DLLHOST.EXE and Secure Server Crash

From: Kimon Stergakos (k.stergakos@medmal.com)
Date: 09/06/02


From: "Kimon Stergakos" <k.stergakos@medmal.com>
Date: Thu, 5 Sep 2002 21:20:42 -0700


I recently installed a new Windows 2k Server with default
IIS install options. We also installed Citrix Metaframe on
another server. On the server with IIS I installed Nfuse
1.7 which is a web component of Citrix Metaframe. This
server is not heavily used but after 1 week of
installation the server with IIS got a dllhost.exe popup
error which would shutdown all of IIS. I coulc not even
get to the default site. This has happened about 3 times
each about a week apart. I haven't looked to see CPU or
memeory consumption but I did do what you recommended
below. I found that the PID of the dllhost.exe is matched
to the IIS Out-Of-Process Pooled Applications. According
to you it's the code that needs to be modified. Since this
program is a Citrix product is there any way to isolate
which asp page is running anything that may be causing
this problem?

>-----Original Message-----
>Hi there,
>
>Try to locate the COM+ process linked to the runaway DLL
>process. You can do this by matching the process ID to
the
>process ID displayed in Component Manager (in the COM+
>Applications view switch to Status View)
>
>This should point you to the failing COM+ application
>running inside dllhost.exe.
>
>If the application is IIS Out-Of-Process Pooled
>Applications then the problem is in your ASP code and
>whatever COM component it is calling at the time. In this
>case try using the IIS Exception Monitor
>(http://www.microsoft.com/technet/treeview/default.asp?
>url=/technet/prodtechnol/iis/downloads/ixcptmon.asp) to
>create a dump and examine it.
>
>Other than the above try putting all your COM components
>in separate COM+ applications and run them as Server
>Applications. This will create different dllhost.exe
>processes for each component allowing you to narrow down
>the problematic one.
>
>I hope this helps, post your progress here please.
>
>Regards,
>Tibor Biro
>
>>-----Original Message-----
>>We seriously need help with this one:
>>
>>1. We are medium-size, medium volume transaction
>ecommerce site running IIS
>>5.0 on Windows Server 2000 (SP2 and 3). We run between 6-
>8 front end servers
>>(HTTP) with 2-3 dedicated SSL servers. We have very few
>COM objects (a third
>>party mailer object, two online payment verification
>objects), with the bulk
>>of the application written in ASP (using VBScript).
>Not .NET Framework
>>installed on any of the servers.
>>2. Somewhere around mid- to late July the SSL servers
>began to inexplicably
>>crash. The problem continues up to the present. The HTTP
>front end servers
>>do not seem to be effected. Through troubleshooting
>steps, we have
>>eliminated two pieces of software we installed at
roughly
>the same time as
>>possible suspects. We also performed a code review in
the
>secure area at the
>>same time.
>>
>> 3. A symptom of the problem centers around memory
>consumption by the
>>dllhost.exe process. Typically, memory consumption is
>observed to increase
>>until an error is thrown--"Address cannot be read,
>dllhost.exe." After
>>attaching Windows Debugger to a runaway dllhost.exe
>process, there are two
>>things to note: A). access is denied to the loaded
module
>listing, and B).
>>the expanded info on each dllhost.exe instantiation
>reports on info coming
>>from Component Services. In one instance, the mailer
>object was listed, and
>>in most of the others, the IIS Out-Of-Process Pooled
>Applications (The Web
>>Applications Manager).
>>
>>QUESTIONS:
>>
>>1. I would like to get more information on DLLHOST.EXE.
>Specifically: How
>>does it work? How can I safely view the modules it is
>loading (Again, the
>>Debugger does not allow access to the proccesses). Any
>help here would be
>>greatly appreciated, as there seems to be a complete
>dearth of info out
>>there on the subject. Also, more info on the IIS Out-Of-
>Process Pooled
>>Applications would be great. What little info I've found
>is well-nigh
>>incomprehensible.
>>
>>2. What are some of the common reasons for excessive
>DLLHOST.EXE memory
>>consumption? Does anyone have a list of ASP/ADO errors
>that could lead to
>>problem we're dealing with? With the software eliminated
>as a possibility,
>>we're going to take another look at the ASP code again.
>>
>>Any suggestions?
>>
>>
>>
>>
>>
>>
>>
>>.
>>
>.
>



Relevant Pages

  • Re: I hate IIS - "Server Application Unavailable" error message
    ... I would but there is not "Application Pools" underneath the local ... Did you install, at least, the Web or Standard versions of Windows Server 2003? ... except when you choose to install IIS on a domain controller. ...
    (microsoft.public.dotnet.framework.aspnet)
  • RE: IIS Key pairs (how to export an IIS 4.0 self-issued Root CA a nd import into new IIS 4.0 box)
    ... IIS key to an Intel SSL acelerator ... it issues client certificates to the end users. ... Step I - Installing the New Server ... Install NT SP 3 ONLY ...
    (Focus-Microsoft)
  • RE: Internet printing
    ... Configuring the IPP Print Server: ... (IIS is synonymous with PWS, Peer Web Services, which is what ... -This will install and configure basic IIS on the current machine. ...
    (microsoft.public.windows.server.sbs)
  • Re: No DHCP in administrative tools
    ... OK, we need to install the DHCP service, but we're gonna hold of a mo' on ... In computer management, expand IIS, expand websites, which sites do you ... SQL Server Config ...
    (microsoft.public.windows.server.sbs)
  • Re: OWA 403 Forbidden, POP3,
    ... Is there a way to just re-install the IIS components to a set of Default ... incorrect type of install of Trend not in a virtual directory was probably ... From your post, I understand you after you rebuild SBS Server, you ... Go to your "%SystemRoot%\IIS Temporary Compressed Files" ...
    (microsoft.public.windows.server.sbs)