Domino 6.5.4 crash every day

hcl-bot · June 1, 2005, 4:57am

Hi,

since 3 weeks our Domino server 6.5.4 (with 6.5.3 the same problems) on platform Windows 2000 Server crashs down every day except on weekend days. At the first days it crashed punctually at 2:30 pm. No agents run at this time and there are no suspicious entries in the log files. Now the server crash sporadic in the working time.

Additional McAfee GroupShield 5.3 SP1, McAfee VirusScan 7.0 and Arcserve Backup-Agent is installed.

After the crash a NSD log is created.

Examples from 4 logs:

Generated Messages:

INFO (0): Using PSAPI DLL

INFO (0): Found 25 Notes processes, matched 25

INFO (0): Starting Debugger

WARNING (3): can’t get process 22806528 status

ERROR (0): Monitor client data is corrupted

Generated Messages:

INFO (0): Using PSAPI DLL

INFO (0): Found 25 Notes processes, matched 25

INFO (0): Starting Debugger

ERROR (5): can’t access process [ nRouter:0944] memory @0x59440000 - (0) unknown

ERROR (5): can’t access process [ nRouter:0944] memory @0x6ee00000 - (0) unknown

ERROR (5): can’t access process [ nRouter:0944] memory @0x6ee80000 - (0) unknown

ERROR (5): can’t access process [ nRouter:0944] memory @0x6ef00000 - (0) unknown

ERROR (5): can’t access process [ nRouter:0944] memory @0x6ef80000 - (0) unknown

ERROR (5): can’t access process [ nRouter:0944] memory @0x6f000000 - (0) unknown

ERROR (5): can’t access process [ nRouter:0944] memory @0x6f080000 - (0) unknown

ERROR (0): exception(0): thread d70 got system exception: ACCESS_VIOLATION (3221225477)

ERROR (0): failed while analyzing/dumping process [ nRouter:0944] memory

ERROR (5): can’t access process [ nSched:0c0c] memory @0x01050000 - (0) unknown

ERROR (5): can’t access process [ nSched:0c0c] memory @0x4ce30000 - (0) unknown

ERROR (5): can’t access process [ nSched:0c0c] memory @0x4ceb0000 - (0) unknown

ERROR (0): exception(0): thread d70 got system exception: ACCESS_VIOLATION (3221225477)

ERROR (0): failed while analyzing/dumping process [ nSched:0c0c] memory

ERROR (5): can’t access process [ nUpdate:0bb4] memory @0x01030000 - (0) unknown

ERROR (5): can’t access process [ nUpdate:0bb4] memory @0x4ccb0000 - (0) unknown

ERROR (5): can’t access process [ nUpdate:0bb4] memory @0x4cd30000 - (0) unknown

ERROR (5): can’t access process [ nUpdate:0bb4] memory @0x4d430000 - (0) unknown

ERROR (5): can’t access process [ nUpdate:0bb4] memory @0x4d530000 - (0) unknown

ERROR (5): can’t access process [ nUpdate:0bb4] memory @0x4d5b0000 - (0) unknown

ERROR (0): exception(0): thread d70 got system exception: ACCESS_VIOLATION (3221225477)

ERROR (0): failed while analyzing/dumping process [ nUpdate:0bb4] memory

ERROR (5): can’t access process [ nAMgr:0c54] memory @0x01050000 - (0) unknown

ERROR (5): can’t access process [ nAMgr:0c54] memory @0x4cd20000 - (0) unknown

ERROR (5): can’t access process [ nAMgr:0c54] memory @0x4d000000 - (0) unknown

ERROR (5): can’t access process [ nAMgr:0c54] memory @0x4d1c0000 - (0) unknown

ERROR (0): exception(0): thread d70 got system exception: ACCESS_VIOLATION (3221225477)

ERROR (0): failed while analyzing/dumping process [ nAMgr:0c54] memory

ERROR (5): can’t access process [ nAMgr:09e8] memory @0x01050000 - (0) unknown

Generated Messages:

INFO (0): Using PSAPI DLL

INFO (0): Found 25 Notes processes, matched 25

INFO (0): Starting Debugger INFO (0): Faulting thread [nMcAfeeOAScan:0a70:0c20]

INFO (0): Walk mem for process DBASVR (3bc)

INFO (0): Walk mem for process naPrdMgr (5f0)

Generated Messages:

INFO (0): Using PSAPI DLL

INFO (0): Found 25 Notes processes, matched 24

INFO (0): failed to match all of the Notes processes

INFO (0): Starting Debugger

INFO (0): Walk mem for process naPrdMgr (5f4)

INFO (0): Walk mem for process nserver (90c)

INFO (0): Walk mem for process nevent (868)

INFO (0): Walk mem for process nLDAP (9b4)

INFO (0): Walk mem for process nSMTP (9bc)

INFO (0): Walk mem for process nAdminp (a78)

INFO (0): Walk mem for process nAMgr (a9c)

