Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

IISState log for w3wp crash.

 
   Web Hosting and Web Master Forums (Home) -> IIS RSS
Next:  Help with My Shopping Cart and Payment Processors..  
Author Message
khan

External


Since: Oct 22, 2005
Posts: 2



(Msg. 1) Posted: Sat Oct 22, 2005 3:17 am
Post subject: IISState log for w3wp crash.
Archived from groups: microsoft>public>inetserver>iis (more info?)

Hi, We are having issues with our server using 100% CPU resources and
allocating a lot of memory. This happens whenver our web based
application launches. I have run IISState on it and am including the
output.
There's also a dump file generated(191 MB), which I can send to
someone, if they want to take a crack at it. I would be happy to look
at it too, if someone could send me a pointer on what tools to use. I
looked at the call stack in visual studio, but the solution didn't have
any symbol information, so it was all greek to me. A FAQ on how to link
the dmp file to the source code would be nice too.
I am especially looking for some help from a MSFT engineer, but any
help would be appreciated.
All the best,
-Zafar


=======================
Opened log file 'C:\iisstate\output\IISState-3832.log'

***********************
Starting new log output
IISState version 3.3.1

Sat Oct 22 02:48:21 2005

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 3832

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: a24
Kernel Time: 0:0:0.46
User Time: 0:0:0.31
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0006fc08 7c822124 ntdll!KiFastSystemCallRet
01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12
04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d
06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd
07 0006ff0c 0100187c w3core!UlW3Start+0x26e
08 0006ff44 01001a23 w3wp!wmain+0x22a
09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b
0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23




Thread ID: 1
System Thread ID: 9d4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 009afea0 7c822114 ntdll!KiFastSystemCallRet
01 009afea4 7c80e504 ntdll!NtWaitForMultipleObjects+0xc
02 009aff48 7c80e933 ntdll!EtwpWaitForMultipleObjectsEx+0xf7
03 009affb8 77e66063 ntdll!EtwpEventPump+0x27f
04 009affec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 2
System Thread ID: 908
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 009eff9c 7c821364 ntdll!KiFastSystemCallRet
01 009effa0 7c81fe26 ntdll!NtDelayExecution+0xc
02 009effb8 77e66063 ntdll!RtlpTimerThread+0x47
03 009effec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 3
System Thread ID: ac0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00a2ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 00a2ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 00a2ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 00a2ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 4
System Thread ID: c10
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 00a8fe18 7c821c54 ntdll!KiFastSystemCallRet
01 00a8fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 00a8ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 00a8ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 00a8ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 00a8ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 00a8ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 5
System Thread ID: 790
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00acff10 7c821364 ntdll!KiFastSystemCallRet
01 00acff14 77e42439 ntdll!NtDelayExecution+0xc
02 00acff7c 77e424b7 kernel32!SleepEx+0x68
03 00acff8c 776b22a0 kernel32!Sleep+0xf
04 00acff98 776b2307 ole32!CROIDTable::WorkerThreadLoop+0x14
05 00acffa8 77670000 ole32!CRpcThread::WorkerLoop+0x1e
06 00acffb8 77e66063 ole32!_imp__InstallApplication <PERF> (ole32+0x0)
07 00acffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 6
System Thread ID: 86c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c8ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00c8ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00c8ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00c8ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00c8ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00c8ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00c8ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 7
System Thread ID: 8a0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00ccff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00ccff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00ccff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00ccff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00ccffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00ccffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00ccffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 8
System Thread ID: 228
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00d0ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00d0ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00d0ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00d0ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00d0ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00d0ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00d0ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 9
System Thread ID: 8d8
Kernel Time: 0:0:0.15
User Time: 0:0:0.31
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00d4ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00d4ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00d4ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00d4ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00d4ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00d4ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00d4ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 10
System Thread ID: ae4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00e0fcec 7c822114 ntdll!KiFastSystemCallRet
01 00e0fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
02 00e0ffb8 77e66063 ntdll!RtlpWaitThread+0x161
03 00e0ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 11
System Thread ID: abc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 017dfa84 7c822124 ntdll!KiFastSystemCallRet
01 017dfa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 017dfaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 017dfb0c 5a3b8147 kernel32!WaitForSingleObject+0x12
04 017dffb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 017dffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 12
System Thread ID: 6ec
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0181fe18 7c821c54 ntdll!KiFastSystemCallRet
01 0181fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 0181ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 0181ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 0181ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 0181ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 0181ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 13
System Thread ID: ef0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0185ff8c 7c821364 ntdll!KiFastSystemCallRet
01 0185ff90 7c815267 ntdll!NtDelayExecution+0xc
02 0185ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f
03 0185ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 14
System Thread ID: 20c
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01c7fe74 7c822124 ntdll!KiFastSystemCallRet
01 01c7fe78 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 01c7fee8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 01c7fefc 7927da0d kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 01c7ff24 791fdacc mscorsvr!CoEEShutDownCOM+0x2a90c
05 01c7ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 01c7ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 15
System Thread ID: 91c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01cbfeb0 7c821364 ntdll!KiFastSystemCallRet
01 01cbfeb4 77e42439 ntdll!NtDelayExecution+0xc
02 01cbff1c 77e424b7 kernel32!SleepEx+0x68
03 01cbff2c 791bf4f9 kernel32!Sleep+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 01cbffb8 77e66063 mscorsvr!Ordinal76+0xf4f9
05 01cbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 16
System Thread ID: fb4
Kernel Time: 0:0:0.156
User Time: 0:0:13.203
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01cffdf8 7c822124 ntdll!KiFastSystemCallRet
01 01cffdfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 01cffe6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 01cffe80 791d401f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 01cffea4 791fdacc mscorsvr!GetCompileInfo+0x1512
05 01cfffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 01cfffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 17
System Thread ID: 778
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01e4fe70 7c822114 ntdll!KiFastSystemCallRet
01 01e4fe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 01e4ff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
03 01e4ff38 79238fd6 kernel32!WaitForMultipleObjects+0x18
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 01e4ffa0 79238f4d mscorsvr!CoInitializeCor+0x43ad
05 01e4ffb8 77e66063 mscorsvr!CoInitializeCor+0x4324
06 01e4ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 18
System Thread ID: 560
Kernel Time: 0:0:0.46
User Time: 0:0:3.187
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01fbfefc 7c822124 ntdll!KiFastSystemCallRet
01 01fbff00 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 01fbff70 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 01fbff84 791fe6b0 kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 01fbffac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97
05 01fbffb8 77e66063 mscorsvr!CoInitializeCor+0xa96
06 01fbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 19
System Thread ID: dcc
Kernel Time: 0:0:0.78
User Time: 0:0:3.62
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01fffdfc 7c822124 ntdll!KiFastSystemCallRet
01 01fffe00 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 01fffe70 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 01fffe84 791fe6b0 kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 01fffeac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97
05 01ffffb8 77e66063 mscorsvr!CoInitializeCor+0xa96
06 01ffffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 20
System Thread ID: ad4
Kernel Time: 0:0:0.15
User Time: 0:0:0.46
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0203fdf8 7c822114 ntdll!KiFastSystemCallRet
01 0203fdfc 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 0203fea4 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
03 0203fec0 7927826b kernel32!WaitForMultipleObjects+0x18
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0203fee0 791fecf4 mscorsvr!CoEEShutDownCOM+0x2516a
05 0203ff24 79245681 mscorsvr!GetAssemblyMDImport+0x163db
06 0203ffb8 77e66063 mscorsvr!CoUninitializeEE+0xa13e
07 0203ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 21
System Thread ID: 318
Kernel Time: 0:0:0.156
User Time: 0:0:20.328
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0215fd78 7c822124 ntdll!KiFastSystemCallRet
01 0215fd7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0215fdec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0215fe00 791d401f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0215fe24 791fdacc mscorsvr!GetCompileInfo+0x1512
05 0215ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 0215ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 22
System Thread ID: f20
Kernel Time: 0:0:0.171
User Time: 0:0:12.265
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0219fcf8 7c822124 ntdll!KiFastSystemCallRet
01 0219fcfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0219fd6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0219fd80 791d401f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0219fda4 791fdacc mscorsvr!GetCompileInfo+0x1512
05 0219ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 0219ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 23
System Thread ID: c54
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0c3cff38 7c821364 ntdll!KiFastSystemCallRet
01 0c3cff3c 77e42439 ntdll!NtDelayExecution+0xc
02 0c3cffa4 791cc578 kernel32!SleepEx+0x68
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 0c3cffec 00000000 mscorsvr!Ordinal76+0x1c578




