abend in gwenn4

[Jack Cunha]

In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the server
down. Here's the abend log:

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000000)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000

The violation occurred while processing the following instruction:
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004

Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)

Any help greatly appreciated.

[Michael Bell]

The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the server
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Jack Cunha]

How is this remedied to prevent an abend? Or to be able to bring the
server down? Right now, the server abends when loading gwpoa upon
booting the server as well:

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Server CH halted Tuesday, May 22, 2007 9:03:53.907 am
Abend 1 on P00: Server-5.70.06: Page Fault Processor Exception (Error
code 00000000)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 93407D87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = 98962BDC ESP = 98962A98
EIP = 945BE300 FLAGS = 00010246
945BE300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000

The violation occurred while processing the following instruction:
945BE300 668B3E MOV DI, [ESI]
945BE303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF945BE30B E9C1000000 JMP 945BE3D1
945BE310 830304 ADD [EBX], 00000004
945BE313 8B13 MOV EDX, [EBX]
945BE315 83EA04 SUB EDX, 00000004
945BE318 668B32 MOV SI, [EDX]
945BE31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF945BE323 E9A9000000 JMP 945BE3D1
945BE328 830304 ADD [EBX], 00000004



Running process: GWCHK-Worker_1 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 98962C84
OS Stack limit: 9895A040
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88959B58 (NWSA.NSS|ZH_ReadFile64+108)

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the server
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Michael Bell]

go through the ads queue and remove any files there

Post by Jack Cunha
How is this remedied to prevent an abend? Or to be able to bring the
server down? Right now, the server abends when loading gwpoa upon booting
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:03:53.907 am
Abend 1 on P00: Server-5.70.06: Page Fault Processor Exception (Error code
00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 93407D87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = 98962BDC ESP = 98962A98
EIP = 945BE300 FLAGS = 00010246
945BE300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
945BE300 668B3E MOV DI, [ESI]
945BE303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF945BE30B E9C1000000 JMP 945BE3D1
945BE310 830304 ADD [EBX], 00000004
945BE313 8B13 MOV EDX, [EBX]
945BE315 83EA04 SUB EDX, 00000004
945BE318 668B32 MOV SI, [EDX]
945BE31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF945BE323 E9A9000000 JMP 945BE3D1
945BE328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_1 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 98962C84
OS Stack limit: 9895A040
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88959B58 (NWSA.NSS|ZH_ReadFile64+108)

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the server
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Jack Cunha]

Where is the GWCheck scheduled event actually scheduled? Is it a switch
of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the server
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Michael Bell]

nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a switch
of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the server
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Jack Cunha]

Help! Now, it's abending in MTA, GWIA and in GWPOA:

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006


Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU




Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006


Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9

The violation occurred while processing the following instruction:
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6



Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a switch
of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the server
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Michael Bell]

Those are probably all different. Also Abend 2 means little. Abend 1 is what
matters.

I urge you to call Novell Support and open a paid incident. Urgent solutions
are not always forthcoming here.

I'll be happy to work with you, but it could take days this way..

now type m gw* at the console. What do you get?

Post by Jack Cunha
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a switch
of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[John Cunha]

I get this:
gwxisio.nlm
ver. 1.00.01
11/8/04
gwenn4.nlm
ver. 6.05.07
10/20/06
gwmta.nlm
ver. 6.05.o6
2/1/06
gwpoa.nlm
ver. 6.05.06
2/1/06
I have not loaded gwia.nlm b/c when it loads there is an abend within 10
minutes. BTW, this server was stable and just went kablooie, months
after the last changes made for the daylight savings time change.

Post by Michael Bell
Those are probably all different. Also Abend 2 means little. Abend 1 is what
matters.
I urge you to call Novell Support and open a paid incident. Urgent solutions
are not always forthcoming here.
I'll be happy to work with you, but it could take days this way..
now type m gw* at the console. What do you get?

Post by Jack Cunha
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a switch
of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Michael Bell]

I don't see your GWIA. Also the MTA and POA are not 6.5.7 hence you didn't
apply ALL the patches. You have to, if you have a mixed box. That was
documented.

