Page cannot be displayed

I have a Server with two Intel Pro 1000 Gigabit Ethernet Adapter's, one XT
and one MT and have installed the latest drivers.

The Server has Windows 2003 SP2 installed.

I'm using IIS to connect to an SSL page that distributes the AV software.

When both cards are enabled I get the "Page cannot be displayed error" but
as soon as the second card is disabled the site works fine.

I've deleted and replaced the site certificate, I've looked at the IIS logs
which give the "connections_refused" error. On running WFetch I get "Failed
to negotiate secure connection with localhost".

I've tried re-installing IIS but it doesn't make any difference and I can't
find any pointers.

Has anyone any idea what could be causing this?

Fiona

Re: Page cannot be displayed

so you installed some AV product that has its own web app hosted on IIS?

What your saying doesnt really make much sense. as far as IIS is concerned
it shouldnt matter what you do with the network cards.

so your saying from a workstation if you go to http://server/webapp (not
from the server) with only one card enabled it works fine?
but if you enable the second card it tells you the server cant be found?

did you try accessing it by IP rather than by server name?

please give some more detail as to how you are testing this.

Justin


"Fiona" wrote in message
news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
>I have a Server with two Intel Pro 1000 Gigabit Ethernet Adapter's, one XT
> and one MT and have installed the latest drivers.
>
> The Server has Windows 2003 SP2 installed.
>
> I'm using IIS to connect to an SSL page that distributes the AV software.
>
> When both cards are enabled I get the "Page cannot be displayed error" but
> as soon as the second card is disabled the site works fine.
>
> I've deleted and replaced the site certificate, I've looked at the IIS
> logs
> which give the "connections_refused" error. On running WFetch I get
> "Failed
> to negotiate secure connection with localhost".
>
> I've tried re-installing IIS but it doesn't make any difference and I
> can't
> find any pointers.
>
> Has anyone any idea what could be causing this?
>
> Fiona

Re: Page cannot be displayed

Hi Justin,

The website is accessed by the IP Address. When both nics are enabled
http://localhost isn't even available but the second you disable the second
nic it is?

I know it doesn't make sense but that is what happens.

Fiona

"Justin Rich" wrote:

> so you installed some AV product that has its own web app hosted on IIS?
>
> What your saying doesnt really make much sense. as far as IIS is concerned
> it shouldnt matter what you do with the network cards.
>
> so your saying from a workstation if you go to http://server/webapp (not
> from the server) with only one card enabled it works fine?
> but if you enable the second card it tells you the server cant be found?
>
> did you try accessing it by IP rather than by server name?
>
> please give some more detail as to how you are testing this.
>
> Justin
>
>
> "Fiona" wrote in message
> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
> >I have a Server with two Intel Pro 1000 Gigabit Ethernet Adapter's, one XT
> > and one MT and have installed the latest drivers.
> >
> > The Server has Windows 2003 SP2 installed.
> >
> > I'm using IIS to connect to an SSL page that distributes the AV software.
> >
> > When both cards are enabled I get the "Page cannot be displayed error" but
> > as soon as the second card is disabled the site works fine.
> >
> > I've deleted and replaced the site certificate, I've looked at the IIS
> > logs
> > which give the "connections_refused" error. On running WFetch I get
> > "Failed
> > to negotiate secure connection with localhost".
> >
> > I've tried re-installing IIS but it doesn't make any difference and I
> > can't
> > find any pointers.
> >
> > Has anyone any idea what could be causing this?
> >
> > Fiona
>
>
>

Re: Page cannot be displayed

are you able to ping both nics ok from another machine?
did you make any changes to IIS? perhaps once you enable the second NIC
restart IIS?

that is just really odd because technincally when you use localhost it
resolves to 127.0.0.1 which is a special loopback address and should have
nothing to do with either nic.

it could possibly be an issue with the NICs conflicting in some way because
thats just not normal at all.

I guess what i would do is enable both NICS, reboot the box, and run a
netstat -a at the command prompt. you should see, for a local address,
server:http in there, some times with dual nics if its open on one ip and
not the other it will show the ip instead of the server name. that might
give us some indication as to whats going on here..

"Fiona" wrote in message
news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
> Hi Justin,
>
> The website is accessed by the IP Address. When both nics are enabled
> http://localhost isn't even available but the second you disable the
> second
> nic it is?
>
> I know it doesn't make sense but that is what happens.
>
> Fiona
>
> "Justin Rich" wrote:
>
>> so you installed some AV product that has its own web app hosted on IIS?
>>
>> What your saying doesnt really make much sense. as far as IIS is
>> concerned
>> it shouldnt matter what you do with the network cards.
>>
>> so your saying from a workstation if you go to http://server/webapp (not
>> from the server) with only one card enabled it works fine?
>> but if you enable the second card it tells you the server cant be found?
>>
>> did you try accessing it by IP rather than by server name?
>>
>> please give some more detail as to how you are testing this.
>>
>> Justin
>>
>>
>> "Fiona" wrote in message
>> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
>> >I have a Server with two Intel Pro 1000 Gigabit Ethernet Adapter's, one
>> >XT
>> > and one MT and have installed the latest drivers.
>> >
>> > The Server has Windows 2003 SP2 installed.
>> >
>> > I'm using IIS to connect to an SSL page that distributes the AV
>> > software.
>> >
>> > When both cards are enabled I get the "Page cannot be displayed error"
>> > but
>> > as soon as the second card is disabled the site works fine.
>> >
>> > I've deleted and replaced the site certificate, I've looked at the IIS
>> > logs
>> > which give the "connections_refused" error. On running WFetch I get
>> > "Failed
>> > to negotiate secure connection with localhost".
>> >
>> > I've tried re-installing IIS but it doesn't make any difference and I
>> > can't
>> > find any pointers.
>> >
>> > Has anyone any idea what could be causing this?
>> >
>> > Fiona
>>
>>
>>

Re: Page cannot be displayed

Hi Justin,

Well this is odd. Last night the website just wouldn't work at all even
though all of the services were started. It didn't matter if one or two of
the nics were enabled it just wouldn't work.

I rebooted the server overnight and now the website is working with both
nics enabled?

I'm guessing this must be some kind of memory leakage and that the enabling
and disabling of the second nic was just a red herring?

I'm not familiar with memory leakage issues so I'm not sure where to begin
in tracking that down.

I am thinking its probably the AV software as the version was updated
recently but I can see nothing on Trend's site to indicate this.

Fiona

"Justin Rich" wrote:

> are you able to ping both nics ok from another machine?
> did you make any changes to IIS? perhaps once you enable the second NIC
> restart IIS?
>
> that is just really odd because technincally when you use localhost it
> resolves to 127.0.0.1 which is a special loopback address and should have
> nothing to do with either nic.
>
> it could possibly be an issue with the NICs conflicting in some way because
> thats just not normal at all.
>
> I guess what i would do is enable both NICS, reboot the box, and run a
> netstat -a at the command prompt. you should see, for a local address,
> server:http in there, some times with dual nics if its open on one ip and
> not the other it will show the ip instead of the server name. that might
> give us some indication as to whats going on here..
>
> "Fiona" wrote in message
> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
> > Hi Justin,
> >
> > The website is accessed by the IP Address. When both nics are enabled
> > http://localhost isn't even available but the second you disable the
> > second
> > nic it is?
> >
> > I know it doesn't make sense but that is what happens.
> >
> > Fiona
> >
> > "Justin Rich" wrote:
> >
> >> so you installed some AV product that has its own web app hosted on IIS?
> >>
> >> What your saying doesnt really make much sense. as far as IIS is
> >> concerned
> >> it shouldnt matter what you do with the network cards.
> >>
> >> so your saying from a workstation if you go to http://server/webapp (not
> >> from the server) with only one card enabled it works fine?
> >> but if you enable the second card it tells you the server cant be found?
> >>
> >> did you try accessing it by IP rather than by server name?
> >>
> >> please give some more detail as to how you are testing this.
> >>
> >> Justin
> >>
> >>
> >> "Fiona" wrote in message
> >> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
> >> >I have a Server with two Intel Pro 1000 Gigabit Ethernet Adapter's, one
> >> >XT
> >> > and one MT and have installed the latest drivers.
> >> >
> >> > The Server has Windows 2003 SP2 installed.
> >> >
> >> > I'm using IIS to connect to an SSL page that distributes the AV
> >> > software.
> >> >
> >> > When both cards are enabled I get the "Page cannot be displayed error"
> >> > but
> >> > as soon as the second card is disabled the site works fine.
> >> >
> >> > I've deleted and replaced the site certificate, I've looked at the IIS
> >> > logs
> >> > which give the "connections_refused" error. On running WFetch I get
> >> > "Failed
> >> > to negotiate secure connection with localhost".
> >> >
> >> > I've tried re-installing IIS but it doesn't make any difference and I
> >> > can't
> >> > find any pointers.
> >> >
> >> > Has anyone any idea what could be causing this?
> >> >
> >> > Fiona
> >>
> >>
> >>
>
>
>

Re: Page cannot be displayed

well if you bring up task manager and you can watch IIS grow and grow and
never release any memory, then, it could possibly be a leak... but i doubt
this would be the results of that. I think i would clean up your
connectivity issues before you try to figure out the IIS part. I would try
some of the things i had suggested below to get this working.

Also, if you have dual nic's make sure only one of them has a gateway. if
both have gateways set you run in to a problem.

try the tests below and let me know the outcome.

from your workstation
ping both interfaces via ip
ping via name

from the server
do a netstat -a and look for the http listening port

from your workstation
try to open the website root via both IP's and also by name
use telnet to connect to the webserver (telnet server 80)


"Fiona" wrote in message
news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
> Hi Justin,
>
> Well this is odd. Last night the website just wouldn't work at all even
> though all of the services were started. It didn't matter if one or two
> of
> the nics were enabled it just wouldn't work.
>
> I rebooted the server overnight and now the website is working with both
> nics enabled?
>
> I'm guessing this must be some kind of memory leakage and that the
> enabling
> and disabling of the second nic was just a red herring?
>
> I'm not familiar with memory leakage issues so I'm not sure where to begin
> in tracking that down.
>
> I am thinking its probably the AV software as the version was updated
> recently but I can see nothing on Trend's site to indicate this.
>
> Fiona
>
> "Justin Rich" wrote:
>
>> are you able to ping both nics ok from another machine?
>> did you make any changes to IIS? perhaps once you enable the second NIC
>> restart IIS?
>>
>> that is just really odd because technincally when you use localhost it
>> resolves to 127.0.0.1 which is a special loopback address and should have
>> nothing to do with either nic.
>>
>> it could possibly be an issue with the NICs conflicting in some way
>> because
>> thats just not normal at all.
>>
>> I guess what i would do is enable both NICS, reboot the box, and run a
>> netstat -a at the command prompt. you should see, for a local address,
>> server:http in there, some times with dual nics if its open on one ip and
>> not the other it will show the ip instead of the server name. that might
>> give us some indication as to whats going on here..
>>
>> "Fiona" wrote in message
>> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
>> > Hi Justin,
>> >
>> > The website is accessed by the IP Address. When both nics are enabled
>> > http://localhost isn't even available but the second you disable the
>> > second
>> > nic it is?
>> >
>> > I know it doesn't make sense but that is what happens.
>> >
>> > Fiona
>> >
>> > "Justin Rich" wrote:
>> >
>> >> so you installed some AV product that has its own web app hosted on
>> >> IIS?
>> >>
>> >> What your saying doesnt really make much sense. as far as IIS is
>> >> concerned
>> >> it shouldnt matter what you do with the network cards.
>> >>
>> >> so your saying from a workstation if you go to http://server/webapp
>> >> (not
>> >> from the server) with only one card enabled it works fine?
>> >> but if you enable the second card it tells you the server cant be
>> >> found?
>> >>
>> >> did you try accessing it by IP rather than by server name?
>> >>
>> >> please give some more detail as to how you are testing this.
>> >>
>> >> Justin
>> >>
>> >>
>> >> "Fiona" wrote in message
>> >> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
>> >> >I have a Server with two Intel Pro 1000 Gigabit Ethernet Adapter's,
>> >> >one
>> >> >XT
>> >> > and one MT and have installed the latest drivers.
>> >> >
>> >> > The Server has Windows 2003 SP2 installed.
>> >> >
>> >> > I'm using IIS to connect to an SSL page that distributes the AV
>> >> > software.
>> >> >
>> >> > When both cards are enabled I get the "Page cannot be displayed
>> >> > error"
>> >> > but
>> >> > as soon as the second card is disabled the site works fine.
>> >> >
>> >> > I've deleted and replaced the site certificate, I've looked at the
>> >> > IIS
>> >> > logs
>> >> > which give the "connections_refused" error. On running WFetch I get
>> >> > "Failed
>> >> > to negotiate secure connection with localhost".
>> >> >
>> >> > I've tried re-installing IIS but it doesn't make any difference and
>> >> > I
>> >> > can't
>> >> > find any pointers.
>> >> >
>> >> > Has anyone any idea what could be causing this?
>> >> >
>> >> > Fiona
>> >>
>> >>
>> >>
>>
>>
>>

Re: Page cannot be displayed

Hi Justin,

Well this problem seems to have been resolved by installing a patch for
Officescan 8, even though the site never gave any indication that this was a
known fault.

IIS has been working fine with both nics enabled since last night's reboot
whereas before it never labut I'll certainly update you if the problem
reoccurs.

I always doubted that something was wrong with the networking setup as it
had been working fine for around 2 years before upgrading the AV software,
the other suspect was SP2.

This was a strange one though.

Fiona


"Justin Rich" wrote:

> well if you bring up task manager and you can watch IIS grow and grow and
> never release any memory, then, it could possibly be a leak... but i doubt
> this would be the results of that. I think i would clean up your
> connectivity issues before you try to figure out the IIS part. I would try
> some of the things i had suggested below to get this working.
>
> Also, if you have dual nic's make sure only one of them has a gateway. if
> both have gateways set you run in to a problem.
>
> try the tests below and let me know the outcome.
>
> from your workstation
> ping both interfaces via ip
> ping via name
>
> from the server
> do a netstat -a and look for the http listening port
>
> from your workstation
> try to open the website root via both IP's and also by name
> use telnet to connect to the webserver (telnet server 80)
>
>
> "Fiona" wrote in message
> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
> > Hi Justin,
> >
> > Well this is odd. Last night the website just wouldn't work at all even
> > though all of the services were started. It didn't matter if one or two
> > of
> > the nics were enabled it just wouldn't work.
> >
> > I rebooted the server overnight and now the website is working with both
> > nics enabled?
> >
> > I'm guessing this must be some kind of memory leakage and that the
> > enabling
> > and disabling of the second nic was just a red herring?
> >
> > I'm not familiar with memory leakage issues so I'm not sure where to begin
> > in tracking that down.
> >
> > I am thinking its probably the AV software as the version was updated
> > recently but I can see nothing on Trend's site to indicate this.
> >
> > Fiona
> >
> > "Justin Rich" wrote:
> >
> >> are you able to ping both nics ok from another machine?
> >> did you make any changes to IIS? perhaps once you enable the second NIC
> >> restart IIS?
> >>
> >> that is just really odd because technincally when you use localhost it
> >> resolves to 127.0.0.1 which is a special loopback address and should have
> >> nothing to do with either nic.
> >>
> >> it could possibly be an issue with the NICs conflicting in some way
> >> because
> >> thats just not normal at all.
> >>
> >> I guess what i would do is enable both NICS, reboot the box, and run a
> >> netstat -a at the command prompt. you should see, for a local address,
> >> server:http in there, some times with dual nics if its open on one ip and
> >> not the other it will show the ip instead of the server name. that might
> >> give us some indication as to whats going on here..
> >>
> >> "Fiona" wrote in message
> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
> >> > Hi Justin,
> >> >
> >> > The website is accessed by the IP Address. When both nics are enabled
> >> > http://localhost isn't even available but the second you disable the
> >> > second
> >> > nic it is?
> >> >
> >> > I know it doesn't make sense but that is what happens.
> >> >
> >> > Fiona
> >> >
> >> > "Justin Rich" wrote:
> >> >
> >> >> so you installed some AV product that has its own web app hosted on
> >> >> IIS?
> >> >>
> >> >> What your saying doesnt really make much sense. as far as IIS is
> >> >> concerned
> >> >> it shouldnt matter what you do with the network cards.
> >> >>
> >> >> so your saying from a workstation if you go to http://server/webapp
> >> >> (not
> >> >> from the server) with only one card enabled it works fine?
> >> >> but if you enable the second card it tells you the server cant be
> >> >> found?
> >> >>
> >> >> did you try accessing it by IP rather than by server name?
> >> >>
> >> >> please give some more detail as to how you are testing this.
> >> >>
> >> >> Justin
> >> >>
> >> >>
> >> >> "Fiona" wrote in message
> >> >> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
> >> >> >I have a Server with two Intel Pro 1000 Gigabit Ethernet Adapter's,
> >> >> >one
> >> >> >XT
> >> >> > and one MT and have installed the latest drivers.
> >> >> >
> >> >> > The Server has Windows 2003 SP2 installed.
> >> >> >
> >> >> > I'm using IIS to connect to an SSL page that distributes the AV
> >> >> > software.
> >> >> >
> >> >> > When both cards are enabled I get the "Page cannot be displayed
> >> >> > error"
> >> >> > but
> >> >> > as soon as the second card is disabled the site works fine.
> >> >> >
> >> >> > I've deleted and replaced the site certificate, I've looked at the
> >> >> > IIS
> >> >> > logs
> >> >> > which give the "connections_refused" error. On running WFetch I get
> >> >> > "Failed
> >> >> > to negotiate secure connection with localhost".
> >> >> >
> >> >> > I've tried re-installing IIS but it doesn't make any difference and
> >> >> > I
> >> >> > can't
> >> >> > find any pointers.
> >> >> >
> >> >> > Has anyone any idea what could be causing this?
> >> >> >
> >> >> > Fiona
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

Re: Page cannot be displayed

thanks for the update, good luck :)

"Fiona" wrote in message
news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
> Hi Justin,
>
> Well this problem seems to have been resolved by installing a patch for
> Officescan 8, even though the site never gave any indication that this was
> a
> known fault.
>
> IIS has been working fine with both nics enabled since last night's reboot
> whereas before it never labut I'll certainly update you if the problem
> reoccurs.
>
> I always doubted that something was wrong with the networking setup as it
> had been working fine for around 2 years before upgrading the AV software,
> the other suspect was SP2.
>
> This was a strange one though.
>
> Fiona
>
>
> "Justin Rich" wrote:
>
>> well if you bring up task manager and you can watch IIS grow and grow and
>> never release any memory, then, it could possibly be a leak... but i
>> doubt
>> this would be the results of that. I think i would clean up your
>> connectivity issues before you try to figure out the IIS part. I would
>> try
>> some of the things i had suggested below to get this working.
>>
>> Also, if you have dual nic's make sure only one of them has a gateway. if
>> both have gateways set you run in to a problem.
>>
>> try the tests below and let me know the outcome.
>>
>> from your workstation
>> ping both interfaces via ip
>> ping via name
>>
>> from the server
>> do a netstat -a and look for the http listening port
>>
>> from your workstation
>> try to open the website root via both IP's and also by name
>> use telnet to connect to the webserver (telnet server 80)
>>
>>
>> "Fiona" wrote in message
>> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
>> > Hi Justin,
>> >
>> > Well this is odd. Last night the website just wouldn't work at all
>> > even
>> > though all of the services were started. It didn't matter if one or
>> > two
>> > of
>> > the nics were enabled it just wouldn't work.
>> >
>> > I rebooted the server overnight and now the website is working with
>> > both
>> > nics enabled?
>> >
>> > I'm guessing this must be some kind of memory leakage and that the
>> > enabling
>> > and disabling of the second nic was just a red herring?
>> >
>> > I'm not familiar with memory leakage issues so I'm not sure where to
>> > begin
>> > in tracking that down.
>> >
>> > I am thinking its probably the AV software as the version was updated
>> > recently but I can see nothing on Trend's site to indicate this.
>> >
>> > Fiona
>> >
>> > "Justin Rich" wrote:
>> >
>> >> are you able to ping both nics ok from another machine?
>> >> did you make any changes to IIS? perhaps once you enable the second
>> >> NIC
>> >> restart IIS?
>> >>
>> >> that is just really odd because technincally when you use localhost it
>> >> resolves to 127.0.0.1 which is a special loopback address and should
>> >> have
>> >> nothing to do with either nic.
>> >>
>> >> it could possibly be an issue with the NICs conflicting in some way
>> >> because
>> >> thats just not normal at all.
>> >>
>> >> I guess what i would do is enable both NICS, reboot the box, and run a
>> >> netstat -a at the command prompt. you should see, for a local address,
>> >> server:http in there, some times with dual nics if its open on one ip
>> >> and
>> >> not the other it will show the ip instead of the server name. that
>> >> might
>> >> give us some indication as to whats going on here..
>> >>
>> >> "Fiona" wrote in message
>> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
>> >> > Hi Justin,
>> >> >
>> >> > The website is accessed by the IP Address. When both nics are
>> >> > enabled
>> >> > http://localhost isn't even available but the second you disable the
>> >> > second
>> >> > nic it is?
>> >> >
>> >> > I know it doesn't make sense but that is what happens.
>> >> >
>> >> > Fiona
>> >> >
>> >> > "Justin Rich" wrote:
>> >> >
>> >> >> so you installed some AV product that has its own web app hosted on
>> >> >> IIS?
>> >> >>
>> >> >> What your saying doesnt really make much sense. as far as IIS is
>> >> >> concerned
>> >> >> it shouldnt matter what you do with the network cards.
>> >> >>
>> >> >> so your saying from a workstation if you go to http://server/webapp
>> >> >> (not
>> >> >> from the server) with only one card enabled it works fine?
>> >> >> but if you enable the second card it tells you the server cant be
>> >> >> found?
>> >> >>
>> >> >> did you try accessing it by IP rather than by server name?
>> >> >>
>> >> >> please give some more detail as to how you are testing this.
>> >> >>
>> >> >> Justin
>> >> >>
>> >> >>
>> >> >> "Fiona" wrote in message
>> >> >> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
>> >> >> >I have a Server with two Intel Pro 1000 Gigabit Ethernet
>> >> >> >Adapter's,
>> >> >> >one
>> >> >> >XT
>> >> >> > and one MT and have installed the latest drivers.
>> >> >> >
>> >> >> > The Server has Windows 2003 SP2 installed.
>> >> >> >
>> >> >> > I'm using IIS to connect to an SSL page that distributes the AV
>> >> >> > software.
>> >> >> >
>> >> >> > When both cards are enabled I get the "Page cannot be displayed
>> >> >> > error"
>> >> >> > but
>> >> >> > as soon as the second card is disabled the site works fine.
>> >> >> >
>> >> >> > I've deleted and replaced the site certificate, I've looked at
>> >> >> > the
>> >> >> > IIS
>> >> >> > logs
>> >> >> > which give the "connections_refused" error. On running WFetch I
>> >> >> > get
>> >> >> > "Failed
>> >> >> > to negotiate secure connection with localhost".
>> >> >> >
>> >> >> > I've tried re-installing IIS but it doesn't make any difference
>> >> >> > and
>> >> >> > I
>> >> >> > can't
>> >> >> > find any pointers.
>> >> >> >
>> >> >> > Has anyone any idea what could be causing this?
>> >> >> >
>> >> >> > Fiona
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>

Re: Page cannot be displayed

Hi Justin,

As suspected the problem has re-occurred.

Netstat -a shows:
TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING

Only one nic has a gateway and is accessible from my desktop

I can ping one nic from my desktop.

The second nic is used for backup and can be pinged from the backup server.

The website is set to use only one ip, not all unassigned.

When I try telnetting to the ip used for the site it kicks me out as soon as
I try to type anything.

Pinging via name is successful.

Disabling the second nic has enabled the website again! The day before
yesterday it wouldn't work without a reboot!

I hope you can suggest something as this is extremely frustrating and I
can't keep rebooting the server or disabling the nic as it's used for backup.