Thread ID: 24
System Thread ID: 7d0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0c77ff24 7c821364 ntdll!KiFastSystemCallRet
01 0c77ff28 77e42439 ntdll!NtDelayExecution+0xc
02 0c77ff90 79249f45 kernel32!SleepEx+0x68
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 0c77ffb8 77e66063
mscorsvr!GetMetaDataPublicInterfaceFromInternal+0x33e5
04 0c77ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 25
System Thread ID: 4a8
Kernel Time: 0:0:0.109
User Time: 0:0:12.390
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0c9bfc78 7c822124 ntdll!KiFastSystemCallRet
01 0c9bfc7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0c9bfcec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0c9bfd00 791d401f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0c9bfd24 791fdacc mscorsvr!GetCompileInfo+0x1512
05 0c9bffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 0c9bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 26
System Thread ID: 7d4
Kernel Time: 0:0:0.31
User Time: 0:0:11.875
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0cf3fbf8 7c822124 ntdll!KiFastSystemCallRet
01 0cf3fbfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0cf3fc6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0cf3fc80 791d401f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0cf3fca4 791fdacc mscorsvr!GetCompileInfo+0x1512
05 0cf3ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 0cf3ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 27
System Thread ID: dc8
Kernel Time: 0:0:0.0
User Time: 0:0:0.31
Thread Type: Other
# ChildEBP RetAddr
00 0cfffbc0 7c821bf4 ntdll!KiFastSystemCallRet
01 0cfffbc4 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 0cfffbf0 791fdb22 kernel32!GetQueuedCompletionStatus+0x29
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 0cfffc24 791fdacc mscorsvr!GetAssemblyMDImport+0x15209
04 0cffffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
05 0cffffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 28
System Thread ID: 8e4
Kernel Time: 0:0:0.31
User Time: 0:0:11.78
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01e9faf8 7c822124 ntdll!KiFastSystemCallRet
01 01e9fafc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 01e9fb6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 01e9fb80 791d401f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 01e9fba4 791fdacc mscorsvr!GetCompileInfo+0x1512
05 01e9ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 01e9ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 29
System Thread ID: 900
Kernel Time: 0:0:0.46
User Time: 0:0:11.156
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0f54fa78 7c822124 ntdll!KiFastSystemCallRet
01 0f54fa7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0f54faec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0f54fb00 791d401f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0f54fb24 791fdacc mscorsvr!GetCompileInfo+0x1512
05 0f54ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 0f54ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 30
System Thread ID: fd0
Kernel Time: 0:0:0.62
User Time: 0:0:11.562
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0f7cf9f8 7c822124 ntdll!KiFastSystemCallRet
01 0f7cf9fc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0f7cfa6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0f7cfa80 791d401f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0f7cfaa4 791fdacc mscorsvr!GetCompileInfo+0x1512
05 0f7cffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 0f7cffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 31
System Thread ID: ea4
Kernel Time: 0:0:0.0
User Time: 0:0:0.31
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0f80f974 7c822124 ntdll!KiFastSystemCallRet
01 0f80f978 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0f80f9e8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0f80f9fc 7927da0d kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0f80fa24 791fdacc mscorsvr!CoEEShutDownCOM+0x2a90c
05 0f80ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 0f80ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 32
System Thread ID: 7e4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0f4cfe18 7c821c54 ntdll!KiFastSystemCallRet
01 0f4cfe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 0f4cff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 0f4cff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 0f4cffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 0f4cffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 0f4cffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 33
System Thread ID: f08
Kernel Time: 0:0:0.15
User Time: 0:0:0.468
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0f50f7f8 7c822124 ntdll!KiFastSystemCallRet
01 0f50f7fc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0f50f86c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0f50f880 791d401f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0f50f8a4 791fdacc mscorsvr!GetCompileInfo+0x1512
05 0f50ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 0f50ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 34
System Thread ID: e60
Kernel Time: 0:0:0.15
User Time: 0:0:0.421
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0e39f778 7c822124 ntdll!KiFastSystemCallRet
01 0e39f77c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0e39f7ec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0e39f800 791d401f kernel32!WaitForSingleObject+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0e39f824 791fdacc mscorsvr!GetCompileInfo+0x1512
05 0e39ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
06 0e39ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 35
System Thread ID: 8b4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0e3dff70 7c821bf4 ntdll!KiFastSystemCallRet
01 0e3dff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 0e3dffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 0e3dffec 00000000 kernel32!BaseThreadStart+0x34

