|
Home > Archive > IIS Index Server > July 2004 > cisvc at 100% CPU after indexing some documents
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
cisvc at 100% CPU after indexing some documents
|
|
| Phillip Evans 2004-02-09, 12:34 pm |
| Hello all.
We are using indexing server on Windows 2000 Server to index a number of web
sites (hosted on the server). We have deleted the default system catalog.
This has been running beautifully for about 2.5 years.
About a week ago, cisvc started churning 100% of one of the CPUs in the
server (looks like one thread in an infinite loop). Restarting the service
results in indexing going back to normal with documents being indexed and
cisvc running at normal levels. After a short time (around 5 minutes) cisvc
will again hit 100% CPU and stay there until it is restarted once again.
Once cisvc goes to 100% CPU the index server will continue to respond to
queries but stops indexing file changes. A restart sees the indexing
activity continue for a few minutes before cisvc.exe once again goes to 100%
CPU.
The changes we have put in the last week include a memory upgrade (up from
512MB to 1GB in the machine), security hotfixes (as per Windows Update), and
the change to use the ASP filter for ASPX pages.
Since we started experiencing this problem I have removed the ASPX filter
but the problem remains.
I have also tried deleting the catalog a few times and this does not appear
to have had any impact.
There currently about 8000 documents in the index.
We have the PDF IFilter installed but it isn't a recent addition.
At around about the same time, so possibly related, Internet Explorer
stopped working on the box. The IE frame comes up but no pages are
rendered. IE appears to hang and the start menu doesn't complete rendering
until IE is killed (I theorize that the explorer I/O is blocking waiting for
IE to do something).
Any clues would be greatly appreciated as I don't have much hair left.
Thanks in advance,
Phil.
| |
| WenJun Zhang[msft] 2004-02-09, 9:34 pm |
| Hello Philip,
I'm not sure if the issue is related to the IE symptom. Since the
problem seems to occur when indexing files and updating catalog, I
think you can use filemon to trace the cisvc.exe process's I/O to
find some clues. When the 100% cpu appears again, see if the
cisvc.exe is always pending on some certain files.
Download filemon:
http://www.sysinternals.com/ntw2k/source/filemon.shtml
Only include cisvc.exe in its toolbar->filter, this prevent a great
deal of spam records.
Many former cases with the simliar 100% cpu symptom were caused by
that some files to be indexed contain *special string* and
corresponding IFilters hang on them. For example:
321073 Index Service Stops Responding When Filtering Japanese Excel
File
http://support.microsoft.com/?id=321073
Please update on any findings.
Have a nice day,
WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
| |
| Phillip Evans 2004-02-10, 10:36 am |
| Thanks for the response. You are correct about IE being unrelated. I
deleted the user profile and IE is now operating perfectly (or at least, as
perfectly as IE operates <g> ).
So I used FileMon. When I first turned it on cisvc.exe was going flat out
and FileMon was not recording any activity at all. I restarted cisvc.exe
and, using FileMon, index server went running all over the place checking
for things to index as it's supposed to. After 8 minutes it went to 100%
CPU and the rapid disk activity also stopped (10:19:39). I have included
the end of the trace below but can post the entire log file (10MB in total,
669k compressed) if you like.
As you can see from the trace, cisvc.exe is still doing some ad-hoc disk
activity but at nowhere near the rate it was previously. I'm also curious
as to why it is looking at e:\ at all because e:\ has been explicitly
excluded from the catalog. The only content that should be indexed is in
f:\Web Sites
In any case, it doesn't seem to be hanging due to a bad IFilter?
BTW: I repeated the experiment a second time and got the same results.
Thanks for your help,
Phil.
