Welcome to HostingForumz.com!
FAQFAQ   SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

IISState Analysis

 
   Web Hosting Problem Solving Community! (Home) -> IIS RSS
Related Topics:
IISState Log Analysis - Please Help! - Does anybody have any idea what could be causing this process to be using 100% of the CPU?? Thanks in advance Opened log file Starting new log output IISState version 3.3.1 Wed Sep 08..

IISstate log analysis - Hi Could anyone point me in the direction of where to start with the problem below. IIS stops serving ASP pages, just times out, but html pages are fine, have to restart www service to fix. Thanks in Advance Stephen ..

IISSTATE log analysis... - Pat, hoping you can help. Posted a previous message, but will give more info here... I'm having a problem with one of two processes that is heavily utilizing a server of mine's cpu . The memory usage is normal. The cpu spikes are not constant, but it..

iisstate analysis please - Opened log file Starting new log output IISState version 3.3.1 Tue Feb 10 10:58:42 2004 OS = Windows 2000 PID = 2080 Note: Thread times are formatted as..

IISSTATE Analysis Please...Take Two - Here is the one from the website. Opened log file Starting new log output IISState version 3.3.1 Tue Feb 03 08:43:14 2004 OS = Windows 2000 PID = 4164 Note:..
Next:  IISState Analysis  
Author Message
greg_platt

External


Since: Jun 17, 2004
Posts: 21



(Msg. 1) Posted: Mon Nov 01, 2004 2:48 pm
Post subject: IISState Analysis
Archived from groups: microsoft>public>inetserver>iis (more info?)

IIS stops serving ASP pages. Maybe possible memory leak or fragmented
memory?

Opened log file 'C:\iisstate\output\IISState-7772.log'

***********************
Starting new log output
IISState version 3.3.1

Sat Oct 30 18:45:20 2004

OS = Windows 2000
Executable: dllhost.exe
PID = 7772

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 1618
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006fd28 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 0006fd50 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 0006fd60 77aaa701 KERNEL32!WaitForSingleObject+0xf
03 0006fd80 77aa9f0f
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f
04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
05 0006ff24 010014c6 dllhost!WinMain+0xb0
06 0006ffc0 7c581af6 dllhost!WinMainCRTStartup+0x156
07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d




Thread ID: 1
System Thread ID: 16cc
Kernel Time: 0:0:26.625
User Time: 0:0:35.375
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 0088fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 0088ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0088ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0088ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
04 0088ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 2
System Thread ID: d0c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0090ff30 77abbad5 USER32!NtUserGetMessage+0xb
01 0090ff70 77abba23 ole32!CDllHost::STAWorkerLoop+0x40
02 0090ff8c 77abb95e ole32!CDllHost::WorkerThread+0xc2
03 0090ff90 77ab50ee ole32!DLLHostThreadEntry+0x9
04 0090ffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22
05 0090ffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 3
System Thread ID: 15dc
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 0099fc54 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 0099fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
02 0099fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
03 0099ffb4 7c57438b TxfAux!WORK_QUEUE::ThreadLoop+0x58
04 0099ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 4
System Thread ID: 404
Kernel Time: 0:0:26.500
User Time: 0:0:35.734
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 00a5fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 00a5ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 00a5ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
03 00a5ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
04 00a5ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
05 00a5ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 5
System Thread ID: f68
Kernel Time: 0:0:0.78
User Time: 0:0:0.15
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00b9ff08 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 00b9ff58 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea
02 00b9ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
03 00b9ffb4 7c57438b COMSVCS!CEventDispatcher::PushEvents+0x4e
04 00b9ffc0 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 6
System Thread ID: 1b84
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

Remote call is either to a MTA object or object not initialized. Also,
possible utility thread.
DCOM call being made to Process ID: 1444
Waiting on thread id: ffffffff

# ChildEBP RetAddr
00 00bdfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
01 00bdfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
02 00bdfba0 77b25b87 RPCRT4!I_RpcSendReceive+0x2c
03 00bdfbc0 77b25a52 ole32!ThreadSendReceive+0xef
04 00bdfbd8 77b22ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
05 00bdfc18 77b258c6 ole32!CRpcChannelBuffer::SendReceive2+0x96
06 00bdfc28 77a6cb5d ole32!CRpcChannelBuffer::SendReceive+0x11
07 00bdfc88 77ab74c3 ole32!CAptRpcChnl::SendReceive+0xa9
08 00bdfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
09 00bdfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
0a 00bdff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
0b 00bdff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
0c 00bdff70 787f5818 RPCRT4!ObjectStubless+0xf
0d 00bdffb4 7c57438b
COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
0e 00bdffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 7
System Thread ID: 129c
Kernel Time: 0:0:0.0
User Time: 0:0:0.140
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00c1fee0 7c573a4e ntdll!NtDelayExecution+0xb
01 00c1ff00 7c573a22 KERNEL32!SleepEx+0x32
02 00c1ff0c 787d12aa KERNEL32!Sleep+0xb
03 00c1ff7c 780085bc COMSVCS!PostData+0xf2
04 00c1ff88 77ab779b MSVCRT!_endthreadex+0xc1
05 00000000 00000000 ole32!CCtxComChnl::FreeBuffer+0x3d




