Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

w3wp process high CPU

  
   Web Hosting and Web Master Forums (Home) -> IIS RSS
Next:  Guidance for web server's base line specs  
Author Message
Jeremy Martin

External


Since: Jun 13, 2006
Posts: 3



(Msg. 1) Posted: Tue Jun 13, 2006 6:46 am
Post subject: w3wp process high CPU
Archived from groups: microsoft>public>inetserver>iis (more info?)
Hi,

Desparately hoping someone can help me find out why IIS is working so
hard.

Here is the log of the process but I am a lost in deciphering it.

Any help appreciated.
Jeremy


Starting new log output
IISState version 3.3.1

Tue Jun 13 21:39:02 2006

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 7284

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 5a0
Kernel Time: 0:0:0.31
User Time: 0:0:0.93
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0006fc08 7c822124 ntdll!KiFastSystemCallRet
01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12
04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d
06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd
07 0006ff0c 0100187c w3core!UlW3Start+0x26e
08 0006ff44 01001a23 w3wp!wmain+0x22a
09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b
0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23




Thread ID: 1
System Thread ID: 18a0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 009bff9c 7c821364 ntdll!KiFastSystemCallRet
01 009bffa0 7c81fe26 ntdll!NtDelayExecution+0xc
02 009bffb8 77e66063 ntdll!RtlpTimerThread+0x47
03 009bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 2
System Thread ID: 143c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 009fff70 7c821bf4 ntdll!KiFastSystemCallRet
01 009fff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 009fffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 009fffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 3
System Thread ID: 1f00
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 00a5fe18 7c821c54 ntdll!KiFastSystemCallRet
01 00a5fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 00a5ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 00a5ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 00a5ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 00a5ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 00a5ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 4
System Thread ID: 1724
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c5ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00c5ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00c5ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00c5ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00c5ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00c5ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00c5ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 5
System Thread ID: 1838
Kernel Time: 0:0:3.62
User Time: 0:0:5.812
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c9ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00c9ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00c9ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00c9ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00c9ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00c9ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00c9ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 6
System Thread ID: 998
Kernel Time: 0:0:0.31
User Time: 0:0:0.31
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00cdff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00cdff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00cdff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00cdff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00cdffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00cdffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00cdffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 7
System Thread ID: e84
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00d1ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00d1ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00d1ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00d1ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00d1ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00d1ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00d1ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 8
System Thread ID: 4b0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00ddfcec 7c822114 ntdll!KiFastSystemCallRet
01 00ddfcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
02 00ddffb8 77e66063 ntdll!RtlpWaitThread+0x161
03 00ddffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 9
System Thread ID: 1a10
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 017afa84 7c822124 ntdll!KiFastSystemCallRet
01 017afa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 017afaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 017afb0c 5a3b8147 kernel32!WaitForSingleObject+0x12
04 017affb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 017affec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 10
System Thread ID: f08
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 017efe18 7c821c54 ntdll!KiFastSystemCallRet
01 017efe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 017eff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 017eff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 017effac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 017effb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 017effec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 11
System Thread ID: 1514
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0182ff8c 7c821364 ntdll!KiFastSystemCallRet
01 0182ff90 7c815267 ntdll!NtDelayExecution+0xc
02 0182ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f
03 0182ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 12
System Thread ID: 1cb8
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
succeeded
Loaded Son of Strike data table version 5 from
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll"
Thread 12
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 018efec0 7c821bf4 ntdll!KiFastSystemCallRet
01 018efec4 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 018efef0 792edc4b kernel32!GetQueuedCompletionStatus+0x29
03 018eff24 792eccf3
mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x49
04 018effb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
05 018effec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 13
System Thread ID: 16e0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 13
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 0192fee0 7c821364 ntdll!KiFastSystemCallRet
01 0192fee4 77e42439 ntdll!NtDelayExecution+0xc
02 0192ff4c 77e424b7 kernel32!SleepEx+0x68
03 0192ff5c 792edf9e kernel32!Sleep+0xf
04 0192ffb8 77e66063 mscorwks!ThreadpoolMgr::GateThreadStart+0x54
05 0192ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 14
System Thread ID: 674
Kernel Time: 0:0:7.703
User Time: 0:0:50.796
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 14
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 0196fdf8 7c822124 ntdll!KiFastSystemCallRet
01 0196fdfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0196fe6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0196fe80 792ed4ec kernel32!WaitForSingleObject+0x12
04 0196fea4 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a
05 0196ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
06 0196ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 15
System Thread ID: 1d90
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 15
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 01aafe70 7c822114 ntdll!KiFastSystemCallRet
01 01aafe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 01aaff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
03 01aaff38 791d283b kernel32!WaitForMultipleObjects+0x18
04 01aaffa0 791d27b2 mscorwks!DebuggerRCThread::MainLoop+0x90
05 01aaffb0 791d453a mscorwks!DebuggerRCThread::ThreadProc+0x68
06 01aaffb8 77e66063 mscorwks!DebuggerRCThread::ThreadProcStatic+0xb
07 01aaffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 16
System Thread ID: 1acc
Kernel Time: 0:0:0.46
User Time: 0:0:0.234
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 16
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 01b8fdf8 7c822114 ntdll!KiFastSystemCallRet
01 01b8fdfc 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 01b8fea4 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
03 01b8fec0 792650ff kernel32!WaitForMultipleObjects+0x18
04 01b8fee0 791b9872 mscorwks!WaitForFinalizerEvent+0x5a
05 01b8ff24 791cede0 mscorwks!GCHeap::FinalizerThreadStart+0x96
06 01b8ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x44
07 01b8ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 17
System Thread ID: da8
Kernel Time: 0:0:9.734
User Time: 0:0:54.156
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 17
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 01c1fd78 7c822124 ntdll!KiFastSystemCallRet
01 01c1fd7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 01c1fdec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 01c1fe00 792ed4ec kernel32!WaitForSingleObject+0x12
04 01c1fe24 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a
05 01c1ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
06 01c1ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 18
System Thread ID: 134c
Kernel Time: 0:0:0.46
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 18
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 01ebff38 7c821364 ntdll!KiFastSystemCallRet
01 01ebff3c 77e42439 ntdll!NtDelayExecution+0xc
02 01ebffa4 792ee51d kernel32!SleepEx+0x68
03 01ebffb8 77e66063 mscorwks!ThreadpoolMgr::TimerThreadStart+0x30
04 01ebffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 19
System Thread ID: 7cc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 06d4fe48 7c822114 ntdll!KiFastSystemCallRet
01 06d4fe4c 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 06d4fef4 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a
03 06d4ff50 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 06d4ff6c 4dda6ad4 USER32!MsgWaitForMultipleObjects+0x1f
05 06d4ffb8 77e66063 gdiplus!BackgroundThreadProc+0x59
06 06d4ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 20
System Thread ID: 13b4
Kernel Time: 0:0:0.46
User Time: 0:0:0.109
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 20
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 070aff24 7c821364 ntdll!KiFastSystemCallRet
01 070aff28 77e42439 ntdll!NtDelayExecution+0xc
02 070aff90 792ee3af kernel32!SleepEx+0x68
03 070affb8 77e66063 mscorwks!ThreadpoolMgr::WaitThreadStart+0x22
04 070affec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 21
System Thread ID: 104c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0721ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 0721ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 0721ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 0721ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 0721ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 0721ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 0721ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 22
System Thread ID: 1468
Kernel Time: 0:0:6.718
User Time: 0:0:44.62
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 22
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 0899f5f8 7c822124 ntdll!KiFastSystemCallRet
01 0899f5fc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0899f66c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0899f680 792ed4ec kernel32!WaitForSingleObject+0x12
04 0899f6a4 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a
05 0899ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
06 0899ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 23
System Thread ID: af4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 08bdff70 7c821bf4 ntdll!KiFastSystemCallRet
01 08bdff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 08bdffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 08bdffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 24
System Thread ID: 1fec
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 08c1ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 08c1ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 08c1ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 08c1ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 25
System Thread ID: 1a28
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 25
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 0097fc40 7c821bf4 ntdll!KiFastSystemCallRet
01 0097fc44 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 0097fc70 792edc4b kernel32!GetQueuedCompletionStatus+0x29
03 0097fca4 792eccf3
mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x49
04 0097ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
05 0097ffec 00000000 kernel32!BaseThreadStart+0x34