Fiona

"Justin Rich" wrote:

> thanks for the update, good luck :)
>
> "Fiona" wrote in message
> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
> > Hi Justin,
> >
> > Well this problem seems to have been resolved by installing a patch for
> > Officescan 8, even though the site never gave any indication that this was
> > a
> > known fault.
> >
> > IIS has been working fine with both nics enabled since last night's reboot
> > whereas before it never labut I'll certainly update you if the problem
> > reoccurs.
> >
> > I always doubted that something was wrong with the networking setup as it
> > had been working fine for around 2 years before upgrading the AV software,
> > the other suspect was SP2.
> >
> > This was a strange one though.
> >
> > Fiona
> >
> >
> > "Justin Rich" wrote:
> >
> >> well if you bring up task manager and you can watch IIS grow and grow and
> >> never release any memory, then, it could possibly be a leak... but i
> >> doubt
> >> this would be the results of that. I think i would clean up your
> >> connectivity issues before you try to figure out the IIS part. I would
> >> try
> >> some of the things i had suggested below to get this working.
> >>
> >> Also, if you have dual nic's make sure only one of them has a gateway. if
> >> both have gateways set you run in to a problem.
> >>
> >> try the tests below and let me know the outcome.
> >>
> >> from your workstation
> >> ping both interfaces via ip
> >> ping via name
> >>
> >> from the server
> >> do a netstat -a and look for the http listening port
> >>
> >> from your workstation
> >> try to open the website root via both IP's and also by name
> >> use telnet to connect to the webserver (telnet server 80)
> >>
> >>
> >> "Fiona" wrote in message
> >> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
> >> > Hi Justin,
> >> >
> >> > Well this is odd. Last night the website just wouldn't work at all
> >> > even
> >> > though all of the services were started. It didn't matter if one or
> >> > two
> >> > of
> >> > the nics were enabled it just wouldn't work.
> >> >
> >> > I rebooted the server overnight and now the website is working with
> >> > both
> >> > nics enabled?
> >> >
> >> > I'm guessing this must be some kind of memory leakage and that the
> >> > enabling
> >> > and disabling of the second nic was just a red herring?
> >> >
> >> > I'm not familiar with memory leakage issues so I'm not sure where to
> >> > begin
> >> > in tracking that down.
> >> >
> >> > I am thinking its probably the AV software as the version was updated
> >> > recently but I can see nothing on Trend's site to indicate this.
> >> >
> >> > Fiona
> >> >
> >> > "Justin Rich" wrote:
> >> >
> >> >> are you able to ping both nics ok from another machine?
> >> >> did you make any changes to IIS? perhaps once you enable the second
> >> >> NIC
> >> >> restart IIS?
> >> >>
> >> >> that is just really odd because technincally when you use localhost it
> >> >> resolves to 127.0.0.1 which is a special loopback address and should
> >> >> have
> >> >> nothing to do with either nic.
> >> >>
> >> >> it could possibly be an issue with the NICs conflicting in some way
> >> >> because
> >> >> thats just not normal at all.
> >> >>
> >> >> I guess what i would do is enable both NICS, reboot the box, and run a
> >> >> netstat -a at the command prompt. you should see, for a local address,
> >> >> server:http in there, some times with dual nics if its open on one ip
> >> >> and
> >> >> not the other it will show the ip instead of the server name. that
> >> >> might
> >> >> give us some indication as to whats going on here..
> >> >>
> >> >> "Fiona" wrote in message
> >> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
> >> >> > Hi Justin,
> >> >> >
> >> >> > The website is accessed by the IP Address. When both nics are
> >> >> > enabled
> >> >> > http://localhost isn't even available but the second you disable the
> >> >> > second
> >> >> > nic it is?
> >> >> >
> >> >> > I know it doesn't make sense but that is what happens.
> >> >> >
> >> >> > Fiona
> >> >> >
> >> >> > "Justin Rich" wrote:
> >> >> >
> >> >> >> so you installed some AV product that has its own web app hosted on
> >> >> >> IIS?
> >> >> >>
> >> >> >> What your saying doesnt really make much sense. as far as IIS is
> >> >> >> concerned
> >> >> >> it shouldnt matter what you do with the network cards.
> >> >> >>
> >> >> >> so your saying from a workstation if you go to http://server/webapp
> >> >> >> (not
> >> >> >> from the server) with only one card enabled it works fine?
> >> >> >> but if you enable the second card it tells you the server cant be
> >> >> >> found?
> >> >> >>
> >> >> >> did you try accessing it by IP rather than by server name?
> >> >> >>
> >> >> >> please give some more detail as to how you are testing this.
> >> >> >>
> >> >> >> Justin
> >> >> >>
> >> >> >>
> >> >> >> "Fiona" wrote in message
> >> >> >> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
> >> >> >> >I have a Server with two Intel Pro 1000 Gigabit Ethernet
> >> >> >> >Adapter's,
> >> >> >> >one
> >> >> >> >XT
> >> >> >> > and one MT and have installed the latest drivers.
> >> >> >> >
> >> >> >> > The Server has Windows 2003 SP2 installed.
> >> >> >> >
> >> >> >> > I'm using IIS to connect to an SSL page that distributes the AV
> >> >> >> > software.
> >> >> >> >
> >> >> >> > When both cards are enabled I get the "Page cannot be displayed
> >> >> >> > error"
> >> >> >> > but
> >> >> >> > as soon as the second card is disabled the site works fine.
> >> >> >> >
> >> >> >> > I've deleted and replaced the site certificate, I've looked at
> >> >> >> > the
> >> >> >> > IIS
> >> >> >> > logs
> >> >> >> > which give the "connections_refused" error. On running WFetch I
> >> >> >> > get
> >> >> >> > "Failed
> >> >> >> > to negotiate secure connection with localhost".
> >> >> >> >
> >> >> >> > I've tried re-installing IIS but it doesn't make any difference
> >> >> >> > and
> >> >> >> > I
> >> >> >> > can't
> >> >> >> > find any pointers.
> >> >> >> >
> >> >> >> > Has anyone any idea what could be causing this?
> >> >> >> >
> >> >> >> > Fiona
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

Re: Page cannot be displayed

so the interesting part here is that a telnet connected and kicked you
out... you'll want to look at the IIS logs now to see why it kicked you out.

the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
try the telnet again and then look at the logs. it should give some info as
to why you are being rejected.

"Fiona" wrote in message
news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
> Hi Justin,
>
> As suspected the problem has re-occurred.
>
> Netstat -a shows:
> TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
>
> Only one nic has a gateway and is accessible from my desktop
>
> I can ping one nic from my desktop.
>
> The second nic is used for backup and can be pinged from the backup
> server.
>
> The website is set to use only one ip, not all unassigned.
>
> When I try telnetting to the ip used for the site it kicks me out as soon
> as
> I try to type anything.
>
> Pinging via name is successful.
>
> Disabling the second nic has enabled the website again! The day before
> yesterday it wouldn't work without a reboot!
>
> I hope you can suggest something as this is extremely frustrating and I
> can't keep rebooting the server or disabling the nic as it's used for
> backup.
>
> Fiona
>
> "Justin Rich" wrote:
>
>> thanks for the update, good luck :)
>>
>> "Fiona" wrote in message
>> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
>> > Hi Justin,
>> >
>> > Well this problem seems to have been resolved by installing a patch for
>> > Officescan 8, even though the site never gave any indication that this
>> > was
>> > a
>> > known fault.
>> >
>> > IIS has been working fine with both nics enabled since last night's
>> > reboot
>> > whereas before it never labut I'll certainly update you if the problem
>> > reoccurs.
>> >
>> > I always doubted that something was wrong with the networking setup as
>> > it
>> > had been working fine for around 2 years before upgrading the AV
>> > software,
>> > the other suspect was SP2.
>> >
>> > This was a strange one though.
>> >
>> > Fiona
>> >
>> >
>> > "Justin Rich" wrote:
>> >
>> >> well if you bring up task manager and you can watch IIS grow and grow
>> >> and
>> >> never release any memory, then, it could possibly be a leak... but i
>> >> doubt
>> >> this would be the results of that. I think i would clean up your
>> >> connectivity issues before you try to figure out the IIS part. I would
>> >> try
>> >> some of the things i had suggested below to get this working.
>> >>
>> >> Also, if you have dual nic's make sure only one of them has a gateway.
>> >> if
>> >> both have gateways set you run in to a problem.
>> >>
>> >> try the tests below and let me know the outcome.
>> >>
>> >> from your workstation
>> >> ping both interfaces via ip
>> >> ping via name
>> >>
>> >> from the server
>> >> do a netstat -a and look for the http listening port
>> >>
>> >> from your workstation
>> >> try to open the website root via both IP's and also by name
>> >> use telnet to connect to the webserver (telnet server 80)
>> >>
>> >>
>> >> "Fiona" wrote in message
>> >> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
>> >> > Hi Justin,
>> >> >
>> >> > Well this is odd. Last night the website just wouldn't work at all
>> >> > even
>> >> > though all of the services were started. It didn't matter if one or
>> >> > two
>> >> > of
>> >> > the nics were enabled it just wouldn't work.
>> >> >
>> >> > I rebooted the server overnight and now the website is working with
>> >> > both
>> >> > nics enabled?
>> >> >
>> >> > I'm guessing this must be some kind of memory leakage and that the
>> >> > enabling
>> >> > and disabling of the second nic was just a red herring?
>> >> >
>> >> > I'm not familiar with memory leakage issues so I'm not sure where to
>> >> > begin
>> >> > in tracking that down.
>> >> >
>> >> > I am thinking its probably the AV software as the version was
>> >> > updated
>> >> > recently but I can see nothing on Trend's site to indicate this.
>> >> >
>> >> > Fiona
>> >> >
>> >> > "Justin Rich" wrote:
>> >> >
>> >> >> are you able to ping both nics ok from another machine?
>> >> >> did you make any changes to IIS? perhaps once you enable the second
>> >> >> NIC
>> >> >> restart IIS?
>> >> >>
>> >> >> that is just really odd because technincally when you use localhost
>> >> >> it
>> >> >> resolves to 127.0.0.1 which is a special loopback address and
>> >> >> should
>> >> >> have
>> >> >> nothing to do with either nic.
>> >> >>
>> >> >> it could possibly be an issue with the NICs conflicting in some way
>> >> >> because
>> >> >> thats just not normal at all.
>> >> >>
>> >> >> I guess what i would do is enable both NICS, reboot the box, and
>> >> >> run a
>> >> >> netstat -a at the command prompt. you should see, for a local
>> >> >> address,
>> >> >> server:http in there, some times with dual nics if its open on one
>> >> >> ip
>> >> >> and
>> >> >> not the other it will show the ip instead of the server name. that
>> >> >> might
>> >> >> give us some indication as to whats going on here..
>> >> >>
>> >> >> "Fiona" wrote in message
>> >> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
>> >> >> > Hi Justin,
>> >> >> >
>> >> >> > The website is accessed by the IP Address. When both nics are
>> >> >> > enabled
>> >> >> > http://localhost isn't even available but the second you disable
>> >> >> > the
>> >> >> > second
>> >> >> > nic it is?
>> >> >> >
>> >> >> > I know it doesn't make sense but that is what happens.
>> >> >> >
>> >> >> > Fiona
>> >> >> >
>> >> >> > "Justin Rich" wrote:
>> >> >> >
>> >> >> >> so you installed some AV product that has its own web app hosted
>> >> >> >> on
>> >> >> >> IIS?
>> >> >> >>
>> >> >> >> What your saying doesnt really make much sense. as far as IIS is
>> >> >> >> concerned
>> >> >> >> it shouldnt matter what you do with the network cards.
>> >> >> >>
>> >> >> >> so your saying from a workstation if you go to
>> >> >> >> http://server/webapp
>> >> >> >> (not
>> >> >> >> from the server) with only one card enabled it works fine?
>> >> >> >> but if you enable the second card it tells you the server cant
>> >> >> >> be
>> >> >> >> found?
>> >> >> >>
>> >> >> >> did you try accessing it by IP rather than by server name?
>> >> >> >>
>> >> >> >> please give some more detail as to how you are testing this.
>> >> >> >>
>> >> >> >> Justin
>> >> >> >>
>> >> >> >>
>> >> >> >> "Fiona" wrote in message
>> >> >> >> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
>> >> >> >> >I have a Server with two Intel Pro 1000 Gigabit Ethernet
>> >> >> >> >Adapter's,
>> >> >> >> >one
>> >> >> >> >XT
>> >> >> >> > and one MT and have installed the latest drivers.
>> >> >> >> >
>> >> >> >> > The Server has Windows 2003 SP2 installed.
>> >> >> >> >
>> >> >> >> > I'm using IIS to connect to an SSL page that distributes the
>> >> >> >> > AV
>> >> >> >> > software.
>> >> >> >> >
>> >> >> >> > When both cards are enabled I get the "Page cannot be
>> >> >> >> > displayed
>> >> >> >> > error"
>> >> >> >> > but
>> >> >> >> > as soon as the second card is disabled the site works fine.
>> >> >> >> >
>> >> >> >> > I've deleted and replaced the site certificate, I've looked at
>> >> >> >> > the
>> >> >> >> > IIS
>> >> >> >> > logs
>> >> >> >> > which give the "connections_refused" error. On running WFetch
>> >> >> >> > I
>> >> >> >> > get
>> >> >> >> > "Failed
>> >> >> >> > to negotiate secure connection with localhost".
>> >> >> >> >
>> >> >> >> > I've tried re-installing IIS but it doesn't make any
>> >> >> >> > difference
>> >> >> >> > and
>> >> >> >> > I
>> >> >> >> > can't
>> >> >> >> > find any pointers.
>> >> >> >> >
>> >> >> >> > Has anyone any idea what could be causing this?
>> >> >> >> >
>> >> >> >> > Fiona
>> >> >> >>
>> >> >> >>
>> >> >> >>
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>

Re: Page cannot be displayed

Nothing in those logs after 11:41, I tried telnetting at 14:13.

The httperr log shows:

2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -

Fiona


"Justin Rich" wrote:

> so the interesting part here is that a telnet connected and kicked you
> out... you'll want to look at the IIS logs now to see why it kicked you out.
>
> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
> try the telnet again and then look at the logs. it should give some info as
> to why you are being rejected.
>
> "Fiona" wrote in message
> news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
> > Hi Justin,
> >
> > As suspected the problem has re-occurred.
> >
> > Netstat -a shows:
> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> >
> > Only one nic has a gateway and is accessible from my desktop
> >
> > I can ping one nic from my desktop.
> >
> > The second nic is used for backup and can be pinged from the backup
> > server.
> >
> > The website is set to use only one ip, not all unassigned.
> >
> > When I try telnetting to the ip used for the site it kicks me out as soon
> > as
> > I try to type anything.
> >
> > Pinging via name is successful.
> >
> > Disabling the second nic has enabled the website again! The day before
> > yesterday it wouldn't work without a reboot!
> >
> > I hope you can suggest something as this is extremely frustrating and I
> > can't keep rebooting the server or disabling the nic as it's used for
> > backup.
> >
> > Fiona
> >
> > "Justin Rich" wrote:
> >
> >> thanks for the update, good luck :)
> >>
> >> "Fiona" wrote in message
> >> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
> >> > Hi Justin,
> >> >
> >> > Well this problem seems to have been resolved by installing a patch for
> >> > Officescan 8, even though the site never gave any indication that this
> >> > was
> >> > a
> >> > known fault.
> >> >
> >> > IIS has been working fine with both nics enabled since last night's
> >> > reboot
> >> > whereas before it never labut I'll certainly update you if the problem
> >> > reoccurs.
> >> >
> >> > I always doubted that something was wrong with the networking setup as
> >> > it
> >> > had been working fine for around 2 years before upgrading the AV
> >> > software,
> >> > the other suspect was SP2.
> >> >
> >> > This was a strange one though.
> >> >
> >> > Fiona
> >> >
> >> >
> >> > "Justin Rich" wrote:
> >> >
> >> >> well if you bring up task manager and you can watch IIS grow and grow
> >> >> and
> >> >> never release any memory, then, it could possibly be a leak... but i
> >> >> doubt
> >> >> this would be the results of that. I think i would clean up your
> >> >> connectivity issues before you try to figure out the IIS part. I would
> >> >> try
> >> >> some of the things i had suggested below to get this working.
> >> >>
> >> >> Also, if you have dual nic's make sure only one of them has a gateway.
> >> >> if
> >> >> both have gateways set you run in to a problem.
> >> >>
> >> >> try the tests below and let me know the outcome.
> >> >>
> >> >> from your workstation
> >> >> ping both interfaces via ip
> >> >> ping via name
> >> >>
> >> >> from the server
> >> >> do a netstat -a and look for the http listening port
> >> >>
> >> >> from your workstation
> >> >> try to open the website root via both IP's and also by name
> >> >> use telnet to connect to the webserver (telnet server 80)
> >> >>
> >> >>
> >> >> "Fiona" wrote in message
> >> >> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
> >> >> > Hi Justin,
> >> >> >
> >> >> > Well this is odd. Last night the website just wouldn't work at all
> >> >> > even
> >> >> > though all of the services were started. It didn't matter if one or
> >> >> > two
> >> >> > of
> >> >> > the nics were enabled it just wouldn't work.
> >> >> >
> >> >> > I rebooted the server overnight and now the website is working with
> >> >> > both
> >> >> > nics enabled?
> >> >> >
> >> >> > I'm guessing this must be some kind of memory leakage and that the
> >> >> > enabling
> >> >> > and disabling of the second nic was just a red herring?
> >> >> >
> >> >> > I'm not familiar with memory leakage issues so I'm not sure where to
> >> >> > begin
> >> >> > in tracking that down.
> >> >> >
> >> >> > I am thinking its probably the AV software as the version was
> >> >> > updated
> >> >> > recently but I can see nothing on Trend's site to indicate this.
> >> >> >
> >> >> > Fiona
> >> >> >
> >> >> > "Justin Rich" wrote:
> >> >> >
> >> >> >> are you able to ping both nics ok from another machine?
> >> >> >> did you make any changes to IIS? perhaps once you enable the second
> >> >> >> NIC
> >> >> >> restart IIS?
> >> >> >>
> >> >> >> that is just really odd because technincally when you use localhost
> >> >> >> it
> >> >> >> resolves to 127.0.0.1 which is a special loopback address and
> >> >> >> should
> >> >> >> have
> >> >> >> nothing to do with either nic.
> >> >> >>
> >> >> >> it could possibly be an issue with the NICs conflicting in some way
> >> >> >> because
> >> >> >> thats just not normal at all.
> >> >> >>
> >> >> >> I guess what i would do is enable both NICS, reboot the box, and
> >> >> >> run a
> >> >> >> netstat -a at the command prompt. you should see, for a local
> >> >> >> address,
> >> >> >> server:http in there, some times with dual nics if its open on one
> >> >> >> ip
> >> >> >> and
> >> >> >> not the other it will show the ip instead of the server name. that
> >> >> >> might
> >> >> >> give us some indication as to whats going on here..
> >> >> >>
> >> >> >> "Fiona" wrote in message
> >> >> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
> >> >> >> > Hi Justin,
> >> >> >> >
> >> >> >> > The website is accessed by the IP Address. When both nics are
> >> >> >> > enabled
> >> >> >> > http://localhost isn't even available but the second you disable
> >> >> >> > the
> >> >> >> > second
> >> >> >> > nic it is?
> >> >> >> >
> >> >> >> > I know it doesn't make sense but that is what happens.
> >> >> >> >
> >> >> >> > Fiona
> >> >> >> >
> >> >> >> > "Justin Rich" wrote:
> >> >> >> >
> >> >> >> >> so you installed some AV product that has its own web app hosted
> >> >> >> >> on
> >> >> >> >> IIS?
> >> >> >> >>
> >> >> >> >> What your saying doesnt really make much sense. as far as IIS is
> >> >> >> >> concerned
> >> >> >> >> it shouldnt matter what you do with the network cards.
> >> >> >> >>
> >> >> >> >> so your saying from a workstation if you go to
> >> >> >> >> http://server/webapp
> >> >> >> >> (not
> >> >> >> >> from the server) with only one card enabled it works fine?
> >> >> >> >> but if you enable the second card it tells you the server cant
> >> >> >> >> be
> >> >> >> >> found?
> >> >> >> >>
> >> >> >> >> did you try accessing it by IP rather than by server name?
> >> >> >> >>
> >> >> >> >> please give some more detail as to how you are testing this.
> >> >> >> >>
> >> >> >> >> Justin
> >> >> >> >>
> >> >> >> >>
> >> >> >> >> "Fiona" wrote in message
> >> >> >> >> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
> >> >> >> >> >I have a Server with two Intel Pro 1000 Gigabit Ethernet
> >> >> >> >> >Adapter's,
> >> >> >> >> >one
> >> >> >> >> >XT
> >> >> >> >> > and one MT and have installed the latest drivers.
> >> >> >> >> >
> >> >> >> >> > The Server has Windows 2003 SP2 installed.
> >> >> >> >> >
> >> >> >> >> > I'm using IIS to connect to an SSL page that distributes the
> >> >> >> >> > AV
> >> >> >> >> > software.
> >> >> >> >> >
> >> >> >> >> > When both cards are enabled I get the "Page cannot be
> >> >> >> >> > displayed
> >> >> >> >> > error"
> >> >> >> >> > but
> >> >> >> >> > as soon as the second card is disabled the site works fine.
> >> >> >> >> >
> >> >> >> >> > I've deleted and replaced the site certificate, I've looked at
> >> >> >> >> > the
> >> >> >> >> > IIS
> >> >> >> >> > logs
> >> >> >> >> > which give the "connections_refused" error. On running WFetch
> >> >> >> >> > I
> >> >> >> >> > get
> >> >> >> >> > "Failed
> >> >> >> >> > to negotiate secure connection with localhost".
> >> >> >> >> >
> >> >> >> >> > I've tried re-installing IIS but it doesn't make any
> >> >> >> >> > difference
> >> >> >> >> > and
> >> >> >> >> > I
> >> >> >> >> > can't
> >> >> >> >> > find any pointers.
> >> >> >> >> >
> >> >> >> >> > Has anyone any idea what could be causing this?
> >> >> >> >> >
> >> >> >> >> > Fiona
> >> >> >> >>
> >> >> >> >>
> >> >> >> >>
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

Re: Page cannot be displayed

wow... hmm

thats a new one to me..
David Wang has a blog post about this.
http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Di agnose-IIS6-failing-to-accept-connections-due-to-Connections -Refused.aspx

it looks like its saying its from a shortage of page pool memory which can
be a bear to deal with. his blog post has a bit of a walk through and some
KB's to refer to.

before digging to deep, open up task manager and go to the performance tab.
under kernel memory you will see values for paged and non paged. the one you
care about is the paged pool. if you have anything in the area of 280+MB of
page pool then chances are a shortage of page pool is your issue and your
going to have some work on your hands trying to figure this one out.



"Fiona" wrote in message
news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
> Nothing in those logs after 11:41, I tried telnetting at 14:13.
>
> The httperr log shows:
>
> 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
> 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
> 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
> 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
> 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
> 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
> 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
> 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
> 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
> 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
> 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
> 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
> 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
> 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
> 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
> 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
> 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
> 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
> 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
> 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
> 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
> 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
> 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
>
> Fiona
>
>
> "Justin Rich" wrote:
>
>> so the interesting part here is that a telnet connected and kicked you
>> out... you'll want to look at the IIS logs now to see why it kicked you
>> out.
>>
>> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
>> try the telnet again and then look at the logs. it should give some info
>> as
>> to why you are being rejected.
>>
>> "Fiona" wrote in message
>> news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
>> > Hi Justin,
>> >
>> > As suspected the problem has re-occurred.
>> >
>> > Netstat -a shows:
>> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
>> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
>> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
>> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
>> >
>> > Only one nic has a gateway and is accessible from my desktop
>> >
>> > I can ping one nic from my desktop.
>> >
>> > The second nic is used for backup and can be pinged from the backup
>> > server.
>> >
>> > The website is set to use only one ip, not all unassigned.
>> >
>> > When I try telnetting to the ip used for the site it kicks me out as
>> > soon
>> > as
>> > I try to type anything.
>> >
>> > Pinging via name is successful.
>> >
>> > Disabling the second nic has enabled the website again! The day before
>> > yesterday it wouldn't work without a reboot!
>> >
>> > I hope you can suggest something as this is extremely frustrating and I
>> > can't keep rebooting the server or disabling the nic as it's used for
>> > backup.
>> >
>> > Fiona
>> >
>> > "Justin Rich" wrote:
>> >
>> >> thanks for the update, good luck :)
>> >>
>> >> "Fiona" wrote in message
>> >> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
>> >> > Hi Justin,
>> >> >
>> >> > Well this problem seems to have been resolved by installing a patch
>> >> > for
>> >> > Officescan 8, even though the site never gave any indication that
>> >> > this
>> >> > was
>> >> > a
>> >> > known fault.
>> >> >
>> >> > IIS has been working fine with both nics enabled since last night's
>> >> > reboot
>> >> > whereas before it never labut I'll certainly update you if the
>> >> > problem
>> >> > reoccurs.
>> >> >
>> >> > I always doubted that something was wrong with the networking setup
>> >> > as
>> >> > it
>> >> > had been working fine for around 2 years before upgrading the AV
>> >> > software,
>> >> > the other suspect was SP2.
>> >> >
>> >> > This was a strange one though.
>> >> >
>> >> > Fiona
>> >> >
>> >> >
>> >> > "Justin Rich" wrote:
>> >> >
>> >> >> well if you bring up task manager and you can watch IIS grow and
>> >> >> grow
>> >> >> and
>> >> >> never release any memory, then, it could possibly be a leak... but
>> >> >> i
>> >> >> doubt
>> >> >> this would be the results of that. I think i would clean up your
>> >> >> connectivity issues before you try to figure out the IIS part. I
>> >> >> would
>> >> >> try
>> >> >> some of the things i had suggested below to get this working.
>> >> >>
>> >> >> Also, if you have dual nic's make sure only one of them has a
>> >> >> gateway.
>> >> >> if
>> >> >> both have gateways set you run in to a problem.
>> >> >>
>> >> >> try the tests below and let me know the outcome.
>> >> >>
>> >> >> from your workstation
>> >> >> ping both interfaces via ip
>> >> >> ping via name
>> >> >>
>> >> >> from the server
>> >> >> do a netstat -a and look for the http listening port
>> >> >>
>> >> >> from your workstation
>> >> >> try to open the website root via both IP's and also by name
>> >> >> use telnet to connect to the webserver (telnet server 80)
>> >> >>
>> >> >>
>> >> >> "Fiona" wrote in message
>> >> >> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
>> >> >> > Hi Justin,
>> >> >> >
>> >> >> > Well this is odd. Last night the website just wouldn't work at
>> >> >> > all
>> >> >> > even
>> >> >> > though all of the services were started. It didn't matter if one
>> >> >> > or
>> >> >> > two
>> >> >> > of
>> >> >> > the nics were enabled it just wouldn't work.
>> >> >> >
>> >> >> > I rebooted the server overnight and now the website is working
>> >> >> > with
>> >> >> > both
>> >> >> > nics enabled?
>> >> >> >
>> >> >> > I'm guessing this must be some kind of memory leakage and that
>> >> >> > the
>> >> >> > enabling
>> >> >> > and disabling of the second nic was just a red herring?
>> >> >> >
>> >> >> > I'm not familiar with memory leakage issues so I'm not sure where
>> >> >> > to
>> >> >> > begin
>> >> >> > in tracking that down.
>> >> >> >
>> >> >> > I am thinking its probably the AV software as the version was
>> >> >> > updated
>> >> >> > recently but I can see nothing on Trend's site to indicate this.
>> >> >> >
>> >> >> > Fiona
>> >> >> >
>> >> >> > "Justin Rich" wrote:
>> >> >> >
>> >> >> >> are you able to ping both nics ok from another machine?
>> >> >> >> did you make any changes to IIS? perhaps once you enable the
>> >> >> >> second
>> >> >> >> NIC
>> >> >> >> restart IIS?
>> >> >> >>
>> >> >> >> that is just really odd because technincally when you use
>> >> >> >> localhost
>> >> >> >> it
>> >> >> >> resolves to 127.0.0.1 which is a special loopback address and
>> >> >> >> should
>> >> >> >> have
>> >> >> >> nothing to do with either nic.
>> >> >> >>
>> >> >> >> it could possibly be an issue with the NICs conflicting in some
>> >> >> >> way
>> >> >> >> because
>> >> >> >> thats just not normal at all.
>> >> >> >>
>> >> >> >> I guess what i would do is enable both NICS, reboot the box, and
>> >> >> >> run a
>> >> >> >> netstat -a at the command prompt. you should see, for a local
>> >> >> >> address,
>> >> >> >> server:http in there, some times with dual nics if its open on
>> >> >> >> one
>> >> >> >> ip
>> >> >> >> and
>> >> >> >> not the other it will show the ip instead of the server name.
>> >> >> >> that
>> >> >> >> might
>> >> >> >> give us some indication as to whats going on here..
>> >> >> >>
>> >> >> >> "Fiona" wrote in message
>> >> >> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
>> >> >> >> > Hi Justin,
>> >> >> >> >
>> >> >> >> > The website is accessed by the IP Address. When both nics are
>> >> >> >> > enabled
>> >> >> >> > http://localhost isn't even available but the second you
>> >> >> >> > disable
>> >> >> >> > the
>> >> >> >> > second
>> >> >> >> > nic it is?
>> >> >> >> >
>> >> >> >> > I know it doesn't make sense but that is what happens.
>> >> >> >> >
>> >> >> >> > Fiona
>> >> >> >> >
>> >> >> >> > "Justin Rich" wrote:
>> >> >> >> >
>> >> >> >> >> so you installed some AV product that has its own web app
>> >> >> >> >> hosted
>> >> >> >> >> on
>> >> >> >> >> IIS?
>> >> >> >> >>
>> >> >> >> >> What your saying doesnt really make much sense. as far as IIS
>> >> >> >> >> is
>> >> >> >> >> concerned
>> >> >> >> >> it shouldnt matter what you do with the network cards.
>> >> >> >> >>
>> >> >> >> >> so your saying from a workstation if you go to
>> >> >> >> >> http://server/webapp
>> >> >> >> >> (not
>> >> >> >> >> from the server) with only one card enabled it works fine?
>> >> >> >> >> but if you enable the second card it tells you the server
>> >> >> >> >> cant
>> >> >> >> >> be
>> >> >> >> >> found?
>> >> >> >> >>
>> >> >> >> >> did you try accessing it by IP rather than by server name?
>> >> >> >> >>
>> >> >> >> >> please give some more detail as to how you are testing this.
>> >> >> >> >>
>> >> >> >> >> Justin
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >> >> "Fiona" wrote in message
>> >> >> >> >> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
>> >> >> >> >> >I have a Server with two Intel Pro 1000 Gigabit Ethernet
>> >> >> >> >> >Adapter's,
>> >> >> >> >> >one
>> >> >> >> >> >XT
>> >> >> >> >> > and one MT and have installed the latest drivers.
>> >> >> >> >> >
>> >> >> >> >> > The Server has Windows 2003 SP2 installed.
>> >> >> >> >> >
>> >> >> >> >> > I'm using IIS to connect to an SSL page that distributes
>> >> >> >> >> > the
>> >> >> >> >> > AV
>> >> >> >> >> > software.
>> >> >> >> >> >
>> >> >> >> >> > When both cards are enabled I get the "Page cannot be
>> >> >> >> >> > displayed
>> >> >> >> >> > error"
>> >> >> >> >> > but
>> >> >> >> >> > as soon as the second card is disabled the site works fine.
>> >> >> >> >> >
>> >> >> >> >> > I've deleted and replaced the site certificate, I've looked
>> >> >> >> >> > at
>> >> >> >> >> > the
>> >> >> >> >> > IIS
>> >> >> >> >> > logs
>> >> >> >> >> > which give the "connections_refused" error. On running
>> >> >> >> >> > WFetch
>> >> >> >> >> > I
>> >> >> >> >> > get
>> >> >> >> >> > "Failed
>> >> >> >> >> > to negotiate secure connection with localhost".
>> >> >> >> >> >
>> >> >> >> >> > I've tried re-installing IIS but it doesn't make any
>> >> >> >> >> > difference
>> >> >> >> >> > and
>> >> >> >> >> > I
>> >> >> >> >> > can't
>> >> >> >> >> > find any pointers.
>> >> >> >> >> >
>> >> >> >> >> > Has anyone any idea what could be causing this?
>> >> >> >> >> >
>> >> >> >> >> > Fiona
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >>
>> >> >> >>
>> >> >> >>
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>

Re: Page cannot be displayed

This is starting to get out of my comfort zone.