INFO (0): Walk mem for process nCA (aa4)

INFO (0): Walk mem for process nCalConn (aac)

INFO (0): Walk mem for process nCollect (ab4)

INFO (0): Walk mem for process nMaps (ac4)

INFO (0): Walk mem for process nMcAfeeConfig (acc)

INFO (0): Walk mem for process nMcAfeeOAScan (ad4)

INFO (0): Walk mem for process nMcAfeeODScan (adc)

INFO (0): Walk mem for process nMcAfeeReport (ae4)

INFO (0): Walk mem for process nMcAfeeUpdate (aec)

INFO (0): Walk mem for process nReplica (af4)

INFO (0): Walk mem for process nRouter (afc)

ERROR (0): Invalid task VTID=81

ERROR (0): Invalid task VTID=57

ERROR (0): Invalid task VTID=61

ERROR (0): Invalid task VTID=63

ERROR (0): Invalid task VTID=72

ERROR (0): Invalid task VTID=73

ERROR (0): Invalid task VTID=59

ERROR (0): Invalid task VTID=75

ERROR (0): Invalid task VTID=64

ERROR (0): Invalid task VTID=69

Does anyone have an idea?

Thanks,

Carsten

hcl-bot · June 1, 2005, 5:15am

Subject: Domino 6.5.4 crash every day

You need to show the full NSD ofr example to have a better idea. but looks like something is going between Notes and the macafee product.Check the macafee support page and contact both vendors for additional info:

https://knowledgemap.nai.com/phpclient/viewKDoc.aspx?externalID=KB_KB37853&sessionID=anonymous|15600698&sliceID=&docID=KC.KB_KB37853&url=kb/kb_kb37853.xml&dialogID=15608390&docType=DOC_KnowledgeBase&iterationID=1&docName=Solution%20ID%20KB37853%20-%20nMcAfeeReport.exe%20-%20memory%20issues%20on%20Lotus%20Domino%20R6%20Servers

Hope that helps,

Nico

hcl-bot · June 1, 2005, 5:13am

Subject: Domino 6.5.4 crash every day

Have you checked with nai to see if there are any updates to groupshield?

hcl-bot · June 1, 2005, 5:55am

Subject: RE: Domino 6.5.4 crash every day

The newest version and fixpack is installed.

hcl-bot · June 1, 2005, 6:59am

Subject: RE: Domino 6.5.4 crash every day

There is a bug with Groupshield 5.3 and Notes 6.5. Our servers (6.5.1) crash almost every week on nMcAfee Report (nMcAfeeReport.EXE process).

We’ve opened an incident at IBM and we were transfered to McAfee. It’s been opened there (nMcAfeeReport our incident is # 356079).

It’s on level 3. You will find a few links about our research. It’s cut and paste so I hope it will be readable

JYR

You can try this:

Creating Performance Monitor Logs for McAfee GroupShield for Domino Tasks

https://knowledgemap.nai.com/phpclient/viewKDoc.aspx?externalID=KB_KB37937&sessionID=anonymous|15392224&sliceID=&docID=KC.KB_KB37937&url=kb/kb_kb37937.xml&dialogID=15388750&docType=DOC_KnowledgeBase&iterationID=3&docName=KB37937%20-%20Creating%20Performance%20Monitor%20Logs%20for%20McAfee%20GroupShield%20for%20Domino%20Tasks

McShield Exclusions required on a Domino Server running GroupShield for Domino

Solution for R6 Servers (Special Case)

Lotus Domino R6 Servers have a changing temp directory, Every time the Lotus Domino Server is restarted a new Lotus Temp directory is recreated. Thus standard VirusScan exclusions defined for NetShield will not work. With VirusScan 7 and Service Pack 1 a new feature of ‘Wildcard Folder esclusions’ can be utilised to overcome this issue.

https://knowledgemap.nai.com/phpclient/viewKDoc.aspx?externalID=KB_nai27572&sessionID=Anonymous|781417504&sliceID=&docID=KC.KB_nai27572&url=kb/kb_nai27572.xml&dialogID=15350736&docType=DOC_KnowledgeBase&iterationID=4&docName=Solution%20ID%20nai27572%20-%20McShield%20Exclusions%20required%20on%20a%20Domino%20Server%20running%20GroupShield%20for%20Domino

Performance issues leading to build up of Dead Mail Conflict with scheduled Events

Solution 1:

Solution 1 Excluding Tasks

Open GSD53_CONFIG.NSF using a Lotus Notes Client
Locate the view ‘Server Settings’
On the Right-Hand-Side (RHS) open the server document for the problem machine
Enable the option to ‘Exclude Specified Applications’.
From the drop-down list, select the following applications from the list:
- NAMGR

Another possible issue that was present in Groupshield 5.0 but it’s exactly the same in 5.3

GroupShield Reporter crashes when it receives an e-mail message from a non-RFC822 compliant Internet host which does not contain a correctly formatted Recipients list.