*****

Closing open log file C:\iisstate\output\IISState-7284.log

 >> Stay informed about: w3wp process high CPU 
Back to top
Login to vote
Pat [MSFT]

External


Since: May 24, 2006
Posts: 74



(Msg. 2) Posted: Tue Jun 13, 2006 12:36 pm
Post subject: Re: w3wp process high CPU [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
The log shows an idle process. There are several threads that had
previously been busy, but none had used more than 1 minute of CPU. You need
to capture the log while the problem is occurring.

Pat
"Jeremy Martin" <jeremy at lanwest dot com dot au> wrote in message
news:e68eK$ujGHA.3496@TK2MSFTNGP02.phx.gbl...
> Hi,
>
> Desparately hoping someone can help me find out why IIS is working so
> hard.
>
> Here is the log of the process but I am a lost in deciphering it.
>
> Any help appreciated.
> Jeremy
>
>
> Starting new log output
> IISState version 3.3.1
>
> Tue Jun 13 21:39:02 2006
>
> OS = Windows 2003 Server
> Executable: w3wp.exe
> PID = 7284
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 5a0
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.93
> Thread Status: Thread is in a WAIT state.
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 0006fc08 7c822124 ntdll!KiFastSystemCallRet
> 01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12
> 04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
> 05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d
> 06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd
> 07 0006ff0c 0100187c w3core!UlW3Start+0x26e
> 08 0006ff44 01001a23 w3wp!wmain+0x22a
> 09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b
> 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23
>
>
>
>
> Thread ID: 1
> System Thread ID: 18a0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 009bff9c 7c821364 ntdll!KiFastSystemCallRet
> 01 009bffa0 7c81fe26 ntdll!NtDelayExecution+0xc
> 02 009bffb8 77e66063 ntdll!RtlpTimerThread+0x47
> 03 009bffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 2
> System Thread ID: 143c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 009fff70 7c821bf4 ntdll!KiFastSystemCallRet
> 01 009fff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
> 02 009fffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
> 03 009fffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 3
> System Thread ID: 1f00
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00a5fe18 7c821c54 ntdll!KiFastSystemCallRet
> 01 00a5fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
> 02 00a5ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
> 03 00a5ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
> 04 00a5ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
> 05 00a5ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
> 06 00a5ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 4
> System Thread ID: 1724
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00c5ff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00c5ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00c5ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00c5ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00c5ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00c5ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00c5ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 5
> System Thread ID: 1838
> Kernel Time: 0:0:3.62
> User Time: 0:0:5.812
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00c9ff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00c9ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00c9ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00c9ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00c9ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00c9ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00c9ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 6
> System Thread ID: 998
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.31
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00cdff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00cdff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00cdff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00cdff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00cdffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00cdffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00cdffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 7
> System Thread ID: e84
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00d1ff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00d1ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00d1ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00d1ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00d1ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00d1ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00d1ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 8
> System Thread ID: 4b0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00ddfcec 7c822114 ntdll!KiFastSystemCallRet
> 01 00ddfcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
> 02 00ddffb8 77e66063 ntdll!RtlpWaitThread+0x161
> 03 00ddffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 9
> System Thread ID: 1a10
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 017afa84 7c822124 ntdll!KiFastSystemCallRet
> 01 017afa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 017afaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 017afb0c 5a3b8147 kernel32!WaitForSingleObject+0x12
> 04 017affb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126
> 05 017affec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 10
> System Thread ID: f08
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 017efe18 7c821c54 ntdll!KiFastSystemCallRet
> 01 017efe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
> 02 017eff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
> 03 017eff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
> 04 017effac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
> 05 017effb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
> 06 017effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 11
> System Thread ID: 1514
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0182ff8c 7c821364 ntdll!KiFastSystemCallRet
> 01 0182ff90 7c815267 ntdll!NtDelayExecution+0xc
> 02 0182ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f
> 03 0182ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 12
> System Thread ID: 1cb8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.15
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> succeeded
> Loaded Son of Strike data table version 5 from
> "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll"
> Thread 12
> Not a managed thread.
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 018efec0 7c821bf4 ntdll!KiFastSystemCallRet
> 01 018efec4 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 018efef0 792edc4b kernel32!GetQueuedCompletionStatus+0x29
> 03 018eff24 792eccf3
> mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x49
> 04 018effb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