The paged is 133820
Non paged is 109916

I haven't managed to find anything else about one nic being enabled or
disabled affecting IIS though.

Fiona

"Justin Rich" wrote:

> wow... hmm
>
> thats a new one to me..
> David Wang has a blog post about this.
> http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Di agnose-IIS6-failing-to-accept-connections-due-to-Connections -Refused.aspx
>
> it looks like its saying its from a shortage of page pool memory which can
> be a bear to deal with. his blog post has a bit of a walk through and some
> KB's to refer to.
>
> before digging to deep, open up task manager and go to the performance tab.
> under kernel memory you will see values for paged and non paged. the one you
> care about is the paged pool. if you have anything in the area of 280+MB of
> page pool then chances are a shortage of page pool is your issue and your
> going to have some work on your hands trying to figure this one out.
>
>
>
> "Fiona" wrote in message
> news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
> >
> > The httperr log shows:
> >
> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
> >
> > Fiona
> >
> >
> > "Justin Rich" wrote:
> >
> >> so the interesting part here is that a telnet connected and kicked you
> >> out... you'll want to look at the IIS logs now to see why it kicked you
> >> out.
> >>
> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
> >> try the telnet again and then look at the logs. it should give some info
> >> as
> >> to why you are being rejected.
> >>
> >> "Fiona" wrote in message
> >> news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
> >> > Hi Justin,
> >> >
> >> > As suspected the problem has re-occurred.
> >> >
> >> > Netstat -a shows:
> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> >> >
> >> > Only one nic has a gateway and is accessible from my desktop
> >> >
> >> > I can ping one nic from my desktop.
> >> >
> >> > The second nic is used for backup and can be pinged from the backup
> >> > server.
> >> >
> >> > The website is set to use only one ip, not all unassigned.
> >> >
> >> > When I try telnetting to the ip used for the site it kicks me out as
> >> > soon
> >> > as
> >> > I try to type anything.
> >> >
> >> > Pinging via name is successful.
> >> >
> >> > Disabling the second nic has enabled the website again! The day before
> >> > yesterday it wouldn't work without a reboot!
> >> >
> >> > I hope you can suggest something as this is extremely frustrating and I
> >> > can't keep rebooting the server or disabling the nic as it's used for
> >> > backup.
> >> >
> >> > Fiona
> >> >
> >> > "Justin Rich" wrote:
> >> >
> >> >> thanks for the update, good luck :)
> >> >>
> >> >> "Fiona" wrote in message
> >> >> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
> >> >> > Hi Justin,
> >> >> >
> >> >> > Well this problem seems to have been resolved by installing a patch
> >> >> > for
> >> >> > Officescan 8, even though the site never gave any indication that
> >> >> > this
> >> >> > was
> >> >> > a
> >> >> > known fault.
> >> >> >
> >> >> > IIS has been working fine with both nics enabled since last night's
> >> >> > reboot
> >> >> > whereas before it never labut I'll certainly update you if the
> >> >> > problem
> >> >> > reoccurs.
> >> >> >
> >> >> > I always doubted that something was wrong with the networking setup
> >> >> > as
> >> >> > it
> >> >> > had been working fine for around 2 years before upgrading the AV
> >> >> > software,
> >> >> > the other suspect was SP2.
> >> >> >
> >> >> > This was a strange one though.
> >> >> >
> >> >> > Fiona
> >> >> >
> >> >> >
> >> >> > "Justin Rich" wrote:
> >> >> >
> >> >> >> well if you bring up task manager and you can watch IIS grow and
> >> >> >> grow
> >> >> >> and
> >> >> >> never release any memory, then, it could possibly be a leak... but
> >> >> >> i
> >> >> >> doubt
> >> >> >> this would be the results of that. I think i would clean up your
> >> >> >> connectivity issues before you try to figure out the IIS part. I
> >> >> >> would
> >> >> >> try
> >> >> >> some of the things i had suggested below to get this working.
> >> >> >>
> >> >> >> Also, if you have dual nic's make sure only one of them has a
> >> >> >> gateway.
> >> >> >> if
> >> >> >> both have gateways set you run in to a problem.
> >> >> >>
> >> >> >> try the tests below and let me know the outcome.
> >> >> >>
> >> >> >> from your workstation
> >> >> >> ping both interfaces via ip
> >> >> >> ping via name
> >> >> >>
> >> >> >> from the server
> >> >> >> do a netstat -a and look for the http listening port
> >> >> >>
> >> >> >> from your workstation
> >> >> >> try to open the website root via both IP's and also by name
> >> >> >> use telnet to connect to the webserver (telnet server 80)
> >> >> >>
> >> >> >>
> >> >> >> "Fiona" wrote in message
> >> >> >> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
> >> >> >> > Hi Justin,
> >> >> >> >
> >> >> >> > Well this is odd. Last night the website just wouldn't work at
> >> >> >> > all
> >> >> >> > even
> >> >> >> > though all of the services were started. It didn't matter if one
> >> >> >> > or
> >> >> >> > two
> >> >> >> > of
> >> >> >> > the nics were enabled it just wouldn't work.
> >> >> >> >
> >> >> >> > I rebooted the server overnight and now the website is working
> >> >> >> > with
> >> >> >> > both
> >> >> >> > nics enabled?
> >> >> >> >
> >> >> >> > I'm guessing this must be some kind of memory leakage and that
> >> >> >> > the
> >> >> >> > enabling
> >> >> >> > and disabling of the second nic was just a red herring?
> >> >> >> >
> >> >> >> > I'm not familiar with memory leakage issues so I'm not sure where
> >> >> >> > to
> >> >> >> > begin
> >> >> >> > in tracking that down.
> >> >> >> >
> >> >> >> > I am thinking its probably the AV software as the version was
> >> >> >> > updated
> >> >> >> > recently but I can see nothing on Trend's site to indicate this.
> >> >> >> >
> >> >> >> > Fiona
> >> >> >> >
> >> >> >> > "Justin Rich" wrote:
> >> >> >> >
> >> >> >> >> are you able to ping both nics ok from another machine?
> >> >> >> >> did you make any changes to IIS? perhaps once you enable the
> >> >> >> >> second
> >> >> >> >> NIC
> >> >> >> >> restart IIS?
> >> >> >> >>
> >> >> >> >> that is just really odd because technincally when you use
> >> >> >> >> localhost
> >> >> >> >> it
> >> >> >> >> resolves to 127.0.0.1 which is a special loopback address and
> >> >> >> >> should
> >> >> >> >> have
> >> >> >> >> nothing to do with either nic.
> >> >> >> >>
> >> >> >> >> it could possibly be an issue with the NICs conflicting in some
> >> >> >> >> way
> >> >> >> >> because
> >> >> >> >> thats just not normal at all.
> >> >> >> >>
> >> >> >> >> I guess what i would do is enable both NICS, reboot the box, and
> >> >> >> >> run a
> >> >> >> >> netstat -a at the command prompt. you should see, for a local
> >> >> >> >> address,
> >> >> >> >> server:http in there, some times with dual nics if its open on
> >> >> >> >> one
> >> >> >> >> ip
> >> >> >> >> and
> >> >> >> >> not the other it will show the ip instead of the server name.
> >> >> >> >> that
> >> >> >> >> might
> >> >> >> >> give us some indication as to whats going on here..
> >> >> >> >>
> >> >> >> >> "Fiona" wrote in message
> >> >> >> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
> >> >> >> >> > Hi Justin,
> >> >> >> >> >
> >> >> >> >> > The website is accessed by the IP Address. When both nics are
> >> >> >> >> > enabled
> >> >> >> >> > http://localhost isn't even available but the second you
> >> >> >> >> > disable
> >> >> >> >> > the
> >> >> >> >> > second
> >> >> >> >> > nic it is?
> >> >> >> >> >
> >> >> >> >> > I know it doesn't make sense but that is what happens.
> >> >> >> >> >
> >> >> >> >> > Fiona
> >> >> >> >> >
> >> >> >> >> > "Justin Rich" wrote:
> >> >> >> >> >
> >> >> >> >> >> so you installed some AV product that has its own web app
> >> >> >> >> >> hosted
> >> >> >> >> >> on
> >> >> >> >> >> IIS?
> >> >> >> >> >>
> >> >> >> >> >> What your saying doesnt really make much sense. as far as IIS
> >> >> >> >> >> is
> >> >> >> >> >> concerned
> >> >> >> >> >> it shouldnt matter what you do with the network cards.
> >> >> >> >> >>
> >> >> >> >> >> so your saying from a workstation if you go to
> >> >> >> >> >> http://server/webapp
> >> >> >> >> >> (not
> >> >> >> >> >> from the server) with only one card enabled it works fine?
> >> >> >> >> >> but if you enable the second card it tells you the server
> >> >> >> >> >> cant
> >> >> >> >> >> be
> >> >> >> >> >> found?
> >> >> >> >> >>
> >> >> >> >> >> did you try accessing it by IP rather than by server name?
> >> >> >> >> >>
> >> >> >> >> >> please give some more detail as to how you are testing this.
> >> >> >> >> >>
> >> >> >> >> >> Justin
> >> >> >> >> >>
> >> >> >> >> >>
> >> >> >> >> >> "Fiona" wrote in message
> >> >> >> >> >> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
> >> >> >> >> >> >I have a Server with two Intel Pro 1000 Gigabit Ethernet
> >> >> >> >> >> >Adapter's,
> >> >> >> >> >> >one
> >> >> >> >> >> >XT
> >> >> >> >> >> > and one MT and have installed the latest drivers.
> >> >> >> >> >> >
> >> >> >> >> >> > The Server has Windows 2003 SP2 installed.
> >> >> >> >> >> >
> >> >> >> >> >> > I'm using IIS to connect to an SSL page that distributes
> >> >> >> >> >> > the
> >> >> >> >> >> > AV
> >> >> >> >> >> > software.
> >> >> >> >> >> >
> >> >> >> >> >> > When both cards are enabled I get the "Page cannot be
> >> >> >> >> >> > displayed
> >> >> >> >> >> > error"
> >> >> >> >> >> > but
> >> >> >> >> >> > as soon as the second card is disabled the site works fine.
> >> >> >> >> >> >
> >> >> >> >> >> > I've deleted and replaced the site certificate, I've looked

Re: Page cannot be displayed

nevermind comfort zone, this is getting out of my support realm!

i would say, since the page pool is so low, its not an issue here.

i would imagine, that since David suggested that its normally page pool that
causes this issue that its some type of resource shortage.

your next step would be to run iisdiag stuff. which ive done rarely and i
may not be the best person to ask.

off hand i cant give you directions but if you can figure out and run a
iisdiag i can probably analyze the file for you to see if i can spot
anything.

Justin


"Fiona" wrote in message
news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
> This is starting to get out of my comfort zone.
>
> The paged is 133820
> Non paged is 109916
>
> I haven't managed to find anything else about one nic being enabled or
> disabled affecting IIS though.
>
> Fiona
>
> "Justin Rich" wrote:
>
>> wow... hmm
>>
>> thats a new one to me..
>> David Wang has a blog post about this.
>> http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Di agnose-IIS6-failing-to-accept-connections-due-to-Connections -Refused.aspx
>>
>> it looks like its saying its from a shortage of page pool memory which
>> can
>> be a bear to deal with. his blog post has a bit of a walk through and
>> some
>> KB's to refer to.
>>
>> before digging to deep, open up task manager and go to the performance
>> tab.
>> under kernel memory you will see values for paged and non paged. the one
>> you
>> care about is the paged pool. if you have anything in the area of 280+MB
>> of
>> page pool then chances are a shortage of page pool is your issue and your
>> going to have some work on your hands trying to figure this one out.
>>
>>
>>
>> "Fiona" wrote in message
>> news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
>> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
>> >
>> > The httperr log shows:
>> >
>> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
>> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
>> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
>> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
>> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
>> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
>> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
>> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
>> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
>> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
>> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
>> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
>> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
>> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
>> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
>> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
>> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
>> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
>> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
>> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
>> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
>> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
>> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
>> >
>> > Fiona
>> >
>> >
>> > "Justin Rich" wrote:
>> >
>> >> so the interesting part here is that a telnet connected and kicked you
>> >> out... you'll want to look at the IIS logs now to see why it kicked
>> >> you
>> >> out.
>> >>
>> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
>> >> try the telnet again and then look at the logs. it should give some
>> >> info
>> >> as
>> >> to why you are being rejected.
>> >>
>> >> "Fiona" wrote in message
>> >> news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
>> >> > Hi Justin,
>> >> >
>> >> > As suspected the problem has re-occurred.
>> >> >
>> >> > Netstat -a shows:
>> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
>> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
>> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
>> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> > LISTENING
>> >> >
>> >> > Only one nic has a gateway and is accessible from my desktop
>> >> >
>> >> > I can ping one nic from my desktop.
>> >> >
>> >> > The second nic is used for backup and can be pinged from the backup
>> >> > server.
>> >> >
>> >> > The website is set to use only one ip, not all unassigned.
>> >> >
>> >> > When I try telnetting to the ip used for the site it kicks me out as
>> >> > soon
>> >> > as
>> >> > I try to type anything.
>> >> >
>> >> > Pinging via name is successful.
>> >> >
>> >> > Disabling the second nic has enabled the website again! The day
>> >> > before
>> >> > yesterday it wouldn't work without a reboot!
>> >> >
>> >> > I hope you can suggest something as this is extremely frustrating
>> >> > and I
>> >> > can't keep rebooting the server or disabling the nic as it's used
>> >> > for
>> >> > backup.
>> >> >
>> >> > Fiona
>> >> >
>> >> > "Justin Rich" wrote:
>> >> >
>> >> >> thanks for the update, good luck :)
>> >> >>
>> >> >> "Fiona" wrote in message
>> >> >> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
>> >> >> > Hi Justin,
>> >> >> >
>> >> >> > Well this problem seems to have been resolved by installing a
>> >> >> > patch
>> >> >> > for
>> >> >> > Officescan 8, even though the site never gave any indication that
>> >> >> > this
>> >> >> > was
>> >> >> > a
>> >> >> > known fault.
>> >> >> >
>> >> >> > IIS has been working fine with both nics enabled since last
>> >> >> > night's
>> >> >> > reboot
>> >> >> > whereas before it never labut I'll certainly update you if the
>> >> >> > problem
>> >> >> > reoccurs.
>> >> >> >
>> >> >> > I always doubted that something was wrong with the networking
>> >> >> > setup
>> >> >> > as
>> >> >> > it
>> >> >> > had been working fine for around 2 years before upgrading the AV
>> >> >> > software,
>> >> >> > the other suspect was SP2.
>> >> >> >
>> >> >> > This was a strange one though.
>> >> >> >
>> >> >> > Fiona
>> >> >> >
>> >> >> >
>> >> >> > "Justin Rich" wrote:
>> >> >> >
>> >> >> >> well if you bring up task manager and you can watch IIS grow and
>> >> >> >> grow
>> >> >> >> and
>> >> >> >> never release any memory, then, it could possibly be a leak...
>> >> >> >> but
>> >> >> >> i
>> >> >> >> doubt
>> >> >> >> this would be the results of that. I think i would clean up your
>> >> >> >> connectivity issues before you try to figure out the IIS part. I
>> >> >> >> would
>> >> >> >> try
>> >> >> >> some of the things i had suggested below to get this working.
>> >> >> >>
>> >> >> >> Also, if you have dual nic's make sure only one of them has a
>> >> >> >> gateway.
>> >> >> >> if
>> >> >> >> both have gateways set you run in to a problem.
>> >> >> >>
>> >> >> >> try the tests below and let me know the outcome.
>> >> >> >>
>> >> >> >> from your workstation
>> >> >> >> ping both interfaces via ip
>> >> >> >> ping via name
>> >> >> >>
>> >> >> >> from the server
>> >> >> >> do a netstat -a and look for the http listening port
>> >> >> >>
>> >> >> >> from your workstation
>> >> >> >> try to open the website root via both IP's and also by name
>> >> >> >> use telnet to connect to the webserver (telnet server 80)
>> >> >> >>
>> >> >> >>
>> >> >> >> "Fiona" wrote in message
>> >> >> >> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
>> >> >> >> > Hi Justin,
>> >> >> >> >
>> >> >> >> > Well this is odd. Last night the website just wouldn't work
>> >> >> >> > at
>> >> >> >> > all
>> >> >> >> > even
>> >> >> >> > though all of the services were started. It didn't matter if
>> >> >> >> > one
>> >> >> >> > or
>> >> >> >> > two
>> >> >> >> > of
>> >> >> >> > the nics were enabled it just wouldn't work.
>> >> >> >> >
>> >> >> >> > I rebooted the server overnight and now the website is working
>> >> >> >> > with
>> >> >> >> > both
>> >> >> >> > nics enabled?
>> >> >> >> >
>> >> >> >> > I'm guessing this must be some kind of memory leakage and that
>> >> >> >> > the
>> >> >> >> > enabling
>> >> >> >> > and disabling of the second nic was just a red herring?
>> >> >> >> >
>> >> >> >> > I'm not familiar with memory leakage issues so I'm not sure
>> >> >> >> > where
>> >> >> >> > to
>> >> >> >> > begin
>> >> >> >> > in tracking that down.
>> >> >> >> >
>> >> >> >> > I am thinking its probably the AV software as the version was
>> >> >> >> > updated
>> >> >> >> > recently but I can see nothing on Trend's site to indicate
>> >> >> >> > this.
>> >> >> >> >
>> >> >> >> > Fiona
>> >> >> >> >
>> >> >> >> > "Justin Rich" wrote:
>> >> >> >> >
>> >> >> >> >> are you able to ping both nics ok from another machine?
>> >> >> >> >> did you make any changes to IIS? perhaps once you enable the
>> >> >> >> >> second
>> >> >> >> >> NIC
>> >> >> >> >> restart IIS?
>> >> >> >> >>
>> >> >> >> >> that is just really odd because technincally when you use
>> >> >> >> >> localhost
>> >> >> >> >> it
>> >> >> >> >> resolves to 127.0.0.1 which is a special loopback address and
>> >> >> >> >> should
>> >> >> >> >> have
>> >> >> >> >> nothing to do with either nic.
>> >> >> >> >>
>> >> >> >> >> it could possibly be an issue with the NICs conflicting in
>> >> >> >> >> some
>> >> >> >> >> way
>> >> >> >> >> because
>> >> >> >> >> thats just not normal at all.
>> >> >> >> >>
>> >> >> >> >> I guess what i would do is enable both NICS, reboot the box,
>> >> >> >> >> and
>> >> >> >> >> run a
>> >> >> >> >> netstat -a at the command prompt. you should see, for a local
>> >> >> >> >> address,
>> >> >> >> >> server:http in there, some times with dual nics if its open
>> >> >> >> >> on
>> >> >> >> >> one
>> >> >> >> >> ip
>> >> >> >> >> and
>> >> >> >> >> not the other it will show the ip instead of the server name.
>> >> >> >> >> that
>> >> >> >> >> might
>> >> >> >> >> give us some indication as to whats going on here..
>> >> >> >> >>
>> >> >> >> >> "Fiona" wrote in message
>> >> >> >> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
>> >> >> >> >> > Hi Justin,
>> >> >> >> >> >
>> >> >> >> >> > The website is accessed by the IP Address. When both nics
>> >> >> >> >> > are
>> >> >> >> >> > enabled
>> >> >> >> >> > http://localhost isn't even available but the second you
>> >> >> >> >> > disable
>> >> >> >> >> > the
>> >> >> >> >> > second
>> >> >> >> >> > nic it is?
>> >> >> >> >> >
>> >> >> >> >> > I know it doesn't make sense but that is what happens.
>> >> >> >> >> >
>> >> >> >> >> > Fiona
>> >> >> >> >> >
>> >> >> >> >> > "Justin Rich" wrote:
>> >> >> >> >> >
>> >> >> >> >> >> so you installed some AV product that has its own web app
>> >> >> >> >> >> hosted
>> >> >> >> >> >> on
>> >> >> >> >> >> IIS?
>> >> >> >> >> >>
>> >> >> >> >> >> What your saying doesnt really make much sense. as far as
>> >> >> >> >> >> IIS
>> >> >> >> >> >> is
>> >> >> >> >> >> concerned
>> >> >> >> >> >> it shouldnt matter what you do with the network cards.
>> >> >> >> >> >>
>> >> >> >> >> >> so your saying from a workstation if you go to
>> >> >> >> >> >> http://server/webapp
>> >> >> >> >> >> (not
>> >> >> >> >> >> from the server) with only one card enabled it works fine?
>> >> >> >> >> >> but if you enable the second card it tells you the server
>> >> >> >> >> >> cant
>> >> >> >> >> >> be
>> >> >> >> >> >> found?
>> >> >> >> >> >>
>> >> >> >> >> >> did you try accessing it by IP rather than by server name?
>> >> >> >> >> >>
>> >> >> >> >> >> please give some more detail as to how you are testing
>> >> >> >> >> >> this.
>> >> >> >> >> >>
>> >> >> >> >> >> Justin
>> >> >> >> >> >>
>> >> >> >> >> >>
>> >> >> >> >> >> "Fiona" wrote in message
>> >> >> >> >> >> news:075531E9-82CE-479F-BE1B-2EB05B7356D2@microsoft.com...
>> >> >> >> >> >> >I have a Server with two Intel Pro 1000 Gigabit Ethernet
>> >> >> >> >> >> >Adapter's,
>> >> >> >> >> >> >one
>> >> >> >> >> >> >XT
>> >> >> >> >> >> > and one MT and have installed the latest drivers.
>> >> >> >> >> >> >
>> >> >> >> >> >> > The Server has Windows 2003 SP2 installed.
>> >> >> >> >> >> >
>> >> >> >> >> >> > I'm using IIS to connect to an SSL page that distributes
>> >> >> >> >> >> > the
>> >> >> >> >> >> > AV
>> >> >> >> >> >> > software.
>> >> >> >> >> >> >
>> >> >> >> >> >> > When both cards are enabled I get the "Page cannot be
>> >> >> >> >> >> > displayed
>> >> >> >> >> >> > error"
>> >> >> >> >> >> > but
>> >> >> >> >> >> > as soon as the second card is disabled the site works
>> >> >> >> >> >> > fine.
>> >> >> >> >> >> >
>> >> >> >> >> >> > I've deleted and replaced the site certificate, I've
>> >> >> >> >> >> > looked

Re: Page cannot be displayed

Hi Justin,

I'm not sure which ones to run but the website is still not working unless I
disable the second nic.