So apply the Full Update Post SP6, and then the GWIA ftf after that and then
the Agents FTF after that.

Post by John Cunha
gwxisio.nlm
ver. 1.00.01
11/8/04
gwenn4.nlm
ver. 6.05.07
10/20/06
gwmta.nlm
ver. 6.05.o6
2/1/06
gwpoa.nlm
ver. 6.05.06
2/1/06
I have not loaded gwia.nlm b/c when it loads there is an abend within 10
minutes. BTW, this server was stable and just went kablooie, months after
the last changes made for the daylight savings time change.

Post by Michael Bell
Those are probably all different. Also Abend 2 means little. Abend 1 is
what matters.
I urge you to call Novell Support and open a paid incident. Urgent
solutions are not always forthcoming here.
I'll be happy to work with you, but it could take days this way..
now type m gw* at the console. What do you get?

Post by Jack Cunha
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a
switch of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception
(Error code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[John Cunha]

Where are the other 6.5.7 patches found? I just looked and could only
find 6.5.6.

Post by Michael Bell
I don't see your GWIA. Also the MTA and POA are not 6.5.7 hence you didn't
apply ALL the patches. You have to, if you have a mixed box. That was
documented.
So apply the Full Update Post SP6, and then the GWIA ftf after that and then
the Agents FTF after that.

Post by John Cunha
gwxisio.nlm
ver. 1.00.01
11/8/04
gwenn4.nlm
ver. 6.05.07
10/20/06
gwmta.nlm
ver. 6.05.o6
2/1/06
gwpoa.nlm
ver. 6.05.06
2/1/06
I have not loaded gwia.nlm b/c when it loads there is an abend within 10
minutes. BTW, this server was stable and just went kablooie, months after
the last changes made for the daylight savings time change.

Post by Michael Bell
Those are probably all different. Also Abend 2 means little. Abend 1 is
what matters.
I urge you to call Novell Support and open a paid incident. Urgent
solutions are not always forthcoming here.
I'll be happy to work with you, but it could take days this way..
now type m gw* at the console. What do you get?

Post by Jack Cunha
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a
switch of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception
(Error code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Michael Bell]

They aren't labeled 6.57

GroupWise 6.5 SP6 Full Update 1 PLATFORMS: NetWare 5.1/6.0/6.5, Windows
2000/2000 Server/2000 Professional/2000 Advanced Server/XP/XP
Professional/2003
LOCALIZATIONS: EnglishRec. gw656up1e.exe 28 Jun 2006
298.2 MB
GroupWise 6.5SP6 Full Update1 Multi PLATFORMS: NetWare 5.1/6.0/6.5, Windows
2000/2000 Server/2000 Professional/2000 Advanced Server/XP/XP
Professional/2003
LOCALIZATIONS: EnglishRec. gw656up1m.exe 28 Jun 2006
485.5 MB

start with one of these.


FTF GW 6.5 post SP6 English only Agents Rev 6 PLATFORMS: NetWare
5.1/6.0/6.5, Windows 2000 Server/2000 Professional/2003
LOCALIZATIONS: EnglishOpt. fgw65p6f.exe 10 Nov 2006

15.9 MB

then this

FTF GWIA 6.5 Post SP6 for NLM and NT rev E. - 100% PLATFORMS: NetWare
6.0/6.5, Windows (all versions)
LOCALIZATIONS: EnglishOpt. fgwia65p6e.exe 3 Nov 2006

then this

FTF: GroupWise 6.5 Post SP6 WebAccess Rev E - 60% PLATFORMS: NetWare 6.5,
Windows 2003/2003 Server Standard Edition
LOCALIZATIONS: EnglishOpt. fwa65p6e.exe 3 Nov 2006
69.1 MB

and this if you have webaccess.


FTF GW 6.5 post sp6 C1 Snapins Rev 1 PLATFORMS: Windows 2000/XP/XP
Professional
LOCALIZATIONS: EnglishOpt. fgw65p6adm.exe 3 Nov 2006
15.4 MB

optional

there's also a post SP6 client update

Post by John Cunha
Where are the other 6.5.7 patches found? I just looked and could only
find 6.5.6.