> 05 018effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 13
> System Thread ID: 16e0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 13
> Not a managed thread.
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 0192fee0 7c821364 ntdll!KiFastSystemCallRet
> 01 0192fee4 77e42439 ntdll!NtDelayExecution+0xc
> 02 0192ff4c 77e424b7 kernel32!SleepEx+0x68
> 03 0192ff5c 792edf9e kernel32!Sleep+0xf
> 04 0192ffb8 77e66063 mscorwks!ThreadpoolMgr::GateThreadStart+0x54
> 05 0192ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 14
> System Thread ID: 674
> Kernel Time: 0:0:7.703
> User Time: 0:0:50.796
> Thread Status: Thread is in a WAIT state.
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 14
> ESP EIP
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 0196fdf8 7c822124 ntdll!KiFastSystemCallRet
> 01 0196fdfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0196fe6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0196fe80 792ed4ec kernel32!WaitForSingleObject+0x12
> 04 0196fea4 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a
> 05 0196ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
> 06 0196ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 15
> System Thread ID: 1d90
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 15
> Not a managed thread.
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 01aafe70 7c822114 ntdll!KiFastSystemCallRet
> 01 01aafe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc
> 02 01aaff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 01aaff38 791d283b kernel32!WaitForMultipleObjects+0x18
> 04 01aaffa0 791d27b2 mscorwks!DebuggerRCThread::MainLoop+0x90
> 05 01aaffb0 791d453a mscorwks!DebuggerRCThread::ThreadProc+0x68
> 06 01aaffb8 77e66063 mscorwks!DebuggerRCThread::ThreadProcStatic+0xb
> 07 01aaffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 16
> System Thread ID: 1acc
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.234
> Thread Status: Thread is in a WAIT state.
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 16
> ESP EIP
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 01b8fdf8 7c822114 ntdll!KiFastSystemCallRet
> 01 01b8fdfc 77e6711b ntdll!NtWaitForMultipleObjects+0xc
> 02 01b8fea4 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 01b8fec0 792650ff kernel32!WaitForMultipleObjects+0x18
> 04 01b8fee0 791b9872 mscorwks!WaitForFinalizerEvent+0x5a
> 05 01b8ff24 791cede0 mscorwks!GCHeap::FinalizerThreadStart+0x96
> 06 01b8ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x44
> 07 01b8ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 17
> System Thread ID: da8
> Kernel Time: 0:0:9.734
> User Time: 0:0:54.156
> Thread Status: Thread is in a WAIT state.
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 17
> ESP EIP
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 01c1fd78 7c822124 ntdll!KiFastSystemCallRet
> 01 01c1fd7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 01c1fdec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 01c1fe00 792ed4ec kernel32!WaitForSingleObject+0x12
> 04 01c1fe24 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a
> 05 01c1ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
> 06 01c1ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 18
> System Thread ID: 134c
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.0
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 18
> Not a managed thread.
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 01ebff38 7c821364 ntdll!KiFastSystemCallRet
> 01 01ebff3c 77e42439 ntdll!NtDelayExecution+0xc
> 02 01ebffa4 792ee51d kernel32!SleepEx+0x68
> 03 01ebffb8 77e66063 mscorwks!ThreadpoolMgr::TimerThreadStart+0x30
> 04 01ebffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 19
> System Thread ID: 7cc
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 06d4fe48 7c822114 ntdll!KiFastSystemCallRet
> 01 06d4fe4c 77e6711b ntdll!NtWaitForMultipleObjects+0xc
> 02 06d4fef4 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 06d4ff50 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141
> 04 06d4ff6c 4dda6ad4 USER32!MsgWaitForMultipleObjects+0x1f
> 05 06d4ffb8 77e66063 gdiplus!BackgroundThreadProc+0x59
> 06 06d4ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 20
> System Thread ID: 13b4
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.109
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 20
> Not a managed thread.
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 070aff24 7c821364 ntdll!KiFastSystemCallRet
> 01 070aff28 77e42439 ntdll!NtDelayExecution+0xc
> 02 070aff90 792ee3af kernel32!SleepEx+0x68
> 03 070affb8 77e66063 mscorwks!ThreadpoolMgr::WaitThreadStart+0x22
> 04 070affec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 21
> System Thread ID: 104c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0721ff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 0721ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 0721ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 0721ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 0721ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 0721ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 0721ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 22
> System Thread ID: 1468
> Kernel Time: 0:0:6.718
> User Time: 0:0:44.62
> Thread Status: Thread is in a WAIT state.
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 22
> ESP EIP
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 0899f5f8 7c822124 ntdll!KiFastSystemCallRet
> 01 0899f5fc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0899f66c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0899f680 792ed4ec kernel32!WaitForSingleObject+0x12
> 04 0899f6a4 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a
> 05 0899ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
> 06 0899ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 23
> System Thread ID: af4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 08bdff70 7c821bf4 ntdll!KiFastSystemCallRet
> 01 08bdff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
> 02 08bdffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
> 03 08bdffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 24
> System Thread ID: 1fec
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 08c1ff70 7c821bf4 ntdll!KiFastSystemCallRet
> 01 08c1ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
> 02 08c1ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
> 03 08c1ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 25
> System Thread ID: 1a28
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 25
> Not a managed thread.
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 0097fc40 7c821bf4 ntdll!KiFastSystemCallRet
> 01 0097fc44 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 0097fc70 792edc4b kernel32!GetQueuedCompletionStatus+0x29
> 03 0097fca4 792eccf3
> mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x49
> 04 0097ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
> 05 0097ffec 00000000 kernel32!BaseThreadStart+0x34
>
> *****
>
> Closing open log file C:\iisstate\output\IISState-7284.log