108183 10:19:38 AM cisvc.exe:4420 CLOSE F:\web
sites\mhm- insbrokers\aspnet_client\system_web\1_1_
4322 SUCCESS
108184 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108185 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.002 SUCCESS Length: 131072
108186 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108187 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.001 SUCCESS Length: 131072
108188 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS
108189 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS
108190 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108191 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.001 SUCCESS Length: 65536
108192 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108193 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.002 SUCCESS Length: 65536
108194 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS
108195 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS
108196 10:19:38 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108197 10:19:38 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108198 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 0 Length: 512
108199 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 512 Length: 512
108200 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1024 Length: 512
108201 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1536 Length: 512
108202 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 2048 Length: 512
108203 10:19:38 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108204 10:19:38 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108205 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 0 Length: 512
108206 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 512 Length: 512
108207 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1024 Length: 512
108208 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1536 Length: 512
108209 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 2048 Length: 512
108210 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS Options: OpenIf Sequential Access: All
108211 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.001 SUCCESS Length: 65536
108212 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS Options: OpenIf Sequential Access: All
108213 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.002 SUCCESS Length: 65536
108214 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS
108215 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS
108216 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS Options: OpenIf Sequential Access: All
108217 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.002 SUCCESS Length: 65536
108218 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS Options: OpenIf Sequential Access: All
108219 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.001 SUCCESS Length: 65536
108220 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS
108221 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108222 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.001 SUCCESS Length: 131072
108223 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108224 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.002 SUCCESS Length: 131072
108225 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS
108226 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS
108227 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108228 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.002 SUCCESS Length: 65536
108229 10:19:38 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108230 10:19:38 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.001 SUCCESS Length: 65536
108231 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS
108232 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS
108233 10:19:38 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108234 10:19:38 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108235 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 0 Length: 512
108236 10:19:38 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS
108237 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 512 Length: 512
108238 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1024 Length: 512
108239 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1536 Length: 512
108240 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 2048 Length: 512
108241 10:19:38 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108242 10:19:38 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108243 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 0 Length: 512
108244 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 512 Length: 512
108245 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1024 Length: 512
108246 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1536 Length: 512
108247 10:19:38 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 2048 Length: 512
108248 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS Options: OpenIf Sequential Access: All
108249 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.001 SUCCESS Length: 65536
108250 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS Options: OpenIf Sequential Access: All
108251 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.002 SUCCESS Length: 65536
108252 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS
108253 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS
108254 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108255 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.002 SUCCESS Length: 131072
108256 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108257 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.001 SUCCESS Length: 131072
108258 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS
108259 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS
108260 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108261 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.001 SUCCESS Length: 65536
108262 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108263 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.002 SUCCESS Length: 65536
108264 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS
108265 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS
108266 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108267 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108268 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 0 Length: 512
108269 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 512 Length: 512
108270 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1024 Length: 512
108271 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1536 Length: 512
108272 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 2048 Length: 512
108273 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108274 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108275 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 0 Length: 512
108276 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 512 Length: 512
108277 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1024 Length: 512
108278 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1536 Length: 512
108279 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 2048 Length: 512
108280 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS Options: OpenIf Sequential Access: All
108281 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.002 SUCCESS Length: 65536
108282 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS Options: OpenIf Sequential Access: All
108283 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.001 SUCCESS Length: 65536
108284 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS
108285 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS
108286 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108287 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.001 SUCCESS Length: 131072
108288 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108289 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.002 SUCCESS Length: 131072
108290 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS
108291 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS
108292 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108293 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.002 SUCCESS Length: 65536
108294 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108295 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.001 SUCCESS Length: 65536
108296 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS
108297 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS
108298 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108299 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108300 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 0 Length: 512
108301 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 512 Length: 512
108302 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1024 Length: 512
108303 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1536 Length: 512
108304 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 2048 Length: 512
