Re: Firewall Service crashing during peak usage



Hi Jason,

Do you have any 3rd-party application filters installed?
Your error log states that error occured in some application filter module.

--
Michael


"Jason Grimmett" <jgrimmett@xxxxxxxxx> wrote in message
news:1136920949.825841.317600@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Hello all. Hopefully this is not something unique to our environment.
> We encountered the same problem previously with ISA 2004 SP1 and
> replaced the system with better hardware and we still have the same
> issue.
>
> If this is something you can assist with, I would appreciate your help.
>
> Thanks!
> Jason G.
>
> The following events keep appearing during the crash of our FW service:
> Event Type: Error
> Event Source: Microsoft ISA Server 2004
> Event Category: None
> Event ID: 1000
> Date: 1/10/2006
> Time: 2:13:54 PM
> User: N/A
> Computer: ********
> Description:
> Faulting application wspsrv.exe, version 4.0.2163.213, stamp 420bdbd0,
> faulting module ntdll.dll, version 5.2.3790.1830, stamp 424377d2,
> debug? 0, fault address 0x000224b2.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 41 00 70 00 70 00 6c 00 A.p.p.l.
> 0008: 69 00 63 00 61 00 74 00 i.c.a.t.
> 0010: 69 00 6f 00 6e 00 20 00 i.o.n. .
> 0018: 46 00 61 00 69 00 6c 00 F.a.i.l.
> 0020: 75 00 72 00 65 00 20 00 u.r.e. .
> 0028: 20 00 77 00 73 00 70 00 .w.s.p.
> 0030: 73 00 72 00 76 00 2e 00 s.r.v...
> 0038: 65 00 78 00 65 00 20 00 e.x.e. .
> 0040: 34 00 2e 00 30 00 2e 00 4...0...
> 0048: 32 00 31 00 36 00 33 00 2.1.6.3.
> 0050: 2e 00 32 00 31 00 33 00 ..2.1.3.
> 0058: 20 00 34 00 32 00 30 00 .4.2.0.
> 0060: 62 00 64 00 62 00 64 00 b.d.b.d.
> 0068: 30 00 20 00 69 00 6e 00 0. .i.n.
> 0070: 20 00 6e 00 74 00 64 00 .n.t.d.
> 0078: 6c 00 6c 00 2e 00 64 00 l.l...d.
> 0080: 6c 00 6c 00 20 00 35 00 l.l. .5.
> 0088: 2e 00 32 00 2e 00 33 00 ..2...3.
> 0090: 37 00 39 00 30 00 2e 00 7.9.0...
> 0098: 31 00 38 00 33 00 30 00 1.8.3.0.
> 00a0: 20 00 34 00 32 00 34 00 .4.2.4.
> 00a8: 33 00 37 00 37 00 64 00 3.7.7.d.
> 00b0: 32 00 20 00 66 00 44 00 2. .f.D.
> 00b8: 65 00 62 00 75 00 67 00 e.b.u.g.
> 00c0: 20 00 30 00 20 00 61 00 .0. .a.
> 00c8: 74 00 20 00 6f 00 66 00 t. .o.f.
> 00d0: 66 00 73 00 65 00 74 00 f.s.e.t.
> 00d8: 20 00 30 00 30 00 30 00 .0.0.0.
> 00e0: 32 00 32 00 34 00 62 00 2.2.4.b.
> 00e8: 32 00 0d 00 0a 00 2.....
>
>
> ===============
>
>
> Event Type: Error
> Event Source: Microsoft Firewall
> Event Category: None
> Event ID: 14057
> Date: 1/10/2006
> Time: 2:13:54 PM
> User: N/A
> Computer: *****
> Description:
> The Firewall service stopped because an application filter module
> C:\WINDOWS\system32\ntdll.dll generated an exception code C0000005 in
> address 7C8224B2 when function CompleteAsyncIO was called. To resolve
> this error, remove recently installed application filters and restart
> the service.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>


.



Relevant Pages

  • Firewall Service crashing during peak usage
    ... Faulting application wspsrv.exe, version 4.0.2163.213, stamp 420bdbd0, ... faulting module ntdll.dll, version 5.2.3790.1830, stamp 424377d2, ... see Help and Support Center at ... The Firewall service stopped because an application filter module ...
    (microsoft.public.isa.enterprise)
  • ISA 2004 on Server 2003 Service stops responding.
    ... Faulting application wspsrv.exe, version 4.0.2163.213, stamp 420bdbd0, ... faulting module msvcrt.dll, version 7.0.3790.1830, stamp 4243785e, ... The Firewall service stopped because an application filter module ... If I have no response ASAP I will be reinstalling this server on ...
    (microsoft.public.isaserver)
  • Re: Outlook 2003 Crashing
    ... > Bucket 54912780, bucket table 1, faulting application outlook.exe, ... > version 11.0.5510.0, stamp 3f1380f0, faulting module ntdll.dll, version ... see Help and Support Center at ... > faulting module ntdll.dll, version 5.1.2600.1217, stamp 3eb1b41a, debug? ...
    (microsoft.public.outlook.general)
  • Re: Outlook 2003 Crashing
    ... > Bucket 54912780, bucket table 1, faulting application outlook.exe, ... > version 11.0.5510.0, stamp 3f1380f0, faulting module ntdll.dll, version ... see Help and Support Center at ... > faulting module ntdll.dll, version 5.1.2600.1217, stamp 3eb1b41a, debug? ...
    (microsoft.public.outlook)
  • Re: Word Crash without warning causing information lost.
    ... >A user in my complaint to me about Word Crashing causing her information ... > faulting module winword.exe, version 11.0.5604.0, stamp 3f314a2f, debug? ... see Help and Support Center at ...
    (microsoft.public.word.application.errors)