Re: Log files indicate IIS restart? Or worker process recycling

From: Bernard (qbernard_at_hotmail.com.discuss)
Date: 09/10/04


Date: Fri, 10 Sep 2004 12:51:08 +0800

By default app pool idle shutdown is 20 mins
and recycle the pool after 1740 mins

check if this is relate to the 20mins interval.

-- 
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/
"SA" <informatica@freemail.nl> wrote in message
news:eokp5GrlEHA.3520@TK2MSFTNGP11.phx.gbl...
> Hi all,
>
> The IIS W3C format logs of a web site frequently have the following lines
in
> them
>
> #Software: Microsoft Internet Information Services 6.0
> #Version: 1.0
> #Date: 2004-08-01 12:43:49
>
> Of course, the date is different for each line. Under IIS 5, I know that
> this is indicative of a log dump, which would occur at server reboot or
IIS
> Service start/stop events.
>
> However, this server is not being stopped and started, yet each day, there
> are about 10 of these entries in the logs. Is it because of IIS Worker
> Process Recycling?
>
> What worries me is that these entries occur at irregular intervals, so
it's
> not after about 2 hours or so. It's also not after any given number of
> requests, sometimes just after 1 request, sometimes after several dozen
> requests.
>
> I see no entries in the log itself that could point to malicious requests.
>
> Any ideas are appreciated,
>
> -- 
>
> Sven
>
>
>


Relevant Pages

  • Re: Log files indicate IIS restart? Or worker process recycling
    ... > and recycle the pool after 1740 mins ... >> The IIS W3C format logs of a web site frequently have the following ... >> are about 10 of these entries in the logs. ... >> requests, sometimes just after 1 request, sometimes after several dozen ...
    (microsoft.public.inetserver.iis.security)
  • Log files indicate IIS restart? Or worker process recycling
    ... Under IIS 5, I know that ... are about 10 of these entries in the logs. ... requests, sometimes just after 1 request, sometimes after several dozen ...
    (microsoft.public.inetserver.iis.security)
  • RE: ASP security in HTML pages
    ... My opinion (since FastHosts didn't give me access to the logs) is that the ... "...The .Net Framework appeared to have become corrupted on the domain, ... > Framework is intalled after IIS is for example. ...
    (Security-Basics)
  • Re: Workstations are going offline! Help!
    ... Right about IIS, and right that the 0 indicates passwords never expire. ... Event logs are the first place to go for troubleshooting services for ... Settings -> Security Settings and click Password Policy. ... No errors on startup, no offline icons, synchronizing is ...
    (microsoft.public.windows.server.sbs)
  • Re: IIS logging issue
    ... Subject: IIS logging issue ... > /index%2easp becomes /index.asp and is shown as that in the logfile. ... I don't know about the documentation of IIS, ... > These days logs are used very often to prove illegal activity. ...
    (NT-Bugtraq)