108305 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108306 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108307 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 0 Length: 512
108308 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 512 Length: 512
108309 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1024 Length: 512
108310 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1536 Length: 512
108311 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 2048 Length: 512
108312 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS Options: OpenIf Sequential Access: All
108313 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.001 SUCCESS Length: 65536
108314 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS Options: OpenIf Sequential Access: All
108315 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.002 SUCCESS Length: 65536
108316 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS
108317 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS
108318 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108319 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.002 SUCCESS Length: 131072
108320 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108321 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.001 SUCCESS Length: 131072
108322 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS
108323 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS
108324 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108325 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.001 SUCCESS Length: 65536
108326 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108327 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.002 SUCCESS Length: 65536
108328 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS
108329 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS
108330 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108331 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108332 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 0 Length: 512
108333 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 512 Length: 512
108334 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1024 Length: 512
108335 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1536 Length: 512
108336 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 2048 Length: 512
108337 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108338 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108339 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 0 Length: 512
108340 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 512 Length: 512
108341 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1024 Length: 512
108342 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1536 Length: 512
108343 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 2048 Length: 512
108344 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS Options: OpenIf Sequential Access: All
108345 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.002 SUCCESS Length: 65536
108346 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS Options: OpenIf Sequential Access: All
108347 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.001 SUCCESS Length: 65536
108348 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS
108349 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS
108350 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108351 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.001 SUCCESS Length: 131072
108352 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108353 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiCL0001.002 SUCCESS Length: 131072
108354 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.001
SUCCESS
108355 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiCL0001.002
SUCCESS
108356 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS Options: OpenIf Sequential Access: All
108357 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.002 SUCCESS Length: 65536
108358 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS Options: OpenIf Sequential Access: All
108359 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSL0001.001 SUCCESS Length: 65536
108360 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.002
SUCCESS
108361 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSL0001.001
SUCCESS
108362 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108363 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk1 SUCCESS Length: 2099712
108364 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 0 Length: 512
108365 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 512 Length: 512
108366 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1024 Length: 512
108367 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 1536 Length: 512
108368 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk1
SUCCESS Offset: 2048 Length: 512
108369 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108370 10:19:39 AM cisvc.exe:4420 SET INFORMATION
E:\inetpub\catalog.wci\propstor.bk2 SUCCESS Length: 2099712
108371 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 0 Length: 512
108372 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 512 Length: 512
108373 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1024 Length: 512
108374 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 1536 Length: 512
108375 10:19:39 AM cisvc.exe:4420 WRITE E:\inetpub\catalog.wci\propstor.bk2
SUCCESS Offset: 2048 Length: 512
108376 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS Options: OpenIf Sequential Access: All
108377 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.001 SUCCESS Length: 65536
108378 10:19:39 AM cisvc.exe:4420 OPEN E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS Options: OpenIf Sequential Access: All
108379 10:19:39 AM cisvc.exe:4420 QUERY INFORMATION
E:\inetpub\catalog.wci\CiSP0000.002 SUCCESS Length: 65536
108380 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.001
SUCCESS
108381 10:19:39 AM cisvc.exe:4420 CLOSE E:\inetpub\catalog.wci\CiSP0000.002
SUCCESS
108382 10:21:11 AM cisvc.exe:4420 OPEN F:\evanscorp web\wwwroot\news SUCCESS
Options: Open Access: All
108383 10:21:11 AM cisvc.exe:4420 CLOSE F:\evanscorp web\wwwroot\news
SUCCESS
108384 10:27:27 AM cisvc.exe:4420 OPEN E:\ SUCCESS Options: Open Directory
Access: All
108385 10:27:27 AM cisvc.exe:4420 CLOSE E:\ SUCCESS
108386 10:27:27 AM cisvc.exe:4420 OPEN E:\ SUCCESS Options: Open Directory
Access: All
108387 10:27:27 AM cisvc.exe:4420 CLOSE E:\ SUCCESS
108388 10:27:27 AM cisvc.exe:4420 OPEN E:\ SUCCESS Options: Open Directory
Access: All
108389 10:27:27 AM cisvc.exe:4420 CLOSE E:\ SUCCESS
""WenJun Zhang[msft]"" <v-wzhang@online.microsoft.com> wrote in message
news:z%23UUeQ87DHA.2164@cpmsftngxa07.phx.gbl...
> Hello Philip,
>
> I'm not sure if the issue is related to the IE symptom. Since the
> problem seems to occur when indexing files and updating catalog, I
> think you can use filemon to trace the cisvc.exe process's I/O to
> find some clues. When the 100% cpu appears again, see if the
> cisvc.exe is always pending on some certain files.
>
> Download filemon:
> http://www.sysinternals.com/ntw2k/source/filemon.shtml
>
> Only include cisvc.exe in its toolbar->filter, this prevent a great
> deal of spam records.
>
> Many former cases with the simliar 100% cpu symptom were caused by
> that some files to be indexed contain *special string* and
> corresponding IFilters hang on them. For example:
>
> 321073 Index Service Stops Responding When Filtering Japanese Excel
> File
> http://support.microsoft.com/?id=321073
>
> Please update on any findings.
> Have a nice day,
>
> WenJun Zhang
> Microsoft Online Support
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Get Secure! - www.microsoft.com/security
>
| |
| WenJun Zhang[msft] 2004-02-10, 9:34 pm |
| Just as you said, from the log I saw cisvc.exe suddenly began to
access E:\ and was looping on open/close direcotry, the behavior is
really weird. Please temporarily disable the F-Secure anti-virus and
test if the symptom persists. If the problem is no relationship to
F-Secure, we need use ADPlus to capture memory dump of cisvc.exe:
286350 HOW TO: Use ADPlus to Troubleshoot "Hangs" and "Crashes"
http://support.microsoft.com/?id=286350
It's a bit inconvenient to perform this task in newsgroup. You may
place the dump files on a web site and provide me with the url to
download them. Or if you can call PSS to open a case for further
handling this issue, it will be ideal.
Best regards,
WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
| |
| WenJun Zhang[msft] 2004-02-12, 1:36 am |
| Hi Phillip,
I attached a command line tool - USNmon here. This tool can show us
all of the file system notifications that are going on at night.
To use:
"
1) Ensure SYSTEM has Full Control to all of the content.
2) If you have real time monitoring software like anti-virus
software, then
disable it when Index Server is running.
3) Use USNMon to monitor file system notifications to ensure Index
Server is
receiving it.
4) Remove/disable any real time monitoring software such as
anti-virus software
and Live Vault.