 >> Stay informed about: w3wp process high CPU 
Back to top
Login to vote
Jeremy Martin

External


Since: Jun 13, 2006
Posts: 3



(Msg. 3) Posted: Wed Jun 14, 2006 10:09 am
Post subject: Re: w3wp process high CPU [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
I have attached a couple of log files. Is there a trend or any clues?

Thanks for the help




Opened log file 'C:\iisstate\output\IISState-7244.log'

***********************
Starting new log output
IISState version 3.3.1

Thu Jun 15 00:59:00 2006

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 7244

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 1164
Kernel Time: 0:0:0.0
User Time: 0:0:0.109
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0006fc08 7c822124 ntdll!KiFastSystemCallRet
01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12
04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d
06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd
07 0006ff0c 0100187c w3core!UlW3Start+0x26e
08 0006ff44 01001a23 w3wp!wmain+0x22a
09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b
0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23




Thread ID: 1
System Thread ID: 11d0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0097fea0 7c822114 ntdll!KiFastSystemCallRet
01 0097fea4 7c80e504 ntdll!NtWaitForMultipleObjects+0xc
02 0097ff48 7c80e933 ntdll!EtwpWaitForMultipleObjectsEx+0xf7
03 0097ffb8 77e66063 ntdll!EtwpEventPump+0x27f
04 0097ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 2
System Thread ID: 1c78
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 009bff9c 7c821364 ntdll!KiFastSystemCallRet
01 009bffa0 7c81fe26 ntdll!NtDelayExecution+0xc
02 009bffb8 77e66063 ntdll!RtlpTimerThread+0x47
03 009bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 3
System Thread ID: b58
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 009fff70 7c821bf4 ntdll!KiFastSystemCallRet
01 009fff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 009fffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 009fffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 4
System Thread ID: 14bc
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 00a5fe18 7c821c54 ntdll!KiFastSystemCallRet
01 00a5fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 00a5ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 00a5ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 00a5ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 00a5ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 00a5ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 5
System Thread ID: 1bb0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c5ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00c5ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00c5ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00c5ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00c5ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00c5ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00c5ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 6
System Thread ID: 1df8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c9ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00c9ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00c9ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00c9ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00c9ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00c9ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00c9ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 7
System Thread ID: 1278
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00cdff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00cdff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00cdff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00cdff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00cdffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00cdffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00cdffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 8
System Thread ID: e3c
Kernel Time: 0:0:0.765
User Time: 0:0:0.734
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00d1ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00d1ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00d1ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00d1ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00d1ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00d1ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00d1ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 9
System Thread ID: 1274
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00ddfcec 7c822114 ntdll!KiFastSystemCallRet
01 00ddfcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
02 00ddffb8 77e66063 ntdll!RtlpWaitThread+0x161
03 00ddffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 10
System Thread ID: 1f08
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 017afa84 7c822124 ntdll!KiFastSystemCallRet
01 017afa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 017afaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 017afb0c 5a3b8147 kernel32!WaitForSingleObject+0x12
04 017affb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 017affec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 11
System Thread ID: 1d04
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 017efe18 7c821c54 ntdll!KiFastSystemCallRet
01 017efe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 017eff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 017eff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 017effac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 017effb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 017effec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 12
System Thread ID: 998
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0182ff8c 7c821364 ntdll!KiFastSystemCallRet
01 0182ff90 7c815267 ntdll!NtDelayExecution+0xc
02 0182ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f
03 0182ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 13
System Thread ID: b0c
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