Post by Michael Bell
I don't see your GWIA. Also the MTA and POA are not 6.5.7 hence you
didn't apply ALL the patches. You have to, if you have a mixed box. That
was documented.
So apply the Full Update Post SP6, and then the GWIA ftf after that and
then the Agents FTF after that.

Post by John Cunha
gwxisio.nlm
ver. 1.00.01
11/8/04
gwenn4.nlm
ver. 6.05.07
10/20/06
gwmta.nlm
ver. 6.05.o6
2/1/06
gwpoa.nlm
ver. 6.05.06
2/1/06
I have not loaded gwia.nlm b/c when it loads there is an abend within 10
minutes. BTW, this server was stable and just went kablooie, months
after the last changes made for the daylight savings time change.

Post by Michael Bell
Those are probably all different. Also Abend 2 means little. Abend 1 is
what matters.
I urge you to call Novell Support and open a paid incident. Urgent
solutions are not always forthcoming here.
I'll be happy to work with you, but it could take days this way..
now type m gw* at the console. What do you get?

Post by Jack Cunha
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a
switch of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception
(Error code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[John Cunha]

Also, FYI, here is Abend 1 in the sequence for which I provided Abends 2
& 3, and then Abends 1, 2 and 3 (all again in gwia) from this morning:

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Server CH halted Tuesday, May 22, 2007 9:10:18.174 pm
Abend 1 on P00: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000072 EDX = 00000072
ESI = 4FD12782 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BD55048
EIP = 54690FFF FLAGS = 00010206
54690FFF 650020 ADD GS:[EAX]=?, AH
EIP in UNKNOWN memory area
Access Location: 0x00000000

The violation occurred while processing the following instruction:
54690FFF 650020 ADD GS:[EAX], AH
54691002 695488106954B8 IMUL EDX, [EAX+ECX*4+10], F6B85469
F65469100A 7F05 JG 54691011
5469100C 99 CDQ
5469100D 7755 JA 54691064
5469100F 93 XCHG AL, BL
54691010 0000 ADD [EAX], AL
54691012 0000 ADD [EAX], AL
54691014 0000 ADD [EAX], AL
54691016 0000 ADD [EAX], AL



Running process: GWIA-imap4-Handler-008 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BD6A980
OS Stack limit: 9BD636E0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

and from this morning:

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Server CH halted Wednesday, May 23, 2007 9:23:40.957 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BC75BA8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9

The violation occurred while processing the following instruction:
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6



Running process: GWIA-imap4-Handler-011 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BC8B11C
OS Stack limit: 9BC84240
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

.....

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06

Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9

The violation occurred while processing the following instruction:
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6



Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

......

Server CH halted Wednesday, May 23, 2007 9:27:09.481 am
Abend 3 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BC7F428
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9

The violation occurred while processing the following instruction:
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6



Running process: GWIA-imap4-Handler-012 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BC94D60
OS Stack limit: 9BC8DAC0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Any ideas at all?

Post by Michael Bell
Those are probably all different. Also Abend 2 means little. Abend 1 is what
matters.
I urge you to call Novell Support and open a paid incident. Urgent solutions
are not always forthcoming here.
I'll be happy to work with you, but it could take days this way..
now type m gw* at the console. What do you get?

Post by Jack Cunha
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a switch
of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Michael Bell]

All of your abends are IMAP related. Someone is using IMAP and it's blowing
things up.

Now the easy "solution" is to turn off IMAP. Of course that might upset
folks.

Also, FYI, here is Abend 1 in the sequence for which I provided Abends 2 &
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:10:18.174 pm
Abend 1 on P00: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000072 EDX = 00000072
ESI = 4FD12782 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BD55048
EIP = 54690FFF FLAGS = 00010206
54690FFF 650020 ADD GS:[EAX]=?, AH
EIP in UNKNOWN memory area
Access Location: 0x00000000
54690FFF 650020 ADD GS:[EAX], AH
54691002 695488106954B8 IMUL EDX, [EAX+ECX*4+10], F6B85469
F65469100A 7F05 JG 54691011
5469100C 99 CDQ
5469100D 7755 JA 54691064
5469100F 93 XCHG AL, BL
54691010 0000 ADD [EAX], AL
54691012 0000 ADD [EAX], AL
54691014 0000 ADD [EAX], AL
54691016 0000 ADD [EAX], AL
Running process: GWIA-imap4-Handler-008 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BD6A980
OS Stack limit: 9BD636E0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:23:40.957 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BC75BA8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-011 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BC8B11C
OS Stack limit: 9BC84240
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
.....
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
......
Server CH halted Wednesday, May 23, 2007 9:27:09.481 am
Abend 3 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BC7F428
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-012 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BC94D60
OS Stack limit: 9BC8DAC0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Any ideas at all?

