locked
Edgetransport error RRS feed

  • Question

  • We have Exchange 2007 in our environment.

    This morning the edgetransport service crashed with the below error:

    Log Name:      Application
    Source:        Application Error
    Date:          19/03/2013 8:03:59 a.m.
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      server.domain.com
    Description:
    Faulting application edgetransport.exe, version 8.3.298.1, time stamp 0x50f21ece, faulting module ntdll.dll, version 6.0.6002.22742, time stamp 0x4ec3dba8, exception code 0xc0000005, fault offset 0x00000000000148c6, process id 0x%9, application start time 0x%10.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-03-18T19:03:59.000Z" />
        <EventRecordID>926100</EventRecordID>
        <Channel>Application</Channel>
        <Computer>server.domain.com</Computer>
        <Security />
      </System>
      <EventData>
        <Data>edgetransport.exe</Data>
        <Data>8.3.298.1</Data>
        <Data>50f21ece</Data>
        <Data>ntdll.dll</Data>
        <Data>6.0.6002.22742</Data>
        <Data>4ec3dba8</Data>
        <Data>c0000005</Data>
        <Data>00000000000148c6</Data>
      </EventData>
    </Event>

    About 10 minutes later it started up again, with a configuration update.

    Log Name:      Application
    Source:        MSExchangeTransport
    Date:          19/03/2013 8:14:21 a.m.
    Event ID:      16022
    Task Category: Configuration
    Level:         Information
    Keywords:      Classic
    User:          N/A
    Computer:     server.domain.com
    Description:
    A configuration update has successfully completed.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="MSExchangeTransport" />
        <EventID Qualifiers="16388">16022</EventID>
        <Level>4</Level>
        <Task>16</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-03-18T19:14:21.000Z" />
        <EventRecordID>926108</EventRecordID>
        <Channel>Application</Channel>
        <Computer>server.domain.com</Computer>
        <Security />
      </System>
      <EventData>
      </EventData>
    </Event>

    Any idea why this is happening and what we can do to prevent this happening again?


    • Edited by RhodanNZ Monday, March 18, 2013 8:12 PM
    Monday, March 18, 2013 8:12 PM

All replies

  • Hello,

    Did you install anti-virus software on the Exchange server? If so, please temporarily disable it.

    Please check if the "Microsoft Exchange Transport" service is started.

    And please run EXBPA against exchange server health check.

    Here is the similar thread for your reference.

    http://social.technet.microsoft.com/Forums/en-US/exchangesvrdeploy/thread/707d8aa5-82b9-4215-a8ac-b96cab554e4a


    Cara Chen
    TechNet Community Support

    Tuesday, March 19, 2013 2:40 AM
    Moderator
  • Hi,

    We have Sophos AntiVirus on there, it isn't new, it has been on there for quite a while, but then checking the logs this seems to have happened before for quite a while too.

    Is it likely to be AntiVirus then?

    Tuesday, March 19, 2013 3:12 AM