succeeded
Loaded Son of Strike data table version 5 from
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll"
Thread 13
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 018efec0 7c821bf4 ntdll!KiFastSystemCallRet
01 018efec4 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 018efef0 792edc4b kernel32!GetQueuedCompletionStatus+0x29
03 018eff24 792eccf3
mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x49
04 018effb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
05 018effec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 14
System Thread ID: 1ee0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 14
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 0192fee0 7c821364 ntdll!KiFastSystemCallRet
01 0192fee4 77e42439 ntdll!NtDelayExecution+0xc
02 0192ff4c 77e424b7 kernel32!SleepEx+0x68
03 0192ff5c 792edf9e kernel32!Sleep+0xf
04 0192ffb8 77e66063 mscorwks!ThreadpoolMgr::GateThreadStart+0x54
05 0192ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 15
System Thread ID: 122c
Kernel Time: 0:0:4.812
User Time: 0:0:33.968
*** WARNING: Unable to verify checksum for
c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c5
61934e089_f8698e9e\mscorlib.dll
*** ERROR: Module load completed but symbols could not be loaded for
c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c5
61934e089_f8698e9e\mscorlib.dll
Thread Status: Thread is in a WAIT state.
Thread Type: SQL Query. Possible ASP page
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 0196f514 7c822124 ntdll!KiFastSystemCallRet
01 0196f518 71b23916 ntdll!NtWaitForSingleObject+0xc
02 0196f554 71b3576e mswsock!SockWaitForSingleObject+0x3a
03 0196f5cc 71c02679 mswsock!WSPRecv+0x203
04 0196f608 71bb1151 WS2_32!WSARecv+0x77
05 0196f634 6d561660 WSOCK32!recv+0x31
06 0196f684 06c409ad dbnetlib!ConnectionRead+0x3b6
WARNING: Frame IP not in any known module. Following frames may be
wrong.
07 0196f7a0 799a7f65 0x6c409ad
08 0196f7a4 ffffffff mscorlib_79990000+0x17f65
09 0196f7a8 0196f7d8 0xffffffff
0a 0196f7ac 00000000 0x196f7d8




Thread ID: 16
System Thread ID: 1544
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 16
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 01aafe70 7c822114 ntdll!KiFastSystemCallRet
01 01aafe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 01aaff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
03 01aaff38 791d283b kernel32!WaitForMultipleObjects+0x18
04 01aaffa0 791d27b2 mscorwks!DebuggerRCThread::MainLoop+0x90
05 01aaffb0 791d453a mscorwks!DebuggerRCThread::ThreadProc+0x68
06 01aaffb8 77e66063 mscorwks!DebuggerRCThread::ThreadProcStatic+0xb
07 01aaffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 17
System Thread ID: 198c
Kernel Time: 0:0:0.0
User Time: 0:0:0.109
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 17
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 01b8fe44 7c822124 ntdll!KiFastSystemCallRet
01 01b8fe48 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 01b8feb8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 01b8fecc 792650d2 kernel32!WaitForSingleObject+0x12
04 01b8fee0 791b9872 mscorwks!WaitForFinalizerEvent+0x2d
05 01b8ff24 791cede0 mscorwks!GCHeap::FinalizerThreadStart+0x96
06 01b8ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x44
07 01b8ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 18
System Thread ID: 1c9c
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 18
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 01e3ff38 7c821364 ntdll!KiFastSystemCallRet
01 01e3ff3c 77e42439 ntdll!NtDelayExecution+0xc
02 01e3ffa4 792ee51d kernel32!SleepEx+0x68
03 01e3ffb8 77e66063 mscorwks!ThreadpoolMgr::TimerThreadStart+0x30
04 01e3ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 19
System Thread ID: 1c58
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 06e2fe48 7c822114 ntdll!KiFastSystemCallRet
01 06e2fe4c 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 06e2fef4 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a
03 06e2ff50 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 06e2ff6c 4dda6ad4 USER32!MsgWaitForMultipleObjects+0x1f
05 06e2ffb8 77e66063 gdiplus!BackgroundThreadProc+0x59
06 06e2ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 20
System Thread ID: 1a14
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 20
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 0693ff24 7c821364 ntdll!KiFastSystemCallRet
01 0693ff28 77e42439 ntdll!NtDelayExecution+0xc
02 0693ff90 792ee3af kernel32!SleepEx+0x68
03 0693ffb8 77e66063 mscorwks!ThreadpoolMgr::WaitThreadStart+0x22
04 0693ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 21
System Thread ID: 734
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00a9ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 00a9ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 00a9ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 00a9ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 22
System Thread ID: 1860
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01f0ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 01f0ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 01f0ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 01f0ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 23
System Thread ID: 1c08
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 06dbff70 7c821bf4 ntdll!KiFastSystemCallRet
01 06dbff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 06dbffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 06dbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 24
System Thread ID: 18a8
Kernel Time: 0:0:0.828
User Time: 0:0:5.687
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 24
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 0870f778 7c822124 ntdll!KiFastSystemCallRet
01 0870f77c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0870f7ec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0870f800 792ed4ec kernel32!WaitForSingleObject+0x12
04 0870f824 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a
05 0870ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
06 0870ffec 00000000 kernel32!BaseThreadStart+0x34