Thread ID: 8
System Thread ID: 1734
Kernel Time: 0:29:29.531
User Time: 0:18:57.218
Thread Type: Other
# ChildEBP RetAddr
00 00e9fe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 00e9feac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00e9ff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 00e9ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 00e9ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
05 00e9ffb4 7c57438b MSVCRT!_endthreadex+0xc1
06 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 9
System Thread ID: 1b70
Kernel Time: 0:29:41.640
User Time: 0:19:18.375
Thread Type: Other
# ChildEBP RetAddr
00 00edfe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 00edfeac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00edff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 00edff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 00edff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
05 00edffb4 7c57438b MSVCRT!_endthreadex+0xc1
06 00edffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 10
System Thread ID: c20
Kernel Time: 0:0:0.125
User Time: 0:0:0.171
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f9ff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 00f9ffb4 7c57438b ISATQ!AtqPoolThread+0x40
03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 11
System Thread ID: 45c
Kernel Time: 0:0:0.109
User Time: 0:0:0.187
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fdff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 00fdff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 00fdffb4 7c57438b ISATQ!AtqPoolThread+0x40
03 00fdffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 12
System Thread ID: c90
Kernel Time: 0:0:27.593
User Time: 0:0:35.515
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made
# ChildEBP RetAddr
00 010cfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 010cff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 010cff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 010cffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 010cffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
05 010cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 13
System Thread ID: 470
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made
# ChildEBP RetAddr
00 01c6feb8 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 01c6fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
02 01c6ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
03 01c6ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
04 01c6ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
05 01c6ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
06 01c6ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
07 01c6ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 14
System Thread ID: 162c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 01d2fe70 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 01d2fec0 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01d2ff1c 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 01d2ff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
04 01d2ff7c 78008454 asp!CMTACallbackThread::Thread+0x42
05 01d2ffb4 7c57438b MSVCRT!_endthread+0xc6
06 01d2ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 15
System Thread ID: 13a8
Kernel Time: 0:0:0.78
User Time: 0:0:0.15
*** WARNING: Unable to verify checksum for
*** ERROR: Symbol file could not be found. Defaulted to export symbols
or -
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
00 01dafddc 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 01dafe2c 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01dafe88 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 01dafea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1d
04 01daff88 4a008a85 pdm+0x886c
05 01daffb0 4a008a09 pdm+0x8a85
06 01daffb4 7c57438b pdm+0x8a09
07 01daffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 16
System Thread ID: b70
Kernel Time: 0:0:1.234
User Time: 0:0:7.625
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 01defe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 01defe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01defed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 01defef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 01deff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
05 01deffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
06 01deffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 17
System Thread ID: 1ab0
Kernel Time: 0:6:46.703
User Time: 1:20:20.46
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 01e6fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 01e6fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01e6fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 01e6fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 01e6ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
05 01e6ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
06 01e6ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 18
System Thread ID: 1534
Kernel Time: 0:0:2.109
User Time: 0:0:13.187
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 01eafe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 01eafe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01eafed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 01eafef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 01eaff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
05 01eaffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
06 01eaffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 19
System Thread ID: eb8
Kernel Time: 0:0:1.156
User Time: 0:0:3.718
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 01f2fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 01f2fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01f2fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 01f2fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 01f2ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
05 01f2ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
06 01f2ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 20
System Thread ID: 1c38
Kernel Time: 0:7:9.234
User Time: 1:24:54.203
*** ERROR: Symbol file could not be found. Defaulted to export symbols
or -
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: D:\PRODUCTION SERVER\SECURE\DOWNLOADFILE.ASP

Remote call is either to a MTA object or object not initialized. Also,
possible utility thread.
DCOM call being made to Process ID: 7180
Waiting on thread id: ffffffff

# ChildEBP RetAddr
00 01f6e4e8 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 01f6e538 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01f6e594 77aa99f4 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01f6e5bc 77ab3bcb ole32!CCliModalLoop::BlockFn+0x79
04 01f6e5e4 77b25b30 ole32!ModalLoop+0x59
05 01f6e604 77b25a52 ole32!ThreadSendReceive+0x98
06 01f6e61c 77b22ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
07 01f6e65c 77aa985f ole32!CRpcChannelBuffer::SendReceive2+0x96
08 01f6e674 77a6cb1c ole32!CCliModalLoop::SendReceive+0x1c
09 01f6e6d4 77ab74c3 ole32!CAptRpcChnl::SendReceive+0x68
0a 01f6e72c 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
0b 01f6e748 77d9487d RPCRT4!NdrProxySendReceive+0x4c
0c 01f6e990 77d95136 RPCRT4!NdrClientCall2+0x4f5
0d 01f6e9ac 77d46e75 RPCRT4!ObjectStublessClient+0x76
0e 01f6e9bc 74a1e7f4 RPCRT4!ObjectStubless+0xf
0f 01f6e9e0 74a1e789 asp!WAM_EXEC_INFO::SyncWriteClient+0x40
10 01f6e9fc 74a1e0be asp!CResponse::SyncWrite+0x3e
11 01f6ea14 74a201c3 asp!CResponseBuffer::Flush+0x35
12 01f6ea28 779d7d5d asp!CResponse::Flush+0x8e
13 01f6ea40 77a2310e OLEAUT32!DispCallFunc+0x15d
14 01f6ead0 74a20924 OLEAUT32!CTypeInfo2::Invoke+0x244
15 01f6eaf8 6b614279 asp!CDispatchImpl<IResponse>::Invoke+0x4b
WARNING: Stack unwind information not available. Following frames may be
wrong.
16 01f6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
17 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 21
System Thread ID: 748
Kernel Time: 0:0:0.171
User Time: 0:0:0.46
Thread Type: Other
# ChildEBP RetAddr
00 0200ff9c 77f842c4 ntdll!NtDelayExecution+0xb
01 0200ffb4 7c57438b ntdll!RtlpTimerThread+0x42
02 0200ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 22
System Thread ID: f10
Kernel Time: 0:0:0.46
User Time: 0:0:0.62
Thread Type: Other
# ChildEBP RetAddr
00 0242ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb
01 0242ffb4 7c57438b ntdll!RtlpWorkerThread+0x6b
02 0242ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 23
System Thread ID: 19e8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0294ff88 75179cd7 ntdll!ZwWaitForMultipleObjects+0xb
01 0294ffb4 7c57438b NETAPI32!NetbiosWaiter+0x71
02 0294ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 24
System Thread ID: 864
Kernel Time: 0:0:5.718
User Time: 0:0:27.375
Thread Type: Other
# ChildEBP RetAddr
00 0298ff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 0298ff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 0298ff90 1f8945ab KERNEL32!WaitForSingleObject+0xf
03 0298ffb4 7c57438b oledb32!ReleaseResourceThread+0x54
04 0298ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 25
System Thread ID: 1c80
Kernel Time: 0:0:11.328
User Time: 0:0:15.875
Thread Type: Other
# ChildEBP RetAddr
00 029cff50 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 029cff78 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 029cff88 1f8945bb KERNEL32!WaitForSingleObject+0xf
03 029cffb4 7c57438b oledb32!ResetResourceThread+0x84
04 029cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 26
System Thread ID: 7bc
Kernel Time: 0:0:0.46
User Time: 0:0:0.78
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02a0fd54 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 02a0fd7c 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 02a0fd8c 7878db85 KERNEL32!WaitForSingleObject+0xf
03 02a0ffb4 7c57438b COMSVCS!PingThread+0xf5
04 02a0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 27
System Thread ID: 1694
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0589fea4 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0589fef4 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea
02 0589ff0c 743d78d7 KERNEL32!WaitForMultipleObjects+0x17
03 0589ff54 743d7a3d browscap!CMonitor::DoMonitoring+0xf9
04 0589ff7c 780085bc browscap!CMonitor::ThreadFunc+0x26
05 0589ffb4 7c57438b MSVCRT!_endthreadex+0xc1
06 0589ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 28
System Thread ID: 10e4
Kernel Time: 0:1:24.812
User Time: 0:16:20.796
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 024efe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 024efe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 024efed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 024efef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 024eff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
05 024effb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
06 024effec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 29
System Thread ID: 1994
Kernel Time: 0:0:29.187
User Time: 0:5:43.843
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 01fafe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 01fafe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01fafed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 01fafef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 01faff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
05 01faffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
06 01faffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 30
System Thread ID: 46c
Kernel Time: 0:0:23.531
User Time: 0:4:52.406
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0246fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0246fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0246fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0246fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0246ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
05 0246ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
06 0246ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 31
System Thread ID: 444
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 03f0ff5c 7c573a4e ntdll!NtDelayExecution+0xb
01 03f0ff7c 7c573a22 KERNEL32!SleepEx+0x32
02 03f0ff88 77ab8ffb KERNEL32!Sleep+0xb
03 03f0ff90 77ab50ee ole32!CROIDTable::WorkerThreadLoop+0xc
04 03f0ffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22
05 03f0ffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 03f0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 32
System Thread ID: 484
Kernel Time: 0:0:15.171
User Time: 0:3:6.671
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 04a9fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 04a9fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 04a9fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 04a9fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 04a9ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
05 04a9ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
06 04a9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 33
System Thread ID: 1290
Kernel Time: 0:0:0.0
User Time: 0:0:0.78
Thread Type: Other
# ChildEBP RetAddr
00 008cff60 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 008cff88 77ab510c KERNEL32!WaitForSingleObjectEx+0x71
02 008cffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x40
03 008cffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
04 008cffec 00000000 KERNEL32!BaseThreadStart+0x52