WFetch gives:

Failed to negotiate secure connection with localhost - port 443

While SSL Diagnostics gives:

System time: Mon, 05 Nov 2007 11:58:03 GMT
ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe version:
1.1:34.0
CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
ProcessorArchitecture: x86
OS: Windows 2003 Service Pack 2
IIS6 - World Wide Web Publishing (W3SVC) service is installed

[ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
ImagePath = C:\WINDOWS\system32\lsass.exe
Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
EnableKernelSsl = False(default)
strmfilt.dll loaded into process 524 (lsass.exe)

[ SChannel Info ]
ServerCacheEntries = 0
ServerActiveEntries = 0
ServerHandshakes = 16
ServerReconnects = 360
CacheSize = 10000

[ W3SVC/1 ]
ServerComment = Default Web Site
ServerAutoStart = True
ServerState = Server started
#Impersonated server account
SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d 98 15 c8
SSLStoreName = MY
#CertName = mh30-hq-it
#You have a private key that corresponds to this certificate
#ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e9 56-4566-af96-71396eb73226'
#ProvName='Microsoft RSA SChannel Cryptographic Provider'
ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
#Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT, CN=mh30-hq-it
#Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
#Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
CertVerifyCertificateChainPolicy succeeded
SecureBindings = 10.180.2.30:443:

[ W3SVC/1/ROOT/_private ]
AccessSSLFlags = 0 (0x0)

[ W3SVC/1/ROOT/_vti_cnf ]
AccessSSLFlags = 0 (0x0)

[ W3SVC/1/ROOT/_vti_log ]
AccessSSLFlags = 0 (0x0)

[ W3SVC/1/ROOT/_vti_pvt ]
AccessSSLFlags = 0 (0x0)

[ W3SVC/1/ROOT/_vti_script ]
AccessSSLFlags = 0 (0x0)

Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT


"Justin Rich" wrote:

> nevermind comfort zone, this is getting out of my support realm!
>
> i would say, since the page pool is so low, its not an issue here.
>
> i would imagine, that since David suggested that its normally page pool that
> causes this issue that its some type of resource shortage.
>
> your next step would be to run iisdiag stuff. which ive done rarely and i
> may not be the best person to ask.
>
> off hand i cant give you directions but if you can figure out and run a
> iisdiag i can probably analyze the file for you to see if i can spot
> anything.
>
> Justin
>
>
> "Fiona" wrote in message
> news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
> > This is starting to get out of my comfort zone.
> >
> > The paged is 133820
> > Non paged is 109916
> >
> > I haven't managed to find anything else about one nic being enabled or
> > disabled affecting IIS though.
> >
> > Fiona
> >
> > "Justin Rich" wrote:
> >
> >> wow... hmm
> >>
> >> thats a new one to me..
> >> David Wang has a blog post about this.
> >> http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Di agnose-IIS6-failing-to-accept-connections-due-to-Connections -Refused.aspx
> >>
> >> it looks like its saying its from a shortage of page pool memory which
> >> can
> >> be a bear to deal with. his blog post has a bit of a walk through and
> >> some
> >> KB's to refer to.
> >>
> >> before digging to deep, open up task manager and go to the performance
> >> tab.
> >> under kernel memory you will see values for paged and non paged. the one
> >> you
> >> care about is the paged pool. if you have anything in the area of 280+MB
> >> of
> >> page pool then chances are a shortage of page pool is your issue and your
> >> going to have some work on your hands trying to figure this one out.
> >>
> >>
> >>
> >> "Fiona" wrote in message
> >> news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
> >> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
> >> >
> >> > The httperr log shows:
> >> >
> >> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
> >> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
> >> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
> >> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
> >> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
> >> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
> >> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
> >> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
> >> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
> >> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
> >> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
> >> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
> >> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
> >> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
> >> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
> >> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
> >> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
> >> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
> >> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
> >> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
> >> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
> >> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
> >> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
> >> >
> >> > Fiona
> >> >
> >> >
> >> > "Justin Rich" wrote:
> >> >
> >> >> so the interesting part here is that a telnet connected and kicked you
> >> >> out... you'll want to look at the IIS logs now to see why it kicked
> >> >> you
> >> >> out.
> >> >>
> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
> >> >> try the telnet again and then look at the logs. it should give some
> >> >> info
> >> >> as
> >> >> to why you are being rejected.
> >> >>
> >> >> "Fiona" wrote in message
> >> >> news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
> >> >> > Hi Justin,
> >> >> >
> >> >> > As suspected the problem has re-occurred.
> >> >> >
> >> >> > Netstat -a shows:
> >> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> >> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> >> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0 LISTENING
> >> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> > LISTENING
> >> >> >
> >> >> > Only one nic has a gateway and is accessible from my desktop
> >> >> >
> >> >> > I can ping one nic from my desktop.
> >> >> >
> >> >> > The second nic is used for backup and can be pinged from the backup
> >> >> > server.
> >> >> >
> >> >> > The website is set to use only one ip, not all unassigned.
> >> >> >
> >> >> > When I try telnetting to the ip used for the site it kicks me out as
> >> >> > soon
> >> >> > as
> >> >> > I try to type anything.
> >> >> >
> >> >> > Pinging via name is successful.
> >> >> >
> >> >> > Disabling the second nic has enabled the website again! The day
> >> >> > before
> >> >> > yesterday it wouldn't work without a reboot!
> >> >> >
> >> >> > I hope you can suggest something as this is extremely frustrating
> >> >> > and I
> >> >> > can't keep rebooting the server or disabling the nic as it's used
> >> >> > for
> >> >> > backup.
> >> >> >
> >> >> > Fiona
> >> >> >
> >> >> > "Justin Rich" wrote:
> >> >> >
> >> >> >> thanks for the update, good luck :)
> >> >> >>
> >> >> >> "Fiona" wrote in message
> >> >> >> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
> >> >> >> > Hi Justin,
> >> >> >> >
> >> >> >> > Well this problem seems to have been resolved by installing a
> >> >> >> > patch
> >> >> >> > for
> >> >> >> > Officescan 8, even though the site never gave any indication that
> >> >> >> > this
> >> >> >> > was
> >> >> >> > a
> >> >> >> > known fault.
> >> >> >> >
> >> >> >> > IIS has been working fine with both nics enabled since last
> >> >> >> > night's
> >> >> >> > reboot
> >> >> >> > whereas before it never labut I'll certainly update you if the
> >> >> >> > problem
> >> >> >> > reoccurs.
> >> >> >> >
> >> >> >> > I always doubted that something was wrong with the networking
> >> >> >> > setup
> >> >> >> > as
> >> >> >> > it
> >> >> >> > had been working fine for around 2 years before upgrading the AV
> >> >> >> > software,
> >> >> >> > the other suspect was SP2.
> >> >> >> >
> >> >> >> > This was a strange one though.
> >> >> >> >
> >> >> >> > Fiona
> >> >> >> >
> >> >> >> >
> >> >> >> > "Justin Rich" wrote:
> >> >> >> >
> >> >> >> >> well if you bring up task manager and you can watch IIS grow and
> >> >> >> >> grow
> >> >> >> >> and
> >> >> >> >> never release any memory, then, it could possibly be a leak...
> >> >> >> >> but
> >> >> >> >> i
> >> >> >> >> doubt
> >> >> >> >> this would be the results of that. I think i would clean up your
> >> >> >> >> connectivity issues before you try to figure out the IIS part. I
> >> >> >> >> would
> >> >> >> >> try
> >> >> >> >> some of the things i had suggested below to get this working.
> >> >> >> >>
> >> >> >> >> Also, if you have dual nic's make sure only one of them has a
> >> >> >> >> gateway.
> >> >> >> >> if
> >> >> >> >> both have gateways set you run in to a problem.
> >> >> >> >>
> >> >> >> >> try the tests below and let me know the outcome.
> >> >> >> >>
> >> >> >> >> from your workstation
> >> >> >> >> ping both interfaces via ip
> >> >> >> >> ping via name
> >> >> >> >>
> >> >> >> >> from the server
> >> >> >> >> do a netstat -a and look for the http listening port
> >> >> >> >>
> >> >> >> >> from your workstation
> >> >> >> >> try to open the website root via both IP's and also by name
> >> >> >> >> use telnet to connect to the webserver (telnet server 80)
> >> >> >> >>
> >> >> >> >>
> >> >> >> >> "Fiona" wrote in message
> >> >> >> >> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
> >> >> >> >> > Hi Justin,
> >> >> >> >> >
> >> >> >> >> > Well this is odd. Last night the website just wouldn't work
> >> >> >> >> > at
> >> >> >> >> > all
> >> >> >> >> > even
> >> >> >> >> > though all of the services were started. It didn't matter if
> >> >> >> >> > one
> >> >> >> >> > or
> >> >> >> >> > two
> >> >> >> >> > of
> >> >> >> >> > the nics were enabled it just wouldn't work.
> >> >> >> >> >
> >> >> >> >> > I rebooted the server overnight and now the website is working
> >> >> >> >> > with
> >> >> >> >> > both
> >> >> >> >> > nics enabled?
> >> >> >> >> >
> >> >> >> >> > I'm guessing this must be some kind of memory leakage and that
> >> >> >> >> > the
> >> >> >> >> > enabling
> >> >> >> >> > and disabling of the second nic was just a red herring?
> >> >> >> >> >
> >> >> >> >> > I'm not familiar with memory leakage issues so I'm not sure
> >> >> >> >> > where
> >> >> >> >> > to
> >> >> >> >> > begin
> >> >> >> >> > in tracking that down.
> >> >> >> >> >
> >> >> >> >> > I am thinking its probably the AV software as the version was
> >> >> >> >> > updated
> >> >> >> >> > recently but I can see nothing on Trend's site to indicate
> >> >> >> >> > this.
> >> >> >> >> >
> >> >> >> >> > Fiona
> >> >> >> >> >
> >> >> >> >> > "Justin Rich" wrote:
> >> >> >> >> >
> >> >> >> >> >> are you able to ping both nics ok from another machine?
> >> >> >> >> >> did you make any changes to IIS? perhaps once you enable the
> >> >> >> >> >> second
> >> >> >> >> >> NIC
> >> >> >> >> >> restart IIS?
> >> >> >> >> >>
> >> >> >> >> >> that is just really odd because technincally when you use
> >> >> >> >> >> localhost
> >> >> >> >> >> it
> >> >> >> >> >> resolves to 127.0.0.1 which is a special loopback address and
> >> >> >> >> >> should
> >> >> >> >> >> have
> >> >> >> >> >> nothing to do with either nic.
> >> >> >> >> >>
> >> >> >> >> >> it could possibly be an issue with the NICs conflicting in
> >> >> >> >> >> some
> >> >> >> >> >> way
> >> >> >> >> >> because
> >> >> >> >> >> thats just not normal at all.
> >> >> >> >> >>
> >> >> >> >> >> I guess what i would do is enable both NICS, reboot the box,
> >> >> >> >> >> and
> >> >> >> >> >> run a
> >> >> >> >> >> netstat -a at the command prompt. you should see, for a local
> >> >> >> >> >> address,
> >> >> >> >> >> server:http in there, some times with dual nics if its open
> >> >> >> >> >> on
> >> >> >> >> >> one
> >> >> >> >> >> ip
> >> >> >> >> >> and
> >> >> >> >> >> not the other it will show the ip instead of the server name.
> >> >> >> >> >> that
> >> >> >> >> >> might
> >> >> >> >> >> give us some indication as to whats going on here..
> >> >> >> >> >>
> >> >> >> >> >> "Fiona" wrote in message
> >> >> >> >> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
> >> >> >> >> >> > Hi Justin,
> >> >> >> >> >> >
> >> >> >> >> >> > The website is accessed by the IP Address. When both nics
> >> >> >> >> >> > are
> >> >> >> >> >> > enabled
> >> >> >> >> >> > http://localhost isn't even available but the second you
> >> >> >> >> >> > disable
> >> >> >> >> >> > the
> >> >> >> >> >> > second
> >> >> >> >> >> > nic it is?
> >> >> >> >> >> >

Re: Page cannot be displayed

after doing some reading on the connections_refused it looks like its
actually a shortage of non paged pool which is a kernal mode resource. this
means that its probably a drivers thats causing this issue.

the post i had given you before from David Wang has some pretty good
directions.
http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Di agnose-IIS6-failing-to-accept-connections-due-to-Connections -Refused.aspx

if this is a 2k3 server then you can easily run poolmon and get a screen
capture of whats going on.

once IIS stops responding to requests run the poolmon -b as David states and
look for the largest user of NPP.

from what i can tell the only time you should see the Connections_Refused is
in the case of a shortage of NPP. http://support.microsoft.com/?id=820729

based on the snapshot you gave me of your paged and non paged this shouldnt
be the case, but i suspect the numbers you gave me for PP and NPP were
before the system became unstable (shortly after a reboot)

now based on the fact that this seems to die fairly quick when you enable
the second nic there is a pretty decent chance that updating your NIC
drivers may fix this. I would suggest that if you dont feel comfortable
really digging in to this that you just go find the newest drivers for
everything you have and perhaps disable any services you dont use to
minimize the need of NPP.

If you do want to dig in to this get the poolmon info and we can take it
from there.

Justin


"Fiona" wrote in message
news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
> Hi Justin,
>
> I'm not sure which ones to run but the website is still not working unless
> I
> disable the second nic.
>
> WFetch gives:
>
> Failed to negotiate secure connection with localhost - port 443
>
> While SSL Diagnostics gives:
>
> System time: Mon, 05 Nov 2007 11:58:03 GMT
> ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
> version:
> 1.1:34.0
> CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
> ProcessorArchitecture: x86
> OS: Windows 2003 Service Pack 2
> IIS6 - World Wide Web Publishing (W3SVC) service is installed
>
> [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
> ImagePath = C:\WINDOWS\system32\lsass.exe
> Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
> EnableKernelSsl = False(default)
> strmfilt.dll loaded into process 524 (lsass.exe)
>
> [ SChannel Info ]
> ServerCacheEntries = 0
> ServerActiveEntries = 0
> ServerHandshakes = 16
> ServerReconnects = 360
> CacheSize = 10000
>
> [ W3SVC/1 ]
> ServerComment = Default Web Site
> ServerAutoStart = True
> ServerState = Server started
> #Impersonated server account
> SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d 98 15 c8
> SSLStoreName = MY
> #CertName = mh30-hq-it
> #You have a private key that corresponds to this certificate
> #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e9 56-4566-af96-71396eb73226'
> #ProvName='Microsoft RSA SChannel Cryptographic Provider'
> ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
> #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT, CN=mh30-hq-it
> #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
> #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
> CertVerifyCertificateChainPolicy succeeded
> SecureBindings = 10.180.2.30:443:
>
> [ W3SVC/1/ROOT/_private ]
> AccessSSLFlags = 0 (0x0)
>
> [ W3SVC/1/ROOT/_vti_cnf ]
> AccessSSLFlags = 0 (0x0)
>
> [ W3SVC/1/ROOT/_vti_log ]
> AccessSSLFlags = 0 (0x0)
>
> [ W3SVC/1/ROOT/_vti_pvt ]
> AccessSSLFlags = 0 (0x0)
>
> [ W3SVC/1/ROOT/_vti_script ]
> AccessSSLFlags = 0 (0x0)
>
> Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
>
>
> "Justin Rich" wrote:
>
>> nevermind comfort zone, this is getting out of my support realm!
>>
>> i would say, since the page pool is so low, its not an issue here.
>>
>> i would imagine, that since David suggested that its normally page pool
>> that
>> causes this issue that its some type of resource shortage.
>>
>> your next step would be to run iisdiag stuff. which ive done rarely and i
>> may not be the best person to ask.
>>
>> off hand i cant give you directions but if you can figure out and run a
>> iisdiag i can probably analyze the file for you to see if i can spot
>> anything.
>>
>> Justin
>>
>>
>> "Fiona" wrote in message
>> news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
>> > This is starting to get out of my comfort zone.
>> >
>> > The paged is 133820
>> > Non paged is 109916
>> >
>> > I haven't managed to find anything else about one nic being enabled or
>> > disabled affecting IIS though.
>> >
>> > Fiona
>> >
>> > "Justin Rich" wrote:
>> >
>> >> wow... hmm
>> >>
>> >> thats a new one to me..
>> >> David Wang has a blog post about this.
>> >> http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Di agnose-IIS6-failing-to-accept-connections-due-to-Connections -Refused.aspx
>> >>
>> >> it looks like its saying its from a shortage of page pool memory which
>> >> can
>> >> be a bear to deal with. his blog post has a bit of a walk through and
>> >> some
>> >> KB's to refer to.
>> >>
>> >> before digging to deep, open up task manager and go to the performance
>> >> tab.
>> >> under kernel memory you will see values for paged and non paged. the
>> >> one
>> >> you
>> >> care about is the paged pool. if you have anything in the area of
>> >> 280+MB
>> >> of
>> >> page pool then chances are a shortage of page pool is your issue and
>> >> your
>> >> going to have some work on your hands trying to figure this one out.
>> >>
>> >>
>> >>
>> >> "Fiona" wrote in message
>> >> news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
>> >> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
>> >> >
>> >> > The httperr log shows:
>> >> >
>> >> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
>> >> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
>> >> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
>> >> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
>> >> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
>> >> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
>> >> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
>> >> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
>> >> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
>> >> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
>> >> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
>> >> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
>> >> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
>> >> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
>> >> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
>> >> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
>> >> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
>> >> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
>> >> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
>> >> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
>> >> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
>> >> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
>> >> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
>> >> >
>> >> > Fiona
>> >> >
>> >> >
>> >> > "Justin Rich" wrote:
>> >> >
>> >> >> so the interesting part here is that a telnet connected and kicked
>> >> >> you
>> >> >> out... you'll want to look at the IIS logs now to see why it kicked
>> >> >> you
>> >> >> out.
>> >> >>
>> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
>> >> >> try the telnet again and then look at the logs. it should give some
>> >> >> info
>> >> >> as
>> >> >> to why you are being rejected.
>> >> >>
>> >> >> "Fiona" wrote in message
>> >> >> news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
>> >> >> > Hi Justin,
>> >> >> >
>> >> >> > As suspected the problem has re-occurred.
>> >> >> >
>> >> >> > Netstat -a shows:
>> >> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> > LISTENING
>> >> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> > LISTENING
>> >> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> > LISTENING
>> >> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> > LISTENING
>> >> >> >
>> >> >> > Only one nic has a gateway and is accessible from my desktop
>> >> >> >
>> >> >> > I can ping one nic from my desktop.
>> >> >> >
>> >> >> > The second nic is used for backup and can be pinged from the
>> >> >> > backup
>> >> >> > server.
>> >> >> >
>> >> >> > The website is set to use only one ip, not all unassigned.
>> >> >> >
>> >> >> > When I try telnetting to the ip used for the site it kicks me out
>> >> >> > as
>> >> >> > soon
>> >> >> > as
>> >> >> > I try to type anything.
>> >> >> >
>> >> >> > Pinging via name is successful.
>> >> >> >
>> >> >> > Disabling the second nic has enabled the website again! The day
>> >> >> > before
>> >> >> > yesterday it wouldn't work without a reboot!
>> >> >> >
>> >> >> > I hope you can suggest something as this is extremely frustrating
>> >> >> > and I
>> >> >> > can't keep rebooting the server or disabling the nic as it's used
>> >> >> > for
>> >> >> > backup.
>> >> >> >
>> >> >> > Fiona
>> >> >> >
>> >> >> > "Justin Rich" wrote:
>> >> >> >
>> >> >> >> thanks for the update, good luck :)
>> >> >> >>
>> >> >> >> "Fiona" wrote in message
>> >> >> >> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
>> >> >> >> > Hi Justin,
>> >> >> >> >
>> >> >> >> > Well this problem seems to have been resolved by installing a
>> >> >> >> > patch
>> >> >> >> > for
>> >> >> >> > Officescan 8, even though the site never gave any indication
>> >> >> >> > that
>> >> >> >> > this
>> >> >> >> > was
>> >> >> >> > a
>> >> >> >> > known fault.
>> >> >> >> >
>> >> >> >> > IIS has been working fine with both nics enabled since last
>> >> >> >> > night's
>> >> >> >> > reboot
>> >> >> >> > whereas before it never labut I'll certainly update you if the
>> >> >> >> > problem
>> >> >> >> > reoccurs.
>> >> >> >> >
>> >> >> >> > I always doubted that something was wrong with the networking
>> >> >> >> > setup
>> >> >> >> > as
>> >> >> >> > it
>> >> >> >> > had been working fine for around 2 years before upgrading the
>> >> >> >> > AV
>> >> >> >> > software,
>> >> >> >> > the other suspect was SP2.
>> >> >> >> >
>> >> >> >> > This was a strange one though.
>> >> >> >> >
>> >> >> >> > Fiona
>> >> >> >> >
>> >> >> >> >
>> >> >> >> > "Justin Rich" wrote:
>> >> >> >> >
>> >> >> >> >> well if you bring up task manager and you can watch IIS grow
>> >> >> >> >> and
>> >> >> >> >> grow
>> >> >> >> >> and
>> >> >> >> >> never release any memory, then, it could possibly be a
>> >> >> >> >> leak...
>> >> >> >> >> but
>> >> >> >> >> i
>> >> >> >> >> doubt
>> >> >> >> >> this would be the results of that. I think i would clean up
>> >> >> >> >> your
>> >> >> >> >> connectivity issues before you try to figure out the IIS
>> >> >> >> >> part. I
>> >> >> >> >> would
>> >> >> >> >> try
>> >> >> >> >> some of the things i had suggested below to get this working.
>> >> >> >> >>
>> >> >> >> >> Also, if you have dual nic's make sure only one of them has a
>> >> >> >> >> gateway.
>> >> >> >> >> if
>> >> >> >> >> both have gateways set you run in to a problem.
>> >> >> >> >>
>> >> >> >> >> try the tests below and let me know the outcome.
>> >> >> >> >>
>> >> >> >> >> from your workstation
>> >> >> >> >> ping both interfaces via ip
>> >> >> >> >> ping via name
>> >> >> >> >>
>> >> >> >> >> from the server
>> >> >> >> >> do a netstat -a and look for the http listening port
>> >> >> >> >>
>> >> >> >> >> from your workstation
>> >> >> >> >> try to open the website root via both IP's and also by name
>> >> >> >> >> use telnet to connect to the webserver (telnet server 80)
>> >> >> >> >>
>> >> >> >> >>
>> >> >> >> >> "Fiona" wrote in message
>> >> >> >> >> news:276AFB40-7A2A-4CEA-A9CE-4842BEA66417@microsoft.com...
>> >> >> >> >> > Hi Justin,
>> >> >> >> >> >
>> >> >> >> >> > Well this is odd. Last night the website just wouldn't
>> >> >> >> >> > work
>> >> >> >> >> > at
>> >> >> >> >> > all
>> >> >> >> >> > even
>> >> >> >> >> > though all of the services were started. It didn't matter
>> >> >> >> >> > if
>> >> >> >> >> > one
>> >> >> >> >> > or
>> >> >> >> >> > two
>> >> >> >> >> > of
>> >> >> >> >> > the nics were enabled it just wouldn't work.
>> >> >> >> >> >
>> >> >> >> >> > I rebooted the server overnight and now the website is
>> >> >> >> >> > working
>> >> >> >> >> > with
>> >> >> >> >> > both
>> >> >> >> >> > nics enabled?
>> >> >> >> >> >
>> >> >> >> >> > I'm guessing this must be some kind of memory leakage and
>> >> >> >> >> > that
>> >> >> >> >> > the
>> >> >> >> >> > enabling
>> >> >> >> >> > and disabling of the second nic was just a red herring?
>> >> >> >> >> >
>> >> >> >> >> > I'm not familiar with memory leakage issues so I'm not sure
>> >> >> >> >> > where
>> >> >> >> >> > to
>> >> >> >> >> > begin
>> >> >> >> >> > in tracking that down.
>> >> >> >> >> >
>> >> >> >> >> > I am thinking its probably the AV software as the version
>> >> >> >> >> > was
>> >> >> >> >> > updated
>> >> >> >> >> > recently but I can see nothing on Trend's site to indicate
>> >> >> >> >> > this.
>> >> >> >> >> >
>> >> >> >> >> > Fiona
>> >> >> >> >> >
>> >> >> >> >> > "Justin Rich" wrote:
>> >> >> >> >> >
>> >> >> >> >> >> are you able to ping both nics ok from another machine?
>> >> >> >> >> >> did you make any changes to IIS? perhaps once you enable
>> >> >> >> >> >> the
>> >> >> >> >> >> second
>> >> >> >> >> >> NIC
>> >> >> >> >> >> restart IIS?
>> >> >> >> >> >>
>> >> >> >> >> >> that is just really odd because technincally when you use
>> >> >> >> >> >> localhost
>> >> >> >> >> >> it
>> >> >> >> >> >> resolves to 127.0.0.1 which is a special loopback address
>> >> >> >> >> >> and
>> >> >> >> >> >> should
>> >> >> >> >> >> have
>> >> >> >> >> >> nothing to do with either nic.
>> >> >> >> >> >>
>> >> >> >> >> >> it could possibly be an issue with the NICs conflicting in
>> >> >> >> >> >> some
>> >> >> >> >> >> way
>> >> >> >> >> >> because
>> >> >> >> >> >> thats just not normal at all.
>> >> >> >> >> >>
>> >> >> >> >> >> I guess what i would do is enable both NICS, reboot the
>> >> >> >> >> >> box,
>> >> >> >> >> >> and
>> >> >> >> >> >> run a
>> >> >> >> >> >> netstat -a at the command prompt. you should see, for a
>> >> >> >> >> >> local
>> >> >> >> >> >> address,
>> >> >> >> >> >> server:http in there, some times with dual nics if its
>> >> >> >> >> >> open
>> >> >> >> >> >> on
>> >> >> >> >> >> one
>> >> >> >> >> >> ip
>> >> >> >> >> >> and
>> >> >> >> >> >> not the other it will show the ip instead of the server
>> >> >> >> >> >> name.
>> >> >> >> >> >> that
>> >> >> >> >> >> might
>> >> >> >> >> >> give us some indication as to whats going on here..
>> >> >> >> >> >>
>> >> >> >> >> >> "Fiona" wrote in message
>> >> >> >> >> >> news:1A7734C0-4CB6-475A-B33C-1D6C48DA25EB@microsoft.com...
>> >> >> >> >> >> > Hi Justin,
>> >> >> >> >> >> >
>> >> >> >> >> >> > The website is accessed by the IP Address. When both
>> >> >> >> >> >> > nics
>> >> >> >> >> >> > are
>> >> >> >> >> >> > enabled
>> >> >> >> >> >> > http://localhost isn't even available but the second you
>> >> >> >> >> >> > disable
>> >> >> >> >> >> > the
>> >> >> >> >> >> > second
>> >> >> >> >> >> > nic it is?
>> >> >> >> >> >> >

Re: Page cannot be displayed

On machines with multiple NICs, you must configure networking
properly, as described here:
http://groups.google.com/group/microsoft.public.inetserver.i is/browse_threa=
d/thread/f1ff0e742f4e55ae/75c32cda18232f96?lnk=3DstKc32cd a18232f96

The symptoms will be that with multiple NICs enabled, IIS website is
sporadically not accessible.