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating C:\iisstate\output\7244-1150304347.dmp - mini user dump
GenWriteHandleOperations.Start(0x1c4c) failed, 0x80070057
Dump successfully written

*****

Closing open log file C:\iisstate\output\IISState-7244.log







***********************
Starting new log output
IISState version 3.3.1

Thu Jun 15 01:06:49 2006

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 7244

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 1164
Kernel Time: 0:0:0.0
User Time: 0:0:0.109
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0006fc08 7c822124 ntdll!KiFastSystemCallRet
01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12
04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d
06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd
07 0006ff0c 0100187c w3core!UlW3Start+0x26e
08 0006ff44 01001a23 w3wp!wmain+0x22a
09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b
0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23




Thread ID: 1
System Thread ID: 1c78
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 009bff9c 7c821364 ntdll!KiFastSystemCallRet
01 009bffa0 7c81fe26 ntdll!NtDelayExecution+0xc
02 009bffb8 77e66063 ntdll!RtlpTimerThread+0x47
03 009bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 2
System Thread ID: 14bc
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 00a5fe18 7c821c54 ntdll!KiFastSystemCallRet
01 00a5fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 00a5ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 00a5ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 00a5ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 00a5ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 00a5ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 3
System Thread ID: 1bb0
Kernel Time: 0:0:0.31
User Time: 0:0:0.15
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c5ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00c5ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00c5ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00c5ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00c5ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00c5ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00c5ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 4
System Thread ID: 1df8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c9ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00c9ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00c9ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00c9ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00c9ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00c9ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00c9ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 5
System Thread ID: 1278
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00cdff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00cdff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00cdff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00cdff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00cdffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00cdffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00cdffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 6
System Thread ID: e3c
Kernel Time: 0:0:3.156
User Time: 0:0:4.656
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00d1ff24 7c821bf4 ntdll!KiFastSystemCallRet
01 00d1ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 00d1ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
03 00d1ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00d1ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00d1ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00d1ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 7
System Thread ID: 1274
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00ddfcec 7c822114 ntdll!KiFastSystemCallRet
01 00ddfcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
02 00ddffb8 77e66063 ntdll!RtlpWaitThread+0x161
03 00ddffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 8
System Thread ID: 1f08
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 017afa84 7c822124 ntdll!KiFastSystemCallRet
01 017afa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 017afaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 017afb0c 5a3b8147 kernel32!WaitForSingleObject+0x12
04 017affb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 017affec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 9
System Thread ID: 1d04
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 017efe18 7c821c54 ntdll!KiFastSystemCallRet
01 017efe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 017eff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 017eff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 017effac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 017effb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 017effec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 10
System Thread ID: 998
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0182ff8c 7c821364 ntdll!KiFastSystemCallRet
01 0182ff90 7c815267 ntdll!NtDelayExecution+0xc
02 0182ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f
03 0182ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 11
System Thread ID: 1ee0
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
succeeded
Loaded Son of Strike data table version 5 from
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll"
Thread 11
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 0192fee0 7c821364 ntdll!KiFastSystemCallRet
01 0192fee4 77e42439 ntdll!NtDelayExecution+0xc
02 0192ff4c 77e424b7 kernel32!SleepEx+0x68
03 0192ff5c 792edf9e kernel32!Sleep+0xf
04 0192ffb8 77e66063 mscorwks!ThreadpoolMgr::GateThreadStart+0x54
05 0192ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 12
System Thread ID: 122c
Kernel Time: 0:0:13.718
User Time: 0:1:39.203
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 12
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 0196fdf8 7c822124 ntdll!KiFastSystemCallRet
01 0196fdfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0196fe6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0196fe80 792ed4ec kernel32!WaitForSingleObject+0x12
04 0196fea4 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a
05 0196ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
06 0196ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 13
System Thread ID: 1544
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 13
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 01aafe70 7c822114 ntdll!KiFastSystemCallRet
01 01aafe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 01aaff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
03 01aaff38 791d283b kernel32!WaitForMultipleObjects+0x18
04 01aaffa0 791d27b2 mscorwks!DebuggerRCThread::MainLoop+0x90
05 01aaffb0 791d453a mscorwks!DebuggerRCThread::ThreadProc+0x68
06 01aaffb8 77e66063 mscorwks!DebuggerRCThread::ThreadProcStatic+0xb
07 01aaffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 14
System Thread ID: 198c
Kernel Time: 0:0:0.31
User Time: 0:0:0.171
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 14
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 01b8fe44 7c822124 ntdll!KiFastSystemCallRet
01 01b8fe48 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 01b8feb8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 01b8fecc 792650d2 kernel32!WaitForSingleObject+0x12
04 01b8fee0 791b9872 mscorwks!WaitForFinalizerEvent+0x2d
05 01b8ff24 791cede0 mscorwks!GCHeap::FinalizerThreadStart+0x96
06 01b8ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x44
07 01b8ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 15
System Thread ID: 1c9c
Kernel Time: 0:0:0.46
User Time: 0:0:0.31
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 15
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 01e3ff38 7c821364 ntdll!KiFastSystemCallRet
01 01e3ff3c 77e42439 ntdll!NtDelayExecution+0xc
02 01e3ffa4 792ee51d kernel32!SleepEx+0x68
03 01e3ffb8 77e66063 mscorwks!ThreadpoolMgr::TimerThreadStart+0x30
04 01e3ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 16
System Thread ID: 1c58
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 06e2fe48 7c822114 ntdll!KiFastSystemCallRet
01 06e2fe4c 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 06e2fef4 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a
03 06e2ff50 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 06e2ff6c 4dda6ad4 USER32!MsgWaitForMultipleObjects+0x1f
05 06e2ffb8 77e66063 gdiplus!BackgroundThreadProc+0x59
06 06e2ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 17
System Thread ID: 1a14
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 17
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 0693ff24 7c821364 ntdll!KiFastSystemCallRet
01 0693ff28 77e42439 ntdll!NtDelayExecution+0xc
02 0693ff90 792ee3af kernel32!SleepEx+0x68
03 0693ffb8 77e66063 mscorwks!ThreadpoolMgr::WaitThreadStart+0x22
04 0693ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 18
System Thread ID: c28
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 18
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 0097ef40 7c821bf4 ntdll!KiFastSystemCallRet
01 0097ef44 77e6611a ntdll!NtRemoveIoCompletion+0xc
02 0097ef70 792edc4b kernel32!GetQueuedCompletionStatus+0x29
03 0097efa4 792eccf3
mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x49
04 0097ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
05 0097ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 19
System Thread ID: 1dc0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01f0ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 01f0ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 01f0ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 01f0ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 20
System Thread ID: 1070
Kernel Time: 0:0:6.156
User Time: 0:0:43.734
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 20
ESP EIP