Closing open log file C:\iisstate\output\IISState-7772.log

 >> Stay informed about: IISState Analysis 
Back to top
Login to vote
patfilot

External


Since: Aug 24, 2003
Posts: 1478



(Msg. 2) Posted: Mon Nov 01, 2004 2:48 pm
Post subject: Re: IISState Analysis [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

It doesn't look hung. There was only 1 page executing, writing to a client.
You need to run IISState while the problem is actually occurring.


Pat

"greg" <greg_platt RemoveThis @hotmail.com> wrote in message
news:%2371J6x6vEHA.3320@TK2MSFTNGP14.phx.gbl...
 > IIS stops serving ASP pages. Maybe possible memory leak or fragmented
 > memory?
 >
 > Opened log file 'C:\iisstate\output\IISState-7772.log'
 >
 > ***********************
 > Starting new log output
 > IISState version 3.3.1
 >
 > Sat Oct 30 18:45:20 2004
 >
 > OS = Windows 2000
 > Executable: dllhost.exe
 > PID = 7772
 >
 > Note: Thread times are formatted as HH:MM:SS.ms
 >
 > ***********************
 >
 >
 >
 >
 > Thread ID: 0
 > System Thread ID: 1618
 > Kernel Time: 0:0:0.15
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0006fd28 7c573b28 ntdll!ZwWaitForSingleObject+0xb
 > 01 0006fd50 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
 > 02 0006fd60 77aaa701 KERNEL32!WaitForSingleObject+0xf
 > 03 0006fd80 77aa9f0f
 > ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f
 > 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
 > 05 0006ff24 010014c6 dllhost!WinMain+0xb0
 > 06 0006ffc0 7c581af6 dllhost!WinMainCRTStartup+0x156
 > 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
 >
 >
 >
 >
 > Thread ID: 1
 > System Thread ID: 16cc
 > Kernel Time: 0:0:26.625
 > User Time: 0:0:35.375
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 >
 > # ChildEBP RetAddr
 > 00 0088fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
 > 01 0088ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
 > 02 0088ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
 > 03 0088ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
 > 04 0088ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
 > 05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 2
 > System Thread ID: d0c
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0090ff30 77abbad5 USER32!NtUserGetMessage+0xb
 > 01 0090ff70 77abba23 ole32!CDllHost::STAWorkerLoop+0x40
 > 02 0090ff8c 77abb95e ole32!CDllHost::WorkerThread+0xc2
 > 03 0090ff90 77ab50ee ole32!DLLHostThreadEntry+0x9
 > 04 0090ffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22
 > 05 0090ffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
 > 06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 3
 > System Thread ID: 15dc
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.15
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0099fc54 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
 > 01 0099fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
 > 02 0099fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
 > 03 0099ffb4 7c57438b TxfAux!WORK_QUEUE::ThreadLoop+0x58
 > 04 0099ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 4
 > System Thread ID: 404
 > Kernel Time: 0:0:26.500
 > User Time: 0:0:35.734
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 >
 > # ChildEBP RetAddr
 > 00 00a5fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
 > 01 00a5ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
 > 02 00a5ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
 > 03 00a5ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
 > 04 00a5ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
 > 05 00a5ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 5
 > System Thread ID: f68
 > Kernel Time: 0:0:0.78
 > User Time: 0:0:0.15
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00b9ff08 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 00b9ff58 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 00b9ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
 > 03 00b9ffb4 7c57438b COMSVCS!CEventDispatcher::PushEvents+0x4e
 > 04 00b9ffc0 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 6
 > System Thread ID: 1b84
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > Remote call is either to a MTA object or object not initialized. Also,
 > possible utility thread.
 > DCOM call being made to Process ID: 1444
 > Waiting on thread id: ffffffff
 >
 > # ChildEBP RetAddr
 > 00 00bdfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
 > 01 00bdfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
 > 02 00bdfba0 77b25b87 RPCRT4!I_RpcSendReceive+0x2c
 > 03 00bdfbc0 77b25a52 ole32!ThreadSendReceive+0xef
 > 04 00bdfbd8 77b22ab6
 > ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
 > 05 00bdfc18 77b258c6 ole32!CRpcChannelBuffer::SendReceive2+0x96
 > 06 00bdfc28 77a6cb5d ole32!CRpcChannelBuffer::SendReceive+0x11
 > 07 00bdfc88 77ab74c3 ole32!CAptRpcChnl::SendReceive+0xa9
 > 08 00bdfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
 > 09 00bdfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
 > 0a 00bdff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
 > 0b 00bdff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
 > 0c 00bdff70 787f5818 RPCRT4!ObjectStubless+0xf
 > 0d 00bdffb4 7c57438b
 > COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
 > 0e 00bdffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 7
 > System Thread ID: 129c
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.140
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00c1fee0 7c573a4e ntdll!NtDelayExecution+0xb
 > 01 00c1ff00 7c573a22 KERNEL32!SleepEx+0x32
 > 02 00c1ff0c 787d12aa KERNEL32!Sleep+0xb
 > 03 00c1ff7c 780085bc COMSVCS!PostData+0xf2
 > 04 00c1ff88 77ab779b MSVCRT!_endthreadex+0xc1
 > 05 00000000 00000000 ole32!CCtxComChnl::FreeBuffer+0x3d
 >
 >
 >
 >
 > Thread ID: 8
 > System Thread ID: 1734
 > Kernel Time: 0:29:29.531
 > User Time: 0:18:57.218
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 00e9fe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 00e9feac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 00e9ff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 00e9ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
 > 04 00e9ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
 > 05 00e9ffb4 7c57438b MSVCRT!_endthreadex+0xc1
 > 06 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 9
 > System Thread ID: 1b70
 > Kernel Time: 0:29:41.640
 > User Time: 0:19:18.375
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 00edfe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 00edfeac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 00edff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 00edff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