Error: “10/04/2000 01:50:46 PM Network Associates Reporter: Unable to create/deliver mail item”

https://knowledgemap.nai.com/phpclient/viewKDoc.aspx?externalID=KB_nai1572&sessionID=Anonymous|305306882&sliceID=&docID=KC.KB_nai1572&url=kb/kb_nai1572.xml&dialogID=13871389&docType=DOC_KnowledgeBase&iterationID=1&docName=Solution%20ID%20nai1572%20-%20Error:%20"10/04/2000%2001:50:46%20PM%20%20Network%20Associates%20Reporter:%20Unable%20to%20create/deliver%20mail%20item"

Error: “Network Associates Reporter: Unable to get alert message”

https://knowledgemap.nai.com/phpclient/viewKDoc.aspx?externalID=KB_nai24901&sessionID=Anonymous|305306882&sliceID=&docID=KC.KB_nai24901&url=kb/kb_nai24901.xml&dialogID=13871389&docType=DOC_KnowledgeBase&iterationID=1&docName=Solution%20ID%20nai24901%20-%20Error:%20Network%20Associates%20Reporter:%20Unable%20to%20get%20alert%20message

GroupShield Reporter alerts are not being received

https://knowledgemap.nai.com/phpclient/viewKDoc.aspx?externalID=KB_NAI34256&sessionID=Anonymous|305306882&sliceID=&docID=KC.KB_NAI34256&url=kb/kb_nai34256.xml&dialogID=13871389&docType=DOC_KnowledgeBase&iterationID=1&docName=Solution%20ID%20NAI34256%20-%20GroupShield%20Reporter%20alerts%20are%20not%20being%20received

FAQs

GroupShield for Domino

https://knowledgemap.nai.com/phpclient/viewKDoc.aspx?externalID=FAQ_344&sessionID=Anonymous|305306882&sliceID=&docID=KC.FAQ_344&url=faq/faq_344.xml&dialogID=13871389&docType=DOC_FAQ&iterationID=1&docName=GroupShield%20for%20Domino%20Eliminating%20reporting%20errors%20on%20GroupShield%20Domino%205.0a

Sur un site Danois:

GroupShield Domino (GSD) - E03130 (sidst modificeret 8:22 26/09-2001)

GroupShield giver en fejl på Notes konsollen:

Årsag: I Notes konsollen får jeg følgende fejl:

Network Associates Reporter: A problem was encountered during reporting -

   could not process record

Network Associates Reporter: Unable to get Alert Message

Network Associates Reporter: Unable to process log entry

GroupShield Reporter går ned når den får et e-mail fra en ikke RFC822 kompatibel Internet host, som ikke indholder korrekt formateret modtager liste.

Løsning: For at stoppe fejl-beskederne skrives fra Notes konsollen:

tell gsdreport quit

GroupShield vil stadig detektere og rense virus, men vil ikke rapportere dem. Indlæs Hotfix 4 til GroupShield Domino som kan downloades her

Kategorier: GroupShield Domino (GSD)

Oprettet 8:22 26/09-2001

Q. Eliminating reporting errors on GroupShield Domino 5.0a?

A.

Domino crashes with following errors

10/04/2000 01:50:46 PM Network Associates Reporter: Unable to create/deliver mail item

10/04/2000 01:51:07 PM Network Associates Reporter: Unable to create/deliver mail item

10/04/2000 01:51:07 PM Network Associates Reporter: Unable to process log entry

10/04/2000 01:51:07 PM Network Associates Reporter: A problem was encountered during reporting - could not process record

GroupShield Reporter crashes when it receives an e-mail message from a non-RFC822 compliant Internet host which does not contain a correctly formatted Recipients list.

There is a posted hotfix to correct this issue. It can be downloaded by visiting Domain Registered at Safenames, entering your grant number and then choosing GroupShield for Domino. The hotfix is located in the “Service Pack/Patch/Hotfix” section.

NOTE: Depending on your license you may have to choose a suite, such as “Active Virus Defense”, before selecting GroupShield for Domino.

hcl-bot · July 25, 2005, 7:55pm

Subject: RE: Domino 6.5.4 crash every day

Same here. We worked with McAfee last year and they built a patch for the nMcAfeeReport task that solved our crashes.

hcl-bot · March 30, 2007, 4:40am

Subject: Domino 6.5.4 crash every day

Hi,

I’v got same problem. It was the McAfee client doing some locking at file/OS level. naprdmgr.exe is the file name doing the locking.

I used a product from www.sysinternals.com, Handle, to find what was doing the locking. The naprdmgr.exe is part of McAfee client, some ePo update… ??

I think the problem is solved in Domino 7.0.2, logging that naprdmgr has been terminated, don’t crash the Domino server.

To solve this, exclude client scanning of the Domino directory and exclution must be of directories NOT file types, .nsf, ntf…

Best regards

Mov V Hansen