Let's first get networking configured correctly for multi-homed
network configuration before looking at Connections_Refused.

SSL is really not in the picture, and SSLDiag is not going to be
relevant.

> The paged is 133820
> Non paged is 109916

With your prior numbers, is that from POOLMON in KB? If so, that is
about 110MB NonPaged Pool, which is near exhaustion for a 2GB RAM
32bit Machine. You want to go through my Blog article's instructions
(and many other people's friendly findings!) to identify the kernel
mode driver using the non-paged pool. Several times the culprit has
been a FileSystem filter driver for AntiVirus. Or Network Driver. Or
Monitoring software by Computer Manufacturer leaking memory. And it
all gets blamed as Microsoft's problem with "Windows"...


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//




On Nov 5, 5:57 am, "Justin Rich" wrote:
> after doing some reading on the connections_refused it looks like its
> actually a shortage of non paged pool which is a kernal mode resource. th=
is
> means that its probably a drivers thats causing this issue.
>
> the post i had given you before from David Wang has some pretty good
> directions.http://blogs.msdn.com/david.wang/archive/2005/09/ 21/HOWTO-Diag=
nose-II...
>
> if this is a 2k3 server then you can easily run poolmon and get a screen
> capture of whats going on.
>
> once IIS stops responding to requests run the poolmon -b as David states =
and
> look for the largest user of NPP.
>
> from what i can tell the only time you should see the Connections_Refused=
is
> in the case of a shortage of NPP.http://support.microsoft.com/?id=3D820729
>
> based on the snapshot you gave me of your paged and non paged this should=
nt
> be the case, but i suspect the numbers you gave me for PP and NPP were
> before the system became unstable (shortly after a reboot)
>
> now based on the fact that this seems to die fairly quick when you enable
> the second nic there is a pretty decent chance that updating your NIC
> drivers may fix this. I would suggest that if you dont feel comfortable
> really digging in to this that you just go find the newest drivers for
> everything you have and perhaps disable any services you dont use to
> minimize the need of NPP.
>
> If you do want to dig in to this get the poolmon info and we can take it
> from there.
>
> Justin
>
> "Fiona" wrote in message
>
> news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
>
>
>
> > Hi Justin,
>
> > I'm not sure which ones to run but the website is still not working unl=
ess
> > I
> > disable the second nic.
>
> > WFetch gives:
>
> > Failed to negotiate secure connection with localhost - port 443
>
> > While SSL Diagnostics gives:
>
> > System time: Mon, 05 Nov 2007 11:58:03 GMT
> > ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
> > version:
> > 1.1:34.0
> > CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
> > ProcessorArchitecture: x86
> > OS: Windows 2003 Service Pack 2
> > IIS6 - World Wide Web Publishing (W3SVC) service is installed
>
> > [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
> > ImagePath =3D C:\WINDOWS\system32\lsass.exe
> > Parameters\CertChainCacheOnlyUrlRetrieval =3D True(default)
> > EnableKernelSsl =3D False(default)
> > strmfilt.dll loaded into process 524 (lsass.exe)
>
> > [ SChannel Info ]
> > ServerCacheEntries =3D 0
> > ServerActiveEntries =3D 0
> > ServerHandshakes =3D 16
> > ServerReconnects =3D 360
> > CacheSize =3D 10000
>
> > [ W3SVC/1 ]
> > ServerComment =3D Default Web Site
> > ServerAutoStart =3D True
> > ServerState =3D Server started
> > #Impersonated server account
> > SSLCertHash =3D cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d 98 1=
5 c8
> > SSLStoreName =3D MY
> > #CertName =3D mh30-hq-it
> > #You have a private key that corresponds to this certificate
> > #ContainerName=3D'41a01258a53be107284bd4516ea40e07_0bb9d07a- e956-4566-a=
f96-71=AD396eb73226'
> > #ProvName=3D'Microsoft RSA SChannel Cryptographic Provider'
> > ProvType=3DPROV_RSA_SCHANNEL KeySpec=3DAT_KEYEXCHANGE
> > #Subject: C=3DGB, S=3DLondon, L=3DLondon, O=3DELCMHT, OU=3DELCMHT, CN=
=3Dmh30-hq-it
> > #Issuer: DC=3Duk, DC=3Dnhs, DC=3Dxelcmht, CN=3Dmhdc14
> > #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
> > CertVerifyCertificateChainPolicy succeeded
> > SecureBindings =3D 10.180.2.30:443:
>
> > [ W3SVC/1/ROOT/_private ]
> > AccessSSLFlags =3D 0 (0x0)
>
> > [ W3SVC/1/ROOT/_vti_cnf ]
> > AccessSSLFlags =3D 0 (0x0)
>
> > [ W3SVC/1/ROOT/_vti_log ]
> > AccessSSLFlags =3D 0 (0x0)
>
> > [ W3SVC/1/ROOT/_vti_pvt ]
> > AccessSSLFlags =3D 0 (0x0)
>
> > [ W3SVC/1/ROOT/_vti_script ]
> > AccessSSLFlags =3D 0 (0x0)
>
> > Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
>
> > "Justin Rich" wrote:
>
> >> nevermind comfort zone, this is getting out of my support realm!
>
> >> i would say, since the page pool is so low, its not an issue here.
>
> >> i would imagine, that since David suggested that its normally page pool
> >> that
> >> causes this issue that its some type of resource shortage.
>
> >> your next step would be to run iisdiag stuff. which ive done rarely an=
d i
> >> may not be the best person to ask.
>
> >> off hand i cant give you directions but if you can figure out and run a
> >> iisdiag i can probably analyze the file for you to see if i can spot
> >> anything.
>
> >> Justin
>
> >> "Fiona" wrote in message
> >>news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
> >> > This is starting to get out of my comfort zone.
>
> >> > The paged is 133820
> >> > Non paged is 109916
>
> >> > I haven't managed to find anything else about one nic being enabled =
or
> >> > disabled affecting IIS though.
>
> >> > Fiona
>
> >> > "Justin Rich" wrote:
>
> >> >> wow... hmm
>
> >> >> thats a new one to me..
> >> >> David Wang has a blog post about this.
> >> >>http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO- Diagnose-I=
I..
>
> >> >> it looks like its saying its from a shortage of page pool memory wh=
ich
> >> >> can
> >> >> be a bear to deal with. his blog post has a bit of a walk through a=
nd
> >> >> some
> >> >> KB's to refer to.
>
> >> >> before digging to deep, open up task manager and go to the performa=
nce
> >> >> tab.
> >> >> under kernel memory you will see values for paged and non paged. the
> >> >> one
> >> >> you
> >> >> care about is the paged pool. if you have anything in the area of
> >> >> 280+MB
> >> >> of
> >> >> page pool then chances are a shortage of page pool is your issue and
> >> >> your
> >> >> going to have some work on your hands trying to figure this one out.
>
> >> >> "Fiona" wrote in message
> >> >>news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
> >> >> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
>
> >> >> > The httperr log shows:
>
> >> >> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
> >> >> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
> >> >> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
> >> >> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
> >> >> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
> >> >> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
> >> >> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
> >> >> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
> >> >> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
> >> >> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
> >> >> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
> >> >> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
> >> >> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
> >> >> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
> >> >> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
> >> >> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
> >> >> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
> >> >> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
> >> >> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
> >> >> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
> >> >> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
> >> >> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
> >> >> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
>
> >> >> > Fiona
>
> >> >> > "Justin Rich" wrote:
>
> >> >> >> so the interesting part here is that a telnet connected and kick=
ed
> >> >> >> you
> >> >> >> out... you'll want to look at the IIS logs now to see why it kic=
ked
> >> >> >> you
> >> >> >> out.
>
> >> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
> >> >> >> try the telnet again and then look at the logs. it should give s=
ome
> >> >> >> info
> >> >> >> as
> >> >> >> to why you are being rejected.
>
> >> >> >> "Fiona" wrote in message
> >> >> >>news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
> >> >> >> > Hi Justin,
>
> >> >> >> > As suspected the problem has re-occurred.
>
> >> >> >> > Netstat -a shows:
> >> >> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
> >> >> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
> >> >> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
> >> >> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
>
> >> >> >> > Only one nic has a gateway and is accessible from my desktop
>
> >> >> >> > I can ping one nic from my desktop.
>
> >> >> >> > The second nic is used for backup and can be pinged from the
> >> >> >> > backup
> >> >> >> > server.
>
> >> >> >> > The website is set to use only one ip, not all unassigned.
>
> >> >> >> > When I try telnetting to the ip used for the site it kicks me =
out
> >> >> >> > as
> >> >> >> > soon
> >> >> >> > as
> >> >> >> > I try to type anything.
>
> >> >> >> > Pinging via name is successful.
>
> >> >> >> > Disabling the second nic has enabled the website again! The d=
ay
> >> >> >> > before
> >> >> >> > yesterday it wouldn't work without a reboot!
>
> >> >> >> > I hope you can suggest something as this is extremely frustrat=
ing
> >> >> >> > and I
> >> >> >> > can't keep rebooting the server or disabling the nic as it's u=
sed
> >> >> >> > for
> >> >> >> > backup.
>
> >> >> >> > Fiona
>
> >> >> >> > "Justin Rich" wrote:
>
> >> >> >> >> thanks for the update, good luck :)
>
> >> >> >> >> "Fiona" wrote in message
> >> >> >> >>news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
> >> >> >> >> > Hi Justin,
>
> >> >> >> >> > Well this problem seems to have been resolved by installing=
a
>
> ...
>
> read more =BB- Hide quoted text -
>
> - Show quoted text -

Re: Page cannot be displayed

Hi Justin,

I'd like to keep digging.

How do I get the poolmon results to you?

Fiona

"Justin Rich" wrote:

> after doing some reading on the connections_refused it looks like its
> actually a shortage of non paged pool which is a kernal mode resource. this
> means that its probably a drivers thats causing this issue.
>
> the post i had given you before from David Wang has some pretty good
> directions.
> http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Di agnose-IIS6-failing-to-accept-connections-due-to-Connections -Refused.aspx
>
> if this is a 2k3 server then you can easily run poolmon and get a screen
> capture of whats going on.
>
> once IIS stops responding to requests run the poolmon -b as David states and
> look for the largest user of NPP.
>
> from what i can tell the only time you should see the Connections_Refused is
> in the case of a shortage of NPP. http://support.microsoft.com/?id=820729
>
> based on the snapshot you gave me of your paged and non paged this shouldnt
> be the case, but i suspect the numbers you gave me for PP and NPP were
> before the system became unstable (shortly after a reboot)
>
> now based on the fact that this seems to die fairly quick when you enable
> the second nic there is a pretty decent chance that updating your NIC
> drivers may fix this. I would suggest that if you dont feel comfortable
> really digging in to this that you just go find the newest drivers for
> everything you have and perhaps disable any services you dont use to
> minimize the need of NPP.
>
> If you do want to dig in to this get the poolmon info and we can take it
> from there.
>
> Justin
>
>
> "Fiona" wrote in message
> news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
> > Hi Justin,
> >
> > I'm not sure which ones to run but the website is still not working unless
> > I
> > disable the second nic.
> >
> > WFetch gives:
> >
> > Failed to negotiate secure connection with localhost - port 443
> >
> > While SSL Diagnostics gives:
> >
> > System time: Mon, 05 Nov 2007 11:58:03 GMT
> > ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
> > version:
> > 1.1:34.0
> > CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
> > ProcessorArchitecture: x86
> > OS: Windows 2003 Service Pack 2
> > IIS6 - World Wide Web Publishing (W3SVC) service is installed
> >
> > [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
> > ImagePath = C:\WINDOWS\system32\lsass.exe
> > Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
> > EnableKernelSsl = False(default)
> > strmfilt.dll loaded into process 524 (lsass.exe)
> >
> > [ SChannel Info ]
> > ServerCacheEntries = 0
> > ServerActiveEntries = 0
> > ServerHandshakes = 16
> > ServerReconnects = 360
> > CacheSize = 10000
> >
> > [ W3SVC/1 ]
> > ServerComment = Default Web Site
> > ServerAutoStart = True
> > ServerState = Server started
> > #Impersonated server account
> > SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d 98 15 c8
> > SSLStoreName = MY
> > #CertName = mh30-hq-it
> > #You have a private key that corresponds to this certificate
> > #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e9 56-4566-af96-71396eb73226'
> > #ProvName='Microsoft RSA SChannel Cryptographic Provider'
> > ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
> > #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT, CN=mh30-hq-it
> > #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
> > #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
> > CertVerifyCertificateChainPolicy succeeded
> > SecureBindings = 10.180.2.30:443:
> >
> > [ W3SVC/1/ROOT/_private ]
> > AccessSSLFlags = 0 (0x0)
> >
> > [ W3SVC/1/ROOT/_vti_cnf ]
> > AccessSSLFlags = 0 (0x0)
> >
> > [ W3SVC/1/ROOT/_vti_log ]
> > AccessSSLFlags = 0 (0x0)
> >
> > [ W3SVC/1/ROOT/_vti_pvt ]
> > AccessSSLFlags = 0 (0x0)
> >
> > [ W3SVC/1/ROOT/_vti_script ]
> > AccessSSLFlags = 0 (0x0)
> >
> > Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
> >
> >
> > "Justin Rich" wrote:
> >
> >> nevermind comfort zone, this is getting out of my support realm!
> >>
> >> i would say, since the page pool is so low, its not an issue here.
> >>
> >> i would imagine, that since David suggested that its normally page pool
> >> that
> >> causes this issue that its some type of resource shortage.
> >>
> >> your next step would be to run iisdiag stuff. which ive done rarely and i
> >> may not be the best person to ask.
> >>
> >> off hand i cant give you directions but if you can figure out and run a
> >> iisdiag i can probably analyze the file for you to see if i can spot
> >> anything.
> >>
> >> Justin
> >>
> >>
> >> "Fiona" wrote in message
> >> news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
> >> > This is starting to get out of my comfort zone.
> >> >
> >> > The paged is 133820
> >> > Non paged is 109916
> >> >
> >> > I haven't managed to find anything else about one nic being enabled or
> >> > disabled affecting IIS though.
> >> >
> >> > Fiona
> >> >
> >> > "Justin Rich" wrote:
> >> >
> >> >> wow... hmm
> >> >>
> >> >> thats a new one to me..
> >> >> David Wang has a blog post about this.
> >> >> http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Di agnose-IIS6-failing-to-accept-connections-due-to-Connections -Refused.aspx
> >> >>
> >> >> it looks like its saying its from a shortage of page pool memory which
> >> >> can
> >> >> be a bear to deal with. his blog post has a bit of a walk through and
> >> >> some
> >> >> KB's to refer to.
> >> >>
> >> >> before digging to deep, open up task manager and go to the performance
> >> >> tab.
> >> >> under kernel memory you will see values for paged and non paged. the
> >> >> one
> >> >> you
> >> >> care about is the paged pool. if you have anything in the area of
> >> >> 280+MB
> >> >> of
> >> >> page pool then chances are a shortage of page pool is your issue and
> >> >> your
> >> >> going to have some work on your hands trying to figure this one out.
> >> >>
> >> >>
> >> >>
> >> >> "Fiona" wrote in message
> >> >> news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
> >> >> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
> >> >> >
> >> >> > The httperr log shows:
> >> >> >
> >> >> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
> >> >> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
> >> >> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
> >> >> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
> >> >> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
> >> >> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
> >> >> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
> >> >> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
> >> >> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
> >> >> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
> >> >> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
> >> >> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
> >> >> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
> >> >> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
> >> >> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
> >> >> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
> >> >> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
> >> >> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
> >> >> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
> >> >> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
> >> >> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
> >> >> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
> >> >> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
> >> >> >
> >> >> > Fiona
> >> >> >
> >> >> >
> >> >> > "Justin Rich" wrote:
> >> >> >
> >> >> >> so the interesting part here is that a telnet connected and kicked
> >> >> >> you
> >> >> >> out... you'll want to look at the IIS logs now to see why it kicked
> >> >> >> you
> >> >> >> out.
> >> >> >>
> >> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
> >> >> >> try the telnet again and then look at the logs. it should give some
> >> >> >> info
> >> >> >> as
> >> >> >> to why you are being rejected.
> >> >> >>
> >> >> >> "Fiona" wrote in message
> >> >> >> news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
> >> >> >> > Hi Justin,
> >> >> >> >
> >> >> >> > As suspected the problem has re-occurred.
> >> >> >> >
> >> >> >> > Netstat -a shows:
> >> >> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
> >> >> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
> >> >> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
> >> >> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0
> >> >> >> > LISTENING
> >> >> >> >
> >> >> >> > Only one nic has a gateway and is accessible from my desktop
> >> >> >> >
> >> >> >> > I can ping one nic from my desktop.
> >> >> >> >
> >> >> >> > The second nic is used for backup and can be pinged from the
> >> >> >> > backup
> >> >> >> > server.
> >> >> >> >
> >> >> >> > The website is set to use only one ip, not all unassigned.
> >> >> >> >
> >> >> >> > When I try telnetting to the ip used for the site it kicks me out
> >> >> >> > as
> >> >> >> > soon
> >> >> >> > as
> >> >> >> > I try to type anything.
> >> >> >> >
> >> >> >> > Pinging via name is successful.
> >> >> >> >
> >> >> >> > Disabling the second nic has enabled the website again! The day
> >> >> >> > before
> >> >> >> > yesterday it wouldn't work without a reboot!
> >> >> >> >
> >> >> >> > I hope you can suggest something as this is extremely frustrating
> >> >> >> > and I
> >> >> >> > can't keep rebooting the server or disabling the nic as it's used
> >> >> >> > for
> >> >> >> > backup.
> >> >> >> >
> >> >> >> > Fiona
> >> >> >> >
> >> >> >> > "Justin Rich" wrote:
> >> >> >> >
> >> >> >> >> thanks for the update, good luck :)
> >> >> >> >>
> >> >> >> >> "Fiona" wrote in message
> >> >> >> >> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
> >> >> >> >> > Hi Justin,
> >> >> >> >> >
> >> >> >> >> > Well this problem seems to have been resolved by installing a
> >> >> >> >> > patch
> >> >> >> >> > for
> >> >> >> >> > Officescan 8, even though the site never gave any indication
> >> >> >> >> > that
> >> >> >> >> > this
> >> >> >> >> > was
> >> >> >> >> > a
> >> >> >> >> > known fault.
> >> >> >> >> >
> >> >> >> >> > IIS has been working fine with both nics enabled since last
> >> >> >> >> > night's
> >> >> >> >> > reboot
> >> >> >> >> > whereas before it never labut I'll certainly update you if the
> >> >> >> >> > problem
> >> >> >> >> > reoccurs.
> >> >> >> >> >
> >> >> >> >> > I always doubted that something was wrong with the networking
> >> >> >> >> > setup
> >> >> >> >> > as
> >> >> >> >> > it
> >> >> >> >> > had been working fine for around 2 years before upgrading the
> >> >> >> >> > AV
> >> >> >> >> > software,
> >> >> >> >> > the other suspect was SP2.
> >> >> >> >> >
> >> >> >> >> > This was a strange one though.
> >> >> >> >> >
> >> >> >> >> > Fiona
> >> >> >> >> >
> >> >> >> >> >
> >> >> >> >> > "Justin Rich" wrote:
> >> >> >> >> >

Re: Page cannot be displayed

I am more than happy to help but if David has time to assist you he might be
a better resource than I. He is probably the most competent person in this
newsgroup. I would follow his directions before doing this.

to get a snapshot of the poolmon you will run it with a -n to specify a file
to output too, and -b to sort by bytes

poolmon -b -n c:\poolmon.txt

remember this needs to be done once the system has stopped functioning. we
will be looking for the top most "nonp" entry. the next trick will be to
figure out what the tag represents :)



"Fiona" wrote in message
news:3D4B1115-A4D3-4314-936B-D32C0DA0AD73@microsoft.com...
> Hi Justin,
>
> I'd like to keep digging.
>
> How do I get the poolmon results to you?
>
> Fiona
>
> "Justin Rich" wrote:
>
>> after doing some reading on the connections_refused it looks like its
>> actually a shortage of non paged pool which is a kernal mode resource.
>> this
>> means that its probably a drivers thats causing this issue.
>>
>> the post i had given you before from David Wang has some pretty good
>> directions.
>> http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Di agnose-IIS6-failing-to-accept-connections-due-to-Connections -Refused.aspx
>>
>> if this is a 2k3 server then you can easily run poolmon and get a screen
>> capture of whats going on.
>>
>> once IIS stops responding to requests run the poolmon -b as David states
>> and
>> look for the largest user of NPP.
>>
>> from what i can tell the only time you should see the Connections_Refused
>> is
>> in the case of a shortage of NPP. http://support.microsoft.com/?id=820729
>>
>> based on the snapshot you gave me of your paged and non paged this
>> shouldnt
>> be the case, but i suspect the numbers you gave me for PP and NPP were
>> before the system became unstable (shortly after a reboot)
>>
>> now based on the fact that this seems to die fairly quick when you enable
>> the second nic there is a pretty decent chance that updating your NIC
>> drivers may fix this. I would suggest that if you dont feel comfortable
>> really digging in to this that you just go find the newest drivers for
>> everything you have and perhaps disable any services you dont use to
>> minimize the need of NPP.
>>
>> If you do want to dig in to this get the poolmon info and we can take it
>> from there.
>>
>> Justin
>>
>>
>> "Fiona" wrote in message
>> news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
>> > Hi Justin,
>> >
>> > I'm not sure which ones to run but the website is still not working
>> > unless
>> > I
>> > disable the second nic.
>> >
>> > WFetch gives:
>> >
>> > Failed to negotiate secure connection with localhost - port 443
>> >
>> > While SSL Diagnostics gives:
>> >
>> > System time: Mon, 05 Nov 2007 11:58:03 GMT
>> > ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
>> > version:
>> > 1.1:34.0
>> > CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
>> > ProcessorArchitecture: x86
>> > OS: Windows 2003 Service Pack 2
>> > IIS6 - World Wide Web Publishing (W3SVC) service is installed
>> >
>> > [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
>> > ImagePath = C:\WINDOWS\system32\lsass.exe
>> > Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
>> > EnableKernelSsl = False(default)
>> > strmfilt.dll loaded into process 524 (lsass.exe)
>> >
>> > [ SChannel Info ]
>> > ServerCacheEntries = 0
>> > ServerActiveEntries = 0
>> > ServerHandshakes = 16
>> > ServerReconnects = 360
>> > CacheSize = 10000
>> >
>> > [ W3SVC/1 ]
>> > ServerComment = Default Web Site
>> > ServerAutoStart = True
>> > ServerState = Server started
>> > #Impersonated server account
>> > SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d 98 15
>> > c8
>> > SSLStoreName = MY
>> > #CertName = mh30-hq-it
>> > #You have a private key that corresponds to this certificate
>> > #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e9 56-4566-af96-71396eb73226'
>> > #ProvName='Microsoft RSA SChannel Cryptographic Provider'
>> > ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
>> > #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT, CN=mh30-hq-it
>> > #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
>> > #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
>> > CertVerifyCertificateChainPolicy succeeded
>> > SecureBindings = 10.180.2.30:443:
>> >
>> > [ W3SVC/1/ROOT/_private ]
>> > AccessSSLFlags = 0 (0x0)
>> >
>> > [ W3SVC/1/ROOT/_vti_cnf ]
>> > AccessSSLFlags = 0 (0x0)
>> >
>> > [ W3SVC/1/ROOT/_vti_log ]
>> > AccessSSLFlags = 0 (0x0)
>> >
>> > [ W3SVC/1/ROOT/_vti_pvt ]
>> > AccessSSLFlags = 0 (0x0)
>> >
>> > [ W3SVC/1/ROOT/_vti_script ]
>> > AccessSSLFlags = 0 (0x0)
>> >
>> > Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
>> >
>> >
>> > "Justin Rich" wrote:
>> >
>> >> nevermind comfort zone, this is getting out of my support realm!
>> >>
>> >> i would say, since the page pool is so low, its not an issue here.
>> >>
>> >> i would imagine, that since David suggested that its normally page
>> >> pool
>> >> that
>> >> causes this issue that its some type of resource shortage.
>> >>
>> >> your next step would be to run iisdiag stuff. which ive done rarely
>> >> and i
>> >> may not be the best person to ask.
>> >>
>> >> off hand i cant give you directions but if you can figure out and run
>> >> a
>> >> iisdiag i can probably analyze the file for you to see if i can spot
>> >> anything.
>> >>
>> >> Justin
>> >>
>> >>
>> >> "Fiona" wrote in message
>> >> news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
>> >> > This is starting to get out of my comfort zone.
>> >> >
>> >> > The paged is 133820
>> >> > Non paged is 109916
>> >> >
>> >> > I haven't managed to find anything else about one nic being enabled
>> >> > or
>> >> > disabled affecting IIS though.
>> >> >
>> >> > Fiona
>> >> >
>> >> > "Justin Rich" wrote:
>> >> >
>> >> >> wow... hmm
>> >> >>
>> >> >> thats a new one to me..
>> >> >> David Wang has a blog post about this.
>> >> >> http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO-Di agnose-IIS6-failing-to-accept-connections-due-to-Connections -Refused.aspx
>> >> >>
>> >> >> it looks like its saying its from a shortage of page pool memory
>> >> >> which
>> >> >> can
>> >> >> be a bear to deal with. his blog post has a bit of a walk through
>> >> >> and
>> >> >> some
>> >> >> KB's to refer to.
>> >> >>
>> >> >> before digging to deep, open up task manager and go to the
>> >> >> performance
>> >> >> tab.
>> >> >> under kernel memory you will see values for paged and non paged.
>> >> >> the
>> >> >> one
>> >> >> you
>> >> >> care about is the paged pool. if you have anything in the area of
>> >> >> 280+MB
>> >> >> of
>> >> >> page pool then chances are a shortage of page pool is your issue
>> >> >> and
>> >> >> your
>> >> >> going to have some work on your hands trying to figure this one
>> >> >> out.
>> >> >>
>> >> >>
>> >> >>
>> >> >> "Fiona" wrote in message
>> >> >> news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
>> >> >> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
>> >> >> >
>> >> >> > The httperr log shows:
>> >> >> >
>> >> >> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
>> >> >> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
>> >> >> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
>> >> >> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
>> >> >> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
>> >> >> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
>> >> >> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
>> >> >> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
>> >> >> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
>> >> >> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
>> >> >> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
>> >> >> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
>> >> >> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
>> >> >> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
>> >> >> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
>> >> >> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
>> >> >> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
>> >> >> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
>> >> >> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
>> >> >> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
>> >> >> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
>> >> >> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
>> >> >> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
>> >> >> >
>> >> >> > Fiona
>> >> >> >
>> >> >> >
>> >> >> > "Justin Rich" wrote:
>> >> >> >
>> >> >> >> so the interesting part here is that a telnet connected and
>> >> >> >> kicked
>> >> >> >> you
>> >> >> >> out... you'll want to look at the IIS logs now to see why it
>> >> >> >> kicked
>> >> >> >> you
>> >> >> >> out.
>> >> >> >>
>> >> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
>> >> >> >> try the telnet again and then look at the logs. it should give
>> >> >> >> some
>> >> >> >> info
>> >> >> >> as
>> >> >> >> to why you are being rejected.
>> >> >> >>
>> >> >> >> "Fiona" wrote in message
>> >> >> >> news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
>> >> >> >> > Hi Justin,
>> >> >> >> >
>> >> >> >> > As suspected the problem has re-occurred.
>> >> >> >> >
>> >> >> >> > Netstat -a shows:
>> >> >> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> >> > LISTENING
>> >> >> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> >> > LISTENING
>> >> >> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> >> > LISTENING
>> >> >> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0
>> >> >> >> > LISTENING
>> >> >> >> >
>> >> >> >> > Only one nic has a gateway and is accessible from my desktop
>> >> >> >> >
>> >> >> >> > I can ping one nic from my desktop.
>> >> >> >> >
>> >> >> >> > The second nic is used for backup and can be pinged from the
>> >> >> >> > backup
>> >> >> >> > server.
>> >> >> >> >
>> >> >> >> > The website is set to use only one ip, not all unassigned.
>> >> >> >> >
>> >> >> >> > When I try telnetting to the ip used for the site it kicks me
>> >> >> >> > out
>> >> >> >> > as
>> >> >> >> > soon
>> >> >> >> > as
>> >> >> >> > I try to type anything.
>> >> >> >> >
>> >> >> >> > Pinging via name is successful.
>> >> >> >> >
>> >> >> >> > Disabling the second nic has enabled the website again! The
>> >> >> >> > day
>> >> >> >> > before
>> >> >> >> > yesterday it wouldn't work without a reboot!
>> >> >> >> >
>> >> >> >> > I hope you can suggest something as this is extremely
>> >> >> >> > frustrating
>> >> >> >> > and I
>> >> >> >> > can't keep rebooting the server or disabling the nic as it's
>> >> >> >> > used
>> >> >> >> > for
>> >> >> >> > backup.
>> >> >> >> >
>> >> >> >> > Fiona
>> >> >> >> >
>> >> >> >> > "Justin Rich" wrote:
>> >> >> >> >
>> >> >> >> >> thanks for the update, good luck :)
>> >> >> >> >>
>> >> >> >> >> "Fiona" wrote in message
>> >> >> >> >> news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
>> >> >> >> >> > Hi Justin,
>> >> >> >> >> >
>> >> >> >> >> > Well this problem seems to have been resolved by installing
>> >> >> >> >> > a
>> >> >> >> >> > patch
>> >> >> >> >> > for
>> >> >> >> >> > Officescan 8, even though the site never gave any
>> >> >> >> >> > indication
>> >> >> >> >> > that
>> >> >> >> >> > this
>> >> >> >> >> > was
>> >> >> >> >> > a
>> >> >> >> >> > known fault.
>> >> >> >> >> >
>> >> >> >> >> > IIS has been working fine with both nics enabled since last
>> >> >> >> >> > night's
>> >> >> >> >> > reboot
>> >> >> >> >> > whereas before it never labut I'll certainly update you if
>> >> >> >> >> > the
>> >> >> >> >> > problem
>> >> >> >> >> > reoccurs.
>> >> >> >> >> >
>> >> >> >> >> > I always doubted that something was wrong with the
>> >> >> >> >> > networking
>> >> >> >> >> > setup
>> >> >> >> >> > as
>> >> >> >> >> > it
>> >> >> >> >> > had been working fine for around 2 years before upgrading
>> >> >> >> >> > the
>> >> >> >> >> > AV
>> >> >> >> >> > software,
>> >> >> >> >> > the other suspect was SP2.
>> >> >> >> >> >
>> >> >> >> >> > This was a strange one though.
>> >> >> >> >> >
>> >> >> >> >> > Fiona
>> >> >> >> >> >
>> >> >> >> >> >
>> >> >> >> >> > "Justin Rich" wrote:
>> >> >> >> >> >