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating C:\iisstate\output\3832-1129974546.dmp - mini user dump

*****

Closing open log file C:\iisstate\output\IISState-3832.log

 >> Stay informed about: IISState log for w3wp crash. 
Back to top
Login to vote
patfilot

External


Since: Aug 24, 2003
Posts: 1478



(Msg. 2) Posted: Mon Oct 24, 2005 10:27 am
Post subject: Re: IISState log for w3wp crash. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

It doesn't look like there was any problem in the process when the log was
taken. All of the threads are idle, with several having used ~11 seconds
worth of CPU. To determine the cause, you'll need to run the IISState
utility while the problem is happening.

Based on your description, it is not clear if the problem resolves itself
after the service is up and running - i.e. is this a transient issue. It is
very common during the first few seconds - and even for the first few
minutes depending on site design & sever load - for the CPU to sustain a
very high level and for memory usage to increase dramatically (increase
cache means increased memory). This is b/c a lot of extra work is being
done to warm up the cache, do initial DLL loads, etc. As items are cached
CPU decreases, and the site begins to run normal. In extreme situations, I
have seen it take 45 minutes for a site to become stable (in that case the
_average_ asp page was ~300k in size and they had 100's of them).


Pat

<khan DeleteThis @alumni.caltech.edu> wrote in message
news:1129976265.721370.98770@z14g2000cwz.googlegroups.com...
> Hi, We are having issues with our server using 100% CPU resources and
> allocating a lot of memory. This happens whenver our web based
> application launches. I have run IISState on it and am including the
> output.
> There's also a dump file generated(191 MB), which I can send to
> someone, if they want to take a crack at it. I would be happy to look
> at it too, if someone could send me a pointer on what tools to use. I
> looked at the call stack in visual studio, but the solution didn't have
> any symbol information, so it was all greek to me. A FAQ on how to link
> the dmp file to the source code would be nice too.
> I am especially looking for some help from a MSFT engineer, but any
> help would be appreciated.
> All the best,
> -Zafar
>
>
> =======================
> Opened log file 'C:\iisstate\output\IISState-3832.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Sat Oct 22 02:48:21 2005
>
> OS = Windows 2003 Server
> Executable: w3wp.exe
> PID = 3832
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: a24
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.31
> Thread Status: Thread is in a WAIT state.
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 0006fc08 7c822124 ntdll!KiFastSystemCallRet
> 01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12
> 04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
> 05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d
> 06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd
> 07 0006ff0c 0100187c w3core!UlW3Start+0x26e
> 08 0006ff44 01001a23 w3wp!wmain+0x22a
> 09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b
> 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23
>
>
>
>
> Thread ID: 1
> System Thread ID: 9d4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 009afea0 7c822114 ntdll!KiFastSystemCallRet
> 01 009afea4 7c80e504 ntdll!NtWaitForMultipleObjects+0xc
> 02 009aff48 7c80e933 ntdll!EtwpWaitForMultipleObjectsEx+0xf7
> 03 009affb8 77e66063 ntdll!EtwpEventPump+0x27f
> 04 009affec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 2
> System Thread ID: 908
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 009eff9c 7c821364 ntdll!KiFastSystemCallRet
> 01 009effa0 7c81fe26 ntdll!NtDelayExecution+0xc
> 02 009effb8 77e66063 ntdll!RtlpTimerThread+0x47
> 03 009effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 3
> System Thread ID: ac0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00a2ff70 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00a2ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
> 02 00a2ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
> 03 00a2ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 4
> System Thread ID: c10
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00a8fe18 7c821c54 ntdll!KiFastSystemCallRet
> 01 00a8fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
> 02 00a8ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
> 03 00a8ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
> 04 00a8ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
> 05 00a8ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
> 06 00a8ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 5
> System Thread ID: 790
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00acff10 7c821364 ntdll!KiFastSystemCallRet
> 01 00acff14 77e42439 ntdll!NtDelayExecution+0xc
> 02 00acff7c 77e424b7 kernel32!SleepEx+0x68
> 03 00acff8c 776b22a0 kernel32!Sleep+0xf
> 04 00acff98 776b2307 ole32!CROIDTable::WorkerThreadLoop+0x14
> 05 00acffa8 77670000 ole32!CRpcThread::WorkerLoop+0x1e
> 06 00acffb8 77e66063 ole32!_imp__InstallApplication <PERF> (ole32+0x0)
> 07 00acffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 6
> System Thread ID: 86c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00c8ff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00c8ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00c8ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00c8ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00c8ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00c8ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00c8ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 7
> System Thread ID: 8a0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00ccff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00ccff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00ccff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00ccff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00ccffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00ccffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00ccffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 8
> System Thread ID: 228
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00d0ff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00d0ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00d0ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00d0ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00d0ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00d0ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00d0ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 9
> System Thread ID: 8d8
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.31
