were started. It didn't matter
>> >> >> >> >> > if
>> >> >> >> >> > one
>> >> >> >> >> > or
>> >> >> >> >> > two
>> >> >> >> >> > of
>> >> >> >> >> > the nics were enabled it just wouldn't work.
>> >> >> >> >> >
>> >> >> >> >> > I rebooted the server overnight and now the website is
>> >> >> >> >> > working
>> >> >> >> >> > with
>> >> >> >> >> > both
>> >> >> >> >> > nics enabled?
>> >> >> >> >> >
>> >> >> >> >> > I'm guessing this must be some kind of memory leakage and
>> >> >> >> >> > that
>> >> >> >> >> > the
>> >> >> >> >> > enabling
>> >> >> >> >> > and disabling of the second nic was just a red herring?
>> >> >> >> >> >
>> >> >> >> >> > I'm not familiar with memory leakage issues so I'm not sure
>> >> >> >> >> > where
>> >> >> >> >> > to
>> >> >> >> >> > begin
>> >> >> >> >> > in tracking that down.
>> >> >> >> >> >
>> >> >> >> >> > I am thinking its probably the AV software as the version
>> >> >> >> >> > was
>> >> >> >> >> > updated
>> >> >> >> >> > recently but I can see nothing on Trend's site to indicate
>> >> >> >> >> > this.
>> >> >> >> >> >
>> >> >> >> >> > Fiona
>> >> >> >> >> >
>> >> >> >> >> > "Justin Rich" wrote:
>> >> >> >> >> >
>> >> >> >> >> >> are you able to ping both nics ok from another machine?
>> >> >> >> >> >> did you make any changes to IIS? perhaps once you enable
>> >> >> >> >> >> the
>> >> >> >> >> >> second
>> >> >> >> >> >> NIC
>> >> >> >> >> >> restart IIS?
>> >> >> >> >> >>
>> >> >> >> >> >> that is just really odd because technincally when you use
>> >> >> >> >> >> localhost
>> >> >> >> >> >> it
>> >> >> >> >> >> resolves to 127.0.0.1 which is a special loopback address
>> >> >> >> >> >> and
>> >> >> >> >> >> should
>> >> >> >> >> >> have
>> >> >> >> >> >> nothing to do with either nic.
>> >> >> >> >> >>
>> >> >> >> >> >> it could possibly be an issue with the NICs conflicting in
>> >> >> >> >> >> some
>> >> >> >> >> >> way
>> >> >> >> >> >> because
>> >> >> >> >> >> thats just not normal at all.
>> >> >> >> >> >>
>> >> >> >> >> >> I guess what i would do is enable both NICS, reboot the
>> >> >> >> >> >> box,
>> >> >> >> >> >> and
>> >> >> >> >> >> run a
>> >> >> >> >> >> netstat -a at the command prompt. you should see, for a
>> >> >> >> >> >> local
>> >> >> >> >> >> address,
>> >> >> >> >> >> server:http in there, some times with dual nics if its
>> >> >> >> >> >> open
>> >> >> >> >> >> on
>> >> >> >> >> >> one
>> >> >> >> >> >> ip
>> >> >> >> >> >> and
>> >> >> >> >> >> not the other it will show the ip instead of the server
>> >> >> >> >> >> name.
>> >> >> >> >> >> that
>> >> >> >> >> >> might
>> >> >> >> >> >> give us some indication as to whats going on here..
>> >> >> >> >> >>
>> >> >> >> >> >> "Fiona" <Fiona.RemoveThis@discussions.microsoft.com> wrote in message
>> >> >> >> >> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
>> >> >> >> >> >> > Hi Justin,
>> >> >> >> >> >> >
>> >> >> >> >> >> > The website is accessed by the IP Address. When both
>> >> >> >> >> >> > nics
>> >> >> >> >> >> > are
>> >> >> >> >> >> > enabled
>> >> >> >> >> >> > http://localhost isn't even available but the second you
>> >> >> >> >> >> > disable
>> >> >> >> >> >> > the
>> >> >> >> >> >> > second
>> >> >> >> >> >> > nic it is?
>> >> >> >> >> >> >

On machines with multiple NICs, you must configure networking
properly, as described here:
http://groups.google.com/group/microsoft.public.inetserver.iis/browse_...ead/thr

The symptoms will be that with multiple NICs enabled, IIS website is
sporadically not accessible.

Let's first get networking configured correctly for multi-homed
network configuration before looking at Connections_Refused.

SSL is really not in the picture, and SSLDiag is not going to be
relevant.