Re: Page cannot be displayed

David,

As far as I'm aware the server is set up correctly for two nics. One is
used purely for backup and has no gateway or dns settings, the other is the
main network connection.

The figures posted were from Performance Manager, I've run poolmon but am
not sure how to post the results here as they're too long.

The server has 4GB of RAM and is using the /3GB switch.

Fiona

"David Wang" wrote:

> On machines with multiple NICs, you must configure networking
> properly, as described here:
> http://groups.google.com/group/microsoft.public.inetserver.i is/browse_thread/thread/f1ff0e742f4e55ae/75c32cda18232f96?ln k=stKc32cda18232f96
>
> The symptoms will be that with multiple NICs enabled, IIS website is
> sporadically not accessible.
>
> Let's first get networking configured correctly for multi-homed
> network configuration before looking at Connections_Refused.
>
> SSL is really not in the picture, and SSLDiag is not going to be
> relevant.
>
> > The paged is 133820
> > Non paged is 109916
>
> With your prior numbers, is that from POOLMON in KB? If so, that is
> about 110MB NonPaged Pool, which is near exhaustion for a 2GB RAM
> 32bit Machine. You want to go through my Blog article's instructions
> (and many other people's friendly findings!) to identify the kernel
> mode driver using the non-paged pool. Several times the culprit has
> been a FileSystem filter driver for AntiVirus. Or Network Driver. Or
> Monitoring software by Computer Manufacturer leaking memory. And it
> all gets blamed as Microsoft's problem with "Windows"...
>
>
> //David
> http://w3-4u.blogspot.com
> http://blogs.msdn.com/David.Wang
> //
>
>
>
>
> On Nov 5, 5:57 am, "Justin Rich" wrote:
> > after doing some reading on the connections_refused it looks like its
> > actually a shortage of non paged pool which is a kernal mode resource. this
> > means that its probably a drivers thats causing this issue.
> >
> > the post i had given you before from David Wang has some pretty good
> > directions.http://blogs.msdn.com/david.wang/archive/2005/09/ 21/HOWTO-Diagnose-II...
> >
> > if this is a 2k3 server then you can easily run poolmon and get a screen
> > capture of whats going on.
> >
> > once IIS stops responding to requests run the poolmon -b as David states and
> > look for the largest user of NPP.
> >
> > from what i can tell the only time you should see the Connections_Refused is
> > in the case of a shortage of NPP.http://support.microsoft.com/?id=820729
> >
> > based on the snapshot you gave me of your paged and non paged this shouldnt
> > be the case, but i suspect the numbers you gave me for PP and NPP were
> > before the system became unstable (shortly after a reboot)
> >
> > now based on the fact that this seems to die fairly quick when you enable
> > the second nic there is a pretty decent chance that updating your NIC
> > drivers may fix this. I would suggest that if you dont feel comfortable
> > really digging in to this that you just go find the newest drivers for
> > everything you have and perhaps disable any services you dont use to
> > minimize the need of NPP.
> >
> > If you do want to dig in to this get the poolmon info and we can take it
> > from there.
> >
> > Justin
> >
> > "Fiona" wrote in message
> >
> > news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
> >
> >
> >
> > > Hi Justin,
> >
> > > I'm not sure which ones to run but the website is still not working unless
> > > I
> > > disable the second nic.
> >
> > > WFetch gives:
> >
> > > Failed to negotiate secure connection with localhost - port 443
> >
> > > While SSL Diagnostics gives:
> >
> > > System time: Mon, 05 Nov 2007 11:58:03 GMT
> > > ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
> > > version:
> > > 1.1:34.0
> > > CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
> > > ProcessorArchitecture: x86
> > > OS: Windows 2003 Service Pack 2
> > > IIS6 - World Wide Web Publishing (W3SVC) service is installed
> >
> > > [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
> > > ImagePath = C:\WINDOWS\system32\lsass.exe
> > > Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
> > > EnableKernelSsl = False(default)
> > > strmfilt.dll loaded into process 524 (lsass.exe)
> >
> > > [ SChannel Info ]
> > > ServerCacheEntries = 0
> > > ServerActiveEntries = 0
> > > ServerHandshakes = 16
> > > ServerReconnects = 360
> > > CacheSize = 10000
> >
> > > [ W3SVC/1 ]
> > > ServerComment = Default Web Site
> > > ServerAutoStart = True
> > > ServerState = Server started
> > > #Impersonated server account
> > > SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d 98 15 c8
> > > SSLStoreName = MY
> > > #CertName = mh30-hq-it
> > > #You have a private key that corresponds to this certificate
> > > #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e9 56-4566-af96-71-396eb73226'
> > > #ProvName='Microsoft RSA SChannel Cryptographic Provider'
> > > ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
> > > #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT, CN=mh30-hq-it
> > > #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
> > > #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
> > > CertVerifyCertificateChainPolicy succeeded
> > > SecureBindings = 10.180.2.30:443:
> >
> > > [ W3SVC/1/ROOT/_private ]
> > > AccessSSLFlags = 0 (0x0)
> >
> > > [ W3SVC/1/ROOT/_vti_cnf ]
> > > AccessSSLFlags = 0 (0x0)
> >
> > > [ W3SVC/1/ROOT/_vti_log ]
> > > AccessSSLFlags = 0 (0x0)
> >
> > > [ W3SVC/1/ROOT/_vti_pvt ]
> > > AccessSSLFlags = 0 (0x0)
> >
> > > [ W3SVC/1/ROOT/_vti_script ]
> > > AccessSSLFlags = 0 (0x0)
> >
> > > Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
> >
> > > "Justin Rich" wrote:
> >
> > >> nevermind comfort zone, this is getting out of my support realm!
> >
> > >> i would say, since the page pool is so low, its not an issue here.
> >
> > >> i would imagine, that since David suggested that its normally page pool
> > >> that
> > >> causes this issue that its some type of resource shortage.
> >
> > >> your next step would be to run iisdiag stuff. which ive done rarely and i
> > >> may not be the best person to ask.
> >
> > >> off hand i cant give you directions but if you can figure out and run a
> > >> iisdiag i can probably analyze the file for you to see if i can spot
> > >> anything.
> >
> > >> Justin
> >
> > >> "Fiona" wrote in message
> > >>news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
> > >> > This is starting to get out of my comfort zone.
> >
> > >> > The paged is 133820
> > >> > Non paged is 109916
> >
> > >> > I haven't managed to find anything else about one nic being enabled or
> > >> > disabled affecting IIS though.
> >
> > >> > Fiona
> >
> > >> > "Justin Rich" wrote:
> >
> > >> >> wow... hmm
> >
> > >> >> thats a new one to me..
> > >> >> David Wang has a blog post about this.
> > >> >>http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO- Diagnose-II...
> >
> > >> >> it looks like its saying its from a shortage of page pool memory which
> > >> >> can
> > >> >> be a bear to deal with. his blog post has a bit of a walk through and
> > >> >> some
> > >> >> KB's to refer to.
> >
> > >> >> before digging to deep, open up task manager and go to the performance
> > >> >> tab.
> > >> >> under kernel memory you will see values for paged and non paged. the
> > >> >> one
> > >> >> you
> > >> >> care about is the paged pool. if you have anything in the area of
> > >> >> 280+MB
> > >> >> of
> > >> >> page pool then chances are a shortage of page pool is your issue and
> > >> >> your
> > >> >> going to have some work on your hands trying to figure this one out.
> >
> > >> >> "Fiona" wrote in message
> > >> >>news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
> > >> >> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
> >
> > >> >> > The httperr log shows:
> >
> > >> >> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
> > >> >> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
> > >> >> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
> > >> >> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
> > >> >> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
> > >> >> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
> > >> >> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
> > >> >> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
> > >> >> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
> > >> >> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
> > >> >> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
> > >> >> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
> > >> >> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
> > >> >> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
> > >> >> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
> > >> >> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
> > >> >> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
> > >> >> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
> > >> >> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
> > >> >> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
> > >> >> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
> > >> >> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
> > >> >> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
> >
> > >> >> > Fiona
> >
> > >> >> > "Justin Rich" wrote:
> >
> > >> >> >> so the interesting part here is that a telnet connected and kicked
> > >> >> >> you
> > >> >> >> out... you'll want to look at the IIS logs now to see why it kicked
> > >> >> >> you
> > >> >> >> out.
> >
> > >> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
> > >> >> >> try the telnet again and then look at the logs. it should give some
> > >> >> >> info
> > >> >> >> as
> > >> >> >> to why you are being rejected.
> >
> > >> >> >> "Fiona" wrote in message
> > >> >> >>news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
> > >> >> >> > Hi Justin,
> >
> > >> >> >> > As suspected the problem has re-occurred.
> >
> > >> >> >> > Netstat -a shows:
> > >> >> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0
> > >> >> >> > LISTENING
> > >> >> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0
> > >> >> >> > LISTENING
> > >> >> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0
> > >> >> >> > LISTENING
> > >> >> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0
> > >> >> >> > LISTENING
> >
> > >> >> >> > Only one nic has a gateway and is accessible from my desktop
> >
> > >> >> >> > I can ping one nic from my desktop.
> >
> > >> >> >> > The second nic is used for backup and can be pinged from the
> > >> >> >> > backup
> > >> >> >> > server.
> >
> > >> >> >> > The website is set to use only one ip, not all unassigned.
> >
> > >> >> >> > When I try telnetting to the ip used for the site it kicks me out
> > >> >> >> > as
> > >> >> >> > soon
> > >> >> >> > as
> > >> >> >> > I try to type anything.
> >
> > >> >> >> > Pinging via name is successful.
> >
> > >> >> >> > Disabling the second nic has enabled the website again! The day
> > >> >> >> > before
> > >> >> >> > yesterday it wouldn't work without a reboot!
> >
> > >> >> >> > I hope you can suggest something as this is extremely frustrating
> > >> >> >> > and I
> > >> >> >> > can't keep rebooting the server or disabling the nic as it's used
> > >> >> >> > for
> > >> >> >> > backup.
> >
> > >> >> >> > Fiona
> >
> > >> >> >> > "Justin Rich" wrote:
> >
> > >> >> >> >> thanks for the update, good luck :)
> >
> > >> >> >> >> "Fiona" wrote in message
> > >> >> >> >>news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
> > >> >> >> >> > Hi Justin,
> >
> > >> >> >> >> > Well this problem seems to have been resolved by installing a

Re: Page cannot be displayed

ohh, you're using the /3GB? why?

chances are you want to shut that off, but i'll wait for you reasoning
behind that :)

http://blogs.technet.com/askperf/archive/2007/03/23/memory-m anagement-demystifying-3gb.aspx

those guys have a lot of great posts on memory related topics, fairly
advanced but pretty good.

this could actually be causing your problem.

Justin

"Fiona" wrote in message
news:92838DB8-7B4C-4A97-86F7-80831B9454DC@microsoft.com...
> David,
>
> As far as I'm aware the server is set up correctly for two nics. One is
> used purely for backup and has no gateway or dns settings, the other is
> the
> main network connection.
>
> The figures posted were from Performance Manager, I've run poolmon but am
> not sure how to post the results here as they're too long.
>
> The server has 4GB of RAM and is using the /3GB switch.
>
> Fiona
>
> "David Wang" wrote:
>
>> On machines with multiple NICs, you must configure networking
>> properly, as described here:
>> http://groups.google.com/group/microsoft.public.inetserver.i is/browse_thread/thread/f1ff0e742f4e55ae/75c32cda18232f96?ln k=stKc32cda18232f96
>>
>> The symptoms will be that with multiple NICs enabled, IIS website is
>> sporadically not accessible.
>>
>> Let's first get networking configured correctly for multi-homed
>> network configuration before looking at Connections_Refused.
>>
>> SSL is really not in the picture, and SSLDiag is not going to be
>> relevant.
>>
>> > The paged is 133820
>> > Non paged is 109916
>>
>> With your prior numbers, is that from POOLMON in KB? If so, that is
>> about 110MB NonPaged Pool, which is near exhaustion for a 2GB RAM
>> 32bit Machine. You want to go through my Blog article's instructions
>> (and many other people's friendly findings!) to identify the kernel
>> mode driver using the non-paged pool. Several times the culprit has
>> been a FileSystem filter driver for AntiVirus. Or Network Driver. Or
>> Monitoring software by Computer Manufacturer leaking memory. And it
>> all gets blamed as Microsoft's problem with "Windows"...
>>
>>
>> //David
>> http://w3-4u.blogspot.com
>> http://blogs.msdn.com/David.Wang
>> //
>>
>>
>>
>>
>> On Nov 5, 5:57 am, "Justin Rich" wrote:
>> > after doing some reading on the connections_refused it looks like its
>> > actually a shortage of non paged pool which is a kernal mode resource.
>> > this
>> > means that its probably a drivers thats causing this issue.
>> >
>> > the post i had given you before from David Wang has some pretty good
>> > directions.http://blogs.msdn.com/david.wang/archive/2005/09/ 21/HOWTO-Diagnose-II...
>> >
>> > if this is a 2k3 server then you can easily run poolmon and get a
>> > screen
>> > capture of whats going on.
>> >
>> > once IIS stops responding to requests run the poolmon -b as David
>> > states and
>> > look for the largest user of NPP.
>> >
>> > from what i can tell the only time you should see the
>> > Connections_Refused is
>> > in the case of a shortage of
>> > NPP.http://support.microsoft.com/?id=820729
>> >
>> > based on the snapshot you gave me of your paged and non paged this
>> > shouldnt
>> > be the case, but i suspect the numbers you gave me for PP and NPP were
>> > before the system became unstable (shortly after a reboot)
>> >
>> > now based on the fact that this seems to die fairly quick when you
>> > enable
>> > the second nic there is a pretty decent chance that updating your NIC
>> > drivers may fix this. I would suggest that if you dont feel comfortable
>> > really digging in to this that you just go find the newest drivers for
>> > everything you have and perhaps disable any services you dont use to
>> > minimize the need of NPP.
>> >
>> > If you do want to dig in to this get the poolmon info and we can take
>> > it
>> > from there.
>> >
>> > Justin
>> >
>> > "Fiona" wrote in message
>> >
>> > news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
>> >
>> >
>> >
>> > > Hi Justin,
>> >
>> > > I'm not sure which ones to run but the website is still not working
>> > > unless
>> > > I
>> > > disable the second nic.
>> >
>> > > WFetch gives:
>> >
>> > > Failed to negotiate secure connection with localhost - port 443
>> >
>> > > While SSL Diagnostics gives:
>> >
>> > > System time: Mon, 05 Nov 2007 11:58:03 GMT
>> > > ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
>> > > version:
>> > > 1.1:34.0
>> > > CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
>> > > ProcessorArchitecture: x86
>> > > OS: Windows 2003 Service Pack 2
>> > > IIS6 - World Wide Web Publishing (W3SVC) service is installed
>> >
>> > > [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
>> > > ImagePath = C:\WINDOWS\system32\lsass.exe
>> > > Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
>> > > EnableKernelSsl = False(default)
>> > > strmfilt.dll loaded into process 524 (lsass.exe)
>> >
>> > > [ SChannel Info ]
>> > > ServerCacheEntries = 0
>> > > ServerActiveEntries = 0
>> > > ServerHandshakes = 16
>> > > ServerReconnects = 360
>> > > CacheSize = 10000
>> >
>> > > [ W3SVC/1 ]
>> > > ServerComment = Default Web Site
>> > > ServerAutoStart = True
>> > > ServerState = Server started
>> > > #Impersonated server account
>> > > SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d 98
>> > > 15 c8
>> > > SSLStoreName = MY
>> > > #CertName = mh30-hq-it
>> > > #You have a private key that corresponds to this certificate
>> > > #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e9 56-4566-af96-71-396eb73226'
>> > > #ProvName='Microsoft RSA SChannel Cryptographic Provider'
>> > > ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
>> > > #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT,
>> > > CN=mh30-hq-it
>> > > #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
>> > > #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
>> > > CertVerifyCertificateChainPolicy succeeded
>> > > SecureBindings = 10.180.2.30:443:
>> >
>> > > [ W3SVC/1/ROOT/_private ]
>> > > AccessSSLFlags = 0 (0x0)
>> >
>> > > [ W3SVC/1/ROOT/_vti_cnf ]
>> > > AccessSSLFlags = 0 (0x0)
>> >
>> > > [ W3SVC/1/ROOT/_vti_log ]
>> > > AccessSSLFlags = 0 (0x0)
>> >
>> > > [ W3SVC/1/ROOT/_vti_pvt ]
>> > > AccessSSLFlags = 0 (0x0)
>> >
>> > > [ W3SVC/1/ROOT/_vti_script ]
>> > > AccessSSLFlags = 0 (0x0)
>> >
>> > > Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
>> >
>> > > "Justin Rich" wrote:
>> >
>> > >> nevermind comfort zone, this is getting out of my support realm!
>> >
>> > >> i would say, since the page pool is so low, its not an issue here.
>> >
>> > >> i would imagine, that since David suggested that its normally page
>> > >> pool
>> > >> that
>> > >> causes this issue that its some type of resource shortage.
>> >
>> > >> your next step would be to run iisdiag stuff. which ive done rarely
>> > >> and i
>> > >> may not be the best person to ask.
>> >
>> > >> off hand i cant give you directions but if you can figure out and
>> > >> run a
>> > >> iisdiag i can probably analyze the file for you to see if i can spot
>> > >> anything.
>> >
>> > >> Justin
>> >
>> > >> "Fiona" wrote in message
>> > >>news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
>> > >> > This is starting to get out of my comfort zone.
>> >
>> > >> > The paged is 133820
>> > >> > Non paged is 109916
>> >
>> > >> > I haven't managed to find anything else about one nic being
>> > >> > enabled or
>> > >> > disabled affecting IIS though.
>> >
>> > >> > Fiona
>> >
>> > >> > "Justin Rich" wrote:
>> >
>> > >> >> wow... hmm
>> >
>> > >> >> thats a new one to me..
>> > >> >> David Wang has a blog post about this.
>> > >> >>http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO- Diagnose-II...
>> >
>> > >> >> it looks like its saying its from a shortage of page pool memory
>> > >> >> which
>> > >> >> can
>> > >> >> be a bear to deal with. his blog post has a bit of a walk through
>> > >> >> and
>> > >> >> some
>> > >> >> KB's to refer to.
>> >
>> > >> >> before digging to deep, open up task manager and go to the
>> > >> >> performance
>> > >> >> tab.
>> > >> >> under kernel memory you will see values for paged and non paged.
>> > >> >> the
>> > >> >> one
>> > >> >> you
>> > >> >> care about is the paged pool. if you have anything in the area of
>> > >> >> 280+MB
>> > >> >> of
>> > >> >> page pool then chances are a shortage of page pool is your issue
>> > >> >> and
>> > >> >> your
>> > >> >> going to have some work on your hands trying to figure this one
>> > >> >> out.
>> >
>> > >> >> "Fiona" wrote in message
>> > >> >>news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
>> > >> >> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
>> >
>> > >> >> > The httperr log shows:
>> >
>> > >> >> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
>> > >> >> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
>> > >> >> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
>> > >> >> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
>> > >> >> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
>> > >> >> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
>> > >> >> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
>> > >> >> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
>> > >> >> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
>> > >> >> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
>> > >> >> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
>> > >> >> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
>> >
>> > >> >> > Fiona
>> >
>> > >> >> > "Justin Rich" wrote:
>> >
>> > >> >> >> so the interesting part here is that a telnet connected and
>> > >> >> >> kicked
>> > >> >> >> you
>> > >> >> >> out... you'll want to look at the IIS logs now to see why it
>> > >> >> >> kicked
>> > >> >> >> you
>> > >> >> >> out.
>> >
>> > >> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
>> > >> >> >> try the telnet again and then look at the logs. it should give
>> > >> >> >> some
>> > >> >> >> info
>> > >> >> >> as
>> > >> >> >> to why you are being rejected.
>> >
>> > >> >> >> "Fiona" wrote in message
>> > >> >> >>news:94F222F8-7424-4764-A733-DEF8BA627728@microsoft.com...
>> > >> >> >> > Hi Justin,
>> >
>> > >> >> >> > As suspected the problem has re-occurred.
>> >
>> > >> >> >> > Netstat -a shows:
>> > >> >> >> > TCP xxxx-xx-xx:http xxxx-xx-xx.xxxxx.nhs.uk:0
>> > >> >> >> > LISTENING
>> > >> >> >> > TCP xxxx-xx-xx:epmap xxxx-xx-xx.xxxxx.nhs.uk:0
>> > >> >> >> > LISTENING
>> > >> >> >> > TCP xxxx-xx-xx:https xxxx-xx-xx.xxxxx.nhs.uk:0
>> > >> >> >> > LISTENING
>> > >> >> >> > TCP xxxx-xx-xx:microsoft-ds xxxx-xx-xx.xxxxx.nhs.uk:0
>> > >> >> >> > LISTENING
>> >
>> > >> >> >> > Only one nic has a gateway and is accessible from my desktop
>> >
>> > >> >> >> > I can ping one nic from my desktop.
>> >
>> > >> >> >> > The second nic is used for backup and can be pinged from the
>> > >> >> >> > backup
>> > >> >> >> > server.
>> >
>> > >> >> >> > The website is set to use only one ip, not all unassigned.
>> >
>> > >> >> >> > When I try telnetting to the ip used for the site it kicks
>> > >> >> >> > me out
>> > >> >> >> > as
>> > >> >> >> > soon
>> > >> >> >> > as
>> > >> >> >> > I try to type anything.
>> >
>> > >> >> >> > Pinging via name is successful.
>> >
>> > >> >> >> > Disabling the second nic has enabled the website again! The
>> > >> >> >> > day
>> > >> >> >> > before
>> > >> >> >> > yesterday it wouldn't work without a reboot!
>> >
>> > >> >> >> > I hope you can suggest something as this is extremely
>> > >> >> >> > frustrating
>> > >> >> >> > and I
>> > >> >> >> > can't keep rebooting the server or disabling the nic as it's
>> > >> >> >> > used
>> > >> >> >> > for
>> > >> >> >> > backup.
>> >
>> > >> >> >> > Fiona
>> >
>> > >> >> >> > "Justin Rich" wrote:
>> >
>> > >> >> >> >> thanks for the update, good luck :)
>> >
>> > >> >> >> >> "Fiona" wrote in message
>> > >> >> >> >>news:4A99A9F0-7674-4856-8E91-827B2C039D35@microsoft.com...
>> > >> >> >> >> > Hi Justin,
>> >
>> > >> >> >> >> > Well this problem seems to have been resolved by
>> > >> >> >> >> > installing a

Re: Page cannot be displayed

Hmmm, I certainly wasn't aware of that!

