none
Win2003 server 會自動重開機 RRS feed

  • 一般討論

  • Dear All:

    公司裡的二台2003 server輪流不定時會當掉後重新開機,在log裡並看不到為何當機重開的相關資訊,只有2010/9/15 上 上午 05:41:45 的系統上次發生意外的關機。

    另外就是mail server那台有產生了dump的資料,在網路上搜尋了有關dump的資訊,在microsoft下載了dumpbug這程式,但要理解dump的內容可能要麻煩版上高手

    幫忙解釋一下了,以下為dump內容:

     

    Microsoft (R) Windows Debugger Version 6.12.0002.633 X86

    Copyright (c) Microsoft Corporation. All rights reserved.

     

     

    Loading Dump File [D:\MEMORY.DMP]

    Kernel Summary Dump File: Only kernel address space is available

     

    Symbol search path is: *** Invalid ***

    ****************************************************************************

    * Symbol loading may be unreliable without a symbol search path.           *

    * Use .symfix to have the debugger choose a symbol path.                   *

    * After setting your symbol path, use .reload to refresh symbol locations. *

    ****************************************************************************

    Executable search path is: 

    *********************************************************************

    * Symbols can not be loaded because symbol path is not initialized. *

    *                                                                   *

    * The Symbol Path can be set by:                                    *

    *   using the _NT_SYMBOL_PATH environment variable.                 *

    *   using the -y <symbol_path> argument when starting the debugger. *

    *   using .sympath and .sympath+                                    *

    *********************************************************************

    Page 197f5be too large to be in the dump file.

    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntkrpamp.exe - 

    Windows Server 2003 Kernel Version 3790 (Service Pack 2) MP (8 procs) Free x86 compatible

    Product: Server, suite: TerminalServer SingleUserTS

    Built by: 3790.srv03_sp2_gdr.100216-1301

    Machine Name:

    Kernel base = 0xe0800000 PsLoadedModuleList = 0xe08a6ea8

    Debug session time: Wed Sep 15 05:42:08.414 2010 (UTC + 8:00)

    System Uptime: 0 days 1:14:36.109

    *********************************************************************

    * Symbols can not be loaded because symbol path is not initialized. *

    *                                                                   *

    * The Symbol Path can be set by:                                    *

    *   using the _NT_SYMBOL_PATH environment variable.                 *

    *   using the -y <symbol_path> argument when starting the debugger. *

    *   using .sympath and .sympath+                                    *

    *********************************************************************

    Page 197f5be too large to be in the dump file.

    *** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntkrpamp.exe - 

    Loading Kernel Symbols

    Page 197f5be too large to be in the dump file.

    Page 7b8970 too large to be in the dump file.

    .Page 3bd74e too large to be in the dump file.

    ..Page 197f5be too large to be in the dump file.

    .Page 7b8970 too large to be in the dump file.

    .Page 3bd74e too large to be in the dump file.

    ..Page 197f5be too large to be in the dump file.

    .Page 7b8970 too large to be in the dump file.

    .Page 3bd74e too large to be in the dump file.

    ..Page 197f5be too large to be in the dump file.

    .Page 7b8970 too large to be in the dump file.

    .Page 3bd74e too large to be in the dump file.

    ..Page 197f5be too large to be in the dump file.

    .Page 7b8970 too large to be in the dump file.

    .Page 3bd74e too large to be in the dump file.

    ..Page 197f5be too large to be in the dump file.

    .Page 7b8970 too large to be in the dump file.

    .Page 3bd74e too large to be in the dump file.

    ..Page 197f5be too large to be in the dump file.

    .Page 7b8970 too large to be in the dump file.

    .Page 3bd74e too large to be in the dump file.

    ..Page 197f5be too large to be in the dump file.

    .Page 7b8970 too large to be in the dump file.

    .Page 3bd74e too large to be in the dump file.

    ..Page fb05b9 too large to be in the dump file.

    .Page 400000 too large to be in the dump file.

    .....Page 1e6353f too large to be in the dump file.

    ...............Page 1100000 too large to be in the dump file.

    ...Page 1e6353f too large to be in the dump file.

    .....Page 10f00b0 too large to be in the dump file.

    .Page a000 not present in the dump file. Type ".hh dbgerr004" for details

    ..

    ....Page 99224c too large to be in the dump file.

    .Page 5f9660 too large to be in the dump file.

    .Page c26f26 too large to be in the dump file.

    .Page 1551419 too large to be in the dump file.

    ....Page 1ab4e2 too large to be in the dump file.

    .Page 1a4744 too large to be in the dump file.