Post by Michael Bell
Those are probably all different. Also Abend 2 means little. Abend 1 is
what matters.
I urge you to call Novell Support and open a paid incident. Urgent
solutions are not always forthcoming here.
I'll be happy to work with you, but it could take days this way..
now type m gw* at the console. What do you get?

Post by Jack Cunha
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a
switch of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception
(Error code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[John Cunha]

Since IMAP has worked flawlessly for a long time, although IMAP worked
without problem for several months when there has been an inappropriate
admixture of 6.5.6 and 6/5/7, do you think upgrading all of the agents
to the latest patches as you suggest might cure the problem with IMAP?

Post by Michael Bell
All of your abends are IMAP related. Someone is using IMAP and it's blowing
things up.
Now the easy "solution" is to turn off IMAP. Of course that might upset
folks.

Also, FYI, here is Abend 1 in the sequence for which I provided Abends 2 &
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:10:18.174 pm
Abend 1 on P00: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000072 EDX = 00000072
ESI = 4FD12782 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BD55048
EIP = 54690FFF FLAGS = 00010206
54690FFF 650020 ADD GS:[EAX]=?, AH
EIP in UNKNOWN memory area
Access Location: 0x00000000
54690FFF 650020 ADD GS:[EAX], AH
54691002 695488106954B8 IMUL EDX, [EAX+ECX*4+10], F6B85469
F65469100A 7F05 JG 54691011
5469100C 99 CDQ
5469100D 7755 JA 54691064
5469100F 93 XCHG AL, BL
54691010 0000 ADD [EAX], AL
54691012 0000 ADD [EAX], AL
54691014 0000 ADD [EAX], AL
54691016 0000 ADD [EAX], AL
Running process: GWIA-imap4-Handler-008 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BD6A980
OS Stack limit: 9BD636E0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:23:40.957 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BC75BA8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-011 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BC8B11C
OS Stack limit: 9BC84240
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
.....
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
......
Server CH halted Wednesday, May 23, 2007 9:27:09.481 am
Abend 3 on P01: Server-5.70.06: Page Fault Processor Exception (Error code
00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BC7F428
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-012 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BC94D60
OS Stack limit: 9BC8DAC0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Any ideas at all?

Post by Michael Bell
Those are probably all different. Also Abend 2 means little. Abend 1 is
what matters.
I urge you to call Novell Support and open a paid incident. Urgent
solutions are not always forthcoming here.
I'll be happy to work with you, but it could take days this way..
now type m gw* at the console. What do you get?

Post by Jack Cunha
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a
switch of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception
(Error code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Michael Bell]

Well it is worth a shot, certainly.

Let me put it this way: Novell will insist you do it :)
GWCHECK of course is wise as well.

Post by John Cunha
Since IMAP has worked flawlessly for a long time, although IMAP worked
without problem for several months when there has been an inappropriate
admixture of 6.5.6 and 6/5/7, do you think upgrading all of the agents to
the latest patches as you suggest might cure the problem with IMAP?

Post by Michael Bell
All of your abends are IMAP related. Someone is using IMAP and it's
blowing things up.
Now the easy "solution" is to turn off IMAP. Of course that might upset
folks.