 > 04 00edff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
 > 05 00edffb4 7c57438b MSVCRT!_endthreadex+0xc1
 > 06 00edffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 10
 > System Thread ID: c20
 > Kernel Time: 0:0:0.125
 > User Time: 0:0:0.171
 > Thread Type: HTTP Listener
 > # ChildEBP RetAddr
 > 00 00f9ff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
 > 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
 > 02 00f9ffb4 7c57438b ISATQ!AtqPoolThread+0x40
 > 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 11
 > System Thread ID: 45c
 > Kernel Time: 0:0:0.109
 > User Time: 0:0:0.187
 > Thread Type: HTTP Listener
 > # ChildEBP RetAddr
 > 00 00fdff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
 > 01 00fdff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
 > 02 00fdffb4 7c57438b ISATQ!AtqPoolThread+0x40
 > 03 00fdffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 12
 > System Thread ID: c90
 > Kernel Time: 0:0:27.593
 > User Time: 0:0:35.515
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 > # ChildEBP RetAddr
 > 00 010cfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
 > 01 010cff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
 > 02 010cff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
 > 03 010cffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
 > 04 010cffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
 > 05 010cffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 13
 > System Thread ID: 470
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 > # ChildEBP RetAddr
 > 00 01c6feb8 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
 > 01 01c6fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
 > 02 01c6ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
 > 03 01c6ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
 > 04 01c6ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
 > 05 01c6ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
 > 06 01c6ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
 > 07 01c6ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 14
 > System Thread ID: 162c
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: ASP
 > Executing Page: Unable to locate ASP page
 >
 > # ChildEBP RetAddr
 > 00 01d2fe70 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01d2fec0 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01d2ff1c 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01d2ff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 01d2ff7c 78008454 asp!CMTACallbackThread::Thread+0x42
 > 05 01d2ffb4 7c57438b MSVCRT!_endthread+0xc6
 > 06 01d2ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 15
 > System Thread ID: 13a8
 > Kernel Time: 0:0:0.78
 > User Time: 0:0:0.15
 > *** WARNING: Unable to verify checksum for
 > *** ERROR: Symbol file could not be found. Defaulted to export symbols
 > r -
 > Thread Type: PDM (Debugger) Thread.
 > # ChildEBP RetAddr
 > 00 01dafddc 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01dafe2c 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01dafe88 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01dafea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1d
 > 04 01daff88 4a008a85 pdm+0x886c
 > 05 01daffb0 4a008a09 pdm+0x8a85
 > 06 01daffb4 7c57438b pdm+0x8a09
 > 07 01daffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 16
 > System Thread ID: b70
 > Kernel Time: 0:0:1.234
 > User Time: 0:0:7.625
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 01defe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01defe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01defed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01defef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 01deff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
 > 05 01deffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
 > 06 01deffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 17
 > System Thread ID: 1ab0
 > Kernel Time: 0:6:46.703
 > User Time: 1:20:20.46
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 01e6fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01e6fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01e6fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01e6fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 01e6ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
 > 05 01e6ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
 > 06 01e6ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 18
 > System Thread ID: 1534
 > Kernel Time: 0:0:2.109
 > User Time: 0:0:13.187
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 01eafe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01eafe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01eafed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01eafef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 01eaff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
 > 05 01eaffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
 > 06 01eaffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 19
 > System Thread ID: eb8
 > Kernel Time: 0:0:1.156
 > User Time: 0:0:3.718
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 01f2fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01f2fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01f2fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01f2fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 01f2ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
 > 05 01f2ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
 > 06 01f2ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 20
 > System Thread ID: 1c38
 > Kernel Time: 0:7:9.234
 > User Time: 1:24:54.203
 > *** ERROR: Symbol file could not be found. Defaulted to export symbols
 > r -
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: D:\PRODUCTION SERVER\SECURE\DOWNLOADFILE.ASP
 >
 > Remote call is either to a MTA object or object not initialized. Also,
 > possible utility thread.
 > DCOM call being made to Process ID: 7180
 > Waiting on thread id: ffffffff
 >
 > # ChildEBP RetAddr
 > 00 01f6e4e8 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01f6e538 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01f6e594 77aa99f4 USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01f6e5bc 77ab3bcb ole32!CCliModalLoop::BlockFn+0x79
 > 04 01f6e5e4 77b25b30 ole32!ModalLoop+0x59
 > 05 01f6e604 77b25a52 ole32!ThreadSendReceive+0x98
 > 06 01f6e61c 77b22ab6
 > ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
 > 07 01f6e65c 77aa985f ole32!CRpcChannelBuffer::SendReceive2+0x96
 > 08 01f6e674 77a6cb1c ole32!CCliModalLoop::SendReceive+0x1c
 > 09 01f6e6d4 77ab74c3 ole32!CAptRpcChnl::SendReceive+0x68
 > 0a 01f6e72c 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