    ......Page 144b0ae too large to be in the dump file.

    .Page 144b0ae too large to be in the dump file.

    .Page 610817 too large to be in the dump file.

    .Page 1abad3a too large to be in the dump file.

    .Page 13aee7f too large to be in the dump file.

    .Page 66a817 too large to be in the dump file.

    .Page 7f9c56 too large to be in the dump file.

    .Page 522ee4 too large to be in the dump file.

    ..Page 13aee7f too large to be in the dump file.

    ..Page 13aee7f too large to be in the dump file.

    ..Page 13255c9 too large to be in the dump file.

    .Page 449922 too large to be in the dump file.

    .Page 17881a too large to be in the dump file.

    ...Page 8d8386 too large to be in the dump file.

    .Page 185803 too large to be in the dump file.

    .Page b0a660 too large to be in the dump file.

    .Page 244003 too large to be in the dump file.

    ..Page 9a4744 too large to be in the dump file.

    ..Page 144b0ae too large to be in the dump file.

    .Page e287ab too large to be in the dump file.

    .Page a65fe1 too large to be in the dump file.

    .Page ec9127 too large to be in the dump file.

    ....Page 100f3bf too large to be in the dump file.

    .Page 8581a3 too large to be in the dump file.

    ..Page 17788e4 too large to be in the dump file.

    ..Page 1cc7b4f too large to be in the dump file.

    ..Page 121de24 too large to be in the dump file.

    .

    Loading User Symbols

     

    Loading unloaded module list

    ......

    *******************************************************************************

    *                                                                             *

    *                        Bugcheck Analysis                                    *

    *                                                                             *

    *******************************************************************************

     

    Use !analyze -v to get detailed debugging information.

     

    BugCheck A, {a070008, d000001b, 0, e0831a49}

     

    ***** Kernel symbols are WRONG. Please fix symbols to do analysis.

     

    *************************************************************************

    ***                                                                   ***

    ***                                                                   ***

    ***    Your debugger is not using the correct symbols                 ***

    ***                                                                   ***

    ***    In order for this command to work properly, your symbol path   ***

    ***    must point to .pdb files that have full type information.      ***

    ***                                                                   ***

    ***    Certain .pdb files (such as the public OS symbols) do not      ***

    ***    contain the required information.  Contact the group that      ***

    ***    provided you with these symbols if you need this command to    ***

    ***    work.                                                          ***

    ***                                                                   ***

    ***    Type referenced: nt!_KPRCB                                     ***

    ***                                                                   ***

    *************************************************************************

    Unable to read selector for PCR for processor 1

    Unable to read selector for PCR for processor 2

    Unable to read selector for PCR for processor 3

    Unable to read selector for PCR for processor 4

    Unable to read selector for PCR for processor 5

    Page 1e12343 too large to be in the dump file.

    Unable to read selector for PCR for processor 6

    Unable to read selector for PCR for processor 7

    *************************************************************************

    ***                                                                   ***

    ***                                                                   ***

    ***    Your debugger is not using the correct symbols                 ***

    ***                                                                   ***

    ***    In order for this command to work properly, your symbol path   ***

    ***    must point to .pdb files that have full type information.      ***

    ***                                                                   ***

    ***    Certain .pdb files (such as the public OS symbols) do not      ***

    ***    contain the required information.  Contact the group that      ***

    ***    provided you with these symbols if you need this command to    ***

    ***    work.                                                          ***

    ***                                                                   ***

    ***    Type referenced: nt!_KPRCB                                     ***

    ***                                                                   ***

    *************************************************************************

    *************************************************************************

    ***                                                                   ***

    ***                                                                   ***

    ***    Your debugger is not using the correct symbols                 ***

    ***                                                                   ***

    ***    In order for this command to work properly, your symbol path   ***

    ***    must point to .pdb files that have full type information.      ***

    ***                                                                   ***

    ***    Certain .pdb files (such as the public OS symbols) do not      ***

    ***    contain the required information.  Contact the group that      ***

    ***    provided you with these symbols if you need this command to    ***

    ***    work.                                                          ***

    ***                                                                   ***

    ***    Type referenced: nt!_KPRCB                                     ***

    ***                                                                   ***

    *************************************************************************

    Probably caused by : ntkrpamp.exe ( nt!Kei386EoiHelper+28f3 )

     

    Followup: MachineOwner

    ---------

     

    2010年9月15日 上午 01:43

所有回覆

  • 通常會產生dump就表示主機的IO吃得非常重,檢查一下是否有中毒或者防毒軟體有問題
    2010年9月15日 上午 02:29