Post by John Cunha
Also, FYI, here is Abend 1 in the sequence for which I provided Abends 2
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:10:18.174 pm
Abend 1 on P00: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000072 EDX = 00000072
ESI = 4FD12782 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BD55048
EIP = 54690FFF FLAGS = 00010206
54690FFF 650020 ADD GS:[EAX]=?, AH
EIP in UNKNOWN memory area
Access Location: 0x00000000
54690FFF 650020 ADD GS:[EAX], AH
54691002 695488106954B8 IMUL EDX, [EAX+ECX*4+10], F6B85469
F65469100A 7F05 JG 54691011
5469100C 99 CDQ
5469100D 7755 JA 54691064
5469100F 93 XCHG AL, BL
54691010 0000 ADD [EAX], AL
54691012 0000 ADD [EAX], AL
54691014 0000 ADD [EAX], AL
54691016 0000 ADD [EAX], AL
Running process: GWIA-imap4-Handler-008 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BD6A980
OS Stack limit: 9BD636E0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:23:40.957 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BC75BA8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-011 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BC8B11C
OS Stack limit: 9BC84240
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
.....
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
......
Server CH halted Wednesday, May 23, 2007 9:27:09.481 am
Abend 3 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BC7F428
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-012 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BC94D60
OS Stack limit: 9BC8DAC0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Any ideas at all?

Post by Michael Bell
Those are probably all different. Also Abend 2 means little. Abend 1 is
what matters.
I urge you to call Novell Support and open a paid incident. Urgent
solutions are not always forthcoming here.
I'll be happy to work with you, but it could take days this way..
now type m gw* at the console. What do you get?

Post by Jack Cunha
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a
switch of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception
(Error code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Jack Cunha]

Michael,
All patched and up and running since this morning. We'll see what
happens when s/one uses IMAP. In any event, thanks for your very much
needed help.
Jack Cunha

Post by Michael Bell
Well it is worth a shot, certainly.
Let me put it this way: Novell will insist you do it :)
GWCHECK of course is wise as well.

Post by John Cunha
Since IMAP has worked flawlessly for a long time, although IMAP worked
without problem for several months when there has been an inappropriate
admixture of 6.5.6 and 6/5/7, do you think upgrading all of the agents to
the latest patches as you suggest might cure the problem with IMAP?

Post by Michael Bell
All of your abends are IMAP related. Someone is using IMAP and it's
blowing things up.
Now the easy "solution" is to turn off IMAP. Of course that might upset
folks.

Post by John Cunha
Also, FYI, here is Abend 1 in the sequence for which I provided Abends 2
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:10:18.174 pm
Abend 1 on P00: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000072 EDX = 00000072
ESI = 4FD12782 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BD55048
EIP = 54690FFF FLAGS = 00010206
54690FFF 650020 ADD GS:[EAX]=?, AH
EIP in UNKNOWN memory area
Access Location: 0x00000000
54690FFF 650020 ADD GS:[EAX], AH
54691002 695488106954B8 IMUL EDX, [EAX+ECX*4+10], F6B85469
F65469100A 7F05 JG 54691011
5469100C 99 CDQ
5469100D 7755 JA 54691064
5469100F 93 XCHG AL, BL
54691010 0000 ADD [EAX], AL
54691012 0000 ADD [EAX], AL
54691014 0000 ADD [EAX], AL
54691016 0000 ADD [EAX], AL
Running process: GWIA-imap4-Handler-008 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BD6A980
OS Stack limit: 9BD636E0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:23:40.957 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BC75BA8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-011 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BC8B11C
OS Stack limit: 9BC84240
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
.....
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
......
Server CH halted Wednesday, May 23, 2007 9:27:09.481 am
Abend 3 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9BC7F428
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-012 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9BC94D60
OS Stack limit: 9BC8DAC0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Any ideas at all?

Post by Michael Bell
Those are probably all different. Also Abend 2 means little. Abend 1 is
what matters.
I urge you to call Novell Support and open a paid incident. Urgent
solutions are not always forthcoming here.
I'll be happy to work with you, but it could take days this way..
now type m gw* at the console. What do you get?

