Crash analysis

Crash analysis

am 11.10.2007 19:28:04 von purnima

We installed DebugDiag to analyze crashes on IIS 6.0 web server on w3wp .
Here is the analysis report.How do we understand this?


Analysis Summary
Type Description Recommendation
Error In
w3wp__PID__1232__Date__10_10_2007__Time_02_52_20AM__844__Sec ond_Chance_Exception_C0000005.dmp
the module C:\WINDOWS\system32\ntdll.dll has caused an access violation
exception (0xC0000005) when trying to write to memory location 0x0ae60fec on
thread 28

Please follow up with the vendor of this module, Microsoft Corporation, for
further assistance with this issue.



Information DebugDiag determined that this dump file
(w3wp__PID__1232__Date__10_10_2007__Time_02_52_20AM__844__Se cond_Chance_Exception_C0000005.dmp)
is a crash dump and did not perform any hang analysis. If you wish to enable
combined crash and hang analysis for crash dumps, edit the
CrashHangAnalysis.asp script (located in the DebugDiag\Scripts folder) and
set the g_DoCombinedAnalysis constant to True.





Analysis Details



Your browser settings are currently prohibiting this report's scripts from
running.

This is preventing some features of this analysis report from displaying
properly. To enable scripts to run, right-click the security warning above
and choose "Allow Blocked Content..." or enable the "Allow active content to
run in files on My Computer*" setting on the Advanced tab of your "Internet
Options" dialog to avoid being prompted in the future





Table Of Contents
w3wp__PID__1232__Date__10_10_2007__Time_02_52_20AM__844__Sec ond_Chance_Exception_C0000005.dmp

Faulting Thread

Faulting Module Information



Report for
w3wp__PID__1232__Date__10_10_2007__Time_02_52_20AM__844__Sec ond_Chance_Exception_C0000005.dmp




Report for
w3wp__PID__1232__Date__10_10_2007__Time_02_52_20AM__844__Sec ond_Chance_Exception_C0000005.dmp
Type of Analysis Performed Crash Analysis
Machine Name NACTWEB01V2K3
Operating System Windows Server 2003
Number Of Processors 2
Process ID 1232
Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe
System Up-Time 3 day(s) 18:59:13
Process Up-Time 00:21:55


Thread 28 - System ID 4176
Entry point mscorsvr!ThreadpoolMgr::WorkerThreadStart
Create time 10/10/2007 2:30:47 AM
Time spent in user mode 0 Days 0:0:0.390
Time spent in kernel mode 0 Days 0:0:0.140






Function Arg 1 Arg 2 Arg 3 Source
ntdll!RtlLookupFunctionTable+a 77f68ad0 0ae61030 0ae6103c




NTDLL!RTLLOOKUPFUNCTIONTABLE+AIn
w3wp__PID__1232__Date__10_10_2007__Time_02_52_20AM__844__Sec ond_Chance_Exception_C0000005.dmp
the module C:\WINDOWS\system32\ntdll.dll has caused an access violation
exception (0xC0000005) when trying to write to memory location 0x0ae60fec on
thread 28

Module Information
Image Name: C:\WINDOWS\system32\ntdll.dll Symbol Type: PDB
Base address: 0x77f40000 Time Stamp: Tue Mar 25 02:42:44 2003
Checksum: 0x000b6dba Comments:
COM DLL: False Company Name: Microsoft Corporation
ISAPIExtension: False File Description: NT Layer DLL
ISAPIFilter: False File Version: 5.2.3790.0 (srv03_rtm.030324-2048)
Managed DLL: False Internal Name: ntdll.dll
VB DLL: False Legal Copyright: © Microsoft Corporation. All rights
reserved.
Loaded Image Name: ntdll.dll Legal Trademarks:
Mapped Image Name: Original filename: ntdll.dll
Module name: ntdll Private Build:
Single Threaded: False Product Name: Microsoft® Windows® Operating System
Module Size: 744.00 KBytes Product Version: 5.2.3790.0
Symbol File Name: c:\symcache\ntdll.pdb\3E800DDD2\ntdll.pdb Special
Build: &









Script Summary
Script Name Status Error Code Error Source Error Description Source Line
CrashHangAnalysis.asp Completed