 > 0b 01f6e748 77d9487d RPCRT4!NdrProxySendReceive+0x4c
 > 0c 01f6e990 77d95136 RPCRT4!NdrClientCall2+0x4f5
 > 0d 01f6e9ac 77d46e75 RPCRT4!ObjectStublessClient+0x76
 > 0e 01f6e9bc 74a1e7f4 RPCRT4!ObjectStubless+0xf
 > 0f 01f6e9e0 74a1e789 asp!WAM_EXEC_INFO::SyncWriteClient+0x40
 > 10 01f6e9fc 74a1e0be asp!CResponse::SyncWrite+0x3e
 > 11 01f6ea14 74a201c3 asp!CResponseBuffer::Flush+0x35
 > 12 01f6ea28 779d7d5d asp!CResponse::Flush+0x8e
 > 13 01f6ea40 77a2310e OLEAUT32!DispCallFunc+0x15d
 > 14 01f6ead0 74a20924 OLEAUT32!CTypeInfo2::Invoke+0x244
 > 15 01f6eaf8 6b614279 asp!CDispatchImpl<IResponse>::Invoke+0x4b
 > WARNING: Stack unwind information not available. Following frames may be
 > wrong.
 > 16 01f6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
 > 17 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
 >
 >
 >
 >
 > Thread ID: 21
 > System Thread ID: 748
 > Kernel Time: 0:0:0.171
 > User Time: 0:0:0.46
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0200ff9c 77f842c4 ntdll!NtDelayExecution+0xb
 > 01 0200ffb4 7c57438b ntdll!RtlpTimerThread+0x42
 > 02 0200ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 22
 > System Thread ID: f10
 > Kernel Time: 0:0:0.46
 > User Time: 0:0:0.62
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0242ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb
 > 01 0242ffb4 7c57438b ntdll!RtlpWorkerThread+0x6b
 > 02 0242ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 23
 > System Thread ID: 19e8
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0294ff88 75179cd7 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 0294ffb4 7c57438b NETAPI32!NetbiosWaiter+0x71
 > 02 0294ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 24
 > System Thread ID: 864
 > Kernel Time: 0:0:5.718
 > User Time: 0:0:27.375
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0298ff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb
 > 01 0298ff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
 > 02 0298ff90 1f8945ab KERNEL32!WaitForSingleObject+0xf
 > 03 0298ffb4 7c57438b oledb32!ReleaseResourceThread+0x54
 > 04 0298ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 25
 > System Thread ID: 1c80
 > Kernel Time: 0:0:11.328
 > User Time: 0:0:15.875
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 029cff50 7c573b28 ntdll!ZwWaitForSingleObject+0xb
 > 01 029cff78 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
 > 02 029cff88 1f8945bb KERNEL32!WaitForSingleObject+0xf
 > 03 029cffb4 7c57438b oledb32!ResetResourceThread+0x84
 > 04 029cffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 26
 > System Thread ID: 7bc
 > Kernel Time: 0:0:0.46
 > User Time: 0:0:0.78
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 02a0fd54 7c573b28 ntdll!ZwWaitForSingleObject+0xb
 > 01 02a0fd7c 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
 > 02 02a0fd8c 7878db85 KERNEL32!WaitForSingleObject+0xf
 > 03 02a0ffb4 7c57438b COMSVCS!PingThread+0xf5
 > 04 02a0ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 27
 > System Thread ID: 1694
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0589fea4 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 0589fef4 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 0589ff0c 743d78d7 KERNEL32!WaitForMultipleObjects+0x17
 > 03 0589ff54 743d7a3d browscap!CMonitor::DoMonitoring+0xf9
 > 04 0589ff7c 780085bc browscap!CMonitor::ThreadFunc+0x26
 > 05 0589ffb4 7c57438b MSVCRT!_endthreadex+0xc1
 > 06 0589ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 28
 > System Thread ID: 10e4
 > Kernel Time: 0:1:24.812
 > User Time: 0:16:20.796
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 024efe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 024efe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 024efed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 024efef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 024eff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
 > 05 024effb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
 > 06 024effec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 29
 > System Thread ID: 1994
 > Kernel Time: 0:0:29.187
 > User Time: 0:5:43.843
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 01fafe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01fafe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01fafed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01fafef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 01faff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
 > 05 01faffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
 > 06 01faffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 30
 > System Thread ID: 46c
 > Kernel Time: 0:0:23.531
 > User Time: 0:4:52.406
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 0246fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 0246fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 0246fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 0246fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 0246ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
 > 05 0246ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
 > 06 0246ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 31
 > System Thread ID: 444
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 03f0ff5c 7c573a4e ntdll!NtDelayExecution+0xb
 > 01 03f0ff7c 7c573a22 KERNEL32!SleepEx+0x32
 > 02 03f0ff88 77ab8ffb KERNEL32!Sleep+0xb
 > 03 03f0ff90 77ab50ee ole32!CROIDTable::WorkerThreadLoop+0xc
 > 04 03f0ffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22
 > 05 03f0ffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
 > 06 03f0ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 32
 > System Thread ID: 484
 > Kernel Time: 0:0:15.171
 > User Time: 0:3:6.671
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 04a9fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 04a9fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 04a9fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 04a9fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 04a9ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
 > 05 04a9ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
 > 06 04a9ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 33
 > System Thread ID: 1290
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.78
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 008cff60 7c573b28 ntdll!ZwWaitForSingleObject+0xb
 > 01 008cff88 77ab510c KERNEL32!WaitForSingleObjectEx+0x71
 > 02 008cffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x40
 > 03 008cffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
 > 04 008cffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 > Closing open log file C:\iisstate\output\IISState-7772.log
 >
 ><!-- ~MESSAGE_AFTER~ -->