Post by Jack Cunha
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:12:48.417 pm
Abend 2 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 9849E576 ECX = 65724665 EDX = 65724665
ESI = 99356E0C EDI = AA8F3820 EBP = 99250F58 ESP = 99250F34
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: GWTCP-HANDLER_6 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 99250F88
OS Stack limit: 992420A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Tuesday, May 22, 2007 9:14:57.184 pm
Abend 3 on P01: Server-5.70.06-1937: CPU Hog Detected by Timer
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FBF17BC3 EBX = 00000000 ECX = 976AC7DD EDX = 976AC7DC
ESI = 46656572 EDI = 00416666 EBP = 976AC788 ESP = 976AC770
EIP = 00000000 FLAGS = 00000006
Running process: Interrupt service routine (nested count 0)
Interrupted process: CHPO-ipS0 Process
Thread Owned by NLM: GWMTA.NLM
Stack pointer: 976AC998
OS Stack limit: 976A9020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Wednesday, May 23, 2007 9:25:09.483 am
Abend 2 on P01: Server-5.70.06: Page Fault Processor Exception (Error
code 00000002)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 2F584F42 ECX = 00000078 EDX = 00000078
ESI = 4E492F58 EDI = 4F424E49 EBP = 4F424E49 ESP = 9B6D11C8
EIP = 4E492F58 FLAGS = 00010246
4E492F58 087271 OR [EDX+71]=?, DH
EIP in UNKNOWN memory area
Access Location: 0x000000E9
4E492F58 087271 OR [EDX+71], DH
4E492F5B 39CD CMP EBP, ECX
4E492F5D B3A4 MOV BL, A4
4E492F5F 86C4 XCHG AH, AL
4E492F61 4D DEC EBP
4E492F62 7859 JS 4E492FBD
4E492F64 7937 JNS 4E492F9D
4E492F66 D6 ??D6
4E492F67 7563 JNZ 4E492FCC
4E492F69 7F5B JG 4E492FC6
Running process: GWIA-imap4-Handler-007 Process
Thread Owned by NLM: GWIA.NLM
Stack pointer: 9B6E6B00
OS Stack limit: 9B6DF860
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU

Post by Michael Bell
nope it's in a database. gwcheck.db

Post by Jack Cunha
Where is the GWCheck scheduled event actually scheduled? Is it a
switch of some kind?

Post by Michael Bell
The GWCHECK (probably a scheduled event) is holding it.

Post by Jack Cunha
In addition, gwpoa.nlm, 6.5.6, won't unload if I try to bring the
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.06
Server CH halted Friday, April 27, 2007 12:00:10.711 am
Abend 1 on P01: Server-5.70.06: Page Fault Processor Exception
(Error code 00000000)
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 00000000 EBX = 9361DD87 ECX = 00000000 EDX = 00000000
ESI = 00000000 EDI = 00000005 EBP = A4269C3C ESP = A4269AF8
EIP = 94B8F300 FLAGS = 00010246
94B8F300 668B3E MOV DI, [ESI]=?
EIP in GWENN4.NLM at code start +00423300h
Access Location: 0x00000000
94B8F300 668B3E MOV DI, [ESI]
94B8F303 6689BC0DE4FEFF MOV [ECX+EBP+FFFFFEE4], DI
FF94B8F30B E9C1000000 JMP 94B8F3D1
94B8F310 830304 ADD [EBX], 00000004
94B8F313 8B13 MOV EDX, [EBX]
94B8F315 83EA04 SUB EDX, 00000004
94B8F318 668B32 MOV SI, [EDX]
94B8F31B 6689B40DE4FEFF MOV [ECX+EBP+FFFFFEE4], SI
FF94B8F323 E9A9000000 JMP 94B8F3D1
94B8F328 830304 ADD [EBX], 00000004
Running process: GWCHK-Worker_3 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: A4269998
OS Stack limit: A42610A0
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: 88969B58 (NWSA.NSS|ZH_ReadFile64+108)
Any help greatly appreciated.

[Joseph Moore [SysOp]]

We'll see what happens when s/one uses IMAP.

IMAP has been a continuous headache for us - we have an Oracle app that
makes a connection every 5 seconds or so, checks for mail, drops the
connection and then does it again. It was causing everything from abends
to hangs.

If patching doesn't work, our solution was to setup a second GWIA just for
IMAP and disabling it on our primary GWIA - my users once again think I
walk on water :)