Using USNMon:
1) USNMon is a command line utility. At a command prompt run USNMon
with the
following syntax:
USNMon X: > usnmon.txt
Where X is the hard drive letter to monitor for file system
notifications and
usnmon.txt is the name of the output file.
2) Once you begin capturing with USNMon, reproduce the problem.
3) Set window focus back to the command prompt where USNMon is
running and press
Ctrl-C to stop USNMon.
4) Open usnmon.txt to ensure output was gathered. If so, the zip the
file and send
to me via email.
"
Let's see if there are any abnormal file changed notiifcations from
the usn log.
Have a nice day,
WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
| |
| WenJun Zhang[msft] 2004-02-15, 10:33 pm |
| Hi Phillip,
I saw the e:\ is forced to be excluded from your web scope. Your know
this isn't necessary. Let's remove it to prevent it from any
potential business with index. If the hang appears again, trace by
filemon again to see if the hang still seems to be looping I/O on e:\.
"*.exe"=",,4"
"*.zip"=",,4"
"*.jpg"=",,4"
"*.gif"=",,4"
"*.css"=",,4"
"*.swf"=",,4"
"*.config"=",,4"
"*.asmx"=",,4"
"*.dll"=",,4"
"f:\\evanscorp web\\wwwroot\\"=",,3"
"e:\\"=",,4"
"c:\\"=",,4"
"f:\\Backups"=",,4"
"f:\\Databases*"=",,4"
"f:\\LogFiles"=",,4"
"f:\\Keep"=",,4"
"f:\\web sites\\ampa\\wwwroot\\"=",,3"
"f:\\web sites\\ampa\\content\\"=",,3"
"*.sys"=",,4"
"f:\\web sites\\wmc\\wwwroot\\"=",,3"
"f:\\web sites\\flameburst\\wwwroot\\"=",,3"
"f:\\web sites\\balgownie war memorial trust\\wwwroot\\"=",,3"
"f:\\web sites\\weir\\wwwroot\\"=",,3"
"f:\\web sites\\tech waratahs\\wwwroot\\"=",,3"
"f:\\web sites\\basicstuff\\wwwroot\\"=",,3"
"f:\\web sites\\supportersworld\\"=",,3"
"f:\\web sites\\stephenlee\\wwwroot\\"=",,3"
"f:\\web sites\\whsclassof57\\wwwroot\\"=",,3"
"f:\\web sites\\nots\\"=",,3"
"f:\\web sites\\pro-access\\"=",,3"
"f:\\web sites\\pkharbour\\wwwroot\\"=",,3"
"f:\\web sites\\smagency\\"=",,3"
"f:\\web sites\\tory\\wwwroot\\"=",,3"
"f:\\web sites\\gradbear\\"=",,3"
"f:\\web sites\\iii\\"=",,3"
"f:\\web sites\\interactivetasks\\wwwroot\\"=",,3"
"f:\\web sites\\mhm-insbrokers\\"=",,3"
"*.msg"=",,4"
"*.xslt"=",,4"
"F:\\VMWserver"=",,4"
"f:\\VOPMail"=",,4"
Have a nice day,
WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security
| |
| SjefGielen 2004-07-05, 9:34 am |
| Hello all,
I had the same problem on a customer's server. Deinstalling F-Secure solved the problem.
I think the best thing to do is to exclude all catalog locations from scanning. I think CI and F-Secure toghether create some kind of loop in accessing the catalog files.
Hope this helps.
Sjef Gielen... | |
| Phillip Evans 2004-07-28, 2:59 am |
| The problem is apparently caused by a bug in Index Server which comes into
play when you install F-Secure's asynchronous file system driver (or
something like that). It's nothing to do with the catalog location but
rather to do with the files being indexed. If you can exclude any indexed
files from those protected by F-Secure (and vice-versa) you'll be OK. Of
course, that means that the content you want indexed won't be scanned.
F-Secure are aware of the issue and the current version (5.50) works
beautifully.
The Index Server bug as apparently fixed in Windows 2000 SP5. I don't know
about Windows 2003 Server.
Phil.
"SjefGielen" <SjefGielen.18x8h1@mail.webservertalk.com> wrote in message
news:SjefGielen.18x8h1@mail.webservertalk.com...
>
> Hello all,
>
> I had the same problem on a customer's server. Deinstalling F-Secure
> solved the problem.
> I think the best thing to do is to exclude all catalog locations from
> scanning. I think CI and F-Secure toghether create some kind of loop in
> accessing the catalog files.
>
> Hope this helps.
>
> Sjef Gielen...
>
>
>
> --
> SjefGielen
> ------------------------------------------------------------------------
> Posted via http://www.webservertalk.com
> ------------------------------------------------------------------------
> View this thread: http://www.webservertalk.com/message117832.html
>
|
|
|
|
|