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00d4ff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00d4ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00d4ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00d4ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00d4ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00d4ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00d4ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 10
> System Thread ID: ae4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e0fcec 7c822114 ntdll!KiFastSystemCallRet
> 01 00e0fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
> 02 00e0ffb8 77e66063 ntdll!RtlpWaitThread+0x161
> 03 00e0ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 11
> System Thread ID: abc
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 017dfa84 7c822124 ntdll!KiFastSystemCallRet
> 01 017dfa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 017dfaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 017dfb0c 5a3b8147 kernel32!WaitForSingleObject+0x12
> 04 017dffb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126
> 05 017dffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 12
> System Thread ID: 6ec
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0181fe18 7c821c54 ntdll!KiFastSystemCallRet
> 01 0181fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
> 02 0181ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
> 03 0181ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
> 04 0181ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
> 05 0181ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
> 06 0181ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 13
> System Thread ID: ef0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0185ff8c 7c821364 ntdll!KiFastSystemCallRet
> 01 0185ff90 7c815267 ntdll!NtDelayExecution+0xc
> 02 0185ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f
> 03 0185ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 14
> System Thread ID: 20c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.15
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll -
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01c7fe74 7c822124 ntdll!KiFastSystemCallRet
> 01 01c7fe78 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 01c7fee8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 01c7fefc 7927da0d kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 01c7ff24 791fdacc mscorsvr!CoEEShutDownCOM+0x2a90c
> 05 01c7ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 01c7ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 15
> System Thread ID: 91c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01cbfeb0 7c821364 ntdll!KiFastSystemCallRet
> 01 01cbfeb4 77e42439 ntdll!NtDelayExecution+0xc
> 02 01cbff1c 77e424b7 kernel32!SleepEx+0x68
> 03 01cbff2c 791bf4f9 kernel32!Sleep+0xf
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 01cbffb8 77e66063 mscorsvr!Ordinal76+0xf4f9
> 05 01cbffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 16
> System Thread ID: fb4
> Kernel Time: 0:0:0.156
> User Time: 0:0:13.203
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01cffdf8 7c822124 ntdll!KiFastSystemCallRet
> 01 01cffdfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 01cffe6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 01cffe80 791d401f kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 01cffea4 791fdacc mscorsvr!GetCompileInfo+0x1512
> 05 01cfffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 01cfffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 17
> System Thread ID: 778
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01e4fe70 7c822114 ntdll!KiFastSystemCallRet
> 01 01e4fe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc
> 02 01e4ff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 01e4ff38 79238fd6 kernel32!WaitForMultipleObjects+0x18
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 01e4ffa0 79238f4d mscorsvr!CoInitializeCor+0x43ad
> 05 01e4ffb8 77e66063 mscorsvr!CoInitializeCor+0x4324
> 06 01e4ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 18
> System Thread ID: 560
> Kernel Time: 0:0:0.46
> User Time: 0:0:3.187
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01fbfefc 7c822124 ntdll!KiFastSystemCallRet
> 01 01fbff00 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 01fbff70 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 01fbff84 791fe6b0 kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 01fbffac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97
> 05 01fbffb8 77e66063 mscorsvr!CoInitializeCor+0xa96
> 06 01fbffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 19
> System Thread ID: dcc
> Kernel Time: 0:0:0.78
> User Time: 0:0:3.62
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01fffdfc 7c822124 ntdll!KiFastSystemCallRet
> 01 01fffe00 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 01fffe70 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 01fffe84 791fe6b0 kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 01fffeac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97
> 05 01ffffb8 77e66063 mscorsvr!CoInitializeCor+0xa96
> 06 01ffffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 20
> System Thread ID: ad4
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.46
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0203fdf8 7c822114 ntdll!KiFastSystemCallRet
> 01 0203fdfc 77e6711b ntdll!NtWaitForMultipleObjects+0xc
> 02 0203fea4 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0203fec0 7927826b kernel32!WaitForMultipleObjects+0x18
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0203fee0 791fecf4 mscorsvr!CoEEShutDownCOM+0x2516a
> 05 0203ff24 79245681 mscorsvr!GetAssemblyMDImport+0x163db
> 06 0203ffb8 77e66063 mscorsvr!CoUninitializeEE+0xa13e
> 07 0203ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 21
> System Thread ID: 318
> Kernel Time: 0:0:0.156
> User Time: 0:0:20.328
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0215fd78 7c822124 ntdll!KiFastSystemCallRet
> 01 0215fd7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0215fdec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0215fe00 791d401f kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0215fe24 791fdacc mscorsvr!GetCompileInfo+0x1512
> 05 0215ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 0215ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 22
> System Thread ID: f20
> Kernel Time: 0:0:0.171
> User Time: 0:0:12.265
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0219fcf8 7c822124 ntdll!KiFastSystemCallRet
> 01 0219fcfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0219fd6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0219fd80 791d401f kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0219fda4 791fdacc mscorsvr!GetCompileInfo+0x1512