I'll remove the /3GB switch and reboot the server overnight to see if that
helps.

Fiona

"Justin Rich" wrote:

> ohh, you're using the /3GB? why?
>
> chances are you want to shut that off, but i'll wait for you reasoning
> behind that :)
>
> http://blogs.technet.com/askperf/archive/2007/03/23/memory-m anagement-demystifying-3gb.aspx
>
> those guys have a lot of great posts on memory related topics, fairly
> advanced but pretty good.
>
> this could actually be causing your problem.
>
> Justin
>
> "Fiona" wrote in message
> news:92838DB8-7B4C-4A97-86F7-80831B9454DC@microsoft.com...
> > David,
> >
> > As far as I'm aware the server is set up correctly for two nics. One is
> > used purely for backup and has no gateway or dns settings, the other is
> > the
> > main network connection.
> >
> > The figures posted were from Performance Manager, I've run poolmon but am
> > not sure how to post the results here as they're too long.
> >
> > The server has 4GB of RAM and is using the /3GB switch.
> >
> > Fiona
> >
> > "David Wang" wrote:
> >
> >> On machines with multiple NICs, you must configure networking
> >> properly, as described here:
> >> http://groups.google.com/group/microsoft.public.inetserver.i is/browse_thread/thread/f1ff0e742f4e55ae/75c32cda18232f96?ln k=stKc32cda18232f96
> >>
> >> The symptoms will be that with multiple NICs enabled, IIS website is
> >> sporadically not accessible.
> >>
> >> Let's first get networking configured correctly for multi-homed
> >> network configuration before looking at Connections_Refused.
> >>
> >> SSL is really not in the picture, and SSLDiag is not going to be
> >> relevant.
> >>
> >> > The paged is 133820
> >> > Non paged is 109916
> >>
> >> With your prior numbers, is that from POOLMON in KB? If so, that is
> >> about 110MB NonPaged Pool, which is near exhaustion for a 2GB RAM
> >> 32bit Machine. You want to go through my Blog article's instructions
> >> (and many other people's friendly findings!) to identify the kernel
> >> mode driver using the non-paged pool. Several times the culprit has
> >> been a FileSystem filter driver for AntiVirus. Or Network Driver. Or
> >> Monitoring software by Computer Manufacturer leaking memory. And it
> >> all gets blamed as Microsoft's problem with "Windows"...
> >>
> >>
> >> //David
> >> http://w3-4u.blogspot.com
> >> http://blogs.msdn.com/David.Wang
> >> //
> >>
> >>
> >>
> >>
> >> On Nov 5, 5:57 am, "Justin Rich" wrote:
> >> > after doing some reading on the connections_refused it looks like its
> >> > actually a shortage of non paged pool which is a kernal mode resource.
> >> > this
> >> > means that its probably a drivers thats causing this issue.
> >> >
> >> > the post i had given you before from David Wang has some pretty good
> >> > directions.http://blogs.msdn.com/david.wang/archive/2005/09/ 21/HOWTO-Diagnose-II...
> >> >
> >> > if this is a 2k3 server then you can easily run poolmon and get a
> >> > screen
> >> > capture of whats going on.
> >> >
> >> > once IIS stops responding to requests run the poolmon -b as David
> >> > states and
> >> > look for the largest user of NPP.
> >> >
> >> > from what i can tell the only time you should see the
> >> > Connections_Refused is
> >> > in the case of a shortage of
> >> > NPP.http://support.microsoft.com/?id=820729
> >> >
> >> > based on the snapshot you gave me of your paged and non paged this
> >> > shouldnt
> >> > be the case, but i suspect the numbers you gave me for PP and NPP were
> >> > before the system became unstable (shortly after a reboot)
> >> >
> >> > now based on the fact that this seems to die fairly quick when you
> >> > enable
> >> > the second nic there is a pretty decent chance that updating your NIC
> >> > drivers may fix this. I would suggest that if you dont feel comfortable
> >> > really digging in to this that you just go find the newest drivers for
> >> > everything you have and perhaps disable any services you dont use to
> >> > minimize the need of NPP.
> >> >
> >> > If you do want to dig in to this get the poolmon info and we can take
> >> > it
> >> > from there.
> >> >
> >> > Justin
> >> >
> >> > "Fiona" wrote in message
> >> >
> >> > news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
> >> >
> >> >
> >> >
> >> > > Hi Justin,
> >> >
> >> > > I'm not sure which ones to run but the website is still not working
> >> > > unless
> >> > > I
> >> > > disable the second nic.
> >> >
> >> > > WFetch gives:
> >> >
> >> > > Failed to negotiate secure connection with localhost - port 443
> >> >
> >> > > While SSL Diagnostics gives:
> >> >
> >> > > System time: Mon, 05 Nov 2007 11:58:03 GMT
> >> > > ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
> >> > > version:
> >> > > 1.1:34.0
> >> > > CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
> >> > > ProcessorArchitecture: x86
> >> > > OS: Windows 2003 Service Pack 2
> >> > > IIS6 - World Wide Web Publishing (W3SVC) service is installed
> >> >
> >> > > [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
> >> > > ImagePath = C:\WINDOWS\system32\lsass.exe
> >> > > Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
> >> > > EnableKernelSsl = False(default)
> >> > > strmfilt.dll loaded into process 524 (lsass.exe)
> >> >
> >> > > [ SChannel Info ]
> >> > > ServerCacheEntries = 0
> >> > > ServerActiveEntries = 0
> >> > > ServerHandshakes = 16
> >> > > ServerReconnects = 360
> >> > > CacheSize = 10000
> >> >
> >> > > [ W3SVC/1 ]
> >> > > ServerComment = Default Web Site
> >> > > ServerAutoStart = True
> >> > > ServerState = Server started
> >> > > #Impersonated server account
> >> > > SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d 98
> >> > > 15 c8
> >> > > SSLStoreName = MY
> >> > > #CertName = mh30-hq-it
> >> > > #You have a private key that corresponds to this certificate
> >> > > #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e9 56-4566-af96-71-396eb73226'
> >> > > #ProvName='Microsoft RSA SChannel Cryptographic Provider'
> >> > > ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
> >> > > #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT,
> >> > > CN=mh30-hq-it
> >> > > #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
> >> > > #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
> >> > > CertVerifyCertificateChainPolicy succeeded
> >> > > SecureBindings = 10.180.2.30:443:
> >> >
> >> > > [ W3SVC/1/ROOT/_private ]
> >> > > AccessSSLFlags = 0 (0x0)
> >> >
> >> > > [ W3SVC/1/ROOT/_vti_cnf ]
> >> > > AccessSSLFlags = 0 (0x0)
> >> >
> >> > > [ W3SVC/1/ROOT/_vti_log ]
> >> > > AccessSSLFlags = 0 (0x0)
> >> >
> >> > > [ W3SVC/1/ROOT/_vti_pvt ]
> >> > > AccessSSLFlags = 0 (0x0)
> >> >
> >> > > [ W3SVC/1/ROOT/_vti_script ]
> >> > > AccessSSLFlags = 0 (0x0)
> >> >
> >> > > Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
> >> >
> >> > > "Justin Rich" wrote:
> >> >
> >> > >> nevermind comfort zone, this is getting out of my support realm!
> >> >
> >> > >> i would say, since the page pool is so low, its not an issue here.
> >> >
> >> > >> i would imagine, that since David suggested that its normally page
> >> > >> pool
> >> > >> that
> >> > >> causes this issue that its some type of resource shortage.
> >> >
> >> > >> your next step would be to run iisdiag stuff. which ive done rarely
> >> > >> and i
> >> > >> may not be the best person to ask.
> >> >
> >> > >> off hand i cant give you directions but if you can figure out and
> >> > >> run a
> >> > >> iisdiag i can probably analyze the file for you to see if i can spot
> >> > >> anything.
> >> >
> >> > >> Justin
> >> >
> >> > >> "Fiona" wrote in message
> >> > >>news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
> >> > >> > This is starting to get out of my comfort zone.
> >> >
> >> > >> > The paged is 133820
> >> > >> > Non paged is 109916
> >> >
> >> > >> > I haven't managed to find anything else about one nic being
> >> > >> > enabled or
> >> > >> > disabled affecting IIS though.
> >> >
> >> > >> > Fiona
> >> >
> >> > >> > "Justin Rich" wrote:
> >> >
> >> > >> >> wow... hmm
> >> >
> >> > >> >> thats a new one to me..
> >> > >> >> David Wang has a blog post about this.
> >> > >> >>http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO- Diagnose-II...
> >> >
> >> > >> >> it looks like its saying its from a shortage of page pool memory
> >> > >> >> which
> >> > >> >> can
> >> > >> >> be a bear to deal with. his blog post has a bit of a walk through
> >> > >> >> and
> >> > >> >> some
> >> > >> >> KB's to refer to.
> >> >
> >> > >> >> before digging to deep, open up task manager and go to the
> >> > >> >> performance
> >> > >> >> tab.
> >> > >> >> under kernel memory you will see values for paged and non paged.
> >> > >> >> the
> >> > >> >> one
> >> > >> >> you
> >> > >> >> care about is the paged pool. if you have anything in the area of
> >> > >> >> 280+MB
> >> > >> >> of
> >> > >> >> page pool then chances are a shortage of page pool is your issue
> >> > >> >> and
> >> > >> >> your
> >> > >> >> going to have some work on your hands trying to figure this one
> >> > >> >> out.
> >> >
> >> > >> >> "Fiona" wrote in message
> >> > >> >>news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
> >> > >> >> > Nothing in those logs after 11:41, I tried telnetting at 14:13.
> >> >
> >> > >> >> > The httperr log shows:
> >> >
> >> > >> >> > 2007-11-02 14:13:07 - - - - - - - - - 26_Connections_Refused -
> >> > >> >> > 2007-11-02 14:13:12 - - - - - - - - - 34_Connections_Refused -
> >> > >> >> > 2007-11-02 14:13:17 - - - - - - - - - 36_Connections_Refused -
> >> > >> >> > 2007-11-02 14:13:22 - - - - - - - - - 28_Connections_Refused -
> >> > >> >> > 2007-11-02 14:13:27 - - - - - - - - - 26_Connections_Refused -
> >> > >> >> > 2007-11-02 14:13:32 - - - - - - - - - 35_Connections_Refused -
> >> > >> >> > 2007-11-02 14:13:37 - - - - - - - - - 23_Connections_Refused -
> >> > >> >> > 2007-11-02 14:13:42 - - - - - - - - - 16_Connections_Refused -
> >> > >> >> > 2007-11-02 14:13:47 - - - - - - - - - 39_Connections_Refused -
> >> > >> >> > 2007-11-02 14:13:52 - - - - - - - - - 73_Connections_Refused -
> >> > >> >> > 2007-11-02 14:13:57 - - - - - - - - - 34_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:02 - - - - - - - - - 23_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:07 - - - - - - - - - 21_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:12 - - - - - - - - - 19_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:17 - - - - - - - - - 27_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:22 - - - - - - - - - 29_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:27 - - - - - - - - - 35_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:32 - - - - - - - - - 56_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:37 - - - - - - - - - 23_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:42 - - - - - - - - - 40_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:47 - - - - - - - - - 32_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:52 - - - - - - - - - 27_Connections_Refused -
> >> > >> >> > 2007-11-02 14:14:57 - - - - - - - - - 23_Connections_Refused -
> >> >
> >> > >> >> > Fiona
> >> >
> >> > >> >> > "Justin Rich" wrote:
> >> >
> >> > >> >> >> so the interesting part here is that a telnet connected and
> >> > >> >> >> kicked
> >> > >> >> >> you
> >> > >> >> >> out... you'll want to look at the IIS logs now to see why it
> >> > >> >> >> kicked
> >> > >> >> >> you
> >> > >> >> >> out.
> >> >
> >> > >> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
> >> > >> >> >> try the telnet again and then look at the logs. it should give
> >> > >> >> >> some
> >> > >> >> >> info
> >> > >> >> >> as
> >> > >> >> >> to why you are being rejected.

Re: Page cannot be displayed

is that to say you have no reason for the /3gb switch or you werent the one
to turn it on?

I think that link i gave you goes over it very well but if you have any
questions in regards to the /3gb let me know.

Justin

"Fiona" wrote in message
news:B1CA1820-0B70-4FEE-AE3B-81780C643519@microsoft.com...
> Hmmm, I certainly wasn't aware of that!
>
> I'll remove the /3GB switch and reboot the server overnight to see if that
> helps.
>
> Fiona
>
> "Justin Rich" wrote:
>
>> ohh, you're using the /3GB? why?
>>
>> chances are you want to shut that off, but i'll wait for you reasoning
>> behind that :)
>>
>> http://blogs.technet.com/askperf/archive/2007/03/23/memory-m anagement-demystifying-3gb.aspx
>>
>> those guys have a lot of great posts on memory related topics, fairly
>> advanced but pretty good.
>>
>> this could actually be causing your problem.
>>
>> Justin
>>
>> "Fiona" wrote in message
>> news:92838DB8-7B4C-4A97-86F7-80831B9454DC@microsoft.com...
>> > David,
>> >
>> > As far as I'm aware the server is set up correctly for two nics. One
>> > is
>> > used purely for backup and has no gateway or dns settings, the other is
>> > the
>> > main network connection.
>> >
>> > The figures posted were from Performance Manager, I've run poolmon but
>> > am
>> > not sure how to post the results here as they're too long.
>> >
>> > The server has 4GB of RAM and is using the /3GB switch.
>> >
>> > Fiona
>> >
>> > "David Wang" wrote:
>> >
>> >> On machines with multiple NICs, you must configure networking
>> >> properly, as described here:
>> >> http://groups.google.com/group/microsoft.public.inetserver.i is/browse_thread/thread/f1ff0e742f4e55ae/75c32cda18232f96?ln k=stKc32cda18232f96
>> >>
>> >> The symptoms will be that with multiple NICs enabled, IIS website is
>> >> sporadically not accessible.
>> >>
>> >> Let's first get networking configured correctly for multi-homed
>> >> network configuration before looking at Connections_Refused.
>> >>
>> >> SSL is really not in the picture, and SSLDiag is not going to be
>> >> relevant.
>> >>
>> >> > The paged is 133820
>> >> > Non paged is 109916
>> >>
>> >> With your prior numbers, is that from POOLMON in KB? If so, that is
>> >> about 110MB NonPaged Pool, which is near exhaustion for a 2GB RAM
>> >> 32bit Machine. You want to go through my Blog article's instructions
>> >> (and many other people's friendly findings!) to identify the kernel
>> >> mode driver using the non-paged pool. Several times the culprit has
>> >> been a FileSystem filter driver for AntiVirus. Or Network Driver. Or
>> >> Monitoring software by Computer Manufacturer leaking memory. And it
>> >> all gets blamed as Microsoft's problem with "Windows"...
>> >>
>> >>
>> >> //David
>> >> http://w3-4u.blogspot.com
>> >> http://blogs.msdn.com/David.Wang
>> >> //
>> >>
>> >>
>> >>
>> >>
>> >> On Nov 5, 5:57 am, "Justin Rich" wrote:
>> >> > after doing some reading on the connections_refused it looks like
>> >> > its
>> >> > actually a shortage of non paged pool which is a kernal mode
>> >> > resource.
>> >> > this
>> >> > means that its probably a drivers thats causing this issue.
>> >> >
>> >> > the post i had given you before from David Wang has some pretty good
>> >> > directions.http://blogs.msdn.com/david.wang/archive/2005/09/ 21/HOWTO-Diagnose-II...
>> >> >
>> >> > if this is a 2k3 server then you can easily run poolmon and get a
>> >> > screen
>> >> > capture of whats going on.
>> >> >
>> >> > once IIS stops responding to requests run the poolmon -b as David
>> >> > states and
>> >> > look for the largest user of NPP.
>> >> >
>> >> > from what i can tell the only time you should see the
>> >> > Connections_Refused is
>> >> > in the case of a shortage of
>> >> > NPP.http://support.microsoft.com/?id=820729
>> >> >
>> >> > based on the snapshot you gave me of your paged and non paged this
>> >> > shouldnt
>> >> > be the case, but i suspect the numbers you gave me for PP and NPP
>> >> > were
>> >> > before the system became unstable (shortly after a reboot)
>> >> >
>> >> > now based on the fact that this seems to die fairly quick when you
>> >> > enable
>> >> > the second nic there is a pretty decent chance that updating your
>> >> > NIC
>> >> > drivers may fix this. I would suggest that if you dont feel
>> >> > comfortable
>> >> > really digging in to this that you just go find the newest drivers
>> >> > for
>> >> > everything you have and perhaps disable any services you dont use to
>> >> > minimize the need of NPP.
>> >> >
>> >> > If you do want to dig in to this get the poolmon info and we can
>> >> > take
>> >> > it
>> >> > from there.
>> >> >
>> >> > Justin
>> >> >
>> >> > "Fiona" wrote in message
>> >> >
>> >> > news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
>> >> >
>> >> >
>> >> >
>> >> > > Hi Justin,
>> >> >
>> >> > > I'm not sure which ones to run but the website is still not
>> >> > > working
>> >> > > unless
>> >> > > I
>> >> > > disable the second nic.
>> >> >
>> >> > > WFetch gives:
>> >> >
>> >> > > Failed to negotiate secure connection with localhost - port 443
>> >> >
>> >> > > While SSL Diagnostics gives:
>> >> >
>> >> > > System time: Mon, 05 Nov 2007 11:58:03 GMT
>> >> > > ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
>> >> > > version:
>> >> > > 1.1:34.0
>> >> > > CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
>> >> > > ProcessorArchitecture: x86
>> >> > > OS: Windows 2003 Service Pack 2
>> >> > > IIS6 - World Wide Web Publishing (W3SVC) service is installed
>> >> >
>> >> > > [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
>> >> > > ImagePath = C:\WINDOWS\system32\lsass.exe
>> >> > > Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
>> >> > > EnableKernelSsl = False(default)
>> >> > > strmfilt.dll loaded into process 524 (lsass.exe)
>> >> >
>> >> > > [ SChannel Info ]
>> >> > > ServerCacheEntries = 0
>> >> > > ServerActiveEntries = 0
>> >> > > ServerHandshakes = 16
>> >> > > ServerReconnects = 360
>> >> > > CacheSize = 10000
>> >> >
>> >> > > [ W3SVC/1 ]
>> >> > > ServerComment = Default Web Site
>> >> > > ServerAutoStart = True
>> >> > > ServerState = Server started
>> >> > > #Impersonated server account
>> >> > > SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d
>> >> > > 98
>> >> > > 15 c8
>> >> > > SSLStoreName = MY
>> >> > > #CertName = mh30-hq-it
>> >> > > #You have a private key that corresponds to this certificate
>> >> > > #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e9 56-4566-af96-71-396eb73226'
>> >> > > #ProvName='Microsoft RSA SChannel Cryptographic Provider'
>> >> > > ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
>> >> > > #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT,
>> >> > > CN=mh30-hq-it
>> >> > > #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
>> >> > > #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
>> >> > > CertVerifyCertificateChainPolicy succeeded
>> >> > > SecureBindings = 10.180.2.30:443:
>> >> >
>> >> > > [ W3SVC/1/ROOT/_private ]
>> >> > > AccessSSLFlags = 0 (0x0)
>> >> >
>> >> > > [ W3SVC/1/ROOT/_vti_cnf ]
>> >> > > AccessSSLFlags = 0 (0x0)
>> >> >
>> >> > > [ W3SVC/1/ROOT/_vti_log ]
>> >> > > AccessSSLFlags = 0 (0x0)
>> >> >
>> >> > > [ W3SVC/1/ROOT/_vti_pvt ]
>> >> > > AccessSSLFlags = 0 (0x0)
>> >> >
>> >> > > [ W3SVC/1/ROOT/_vti_script ]
>> >> > > AccessSSLFlags = 0 (0x0)
>> >> >
>> >> > > Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
>> >> >
>> >> > > "Justin Rich" wrote:
>> >> >
>> >> > >> nevermind comfort zone, this is getting out of my support realm!
>> >> >
>> >> > >> i would say, since the page pool is so low, its not an issue
>> >> > >> here.
>> >> >
>> >> > >> i would imagine, that since David suggested that its normally
>> >> > >> page
>> >> > >> pool
>> >> > >> that
>> >> > >> causes this issue that its some type of resource shortage.
>> >> >
>> >> > >> your next step would be to run iisdiag stuff. which ive done
>> >> > >> rarely
>> >> > >> and i
>> >> > >> may not be the best person to ask.
>> >> >
>> >> > >> off hand i cant give you directions but if you can figure out and
>> >> > >> run a
>> >> > >> iisdiag i can probably analyze the file for you to see if i can
>> >> > >> spot
>> >> > >> anything.
>> >> >
>> >> > >> Justin
>> >> >
>> >> > >> "Fiona" wrote in message
>> >> > >>news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
>> >> > >> > This is starting to get out of my comfort zone.
>> >> >
>> >> > >> > The paged is 133820
>> >> > >> > Non paged is 109916
>> >> >
>> >> > >> > I haven't managed to find anything else about one nic being
>> >> > >> > enabled or
>> >> > >> > disabled affecting IIS though.
>> >> >
>> >> > >> > Fiona
>> >> >
>> >> > >> > "Justin Rich" wrote:
>> >> >
>> >> > >> >> wow... hmm
>> >> >
>> >> > >> >> thats a new one to me..
>> >> > >> >> David Wang has a blog post about this.
>> >> > >> >>http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO- Diagnose-II...
>> >> >
>> >> > >> >> it looks like its saying its from a shortage of page pool
>> >> > >> >> memory
>> >> > >> >> which
>> >> > >> >> can
>> >> > >> >> be a bear to deal with. his blog post has a bit of a walk
>> >> > >> >> through
>> >> > >> >> and
>> >> > >> >> some
>> >> > >> >> KB's to refer to.
>> >> >
>> >> > >> >> before digging to deep, open up task manager and go to the
>> >> > >> >> performance
>> >> > >> >> tab.
>> >> > >> >> under kernel memory you will see values for paged and non
>> >> > >> >> paged.
>> >> > >> >> the
>> >> > >> >> one
>> >> > >> >> you
>> >> > >> >> care about is the paged pool. if you have anything in the area
>> >> > >> >> of
>> >> > >> >> 280+MB
>> >> > >> >> of
>> >> > >> >> page pool then chances are a shortage of page pool is your
>> >> > >> >> issue
>> >> > >> >> and
>> >> > >> >> your
>> >> > >> >> going to have some work on your hands trying to figure this
>> >> > >> >> one
>> >> > >> >> out.
>> >> >
>> >> > >> >> "Fiona" wrote in message
>> >> > >> >>news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
>> >> > >> >> > Nothing in those logs after 11:41, I tried telnetting at
>> >> > >> >> > 14:13.
>> >> >
>> >> > >> >> > The httperr log shows:
>> >> >
>> >> > >> >> > 2007-11-02 14:13:07 - - - - - - - - -
>> >> > >> >> > 26_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:13:12 - - - - - - - - -
>> >> > >> >> > 34_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:13:17 - - - - - - - - -
>> >> > >> >> > 36_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:13:22 - - - - - - - - -
>> >> > >> >> > 28_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:13:27 - - - - - - - - -
>> >> > >> >> > 26_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:13:32 - - - - - - - - -
>> >> > >> >> > 35_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:13:37 - - - - - - - - -
>> >> > >> >> > 23_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:13:42 - - - - - - - - -
>> >> > >> >> > 16_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:13:47 - - - - - - - - -
>> >> > >> >> > 39_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:13:52 - - - - - - - - -
>> >> > >> >> > 73_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:13:57 - - - - - - - - -
>> >> > >> >> > 34_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:02 - - - - - - - - -
>> >> > >> >> > 23_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:07 - - - - - - - - -
>> >> > >> >> > 21_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:12 - - - - - - - - -
>> >> > >> >> > 19_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:17 - - - - - - - - -
>> >> > >> >> > 27_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:22 - - - - - - - - -
>> >> > >> >> > 29_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:27 - - - - - - - - -
>> >> > >> >> > 35_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:32 - - - - - - - - -
>> >> > >> >> > 56_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:37 - - - - - - - - -
>> >> > >> >> > 23_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:42 - - - - - - - - -
>> >> > >> >> > 40_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:47 - - - - - - - - -
>> >> > >> >> > 32_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:52 - - - - - - - - -
>> >> > >> >> > 27_Connections_Refused -
>> >> > >> >> > 2007-11-02 14:14:57 - - - - - - - - -
>> >> > >> >> > 23_Connections_Refused -
>> >> >
>> >> > >> >> > Fiona
>> >> >
>> >> > >> >> > "Justin Rich" wrote:
>> >> >
>> >> > >> >> >> so the interesting part here is that a telnet connected and
>> >> > >> >> >> kicked
>> >> > >> >> >> you
>> >> > >> >> >> out... you'll want to look at the IIS logs now to see why
>> >> > >> >> >> it
>> >> > >> >> >> kicked
>> >> > >> >> >> you
>> >> > >> >> >> out.
>> >> >
>> >> > >> >> >> the logs are located at C:\WINDOWS\system32\LogFiles\W3SVC1
>> >> > >> >> >> try the telnet again and then look at the logs. it should
>> >> > >> >> >> give
>> >> > >> >> >> some
>> >> > >> >> >> info
>> >> > >> >> >> as
>> >> > >> >> >> to why you are being rejected.

Re: Page cannot be displayed

Hi Justin,

I wasn't the one who turned it on but also I never realised it could create
problems like this.

After removing the setting and rebooting the server last night all appears
to be well! I'm keeping my fingers crossed.

Thanks for all your help.

Fiona

"Justin Rich" wrote:

> is that to say you have no reason for the /3gb switch or you werent the one
> to turn it on?
>
> I think that link i gave you goes over it very well but if you have any
> questions in regards to the /3gb let me know.
>
> Justin
>
> "Fiona" wrote in message
> news:B1CA1820-0B70-4FEE-AE3B-81780C643519@microsoft.com...
> > Hmmm, I certainly wasn't aware of that!
> >
> > I'll remove the /3GB switch and reboot the server overnight to see if that
> > helps.
> >
> > Fiona
> >
> > "Justin Rich" wrote:
> >
> >> ohh, you're using the /3GB? why?
> >>
> >> chances are you want to shut that off, but i'll wait for you reasoning
> >> behind that :)
> >>
> >> http://blogs.technet.com/askperf/archive/2007/03/23/memory-m anagement-demystifying-3gb.aspx
> >>
> >> those guys have a lot of great posts on memory related topics, fairly
> >> advanced but pretty good.
> >>
> >> this could actually be causing your problem.
> >>
> >> Justin
> >>
> >> "Fiona" wrote in message
> >> news:92838DB8-7B4C-4A97-86F7-80831B9454DC@microsoft.com...
> >> > David,
> >> >
> >> > As far as I'm aware the server is set up correctly for two nics. One
> >> > is
> >> > used purely for backup and has no gateway or dns settings, the other is
> >> > the
> >> > main network connection.
> >> >
> >> > The figures posted were from Performance Manager, I've run poolmon but
> >> > am
> >> > not sure how to post the results here as they're too long.
> >> >
> >> > The server has 4GB of RAM and is using the /3GB switch.
> >> >
> >> > Fiona
> >> >
> >> > "David Wang" wrote:
> >> >
> >> >> On machines with multiple NICs, you must configure networking
> >> >> properly, as described here:
> >> >> http://groups.google.com/group/microsoft.public.inetserver.i is/browse_thread/thread/f1ff0e742f4e55ae/75c32cda18232f96?ln k=stKc32cda18232f96
> >> >>
> >> >> The symptoms will be that with multiple NICs enabled, IIS website is
> >> >> sporadically not accessible.
> >> >>
> >> >> Let's first get networking configured correctly for multi-homed
> >> >> network configuration before looking at Connections_Refused.
> >> >>
> >> >> SSL is really not in the picture, and SSLDiag is not going to be
> >> >> relevant.
> >> >>
> >> >> > The paged is 133820
> >> >> > Non paged is 109916
> >> >>
> >> >> With your prior numbers, is that from POOLMON in KB? If so, that is
> >> >> about 110MB NonPaged Pool, which is near exhaustion for a 2GB RAM
> >> >> 32bit Machine. You want to go through my Blog article's instructions
> >> >> (and many other people's friendly findings!) to identify the kernel
> >> >> mode driver using the non-paged pool. Several times the culprit has
> >> >> been a FileSystem filter driver for AntiVirus. Or Network Driver. Or
> >> >> Monitoring software by Computer Manufacturer leaking memory. And it
> >> >> all gets blamed as Microsoft's problem with "Windows"...
> >> >>
> >> >>
> >> >> //David
> >> >> http://w3-4u.blogspot.com
> >> >> http://blogs.msdn.com/David.Wang
> >> >> //
> >> >>
> >> >>
> >> >>
> >> >>
> >> >> On Nov 5, 5:57 am, "Justin Rich" wrote:
> >> >> > after doing some reading on the connections_refused it looks like
> >> >> > its
> >> >> > actually a shortage of non paged pool which is a kernal mode
> >> >> > resource.
> >> >> > this
> >> >> > means that its probably a drivers thats causing this issue.
> >> >> >
> >> >> > the post i had given you before from David Wang has some pretty good
> >> >> > directions.http://blogs.msdn.com/david.wang/archive/2005/09/ 21/HOWTO-Diagnose-II...
> >> >> >
> >> >> > if this is a 2k3 server then you can easily run poolmon and get a
> >> >> > screen
> >> >> > capture of whats going on.
> >> >> >
> >> >> > once IIS stops responding to requests run the poolmon -b as David
> >> >> > states and
> >> >> > look for the largest user of NPP.
> >> >> >
> >> >> > from what i can tell the only time you should see the
> >> >> > Connections_Refused is
> >> >> > in the case of a shortage of
> >> >> > NPP.http://support.microsoft.com/?id=820729
> >> >> >
> >> >> > based on the snapshot you gave me of your paged and non paged this
> >> >> > shouldnt
> >> >> > be the case, but i suspect the numbers you gave me for PP and NPP
> >> >> > were
> >> >> > before the system became unstable (shortly after a reboot)
> >> >> >
> >> >> > now based on the fact that this seems to die fairly quick when you
> >> >> > enable
> >> >> > the second nic there is a pretty decent chance that updating your
> >> >> > NIC
> >> >> > drivers may fix this. I would suggest that if you dont feel
> >> >> > comfortable
> >> >> > really digging in to this that you just go find the newest drivers
> >> >> > for
> >> >> > everything you have and perhaps disable any services you dont use to
> >> >> > minimize the need of NPP.
> >> >> >
> >> >> > If you do want to dig in to this get the poolmon info and we can
> >> >> > take
> >> >> > it
> >> >> > from there.
> >> >> >
> >> >> > Justin
> >> >> >
> >> >> > "Fiona" wrote in message
> >> >> >
> >> >> > news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
> >> >> >
> >> >> >
> >> >> >
> >> >> > > Hi Justin,
> >> >> >
> >> >> > > I'm not sure which ones to run but the website is still not
> >> >> > > working
> >> >> > > unless
> >> >> > > I
> >> >> > > disable the second nic.
> >> >> >
> >> >> > > WFetch gives:
> >> >> >
> >> >> > > Failed to negotiate secure connection with localhost - port 443
> >> >> >
> >> >> > > While SSL Diagnostics gives:
> >> >> >
> >> >> > > System time: Mon, 05 Nov 2007 11:58:03 GMT
> >> >> > > ModuleFileName: C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe
> >> >> > > version:
> >> >> > > 1.1:34.0
> >> >> > > CommandLine: "C:\Program Files\IIS Resources\SSLDiag\SSLDiag.exe"
> >> >> > > ProcessorArchitecture: x86
> >> >> > > OS: Windows 2003 Service Pack 2
> >> >> > > IIS6 - World Wide Web Publishing (W3SVC) service is installed
> >> >> >
> >> >> > > [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
> >> >> > > ImagePath = C:\WINDOWS\system32\lsass.exe
> >> >> > > Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
> >> >> > > EnableKernelSsl = False(default)
> >> >> > > strmfilt.dll loaded into process 524 (lsass.exe)
> >> >> >
> >> >> > > [ SChannel Info ]
> >> >> > > ServerCacheEntries = 0
> >> >> > > ServerActiveEntries = 0
> >> >> > > ServerHandshakes = 16
> >> >> > > ServerReconnects = 360
> >> >> > > CacheSize = 10000
> >> >> >
> >> >> > > [ W3SVC/1 ]
> >> >> > > ServerComment = Default Web Site
> >> >> > > ServerAutoStart = True
> >> >> > > ServerState = Server started
> >> >> > > #Impersonated server account
> >> >> > > SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb 7d
> >> >> > > 98
> >> >> > > 15 c8
> >> >> > > SSLStoreName = MY
> >> >> > > #CertName = mh30-hq-it
> >> >> > > #You have a private key that corresponds to this certificate
> >> >> > > #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e9 56-4566-af96-71-396eb73226'
> >> >> > > #ProvName='Microsoft RSA SChannel Cryptographic Provider'
> >> >> > > ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
> >> >> > > #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT,
> >> >> > > CN=mh30-hq-it
> >> >> > > #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
> >> >> > > #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
> >> >> > > CertVerifyCertificateChainPolicy succeeded
> >> >> > > SecureBindings = 10.180.2.30:443:
> >> >> >
> >> >> > > [ W3SVC/1/ROOT/_private ]
> >> >> > > AccessSSLFlags = 0 (0x0)
> >> >> >
> >> >> > > [ W3SVC/1/ROOT/_vti_cnf ]
> >> >> > > AccessSSLFlags = 0 (0x0)
> >> >> >
> >> >> > > [ W3SVC/1/ROOT/_vti_log ]
> >> >> > > AccessSSLFlags = 0 (0x0)
> >> >> >
> >> >> > > [ W3SVC/1/ROOT/_vti_pvt ]
> >> >> > > AccessSSLFlags = 0 (0x0)
> >> >> >
> >> >> > > [ W3SVC/1/ROOT/_vti_script ]
> >> >> > > AccessSSLFlags = 0 (0x0)
> >> >> >
> >> >> > > Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05 GMT
> >> >> >
> >> >> > > "Justin Rich" wrote:
> >> >> >
> >> >> > >> nevermind comfort zone, this is getting out of my support realm!
> >> >> >
> >> >> > >> i would say, since the page pool is so low, its not an issue
> >> >> > >> here.
> >> >> >
> >> >> > >> i would imagine, that since David suggested that its normally
> >> >> > >> page
> >> >> > >> pool
> >> >> > >> that
> >> >> > >> causes this issue that its some type of resource shortage.
> >> >> >
> >> >> > >> your next step would be to run iisdiag stuff. which ive done
> >> >> > >> rarely
> >> >> > >> and i
> >> >> > >> may not be the best person to ask.
> >> >> >
> >> >> > >> off hand i cant give you directions but if you can figure out and
> >> >> > >> run a
> >> >> > >> iisdiag i can probably analyze the file for you to see if i can
> >> >> > >> spot
> >> >> > >> anything.
> >> >> >
> >> >> > >> Justin
> >> >> >
> >> >> > >> "Fiona" wrote in message
> >> >> > >>news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
> >> >> > >> > This is starting to get out of my comfort zone.
> >> >> >
> >> >> > >> > The paged is 133820
> >> >> > >> > Non paged is 109916
> >> >> >
> >> >> > >> > I haven't managed to find anything else about one nic being
> >> >> > >> > enabled or
> >> >> > >> > disabled affecting IIS though.
> >> >> >
> >> >> > >> > Fiona
> >> >> >
> >> >> > >> > "Justin Rich" wrote:
> >> >> >
> >> >> > >> >> wow... hmm
> >> >> >
> >> >> > >> >> thats a new one to me..
> >> >> > >> >> David Wang has a blog post about this.
> >> >> > >> >>http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO- Diagnose-II...
> >> >> >
> >> >> > >> >> it looks like its saying its from a shortage of page pool
> >> >> > >> >> memory
> >> >> > >> >> which
> >> >> > >> >> can
> >> >> > >> >> be a bear to deal with. his blog post has a bit of a walk
> >> >> > >> >> through
> >> >> > >> >> and
> >> >> > >> >> some
> >> >> > >> >> KB's to refer to.
> >> >> >
> >> >> > >> >> before digging to deep, open up task manager and go to the
> >> >> > >> >> performance
> >> >> > >> >> tab.
> >> >> > >> >> under kernel memory you will see values for paged and non
> >> >> > >> >> paged.
> >> >> > >> >> the
> >> >> > >> >> one
> >> >> > >> >> you
> >> >> > >> >> care about is the paged pool. if you have anything in the area
> >> >> > >> >> of
> >> >> > >> >> 280+MB
> >> >> > >> >> of
> >> >> > >> >> page pool then chances are a shortage of page pool is your
> >> >> > >> >> issue
> >> >> > >> >> and
> >> >> > >> >> your
> >> >> > >> >> going to have some work on your hands trying to figure this
> >> >> > >> >> one
> >> >> > >> >> out.
> >> >> >
> >> >> > >> >> "Fiona" wrote in message
> >> >> > >> >>news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
> >> >> > >> >> > Nothing in those logs after 11:41, I tried telnetting at
> >> >> > >> >> > 14:13.
> >> >> >
> >> >> > >> >> > The httperr log shows:
> >> >> >
> >> >> > >> >> > 2007-11-02 14:13:07 - - - - - - - - -

Re: Page cannot be displayed

hopefull that works out well for you.

its pretty rare that the /3gb switch is of any value. basically if you have
a box with ONLY an exchange mailbox server or SQL server, other than that i
havent seen it be good for much..

Justin

"Fiona" wrote in message
news:EF7282AB-BF76-40C8-A242-5D2B2797BE0A@microsoft.com...
> Hi Justin,
>
> I wasn't the one who turned it on but also I never realised it could
> create
> problems like this.
>
> After removing the setting and rebooting the server last night all appears
> to be well! I'm keeping my fingers crossed.
>
> Thanks for all your help.
>
> Fiona
>
> "Justin Rich" wrote:
>
>> is that to say you have no reason for the /3gb switch or you werent the
>> one
>> to turn it on?
>>
>> I think that link i gave you goes over it very well but if you have any
>> questions in regards to the /3gb let me know.
>>
>> Justin
>>
>> "Fiona" wrote in message
>> news:B1CA1820-0B70-4FEE-AE3B-81780C643519@microsoft.com...
>> > Hmmm, I certainly wasn't aware of that!
>> >
>> > I'll remove the /3GB switch and reboot the server overnight to see if
>> > that
>> > helps.
>> >
>> > Fiona
>> >
>> > "Justin Rich" wrote:
>> >
>> >> ohh, you're using the /3GB? why?
>> >>
>> >> chances are you want to shut that off, but i'll wait for you reasoning
>> >> behind that :)
>> >>
>> >> http://blogs.technet.com/askperf/archive/2007/03/23/memory-m anagement-demystifying-3gb.aspx
>> >>
>> >> those guys have a lot of great posts on memory related topics, fairly
>> >> advanced but pretty good.
>> >>
>> >> this could actually be causing your problem.
>> >>
>> >> Justin
>> >>
>> >> "Fiona" wrote in message
>> >> news:92838DB8-7B4C-4A97-86F7-80831B9454DC@microsoft.com...
>> >> > David,
>> >> >
>> >> > As far as I'm aware the server is set up correctly for two nics.
>> >> > One
>> >> > is
>> >> > used purely for backup and has no gateway or dns settings, the other
>> >> > is
>> >> > the
>> >> > main network connection.
>> >> >
>> >> > The figures posted were from Performance Manager, I've run poolmon
>> >> > but
>> >> > am
>> >> > not sure how to post the results here as they're too long.
>> >> >
>> >> > The server has 4GB of RAM and is using the /3GB switch.
>> >> >
>> >> > Fiona
>> >> >
>> >> > "David Wang" wrote:
>> >> >
>> >> >> On machines with multiple NICs, you must configure networking
>> >> >> properly, as described here:
>> >> >> http://groups.google.com/group/microsoft.public.inetserver.i is/browse_thread/thread/f1ff0e742f4e55ae/75c32cda18232f96?ln k=stKc32cda18232f96
>> >> >>
>> >> >> The symptoms will be that with multiple NICs enabled, IIS website
>> >> >> is
>> >> >> sporadically not accessible.
>> >> >>
>> >> >> Let's first get networking configured correctly for multi-homed
>> >> >> network configuration before looking at Connections_Refused.
>> >> >>
>> >> >> SSL is really not in the picture, and SSLDiag is not going to be
>> >> >> relevant.
>> >> >>
>> >> >> > The paged is 133820
>> >> >> > Non paged is 109916
>> >> >>
>> >> >> With your prior numbers, is that from POOLMON in KB? If so, that is
>> >> >> about 110MB NonPaged Pool, which is near exhaustion for a 2GB RAM
>> >> >> 32bit Machine. You want to go through my Blog article's
>> >> >> instructions
>> >> >> (and many other people's friendly findings!) to identify the kernel
>> >> >> mode driver using the non-paged pool. Several times the culprit has
>> >> >> been a FileSystem filter driver for AntiVirus. Or Network Driver.
>> >> >> Or
>> >> >> Monitoring software by Computer Manufacturer leaking memory. And it
>> >> >> all gets blamed as Microsoft's problem with "Windows"...
>> >> >>
>> >> >>
>> >> >> //David
>> >> >> http://w3-4u.blogspot.com
>> >> >> http://blogs.msdn.com/David.Wang
>> >> >> //
>> >> >>
>> >> >>
>> >> >>
>> >> >>
>> >> >> On Nov 5, 5:57 am, "Justin Rich" wrote:
>> >> >> > after doing some reading on the connections_refused it looks like
>> >> >> > its
>> >> >> > actually a shortage of non paged pool which is a kernal mode
>> >> >> > resource.
>> >> >> > this
>> >> >> > means that its probably a drivers thats causing this issue.
>> >> >> >
>> >> >> > the post i had given you before from David Wang has some pretty
>> >> >> > good
>> >> >> > directions.http://blogs.msdn.com/david.wang/archive/2005/09/ 21/HOWTO-Diagnose-II...
>> >> >> >
>> >> >> > if this is a 2k3 server then you can easily run poolmon and get a
>> >> >> > screen
>> >> >> > capture of whats going on.
>> >> >> >
>> >> >> > once IIS stops responding to requests run the poolmon -b as David
>> >> >> > states and
>> >> >> > look for the largest user of NPP.
>> >> >> >
>> >> >> > from what i can tell the only time you should see the
>> >> >> > Connections_Refused is
>> >> >> > in the case of a shortage of
>> >> >> > NPP.http://support.microsoft.com/?id=820729
>> >> >> >
>> >> >> > based on the snapshot you gave me of your paged and non paged
>> >> >> > this
>> >> >> > shouldnt
>> >> >> > be the case, but i suspect the numbers you gave me for PP and NPP
>> >> >> > were
>> >> >> > before the system became unstable (shortly after a reboot)
>> >> >> >
>> >> >> > now based on the fact that this seems to die fairly quick when
>> >> >> > you
>> >> >> > enable
>> >> >> > the second nic there is a pretty decent chance that updating your
>> >> >> > NIC
>> >> >> > drivers may fix this. I would suggest that if you dont feel
>> >> >> > comfortable
>> >> >> > really digging in to this that you just go find the newest
>> >> >> > drivers
>> >> >> > for
>> >> >> > everything you have and perhaps disable any services you dont use
>> >> >> > to
>> >> >> > minimize the need of NPP.
>> >> >> >
>> >> >> > If you do want to dig in to this get the poolmon info and we can
>> >> >> > take
>> >> >> > it
>> >> >> > from there.
>> >> >> >
>> >> >> > Justin
>> >> >> >
>> >> >> > "Fiona" wrote in message
>> >> >> >
>> >> >> > news:1CBF40D2-E840-4B3A-BB31-EA0A09712176@microsoft.com...
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >> > > Hi Justin,
>> >> >> >
>> >> >> > > I'm not sure which ones to run but the website is still not
>> >> >> > > working
>> >> >> > > unless
>> >> >> > > I
>> >> >> > > disable the second nic.
>> >> >> >
>> >> >> > > WFetch gives:
>> >> >> >
>> >> >> > > Failed to negotiate secure connection with localhost - port 443
>> >> >> >
>> >> >> > > While SSL Diagnostics gives:
>> >> >> >
>> >> >> > > System time: Mon, 05 Nov 2007 11:58:03 GMT
>> >> >> > > ModuleFileName: C:\Program Files\IIS
>> >> >> > > Resources\SSLDiag\SSLDiag.exe
>> >> >> > > version:
>> >> >> > > 1.1:34.0
>> >> >> > > CommandLine: "C:\Program Files\IIS
>> >> >> > > Resources\SSLDiag\SSLDiag.exe"
>> >> >> > > ProcessorArchitecture: x86
>> >> >> > > OS: Windows 2003 Service Pack 2
>> >> >> > > IIS6 - World Wide Web Publishing (W3SVC) service is installed
>> >> >> >
>> >> >> > > [ HKLM\System\CurrentControlSet\Services\HTTPFilter ]
>> >> >> > > ImagePath = C:\WINDOWS\system32\lsass.exe
>> >> >> > > Parameters\CertChainCacheOnlyUrlRetrieval = True(default)
>> >> >> > > EnableKernelSsl = False(default)
>> >> >> > > strmfilt.dll loaded into process 524 (lsass.exe)
>> >> >> >
>> >> >> > > [ SChannel Info ]
>> >> >> > > ServerCacheEntries = 0
>> >> >> > > ServerActiveEntries = 0
>> >> >> > > ServerHandshakes = 16
>> >> >> > > ServerReconnects = 360
>> >> >> > > CacheSize = 10000
>> >> >> >
>> >> >> > > [ W3SVC/1 ]
>> >> >> > > ServerComment = Default Web Site
>> >> >> > > ServerAutoStart = True
>> >> >> > > ServerState = Server started
>> >> >> > > #Impersonated server account
>> >> >> > > SSLCertHash = cf 95 76 99 3a 37 bb 1b 24 da 18 04 84 da 8e cb
>> >> >> > > 7d
>> >> >> > > 98
>> >> >> > > 15 c8
>> >> >> > > SSLStoreName = MY
>> >> >> > > #CertName = mh30-hq-it
>> >> >> > > #You have a private key that corresponds to this certificate
>> >> >> > > #ContainerName='41a01258a53be107284bd4516ea40e07_0bb9d07a-e9 56-4566-af96-71-396eb73226'
>> >> >> > > #ProvName='Microsoft RSA SChannel Cryptographic Provider'
>> >> >> > > ProvType=PROV_RSA_SCHANNEL KeySpec=AT_KEYEXCHANGE
>> >> >> > > #Subject: C=GB, S=London, L=London, O=ELCMHT, OU=ELCMHT,
>> >> >> > > CN=mh30-hq-it
>> >> >> > > #Issuer: DC=uk, DC=nhs, DC=xelcmht, CN=mhdc14
>> >> >> > > #Validity: From 31/10/2007 11:07:38 To 30/10/2009 11:07:38
>> >> >> > > CertVerifyCertificateChainPolicy succeeded
>> >> >> > > SecureBindings = 10.180.2.30:443:
>> >> >> >
>> >> >> > > [ W3SVC/1/ROOT/_private ]
>> >> >> > > AccessSSLFlags = 0 (0x0)
>> >> >> >
>> >> >> > > [ W3SVC/1/ROOT/_vti_cnf ]
>> >> >> > > AccessSSLFlags = 0 (0x0)
>> >> >> >
>> >> >> > > [ W3SVC/1/ROOT/_vti_log ]
>> >> >> > > AccessSSLFlags = 0 (0x0)
>> >> >> >
>> >> >> > > [ W3SVC/1/ROOT/_vti_pvt ]
>> >> >> > > AccessSSLFlags = 0 (0x0)
>> >> >> >
>> >> >> > > [ W3SVC/1/ROOT/_vti_script ]
>> >> >> > > AccessSSLFlags = 0 (0x0)
>> >> >> >
>> >> >> > > Diagnostics complete, system time: Mon, 05 Nov 2007 11:58:05
>> >> >> > > GMT
>> >> >> >
>> >> >> > > "Justin Rich" wrote:
>> >> >> >
>> >> >> > >> nevermind comfort zone, this is getting out of my support
>> >> >> > >> realm!
>> >> >> >
>> >> >> > >> i would say, since the page pool is so low, its not an issue
>> >> >> > >> here.
>> >> >> >
>> >> >> > >> i would imagine, that since David suggested that its normally
>> >> >> > >> page
>> >> >> > >> pool
>> >> >> > >> that
>> >> >> > >> causes this issue that its some type of resource shortage.
>> >> >> >
>> >> >> > >> your next step would be to run iisdiag stuff. which ive done
>> >> >> > >> rarely
>> >> >> > >> and i
>> >> >> > >> may not be the best person to ask.
>> >> >> >
>> >> >> > >> off hand i cant give you directions but if you can figure out
>> >> >> > >> and
>> >> >> > >> run a
>> >> >> > >> iisdiag i can probably analyze the file for you to see if i
>> >> >> > >> can
>> >> >> > >> spot
>> >> >> > >> anything.
>> >> >> >
>> >> >> > >> Justin
>> >> >> >
>> >> >> > >> "Fiona" wrote in message
>> >> >> > >>news:9C45ED65-ACDF-4B10-A4F3-888BE156E991@microsoft.com...
>> >> >> > >> > This is starting to get out of my comfort zone.
>> >> >> >
>> >> >> > >> > The paged is 133820
>> >> >> > >> > Non paged is 109916
>> >> >> >
>> >> >> > >> > I haven't managed to find anything else about one nic being
>> >> >> > >> > enabled or
>> >> >> > >> > disabled affecting IIS though.
>> >> >> >
>> >> >> > >> > Fiona
>> >> >> >
>> >> >> > >> > "Justin Rich" wrote:
>> >> >> >
>> >> >> > >> >> wow... hmm
>> >> >> >
>> >> >> > >> >> thats a new one to me..
>> >> >> > >> >> David Wang has a blog post about this.
>> >> >> > >> >>http://blogs.msdn.com/david.wang/archive/2005/09/21/HOWTO- Diagnose-II...
>> >> >> >
>> >> >> > >> >> it looks like its saying its from a shortage of page pool
>> >> >> > >> >> memory
>> >> >> > >> >> which
>> >> >> > >> >> can
>> >> >> > >> >> be a bear to deal with. his blog post has a bit of a walk
>> >> >> > >> >> through
>> >> >> > >> >> and
>> >> >> > >> >> some
>> >> >> > >> >> KB's to refer to.
>> >> >> >
>> >> >> > >> >> before digging to deep, open up task manager and go to the
>> >> >> > >> >> performance
>> >> >> > >> >> tab.
>> >> >> > >> >> under kernel memory you will see values for paged and non
>> >> >> > >> >> paged.
>> >> >> > >> >> the
>> >> >> > >> >> one
>> >> >> > >> >> you
>> >> >> > >> >> care about is the paged pool. if you have anything in the
>> >> >> > >> >> area
>> >> >> > >> >> of
>> >> >> > >> >> 280+MB
>> >> >> > >> >> of
>> >> >> > >> >> page pool then chances are a shortage of page pool is your
>> >> >> > >> >> issue
>> >> >> > >> >> and
>> >> >> > >> >> your
>> >> >> > >> >> going to have some work on your hands trying to figure this
>> >> >> > >> >> one
>> >> >> > >> >> out.
>> >> >> >
>> >> >> > >> >> "Fiona" wrote in message
>> >> >> > >> >>news:204E7FB4-C56F-48BF-A5BA-C3269D30BE85@microsoft.com...
>> >> >> > >> >> > Nothing in those logs after 11:41, I tried telnetting at
>> >> >> > >> >> > 14:13.
>> >> >> >
>> >> >> > >> >> > The httperr log shows:
>> >> >> >
>> >> >> > >> >> > 2007-11-02 14:13:07 - - - - - - - - -