Begin System Thread Information

# ChildEBP RetAddr
00 06dbfe78 7c822124 ntdll!KiFastSystemCallRet
01 06dbfe7c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 06dbfeec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 06dbff00 792ed4ec kernel32!WaitForSingleObject+0x12
04 06dbff24 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a
05 06dbffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
06 06dbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 21
System Thread ID: 1a50
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0844ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 0844ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 0844ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 0844ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 22
System Thread ID: 168c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0848ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 0848ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 0848ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 0848ffec 00000000 kernel32!BaseThreadStart+0x34

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating C:\iisstate\output\7244-1150304814.dmp - mini user dump
GenWriteHandleOperations.Start(0x1c4c) failed, 0x80070057
Dump successfully written

*****

Closing open log file C:\iisstate\output\IISState-7244.log
 >> Stay informed about: w3wp process high CPU 
Back to top
Login to vote
Pat [MSFT]

External


Since: May 24, 2006
Posts: 74



(Msg. 4) Posted: Thu Jun 15, 2006 10:59 am
Post subject: Re: w3wp process high CPU [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
The thread that has done the most work is doing a lot of DB stuff. That
could imply that you have inefficient queries - i.e. that the returns are
huge & you are spending a lot of cycles wading through the data rather than
making very specific queries and offloading the work to the db.