> 05 0219ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 0219ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 23
> System Thread ID: c54
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0c3cff38 7c821364 ntdll!KiFastSystemCallRet
> 01 0c3cff3c 77e42439 ntdll!NtDelayExecution+0xc
> 02 0c3cffa4 791cc578 kernel32!SleepEx+0x68
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 03 0c3cffec 00000000 mscorsvr!Ordinal76+0x1c578
>
>
>
>
> Thread ID: 24
> System Thread ID: 7d0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0c77ff24 7c821364 ntdll!KiFastSystemCallRet
> 01 0c77ff28 77e42439 ntdll!NtDelayExecution+0xc
> 02 0c77ff90 79249f45 kernel32!SleepEx+0x68
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 03 0c77ffb8 77e66063
> mscorsvr!GetMetaDataPublicInterfaceFromInternal+0x33e5
> 04 0c77ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 25
> System Thread ID: 4a8
> Kernel Time: 0:0:0.109
> User Time: 0:0:12.390
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0c9bfc78 7c822124 ntdll!KiFastSystemCallRet
> 01 0c9bfc7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0c9bfcec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0c9bfd00 791d401f kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0c9bfd24 791fdacc mscorsvr!GetCompileInfo+0x1512
> 05 0c9bffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 0c9bffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 26
> System Thread ID: 7d4
> Kernel Time: 0:0:0.31
> User Time: 0:0:11.875
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0cf3fbf8 7c822124 ntdll!KiFastSystemCallRet
> 01 0cf3fbfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0cf3fc6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0cf3fc80 791d401f kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0cf3fca4 791fdacc mscorsvr!GetCompileInfo+0x1512
> 05 0cf3ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 0cf3ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 27
> System Thread ID: dc8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.31
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0cfffbc0 7c821bf4 ntdll!KiFastSystemCallRet
> 01 0cfffbc4 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 0cfffbf0 791fdb22 kernel32!GetQueuedCompletionStatus+0x29
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 03 0cfffc24 791fdacc mscorsvr!GetAssemblyMDImport+0x15209
> 04 0cffffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 05 0cffffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 28
> System Thread ID: 8e4
> Kernel Time: 0:0:0.31
> User Time: 0:0:11.78
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01e9faf8 7c822124 ntdll!KiFastSystemCallRet
> 01 01e9fafc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 01e9fb6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 01e9fb80 791d401f kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 01e9fba4 791fdacc mscorsvr!GetCompileInfo+0x1512
> 05 01e9ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 01e9ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 29
> System Thread ID: 900
> Kernel Time: 0:0:0.46
> User Time: 0:0:11.156
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0f54fa78 7c822124 ntdll!KiFastSystemCallRet
> 01 0f54fa7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0f54faec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0f54fb00 791d401f kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0f54fb24 791fdacc mscorsvr!GetCompileInfo+0x1512
> 05 0f54ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 0f54ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 30
> System Thread ID: fd0
> Kernel Time: 0:0:0.62
> User Time: 0:0:11.562
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0f7cf9f8 7c822124 ntdll!KiFastSystemCallRet
> 01 0f7cf9fc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0f7cfa6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0f7cfa80 791d401f kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0f7cfaa4 791fdacc mscorsvr!GetCompileInfo+0x1512
> 05 0f7cffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 0f7cffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 31
> System Thread ID: ea4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.31
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0f80f974 7c822124 ntdll!KiFastSystemCallRet
> 01 0f80f978 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0f80f9e8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0f80f9fc 7927da0d kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0f80fa24 791fdacc mscorsvr!CoEEShutDownCOM+0x2a90c
> 05 0f80ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 0f80ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 32
> System Thread ID: 7e4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0f4cfe18 7c821c54 ntdll!KiFastSystemCallRet
> 01 0f4cfe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
> 02 0f4cff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
> 03 0f4cff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
> 04 0f4cffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
> 05 0f4cffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
> 06 0f4cffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 33
> System Thread ID: f08
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.468
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0f50f7f8 7c822124 ntdll!KiFastSystemCallRet
> 01 0f50f7fc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0f50f86c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0f50f880 791d401f kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0f50f8a4 791fdacc mscorsvr!GetCompileInfo+0x1512
> 05 0f50ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 0f50ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 34
> System Thread ID: e60
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.421
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0e39f778 7c822124 ntdll!KiFastSystemCallRet
> 01 0e39f77c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0e39f7ec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0e39f800 791d401f kernel32!WaitForSingleObject+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0e39f824 791fdacc mscorsvr!GetCompileInfo+0x1512
> 05 0e39ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> 06 0e39ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 35
> System Thread ID: 8b4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0e3dff70 7c821bf4 ntdll!KiFastSystemCallRet
> 01 0e3dff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
> 02 0e3dffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
> 03 0e3dffec 00000000 kernel32!BaseThreadStart+0x34
>
> *****
>
> Dump name is formatted as: PID-Timestamp.dmp
>
> Creating C:\iisstate\output\3832-1129974546.dmp - mini user dump
>
> *****
>
> Closing open log file C:\iisstate\output\IISState-3832.log
>

