IIS crash/hangs

Hi,

I am running a Windows 2003 Web Edition server with IIS 6 installed.
Every now and then the server crashes and no matter what I do it will
not resume serving pages. The only way to get IIS back online is to
reboot the server.

In the error logs all I can see is;

A process serving application pool 'plesk(default)(pool)' failed to
respond to a ping. The process id was '6788'.

I have also installed DebugDiag and captured a crash/hang.

WARNING - DebugDiag was unable to locate debug symbols for
hotlinkprot.dll, so the information below may be incomplete.

Detected possible blocking or leaked critical section at hotlinkprot!
TerminateFilter+3b238 owned by thread 3 in w3wp.
exe__plesk(default)(pool)__PID__7472__Date__05_04_
2007__Time_12_06_09AM__586__IIS Hang Dump.dmp

Impact of this lock

12.50% of threads blocked

(Threads 2 4 5 60 63 65 66 67 70)

The following functions are trying to enter this critical section
hotlinkprot!TerminateFilter+6723


The following module(s) are involved with this critical section
D:\Program Files\SWsoft\Plesk\isapi\hotlinkprot.dll

Locked critical section report
Critical Section hotlinkprot!TerminateFilter+3b238
Lock State Locked
Lock Count 9
Recursion Count 1
Entry Count 0
Contention Count 978
Spin Count 0
Owner Thread 3
Owner Thread System ID 3608

Thread report

Thread 0 - System ID 2960
Entry point w3wp!wmainCRTStartup
Create time 04/05/2007 01:49:39
Time spent in user mode 0 Days 0:0:0.31
Time spent in kernel mode 0 Days 0:0:0.46

Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
w3dt!WP_CONTEXT::RunMainThreadLoop+10
w3dt!UlAtqStartListen+2d
w3core!W3_SERVER::StartListen+bd
w3core!UlW3Start+26e
w3wp!wmain+22a
w3wp!wmainCRTStartup+12b
kernel32!BaseProcessStart+23

Can anyone perhaps shed some light as what is happening here? I have
also posted on the SWSoft forums but seems like I am the only one
experiencing these crashes/hangs.

When the system comes up after a reboot I find that two specific domains
usernames are disabled/locked out and IIS has stopped service their
pages.

Any help or pointers in the right direction much appreciated.

Regards,

Appears that threads are all blocked in the worker process. And the culprit
is D:\Program Files\SWsoft\Plesk\isapi\hotlinkprot.dll

Cheers
Ken


--
My IIS Blog: www.adOpenStatic.com/cs/blogs/ken


"Leon de Jager" <newsgroup.DeleteThis@freezone.co.uk> wrote in message
news:1178269165.8198.20.camel@localhost...
> Hi,
>
> I am running a Windows 2003 Web Edition server with IIS 6 installed.
> Every now and then the server crashes and no matter what I do it will
> not resume serving pages. The only way to get IIS back online is to
> reboot the server.
>
> In the error logs all I can see is;
>
> A process serving application pool 'plesk(default)(pool)' failed to
> respond to a ping. The process id was '6788'.
>
> I have also installed DebugDiag and captured a crash/hang.
>
> WARNING - DebugDiag was unable to locate debug symbols for
> hotlinkprot.dll, so the information below may be incomplete.
>
> Detected possible blocking or leaked critical section at hotlinkprot!
> TerminateFilter+3b238 owned by thread 3 in w3wp.
> exe__plesk(default)(pool)__PID__7472__Date__05_04_
> 2007__Time_12_06_09AM__586__IIS Hang Dump.dmp
>
> Impact of this lock
>
> 12.50% of threads blocked
>
> (Threads 2 4 5 60 63 65 66 67 70)
>
> The following functions are trying to enter this critical section
> hotlinkprot!TerminateFilter+6723
>
>
> The following module(s) are involved with this critical section
> D:\Program Files\SWsoft\Plesk\isapi\hotlinkprot.dll
>
> Locked critical section report
> Critical Section hotlinkprot!TerminateFilter+3b238
> Lock State Locked
> Lock Count 9
> Recursion Count 1
> Entry Count 0
> Contention Count 978
> Spin Count 0
> Owner Thread 3
> Owner Thread System ID 3608
>
> Thread report
>
> Thread 0 - System ID 2960
> Entry point w3wp!wmainCRTStartup
> Create time 04/05/2007 01:49:39
> Time spent in user mode 0 Days 0:0:0.31
> Time spent in kernel mode 0 Days 0:0:0.46
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> w3dt!WP_CONTEXT::RunMainThreadLoop+10
> w3dt!UlAtqStartListen+2d
> w3core!W3_SERVER::StartListen+bd
> w3core!UlW3Start+26e
> w3wp!wmain+22a
> w3wp!wmainCRTStartup+12b
> kernel32!BaseProcessStart+23
>
> Can anyone perhaps shed some light as what is happening here? I have
> also posted on the SWSoft forums but seems like I am the only one
> experiencing these crashes/hangs.
>
> When the system comes up after a reboot I find that two specific domains
> usernames are disabled/locked out and IIS has stopped service their
> pages.
>
> Any help or pointers in the right direction much appreciated.
>
> Regards,
>