 >> Stay informed about: IISState Analysis 
Back to top
Login to vote
greg_platt

External


Since: Jun 17, 2004
Posts: 21



(Msg. 3) Posted: Mon Nov 01, 2004 6:22 pm
Post subject: Re: IISState Analysis [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

i did run it when all the sites were failing on the correct dllhost.exe
process. All sites are medium isolation.
sites just start failing one by one so i'm sure there is a memory problem
but how would i know where to look?

the server isnt out of RAM or virtual memory either. are there any tools
other than performance monitor to look into memory leaks?

"Pat [MSFT]" <patfilot.TakeThisOut@online.microsoft.com> wrote in message
news:O$aIgm9vEHA.1524@TK2MSFTNGP09.phx.gbl...
 > It doesn't look hung. There was only 1 page executing, writing to a
 > client. You need to run IISState while the problem is actually occurring.
 >
 >
 > Pat
 >
 > "greg" <greg_platt.TakeThisOut@hotmail.com> wrote in message
 > news:%2371J6x6vEHA.3320@TK2MSFTNGP14.phx.gbl...
  >> IIS stops serving ASP pages. Maybe possible memory leak or fragmented
  >> memory?
  >>
  >> Opened log file 'C:\iisstate\output\IISState-7772.log'
  >>
  >> ***********************
  >> Starting new log output
  >> IISState version 3.3.1
  >>
  >> Sat Oct 30 18:45:20 2004
  >>
  >> OS = Windows 2000
  >> Executable: dllhost.exe
  >> PID = 7772
  >>
  >> Note: Thread times are formatted as HH:MM:SS.ms
  >>
  >> ***********************
  >>
  >>
  >>
  >>
  >> Thread ID: 0
  >> System Thread ID: 1618
  >> Kernel Time: 0:0:0.15
  >> User Time: 0:0:0.0
  >> Thread Type: Other
  >> # ChildEBP RetAddr
  >> 00 0006fd28 7c573b28 ntdll!ZwWaitForSingleObject+0xb
  >> 01 0006fd50 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
  >> 02 0006fd60 77aaa701 KERNEL32!WaitForSingleObject+0xf
  >> 03 0006fd80 77aa9f0f
  >> ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f
  >> 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
  >> 05 0006ff24 010014c6 dllhost!WinMain+0xb0
  >> 06 0006ffc0 7c581af6 dllhost!WinMainCRTStartup+0x156
  >> 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
  >>
  >>
  >>
  >>
  >> Thread ID: 1
  >> System Thread ID: 16cc
  >> Kernel Time: 0:0:26.625
  >> User Time: 0:0:35.375
  >> Thread Type: Possible ASP page. Possible DCOM activity
  >> Executing Page: Unable to locate ASP page
  >>
  >> No remote call being made
  >>
  >> # ChildEBP RetAddr
  >> 00 0088fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
  >> 01 0088ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
  >> 02 0088ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
  >> 03 0088ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
  >> 04 0088ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
  >> 05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 2
  >> System Thread ID: d0c
  >> Kernel Time: 0:0:0.0
  >> User Time: 0:0:0.0
  >> Thread Type: Other
  >> # ChildEBP RetAddr
  >> 00 0090ff30 77abbad5 USER32!NtUserGetMessage+0xb
  >> 01 0090ff70 77abba23 ole32!CDllHost::STAWorkerLoop+0x40
  >> 02 0090ff8c 77abb95e ole32!CDllHost::WorkerThread+0xc2
  >> 03 0090ff90 77ab50ee ole32!DLLHostThreadEntry+0x9
  >> 04 0090ffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22
  >> 05 0090ffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
  >> 06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 3
  >> System Thread ID: 15dc
  >> Kernel Time: 0:0:0.0
  >> User Time: 0:0:0.15
  >> Thread Type: Other
  >> # ChildEBP RetAddr
  >> 00 0099fc54 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
  >> 01 0099fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
  >> 02 0099fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
  >> 03 0099ffb4 7c57438b TxfAux!WORK_QUEUE::ThreadLoop+0x58
  >> 04 0099ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 4
  >> System Thread ID: 404
  >> Kernel Time: 0:0:26.500
  >> User Time: 0:0:35.734
  >> Thread Type: Possible ASP page. Possible DCOM activity
  >> Executing Page: Unable to locate ASP page
  >>
  >> No remote call being made
  >>
  >> # ChildEBP RetAddr
  >> 00 00a5fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
  >> 01 00a5ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
  >> 02 00a5ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
  >> 03 00a5ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
  >> 04 00a5ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
  >> 05 00a5ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 5
  >> System Thread ID: f68
  >> Kernel Time: 0:0:0.78
  >> User Time: 0:0:0.15
  >> Thread Type: Idle ASP thread
  >> # ChildEBP RetAddr
  >> 00 00b9ff08 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 00b9ff58 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea
  >> 02 00b9ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
  >> 03 00b9ffb4 7c57438b COMSVCS!CEventDispatcher::PushEvents+0x4e
  >> 04 00b9ffc0 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 6
  >> System Thread ID: 1b84
  >> Kernel Time: 0:0:0.0
  >> User Time: 0:0:0.0
  >> Thread Type: Possible ASP page. Possible DCOM activity
  >> Executing Page: Unable to locate ASP page
  >>
  >> Remote call is either to a MTA object or object not initialized. Also,
  >> possible utility thread.
  >> DCOM call being made to Process ID: 1444
  >> Waiting on thread id: ffffffff
  >>
  >> # ChildEBP RetAddr
  >> 00 00bdfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
  >> 01 00bdfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
  >> 02 00bdfba0 77b25b87 RPCRT4!I_RpcSendReceive+0x2c
  >> 03 00bdfbc0 77b25a52 ole32!ThreadSendReceive+0xef
  >> 04 00bdfbd8 77b22ab6
  >> ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
  >> 05 00bdfc18 77b258c6 ole32!CRpcChannelBuffer::SendReceive2+0x96
  >> 06 00bdfc28 77a6cb5d ole32!CRpcChannelBuffer::SendReceive+0x11
  >> 07 00bdfc88 77ab74c3 ole32!CAptRpcChnl::SendReceive+0xa9
  >> 08 00bdfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
  >> 09 00bdfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