 >> Stay informed about: IISState log for w3wp crash. 
Back to top
Login to vote
khan

External


Since: Oct 22, 2005
Posts: 2



(Msg. 3) Posted: Wed Oct 26, 2005 3:21 am
Post subject: Re: IISState log for w3wp crash. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Pat,
I really appreciate you looking into this. It was some brain-dead code
in our data gathering tool, which although functionally correct was
killing performance.
While we are on the subject(for next time), is there a FAQ or a link
that you could point to, regarding .dmp files. Specifically, I want to
be able to run/examine them. I used to be able to do something similar
with my crashing directshow filter using windbg. But that was many
moons ago. Is that still the way to go?
All the best,
-Zafar





Pat [MSFT] wrote:
> It doesn't look like there was any problem in the process when the log was
> taken. All of the threads are idle, with several having used ~11 seconds
> worth of CPU. To determine the cause, you'll need to run the IISState
> utility while the problem is happening.
>
> Based on your description, it is not clear if the problem resolves itself
> after the service is up and running - i.e. is this a transient issue. It is
> very common during the first few seconds - and even for the first few
> minutes depending on site design & sever load - for the CPU to sustain a
> very high level and for memory usage to increase dramatically (increase
> cache means increased memory). This is b/c a lot of extra work is being
> done to warm up the cache, do initial DLL loads, etc. As items are cached
> CPU decreases, and the site begins to run normal. In extreme situations, I
> have seen it take 45 minutes for a site to become stable (in that case the
> _average_ asp page was ~300k in size and they had 100's of them).
>
>
> Pat
>
> <khan RemoveThis @alumni.caltech.edu> wrote in message
> news:1129976265.721370.98770@z14g2000cwz.googlegroups.com...
> > Hi, We are having issues with our server using 100% CPU resources and
> > allocating a lot of memory. This happens whenver our web based
> > application launches. I have run IISState on it and am including the
> > output.
> > There's also a dump file generated(191 MB), which I can send to
> > someone, if they want to take a crack at it. I would be happy to look
> > at it too, if someone could send me a pointer on what tools to use. I
> > looked at the call stack in visual studio, but the solution didn't have
> > any symbol information, so it was all greek to me. A FAQ on how to link
> > the dmp file to the source code would be nice too.
> > I am especially looking for some help from a MSFT engineer, but any
> > help would be appreciated.
> > All the best,
> > -Zafar
> >
> >
> > =======================
> > Opened log file 'C:\iisstate\output\IISState-3832.log'
> >
> > ***********************
> > Starting new log output
> > IISState version 3.3.1
> >
> > Sat Oct 22 02:48:21 2005
> >
> > OS = Windows 2003 Server
> > Executable: w3wp.exe
> > PID = 3832
> >
> > Note: Thread times are formatted as HH:MM:SS.ms
> >
> > ***********************
> >
> >
> >
> >
> > Thread ID: 0
> > System Thread ID: a24
> > Kernel Time: 0:0:0.46
> > User Time: 0:0:0.31
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: HTTP Compression Thread
> > # ChildEBP RetAddr
> > 00 0006fc08 7c822124 ntdll!KiFastSystemCallRet
> > 01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> > 02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> > 03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12
> > 04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
> > 05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d
> > 06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd
> > 07 0006ff0c 0100187c w3core!UlW3Start+0x26e
> > 08 0006ff44 01001a23 w3wp!wmain+0x22a
> > 09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b
> > 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23
> >
> >
> >
> >
> > Thread ID: 1
> > System Thread ID: 9d4
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 009afea0 7c822114 ntdll!KiFastSystemCallRet
> > 01 009afea4 7c80e504 ntdll!NtWaitForMultipleObjects+0xc
> > 02 009aff48 7c80e933 ntdll!EtwpWaitForMultipleObjectsEx+0xf7
> > 03 009affb8 77e66063 ntdll!EtwpEventPump+0x27f
> > 04 009affec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 2
> > System Thread ID: 908
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 009eff9c 7c821364 ntdll!KiFastSystemCallRet
> > 01 009effa0 7c81fe26 ntdll!NtDelayExecution+0xc
> > 02 009effb8 77e66063 ntdll!RtlpTimerThread+0x47
> > 03 009effec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 3
> > System Thread ID: ac0
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 00a2ff70 7c821bf4 ntdll!KiFastSystemCallRet
> > 01 00a2ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
> > 02 00a2ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
> > 03 00a2ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 4
> > System Thread ID: c10
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: Possible ASP page. Possible DCOM activity
> > Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> > Continuing with other analysis.
> >
> > No remote call being made
> >
> > # ChildEBP RetAddr
> > 00 00a8fe18 7c821c54 ntdll!KiFastSystemCallRet
> > 01 00a8fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
> > 02 00a8ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
> > 03 00a8ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
> > 04 00a8ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
> > 05 00a8ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
> > 06 00a8ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 5
> > System Thread ID: 790
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 00acff10 7c821364 ntdll!KiFastSystemCallRet
> > 01 00acff14 77e42439 ntdll!NtDelayExecution+0xc
> > 02 00acff7c 77e424b7 kernel32!SleepEx+0x68
> > 03 00acff8c 776b22a0 kernel32!Sleep+0xf
> > 04 00acff98 776b2307 ole32!CROIDTable::WorkerThreadLoop+0x14
> > 05 00acffa8 77670000 ole32!CRpcThread::WorkerLoop+0x1e
> > 06 00acffb8 77e66063 ole32!_imp__InstallApplication <PERF> (ole32+0x0)
> > 07 00acffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 6