> The paged is 133820
> Non paged is 109916

With your prior numbers, is that from POOLMON in KB? If so, that is
about 110MB NonPaged Pool, which is near exhaustion for a 2GB RAM
32bit Machine. You want to go through my Blog article's instructions
(and many other people's friendly findings!) to identify the kernel
mode driver using the non-paged pool. Several times the culprit has
been a FileSystem filter driver for AntiVirus. Or Network Driver. Or
Monitoring software by Computer Manufacturer leaking memory. And it
all gets blamed as Microsoft's problem with "Windows"...


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//




On Nov 5, 5:57 am, "Justin Rich" <jrich....TakeThisOut@yahoo.spam.com> wrote:
> after doing some reading on the connections_refused it looks like its
> actually a shortage of non paged pool which is a kernal mode resource. this
> means that its probably a drivers thats causing this issue.
>
> the post i had given you before from David Wang has some pretty good
> directions.http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Diagnose-II...
>
> if this is a 2k3 server then you can easily run poolmon and get a screen
> capture of whats going on.
>
> once IIS stops responding to requests run the poolmon -b as David states and
> look for the largest user of NPP.
>
> from what i can tell the only time you should see the Connections_Refused is
> in the case of a shortage of NPP.http://support.microsoft.com/?id=820729
>
> based on the snapshot you gave me of your paged and non paged this shouldnt
> be the case, but i suspect the numbers you gave me for PP and NPP were
> before the system became unstable (shortly after a reboot)
>
> now based on the fact that this seems to die fairly quick when you enable
> the second nic there is a pretty decent chance that updating your NIC
> drivers may fix this. I would suggest that if you dont feel comfortable
> really digging in to this that you just go find the newest drivers for
> everything you have and perhaps disable any services you dont use to
> minimize the need of NPP.
>
> If you do want to dig in to this get the poolmon info and we can take it
> from there.
>
> Justin
>
> "Fiona" <Fi....TakeThisOut@discussions.microsoft.com> wrote in message
>
> news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
>
>
>
> > Hi Justin,
>
> > I'm not sure which ones to run but the website is still not working unless
> > I
> > disable the second nic.
>
> > WFetch gives:
>
> > Failed to negotiate secure connection with localhost - port 443
>
> > While SSL Diagnostics gives:
>
> > System time: Mon, 05 Nov 2007 11:58:03 GMT
> > ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
> > version:
> > 1.1:34.0
> > CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
> > ProcessorArchitecture: x86
> > OS: Windows 2003 Service Pack 2
> > IIS6 - World Wide Web Publishing (W3SVC) service is installed
>
> > [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
> > ImagePath = C:\WINDOWS\system32\lsass.exe
> > Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
> > EnableKernelSsl = False(default)
> > strmfilt.dll loaded into process 524 (lsass.exe)
>
> > [ SChannel Info ]
> > ServerCacheEntries = 0
> > ServerActiveEntries = 0
> > ServerHandshakes = 16
> > ServerReconnects = 360
> > CacheSize = 10000
>
> > [ W3SVC/1 ]
> > ServerComment = Default Web Site
> > ServerAutoStart = True
> > ServerState = Server started
> > #Impersonated server account
> > SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d 98 15 c8
> > SSLStoreName = MY
> > #CertName = mh30-hq-it
> > #You have a private key that corresponds to this certificate
> > #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e956-4566-af96-71­396eb73226'
> > #ProvName='Microsoft RSA SChannel Cryptographic Provider'
> > ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
> > #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT, CN=mh30-hq-it
> > #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
> > #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
> > CertVerifyCertificateChainPolicy succeeded
> > SecureBindings = 10.180.2.30:443:
>
> > [ W3SVC/1/ROOT/_private ]
> > AccessSSLFlags = 0 (0x0)
>
> > [ W3SVC/1/ROOT/_vti_cnf ]
> > AccessSSLFlags = 0 (0x0)
>
> > [ W3SVC/1/ROOT/_vti_log ]
> > AccessSSLFlags = 0 (0x0)
>
> > [ W3SVC/1/ROOT/_vti_pvt ]
> > AccessSSLFlags = 0 (0x0)
>
> > [ W3SVC/1/ROOT/_vti_script ]
> > AccessSSLFlags = 0 (0x0)
>
> > Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
>
> > "Justin Rich" wrote:
>
> >> nevermind comfort zone, this is getting out of my support realm!
>
> >> i would say, since the page pool is so low, its not an issue here.
>
> >> i would imagine, that since David suggested that its normally page pool
> >> that
> >> causes this issue that its some type of resource shortage.
>
> >> your next step would be to run iisdiag stuff. which ive done rarely and i
> >> may not be the best person to ask.
>
> >> off hand i cant give you directions but if you can figure out and run a
> >> iisdiag i can probably analyze the file for you to see if i can spot
> >> anything.
>
> >> Justin
>
> >> "Fiona" <Fi....TakeThisOut@discussions.microsoft.com> wrote in message