  >> 0a 00bdff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
  >> 0b 00bdff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
  >> 0c 00bdff70 787f5818 RPCRT4!ObjectStubless+0xf
  >> 0d 00bdffb4 7c57438b
  >> COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
  >> 0e 00bdffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 7
  >> System Thread ID: 129c
  >> Kernel Time: 0:0:0.0
  >> User Time: 0:0:0.140
  >> Thread Type: Idle ASP thread
  >> # ChildEBP RetAddr
  >> 00 00c1fee0 7c573a4e ntdll!NtDelayExecution+0xb
  >> 01 00c1ff00 7c573a22 KERNEL32!SleepEx+0x32
  >> 02 00c1ff0c 787d12aa KERNEL32!Sleep+0xb
  >> 03 00c1ff7c 780085bc COMSVCS!PostData+0xf2
  >> 04 00c1ff88 77ab779b MSVCRT!_endthreadex+0xc1
  >> 05 00000000 00000000 ole32!CCtxComChnl::FreeBuffer+0x3d
  >>
  >>
  >>
  >>
  >> Thread ID: 8
  >> System Thread ID: 1734
  >> Kernel Time: 0:29:29.531
  >> User Time: 0:18:57.218
  >> Thread Type: Other
  >> # ChildEBP RetAddr
  >> 00 00e9fe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 00e9feac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
  >> 02 00e9ff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
  >> 03 00e9ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
  >> 04 00e9ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
  >> 05 00e9ffb4 7c57438b MSVCRT!_endthreadex+0xc1
  >> 06 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 9
  >> System Thread ID: 1b70
  >> Kernel Time: 0:29:41.640
  >> User Time: 0:19:18.375
  >> Thread Type: Other
  >> # ChildEBP RetAddr
  >> 00 00edfe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 00edfeac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
  >> 02 00edff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
  >> 03 00edff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
  >> 04 00edff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
  >> 05 00edffb4 7c57438b MSVCRT!_endthreadex+0xc1
  >> 06 00edffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 10
  >> System Thread ID: c20
  >> Kernel Time: 0:0:0.125
  >> User Time: 0:0:0.171
  >> Thread Type: HTTP Listener
  >> # ChildEBP RetAddr
  >> 00 00f9ff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
  >> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
  >> 02 00f9ffb4 7c57438b ISATQ!AtqPoolThread+0x40
  >> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 11
  >> System Thread ID: 45c
  >> Kernel Time: 0:0:0.109
  >> User Time: 0:0:0.187
  >> Thread Type: HTTP Listener
  >> # ChildEBP RetAddr
  >> 00 00fdff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
  >> 01 00fdff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
  >> 02 00fdffb4 7c57438b ISATQ!AtqPoolThread+0x40
  >> 03 00fdffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 12
  >> System Thread ID: c90
  >> Kernel Time: 0:0:27.593
  >> User Time: 0:0:35.515
  >> Thread Type: Possible ASP page. Possible DCOM activity
  >> Executing Page: Unable to locate ASP page
  >>
  >> No remote call being made
  >> # ChildEBP RetAddr
  >> 00 010cfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
  >> 01 010cff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
  >> 02 010cff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
  >> 03 010cffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
  >> 04 010cffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
  >> 05 010cffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 13
  >> System Thread ID: 470
  >> Kernel Time: 0:0:0.0
  >> User Time: 0:0:0.0
  >> Thread Type: Possible ASP page. Possible DCOM activity
  >> Executing Page: Unable to locate ASP page
  >>
  >> No remote call being made
  >> # ChildEBP RetAddr
  >> 00 01c6feb8 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
  >> 01 01c6fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
  >> 02 01c6ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
  >> 03 01c6ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
  >> 04 01c6ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
  >> 05 01c6ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
  >> 06 01c6ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
  >> 07 01c6ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 14
  >> System Thread ID: 162c
  >> Kernel Time: 0:0:0.0
  >> User Time: 0:0:0.0
  >> Thread Type: ASP
  >> Executing Page: Unable to locate ASP page
  >>
  >> # ChildEBP RetAddr
  >> 00 01d2fe70 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 01d2fec0 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
  >> 02 01d2ff1c 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
  >> 03 01d2ff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
  >> 04 01d2ff7c 78008454 asp!CMTACallbackThread::Thread+0x42
  >> 05 01d2ffb4 7c57438b MSVCRT!_endthread+0xc6
  >> 06 01d2ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 15
  >> System Thread ID: 13a8
  >> Kernel Time: 0:0:0.78
  >> User Time: 0:0:0.15
  >> *** WARNING: Unable to verify checksum for
  >> *** ERROR: Symbol file could not be found. Defaulted to export symbols
  >> -
  >> Thread Type: PDM (Debugger) Thread.
  >> # ChildEBP RetAddr
  >> 00 01dafddc 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 01dafe2c 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
  >> 02 01dafe88 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
  >> 03 01dafea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1d
  >> 04 01daff88 4a008a85 pdm+0x886c
  >> 05 01daffb0 4a008a09 pdm+0x8a85
  >> 06 01daffb4 7c57438b pdm+0x8a09
  >> 07 01daffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 16
  >> System Thread ID: b70
  >> Kernel Time: 0:0:1.234
  >> User Time: 0:0:7.625
  >> Thread Type: Idle ASP thread
  >> # ChildEBP RetAddr
  >> 00 01defe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 01defe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
  >> 02 01defed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
  >> 03 01defef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