> > System Thread ID: 86c
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: HTTP Listener
> > # ChildEBP RetAddr
> > 00 00c8ff24 7c821bf4 ntdll!KiFastSystemCallRet
> > 01 00c8ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> > 02 00c8ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> > 03 00c8ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> > 04 00c8ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> > 05 00c8ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> > 06 00c8ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 7
> > System Thread ID: 8a0
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: HTTP Listener
> > # ChildEBP RetAddr
> > 00 00ccff24 7c821bf4 ntdll!KiFastSystemCallRet
> > 01 00ccff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> > 02 00ccff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> > 03 00ccff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> > 04 00ccffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> > 05 00ccffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> > 06 00ccffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 8
> > System Thread ID: 228
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: HTTP Listener
> > # ChildEBP RetAddr
> > 00 00d0ff24 7c821bf4 ntdll!KiFastSystemCallRet
> > 01 00d0ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> > 02 00d0ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> > 03 00d0ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> > 04 00d0ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> > 05 00d0ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> > 06 00d0ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 9
> > System Thread ID: 8d8
> > Kernel Time: 0:0:0.15
> > User Time: 0:0:0.31
> > Thread Type: HTTP Listener
> > # ChildEBP RetAddr
> > 00 00d4ff24 7c821bf4 ntdll!KiFastSystemCallRet
> > 01 00d4ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> > 02 00d4ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> > 03 00d4ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> > 04 00d4ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> > 05 00d4ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> > 06 00d4ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 10
> > System Thread ID: ae4
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 00e0fcec 7c822114 ntdll!KiFastSystemCallRet
> > 01 00e0fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
> > 02 00e0ffb8 77e66063 ntdll!RtlpWaitThread+0x161
> > 03 00e0ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 11
> > System Thread ID: abc
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: HTTP Compression Thread
> > # ChildEBP RetAddr
> > 00 017dfa84 7c822124 ntdll!KiFastSystemCallRet
> > 01 017dfa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> > 02 017dfaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> > 03 017dfb0c 5a3b8147 kernel32!WaitForSingleObject+0x12
> > 04 017dffb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126
> > 05 017dffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 12
> > System Thread ID: 6ec
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: Possible ASP page. Possible DCOM activity
> > Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> > Continuing with other analysis.
> >
> > No remote call being made
> >
> > # ChildEBP RetAddr
> > 00 0181fe18 7c821c54 ntdll!KiFastSystemCallRet
> > 01 0181fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
> > 02 0181ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
> > 03 0181ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
> > 04 0181ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
> > 05 0181ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
> > 06 0181ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 13
> > System Thread ID: ef0
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 0185ff8c 7c821364 ntdll!KiFastSystemCallRet
> > 01 0185ff90 7c815267 ntdll!NtDelayExecution+0xc
> > 02 0185ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f
> > 03 0185ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 14
> > System Thread ID: 20c
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.15
> > *** ERROR: Symbol file could not be found. Defaulted to export symbols
> > for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll -
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 01c7fe74 7c822124 ntdll!KiFastSystemCallRet
> > 01 01c7fe78 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> > 02 01c7fee8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> > 03 01c7fefc 7927da0d kernel32!WaitForSingleObject+0x12
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 01c7ff24 791fdacc mscorsvr!CoEEShutDownCOM+0x2a90c
> > 05 01c7ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> > 06 01c7ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 15
> > System Thread ID: 91c
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 01cbfeb0 7c821364 ntdll!KiFastSystemCallRet
> > 01 01cbfeb4 77e42439 ntdll!NtDelayExecution+0xc
> > 02 01cbff1c 77e424b7 kernel32!SleepEx+0x68
> > 03 01cbff2c 791bf4f9 kernel32!Sleep+0xf
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 01cbffb8 77e66063 mscorsvr!Ordinal76+0xf4f9
> > 05 01cbffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 16
> > System Thread ID: fb4
> > Kernel Time: 0:0:0.156
> > User Time: 0:0:13.203
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 01cffdf8 7c822124 ntdll!KiFastSystemCallRet
> > 01 01cffdfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> > 02 01cffe6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> > 03 01cffe80 791d401f kernel32!WaitForSingleObject+0x12
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 01cffea4 791fdacc mscorsvr!GetCompileInfo+0x1512
> > 05 01cfffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> > 06 01cfffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 17
> > System Thread ID: 778
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 01e4fe70 7c822114 ntdll!KiFastSystemCallRet
> > 01 01e4fe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc
> > 02 01e4ff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