> >>news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
> >> > This is starting to get out of my comfort zone.
>
> >> > The paged is 133820
> >> > Non paged is 109916
>
> >> > I haven't managed to find anything else about one nic being enabled or
> >> > disabled affecting IIS though.
>
> >> > Fiona
>
> >> > "Justin Rich" wrote:
>
> >> >> wow... hmm
>
> >> >> thats a new one to me..
> >> >> David Wang has a blog post about this.
> >> >>http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Diagnose-II...
>
> >> >> it looks like its saying its from a shortage of page pool memory which
> >> >> can
> >> >> be a bear to deal with. his blog post has a bit of a walk through and
> >> >> some
> >> >> KB's to refer to.
>
> >> >> before digging to deep, open up task manager and go to the performance
> >> >> tab.
> >> >> under kernel memory you will see values for paged and non paged. the
> >> >> one
> >> >> you
> >> >> care about is the paged pool. if you have anything in the area of
> >> >> 280+MB
> >> >> of
> >> >> page pool then chances are a shortage of page pool is your issue and
> >> >> your
> >> >> going to have some work on your hands trying to figure this one out.
>
> >> >> "Fiona" <Fi....TakeThisOut@discussions.microsoft.com> wrote in message
> >> >>news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
> >> >> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
>
> >> >> > The httperr log shows:
>
> >> >> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
> >> >> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
> >> >> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
> >> >> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
> >> >> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
> >> >> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
> >> >> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
> >> >> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
> >> >> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
> >> >> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
> >> >> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
> >> >> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
> >> >> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
> >> >> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
> >> >> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
> >> >> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
> >> >> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
> >> >> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
> >> >> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
> >> >> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
> >> >> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
> >> >> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
> >> >> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
>
> >> >> > Fiona
>
> >> >> > "Justin Rich" wrote:
>
> >> >> >> so the interesting part here is that a telnet connected and kicked
> >> >> >> you
> >> >> >> out... you'll want to look at the IIS logs now to see why it kicked
> >> >> >> you
> >> >> >> out.
>
> >> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
> >> >> >> try the telnet again and then look at the logs. it should give some
> >> >> >> info
> >> >> >> as
> >> >> >> to why you are being rejected.
>
> >> >> >> "Fiona" <Fi....TakeThisOut@discussions.microsoft.com> wrote in message
> >> >> >>news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
> >> >> >> > Hi Justin,
>
> >> >> >> > As suspected the problem has re-occurred.
>
> >> >> >> > Netstat -a shows:
> >> >> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
> >> >> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
> >> >> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
> >> >> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
>
> >> >> >> > Only one nic has a gateway and is accessible from my desktop
>
> >> >> >> > I can ping one nic from my desktop.
>
> >> >> >> > The second nic is used for backup and can be pinged from the
> >> >> >> > backup
> >> >> >> > server.
>
> >> >> >> > The website is set to use only one ip, not all unassigned.
>
> >> >> >> > When I try telnetting to the ip used for the site it kicks me out
> >> >> >> > as
> >> >> >> > soon
> >> >> >> > as
> >> >> >> > I try to type anything.
>
> >> >> >> > Pinging via name is successful.
>
> >> >> >> > Disabling the second nic has enabled the website again! The day
> >> >> >> > before
> >> >> >> > yesterday it wouldn't work without a reboot!
>
> >> >> >> > I hope you can suggest something as this is extremely frustrating
> >> >> >> > and I
> >> >> >> > can't keep rebooting the server or disabling the nic as it's used
> >> >> >> > for
> >> >> >> > backup.
>
> >> >> >> > Fiona
>
> >> >> >> > "Justin Rich" wrote:
>
> >> >> >> >> thanks for the update, good luck
>
> >> >> >> >> "Fiona" <Fi....TakeThisOut@discussions.microsoft.com> wrote in message
> >> >> >> >>news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
> >> >> >> >> > Hi Justin,
>
> >> >> >> >> > Well this problem seems to have been resolved by installing a
>
> ...
>
> read more »- Hide quoted text -
>
> - Show quoted text -