Pat

"Jeremy Martin" <jeremy at lanwest dot com dot au> wrote in message
news:eiudWV9jGHA.2004@TK2MSFTNGP04.phx.gbl...
>I have attached a couple of log files. Is there a trend or any clues?
>
> Thanks for the help
>
>
>
>
> Opened log file 'C:\iisstate\output\IISState-7244.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Thu Jun 15 00:59:00 2006
>
> OS = Windows 2003 Server
> Executable: w3wp.exe
> PID = 7244
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 1164
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.109
> Thread Status: Thread is in a WAIT state.
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 0006fc08 7c822124 ntdll!KiFastSystemCallRet
> 01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12
> 04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
> 05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d
> 06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd
> 07 0006ff0c 0100187c w3core!UlW3Start+0x26e
> 08 0006ff44 01001a23 w3wp!wmain+0x22a
> 09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b
> 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23
>
>
>
>
> Thread ID: 1
> System Thread ID: 11d0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0097fea0 7c822114 ntdll!KiFastSystemCallRet
> 01 0097fea4 7c80e504 ntdll!NtWaitForMultipleObjects+0xc
> 02 0097ff48 7c80e933 ntdll!EtwpWaitForMultipleObjectsEx+0xf7
> 03 0097ffb8 77e66063 ntdll!EtwpEventPump+0x27f
> 04 0097ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 2
> System Thread ID: 1c78
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 009bff9c 7c821364 ntdll!KiFastSystemCallRet
> 01 009bffa0 7c81fe26 ntdll!NtDelayExecution+0xc
> 02 009bffb8 77e66063 ntdll!RtlpTimerThread+0x47
> 03 009bffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 3
> System Thread ID: b58
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.15
> Thread Type: Other
> # ChildEBP RetAddr
> 00 009fff70 7c821bf4 ntdll!KiFastSystemCallRet
> 01 009fff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
> 02 009fffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
> 03 009fffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 4
> System Thread ID: 14bc
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.15
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00a5fe18 7c821c54 ntdll!KiFastSystemCallRet
> 01 00a5fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
> 02 00a5ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
> 03 00a5ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
> 04 00a5ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
> 05 00a5ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
> 06 00a5ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 5
> System Thread ID: 1bb0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00c5ff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00c5ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00c5ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00c5ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00c5ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00c5ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00c5ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 6
> System Thread ID: 1df8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00c9ff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00c9ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00c9ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00c9ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00c9ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00c9ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00c9ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 7
> System Thread ID: 1278
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00cdff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00cdff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00cdff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00cdff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00cdffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00cdffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00cdffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 8
> System Thread ID: e3c
> Kernel Time: 0:0:0.765
> User Time: 0:0:0.734
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00d1ff24 7c821bf4 ntdll!KiFastSystemCallRet
> 01 00d1ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 00d1ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29
> 03 00d1ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
> 04 00d1ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
> 05 00d1ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
> 06 00d1ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 9
> System Thread ID: 1274
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00ddfcec 7c822114 ntdll!KiFastSystemCallRet
> 01 00ddfcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
> 02 00ddffb8 77e66063 ntdll!RtlpWaitThread+0x161
> 03 00ddffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 10
> System Thread ID: 1f08
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 017afa84 7c822124 ntdll!KiFastSystemCallRet
> 01 017afa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc
> 02 017afaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
> 03 017afb0c 5a3b8147 kernel32!WaitForSingleObject+0x12
> 04 017affb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126
> 05 017affec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 11
> System Thread ID: 1d04
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 017efe18 7c821c54 ntdll!KiFastSystemCallRet
> 01 017efe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
> 02 017eff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
> 03 017eff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
> 04 017effac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
> 05 017effb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
> 06 017effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 12
> System Thread ID: 998
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0182ff8c 7c821364 ntdll!KiFastSystemCallRet
> 01 0182ff90 7c815267 ntdll!NtDelayExecution+0xc
> 02 0182ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f
> 03 0182ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 13
> System Thread ID: b0c
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> succeeded
> Loaded Son of Strike data table version 5 from
> "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll"
> Thread 13
> Not a managed thread.
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 018efec0 7c821bf4 ntdll!KiFastSystemCallRet
> 01 018efec4 77e6611a ntdll!NtRemoveIoCompletion+0xc
> 02 018efef0 792edc4b kernel32!GetQueuedCompletionStatus+0x29
> 03 018eff24 792eccf3
> mscorwks!ThreadpoolMgr::CompletionPortThreadStart+0x49
> 04 018effb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44
> 05 018effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 14
> System Thread ID: 1ee0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 14
> Not a managed thread.
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 0192fee0 7c821364 ntdll!KiFastSystemCallRet
> 01 0192fee4 77e42439 ntdll!NtDelayExecution+0xc
> 02 0192ff4c 77e424b7 kernel32!SleepEx+0x68
> 03 0192ff5c 792edf9e kernel32!Sleep+0xf
> 04 0192ffb8 77e66063 mscorwks!ThreadpoolMgr::GateThreadStart+0x54
> 05 0192ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 15
> System Thread ID: 122c
> Kernel Time: 0:0:4.812
> User Time: 0:0:33.968
> *** WARNING: Unable to verify checksum for
> c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c5
> 61934e089_f8698e9e\mscorlib.dll
> *** ERROR: Module load completed but symbols could not be loaded for
> c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c5
> 61934e089_f8698e9e\mscorlib.dll
> Thread Status: Thread is in a WAIT state.
> Thread Type: SQL Query. Possible ASP page
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> # ChildEBP RetAddr
> 00 0196f514 7c822124 ntdll!KiFastSystemCallRet
> 01 0196f518 71b23916 ntdll!NtWaitForSingleObject+0xc
> 02 0196f554 71b3576e mswsock!SockWaitForSingleObject+0x3a
> 03 0196f5cc 71c02679 mswsock!WSPRecv+0x203
> 04 0196f608 71bb1151 WS2_32!WSARecv+0x77
> 05 0196f634 6d561660 WSOCK32!recv+0x31
> 06 0196f684 06c409ad dbnetlib!ConnectionRead+0x3b6
> WARNING: Frame IP not in any known module. Following frames may be
> wrong.
> 07 0196f7a0 799a7f65 0x6c409ad
> 08 0196f7a4 ffffffff mscorlib_79990000+0x17f65
> 09 0196f7a8 0196f7d8 0xffffffff
> 0a 0196f7ac 00000000 0x196f7d8
>
>
>
>
> Thread ID: 16
> System Thread ID: 1544
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
> Thread 16
> Not a managed thread.
>
>
> Begin System Thread Information
>
> # ChildEBP RetAddr
> 00 01aafe70 7c822114 ntdll!KiFastSystemCallRet
> 01 01aafe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc
> 02 01aaff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a