  >> 04 01deff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
  >> 05 01deffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
  >> 06 01deffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 17
  >> System Thread ID: 1ab0
  >> Kernel Time: 0:6:46.703
  >> User Time: 1:20:20.46
  >> Thread Type: Idle ASP thread
  >> # ChildEBP RetAddr
  >> 00 01e6fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 01e6fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
  >> 02 01e6fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
  >> 03 01e6fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
  >> 04 01e6ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
  >> 05 01e6ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
  >> 06 01e6ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 18
  >> System Thread ID: 1534
  >> Kernel Time: 0:0:2.109
  >> User Time: 0:0:13.187
  >> Thread Type: Idle ASP thread
  >> # ChildEBP RetAddr
  >> 00 01eafe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 01eafe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
  >> 02 01eafed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
  >> 03 01eafef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
  >> 04 01eaff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
  >> 05 01eaffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
  >> 06 01eaffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 19
  >> System Thread ID: eb8
  >> Kernel Time: 0:0:1.156
  >> User Time: 0:0:3.718
  >> Thread Type: Idle ASP thread
  >> # ChildEBP RetAddr
  >> 00 01f2fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 01f2fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
  >> 02 01f2fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
  >> 03 01f2fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
  >> 04 01f2ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
  >> 05 01f2ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
  >> 06 01f2ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 20
  >> System Thread ID: 1c38
  >> Kernel Time: 0:7:9.234
  >> User Time: 1:24:54.203
  >> *** ERROR: Symbol file could not be found. Defaulted to export symbols
  >> -
  >> Thread Type: Possible ASP page. Possible DCOM activity
  >> Executing Page: D:\PRODUCTION SERVER\SECURE\DOWNLOADFILE.ASP
  >>
  >> Remote call is either to a MTA object or object not initialized. Also,
  >> possible utility thread.
  >> DCOM call being made to Process ID: 7180
  >> Waiting on thread id: ffffffff
  >>
  >> # ChildEBP RetAddr
  >> 00 01f6e4e8 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 01f6e538 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
  >> 02 01f6e594 77aa99f4 USER32!MsgWaitForMultipleObjectsEx+0x153
  >> 03 01f6e5bc 77ab3bcb ole32!CCliModalLoop::BlockFn+0x79
  >> 04 01f6e5e4 77b25b30 ole32!ModalLoop+0x59
  >> 05 01f6e604 77b25a52 ole32!ThreadSendReceive+0x98
  >> 06 01f6e61c 77b22ab6
  >> ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
  >> 07 01f6e65c 77aa985f ole32!CRpcChannelBuffer::SendReceive2+0x96
  >> 08 01f6e674 77a6cb1c ole32!CCliModalLoop::SendReceive+0x1c
  >> 09 01f6e6d4 77ab74c3 ole32!CAptRpcChnl::SendReceive+0x68
  >> 0a 01f6e72c 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
  >> 0b 01f6e748 77d9487d RPCRT4!NdrProxySendReceive+0x4c
  >> 0c 01f6e990 77d95136 RPCRT4!NdrClientCall2+0x4f5
  >> 0d 01f6e9ac 77d46e75 RPCRT4!ObjectStublessClient+0x76
  >> 0e 01f6e9bc 74a1e7f4 RPCRT4!ObjectStubless+0xf
  >> 0f 01f6e9e0 74a1e789 asp!WAM_EXEC_INFO::SyncWriteClient+0x40
  >> 10 01f6e9fc 74a1e0be asp!CResponse::SyncWrite+0x3e
  >> 11 01f6ea14 74a201c3 asp!CResponseBuffer::Flush+0x35
  >> 12 01f6ea28 779d7d5d asp!CResponse::Flush+0x8e
  >> 13 01f6ea40 77a2310e OLEAUT32!DispCallFunc+0x15d
  >> 14 01f6ead0 74a20924 OLEAUT32!CTypeInfo2::Invoke+0x244
  >> 15 01f6eaf8 6b614279 asp!CDispatchImpl<IResponse>::Invoke+0x4b
  >> WARNING: Stack unwind information not available. Following frames may be
  >> wrong.
  >> 16 01f6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
  >> 17 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
  >>
  >>
  >>
  >>
  >> Thread ID: 21
  >> System Thread ID: 748
  >> Kernel Time: 0:0:0.171
  >> User Time: 0:0:0.46
  >> Thread Type: Other
  >> # ChildEBP RetAddr
  >> 00 0200ff9c 77f842c4 ntdll!NtDelayExecution+0xb
  >> 01 0200ffb4 7c57438b ntdll!RtlpTimerThread+0x42
  >> 02 0200ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 22
  >> System Thread ID: f10
  >> Kernel Time: 0:0:0.46
  >> User Time: 0:0:0.62
  >> Thread Type: Other
  >> # ChildEBP RetAddr
  >> 00 0242ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb
  >> 01 0242ffb4 7c57438b ntdll!RtlpWorkerThread+0x6b
  >> 02 0242ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 23
  >> System Thread ID: 19e8
  >> Kernel Time: 0:0:0.0
  >> User Time: 0:0:0.0
  >> Thread Type: Other
  >> # ChildEBP RetAddr
  >> 00 0294ff88 75179cd7 ntdll!ZwWaitForMultipleObjects+0xb
  >> 01 0294ffb4 7c57438b NETAPI32!NetbiosWaiter+0x71
  >> 02 0294ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 24
  >> System Thread ID: 864
  >> Kernel Time: 0:0:5.718
  >> User Time: 0:0:27.375
  >> Thread Type: Other
  >> # ChildEBP RetAddr
  >> 00 0298ff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb
  >> 01 0298ff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
  >> 02 0298ff90 1f8945ab KERNEL32!WaitForSingleObject+0xf
  >> 03 0298ffb4 7c57438b oledb32!ReleaseResourceThread+0x54
  >> 04 0298ffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: 25
  >> System Thread ID: 1c80
  >> Kernel Time: 0:0:11.328
  >> User Time: 0:0:15.875
  >> Thread Type: Other
  >> # ChildEBP RetAddr
  >> 00 029cff50 7c573b28 ntdll!ZwWaitForSingleObject+0xb
  >> 01 029cff78 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
  >> 02 029cff88 1f8945bb KERNEL32!WaitForSingleObject+0xf
  >> 03 029cffb4 7c57438b oledb32!ResetResourceThread+0x84
  >> 04 029cffec 00000000 KERNEL32!BaseThreadStart+0x52
  >>
  >>
  >>
  >>
  >> Thread ID: