DLLHOST.EXE and Secure Server Crash
From: Kimon Stergakos (k.stergakos@medmal.com)
Date: 09/06/02
- Next message: Andrew East: "LDAP/SSL/IIS"
- Previous message: BB: "Re: IIS Security Policies - Need some help guys"
- In reply to: Tibor Biro: "DLLHOST.EXE and Secure Server Crash"
- Next in thread: Paul Lynch: "Re: DLLHOST.EXE and Secure Server Crash"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Kimon Stergakos" <k.stergakos@medmal.com> Date: Thu, 5 Sep 2002 21:20:42 -0700
I recently installed a new Windows 2k Server with default
IIS install options. We also installed Citrix Metaframe on
another server. On the server with IIS I installed Nfuse
1.7 which is a web component of Citrix Metaframe. This
server is not heavily used but after 1 week of
installation the server with IIS got a dllhost.exe popup
error which would shutdown all of IIS. I coulc not even
get to the default site. This has happened about 3 times
each about a week apart. I haven't looked to see CPU or
memeory consumption but I did do what you recommended
below. I found that the PID of the dllhost.exe is matched
to the IIS Out-Of-Process Pooled Applications. According
to you it's the code that needs to be modified. Since this
program is a Citrix product is there any way to isolate
which asp page is running anything that may be causing
this problem?
>-----Original Message-----
>Hi there,
>
>Try to locate the COM+ process linked to the runaway DLL
>process. You can do this by matching the process ID to
the
>process ID displayed in Component Manager (in the COM+
>Applications view switch to Status View)
>
>This should point you to the failing COM+ application
>running inside dllhost.exe.
>
>If the application is IIS Out-Of-Process Pooled
>Applications then the problem is in your ASP code and
>whatever COM component it is calling at the time. In this
>case try using the IIS Exception Monitor
>(http://www.microsoft.com/technet/treeview/default.asp?
>url=/technet/prodtechnol/iis/downloads/ixcptmon.asp) to
>create a dump and examine it.
>
>Other than the above try putting all your COM components
>in separate COM+ applications and run them as Server
>Applications. This will create different dllhost.exe
>processes for each component allowing you to narrow down
>the problematic one.
>
>I hope this helps, post your progress here please.
>
>Regards,
>Tibor Biro
>
>>-----Original Message-----
>>We seriously need help with this one:
>>
>>1. We are medium-size, medium volume transaction
>ecommerce site running IIS
>>5.0 on Windows Server 2000 (SP2 and 3). We run between 6-
>8 front end servers
>>(HTTP) with 2-3 dedicated SSL servers. We have very few
>COM objects (a third
>>party mailer object, two online payment verification
>objects), with the bulk
>>of the application written in ASP (using VBScript).
>Not .NET Framework
>>installed on any of the servers.
>>2. Somewhere around mid- to late July the SSL servers
>began to inexplicably
>>crash. The problem continues up to the present. The HTTP
>front end servers
>>do not seem to be effected. Through troubleshooting
>steps, we have
>>eliminated two pieces of software we installed at
roughly
>the same time as
>>possible suspects. We also performed a code review in
the
>secure area at the
>>same time.
>>
>> 3. A symptom of the problem centers around memory
>consumption by the
>>dllhost.exe process. Typically, memory consumption is
>observed to increase
>>until an error is thrown--"Address cannot be read,
>dllhost.exe." After
>>attaching Windows Debugger to a runaway dllhost.exe
>process, there are two
>>things to note: A). access is denied to the loaded
module
>listing, and B).
>>the expanded info on each dllhost.exe instantiation
>reports on info coming
>>from Component Services. In one instance, the mailer
>object was listed, and
>>in most of the others, the IIS Out-Of-Process Pooled
>Applications (The Web
>>Applications Manager).
>>
>>QUESTIONS:
>>
>>1. I would like to get more information on DLLHOST.EXE.
>Specifically: How
>>does it work? How can I safely view the modules it is
>loading (Again, the
>>Debugger does not allow access to the proccesses). Any
>help here would be
>>greatly appreciated, as there seems to be a complete
>dearth of info out
>>there on the subject. Also, more info on the IIS Out-Of-
>Process Pooled
>>Applications would be great. What little info I've found
>is well-nigh
>>incomprehensible.
>>
>>2. What are some of the common reasons for excessive
>DLLHOST.EXE memory
>>consumption? Does anyone have a list of ASP/ADO errors
>that could lead to
>>problem we're dealing with? With the software eliminated
>as a possibility,
>>we're going to take another look at the ASP code again.
>>
>>Any suggestions?
>>
>>
>>
>>
>>
>>
>>
>>.
>>
>.
>
- Next message: Andrew East: "LDAP/SSL/IIS"
- Previous message: BB: "Re: IIS Security Policies - Need some help guys"
- In reply to: Tibor Biro: "DLLHOST.EXE and Secure Server Crash"
- Next in thread: Paul Lynch: "Re: DLLHOST.EXE and Secure Server Crash"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|