> > 03 01e4ff38 79238fd6 kernel32!WaitForMultipleObjects+0x18
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 01e4ffa0 79238f4d mscorsvr!CoInitializeCor+0x43ad
> > 05 01e4ffb8 77e66063 mscorsvr!CoInitializeCor+0x4324
> > 06 01e4ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 18
> > System Thread ID: 560
> > Kernel Time: 0:0:0.46
> > User Time: 0:0:3.187
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 01fbfefc 7c822124 ntdll!KiFastSystemCallRet
> > 01 01fbff00 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> > 02 01fbff70 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> > 03 01fbff84 791fe6b0 kernel32!WaitForSingleObject+0x12
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 01fbffac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97
> > 05 01fbffb8 77e66063 mscorsvr!CoInitializeCor+0xa96
> > 06 01fbffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 19
> > System Thread ID: dcc
> > Kernel Time: 0:0:0.78
> > User Time: 0:0:3.62
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 01fffdfc 7c822124 ntdll!KiFastSystemCallRet
> > 01 01fffe00 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> > 02 01fffe70 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> > 03 01fffe84 791fe6b0 kernel32!WaitForSingleObject+0x12
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 01fffeac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97
> > 05 01ffffb8 77e66063 mscorsvr!CoInitializeCor+0xa96
> > 06 01ffffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 20
> > System Thread ID: ad4
> > Kernel Time: 0:0:0.15
> > User Time: 0:0:0.46
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 0203fdf8 7c822114 ntdll!KiFastSystemCallRet
> > 01 0203fdfc 77e6711b ntdll!NtWaitForMultipleObjects+0xc
> > 02 0203fea4 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
> > 03 0203fec0 7927826b kernel32!WaitForMultipleObjects+0x18
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 0203fee0 791fecf4 mscorsvr!CoEEShutDownCOM+0x2516a
> > 05 0203ff24 79245681 mscorsvr!GetAssemblyMDImport+0x163db
> > 06 0203ffb8 77e66063 mscorsvr!CoUninitializeEE+0xa13e
> > 07 0203ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 21
> > System Thread ID: 318
> > Kernel Time: 0:0:0.156
> > User Time: 0:0:20.328
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 0215fd78 7c822124 ntdll!KiFastSystemCallRet
> > 01 0215fd7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> > 02 0215fdec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> > 03 0215fe00 791d401f kernel32!WaitForSingleObject+0x12
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 0215fe24 791fdacc mscorsvr!GetCompileInfo+0x1512
> > 05 0215ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> > 06 0215ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 22
> > System Thread ID: f20
> > Kernel Time: 0:0:0.171
> > User Time: 0:0:12.265
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 0219fcf8 7c822124 ntdll!KiFastSystemCallRet
> > 01 0219fcfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> > 02 0219fd6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> > 03 0219fd80 791d401f kernel32!WaitForSingleObject+0x12
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 0219fda4 791fdacc mscorsvr!GetCompileInfo+0x1512
> > 05 0219ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> > 06 0219ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 23
> > System Thread ID: c54
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 0c3cff38 7c821364 ntdll!KiFastSystemCallRet
> > 01 0c3cff3c 77e42439 ntdll!NtDelayExecution+0xc
> > 02 0c3cffa4 791cc578 kernel32!SleepEx+0x68
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 03 0c3cffec 00000000 mscorsvr!Ordinal76+0x1c578
> >
> >
> >
> >
> > Thread ID: 24
> > System Thread ID: 7d0
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.0
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 0c77ff24 7c821364 ntdll!KiFastSystemCallRet
> > 01 0c77ff28 77e42439 ntdll!NtDelayExecution+0xc
> > 02 0c77ff90 79249f45 kernel32!SleepEx+0x68
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 03 0c77ffb8 77e66063
> > mscorsvr!GetMetaDataPublicInterfaceFromInternal+0x33e5
> > 04 0c77ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 25
> > System Thread ID: 4a8
> > Kernel Time: 0:0:0.109
> > User Time: 0:0:12.390
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 0c9bfc78 7c822124 ntdll!KiFastSystemCallRet
> > 01 0c9bfc7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> > 02 0c9bfcec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> > 03 0c9bfd00 791d401f kernel32!WaitForSingleObject+0x12
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 0c9bfd24 791fdacc mscorsvr!GetCompileInfo+0x1512
> > 05 0c9bffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> > 06 0c9bffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 26
> > System Thread ID: 7d4
> > Kernel Time: 0:0:0.31
> > User Time: 0:0:11.875
> > Thread Status: Thread is in a WAIT state.
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 0cf3fbf8 7c822124 ntdll!KiFastSystemCallRet
> > 01 0cf3fbfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> > 02 0cf3fc6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> > 03 0cf3fc80 791d401f kernel32!WaitForSingleObject+0x12
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 04 0cf3fca4 791fdacc mscorsvr!GetCompileInfo+0x1512
> > 05 0cf3ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> > 06 0cf3ffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 27
> > System Thread ID: dc8
> > Kernel Time: 0:0:0.0
> > User Time: 0:0:0.31
> > Thread Type: Other
> > # ChildEBP RetAddr
> > 00 0cfffbc0 7c821bf4 ntdll!KiFastSystemCallRet
> > 01 0cfffbc4 77e6611a ntdll!NtRemoveIoCompletion+0xc
> > 02 0cfffbf0 791fdb22 kernel32!GetQueuedCompletionStatus+0x29
> > WARNING: Stack unwind information not available. Following frames may
> > be wrong.
> > 03 0cfffc24 791fdacc mscorsvr!GetAssemblyMDImport+0x15209
> > 04 0cffffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3
> > 05 0cffffec 00000000 kernel32!BaseThreadStart+0x34
> >
> >
> >
> >
> > Thread ID: 28
> > System Thread ID: 8e4
> > Kernel Time: 0:0:0.31
> > User Time: 0:0:11.78
> > Thread Status: Thread is in a WAIT state.