| Author |
Bts crashing - Event ID 1000
|
|
| eXavier 2005-10-24, 10:32 am |
| Hello,
does anybody know what is exact meaning of event with ID 1000 in Windows
System Event Log ?
BtsNTSvc sometimes crashes and all I have is this event. But the description
says just:
The description for Event ID ( 1000 ) in Source ( BizTalk NT Service )
cannot be found. The local computer may not have the necessary registry
information or message DLL files to display messages from a remote computer.
You may be able to use the /AUXSOURCE= flag to retrieve this description;
see Help and Support for details. The following information is part of the
event: btsntsvc.exe; 3.0.4902.0; ; 0.0.0.0; 00000000.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 62 74 73 ure bts
0018: 6e 74 73 76 63 2e 65 78 ntsvc.ex
0020: 65 20 33 2e 30 2e 34 39 e 3.0.49
0028: 30 32 2e 30 20 69 6e 20 02.0 in
0030: 20 30 2e 30 2e 30 2e 30 0.0.0.0
0038: 20 61 74 20 6f 66 66 73 at offs
0040: 65 74 20 30 30 30 30 30 et 00000
0048: 30 30 30 0d 0a 000..
How can I solve this crashing? There is Restart service after 1 minute
recovery policy on the service but it is not an exception when this error is
in the event log more times (i.e. when a minute passes and SCM tries to
restart the service, it crashes again..and then yet 6 times). The crashing
occures in peak but also when there is no activity in the system. I have no
idea what to do with this? Could someone help ?
eXavier
| |
| BizWorld 2005-10-24, 10:32 am |
| It can not be figure out unless you provide all Details like OS, any Service
pack installed for OS?
Did you try to install SP1 for BizTalk 2004?
Was this instance of BTS running befor and it stopped working after
deploying some assumbly?
Regards,
BizWorld
"eXavier" <fhns@centrum.cz> wrote in message
news:%23P3h1yM1FHA.268@TK2MSFTNGP09.phx.gbl...
> Hello,
> does anybody know what is exact meaning of event with ID 1000 in Windows
> System Event Log ?
> BtsNTSvc sometimes crashes and all I have is this event. But the
> description
> says just:
>
> The description for Event ID ( 1000 ) in Source ( BizTalk NT Service )
> cannot be found. The local computer may not have the necessary registry
> information or message DLL files to display messages from a remote
> computer.
> You may be able to use the /AUXSOURCE= flag to retrieve this description;
> see Help and Support for details. The following information is part of the
> event: btsntsvc.exe; 3.0.4902.0; ; 0.0.0.0; 00000000.
>
> Data:
> 0000: 41 70 70 6c 69 63 61 74 Applicat
> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> 0010: 75 72 65 20 20 62 74 73 ure bts
> 0018: 6e 74 73 76 63 2e 65 78 ntsvc.ex
> 0020: 65 20 33 2e 30 2e 34 39 e 3.0.49
> 0028: 30 32 2e 30 20 69 6e 20 02.0 in
> 0030: 20 30 2e 30 2e 30 2e 30 0.0.0.0
> 0038: 20 61 74 20 6f 66 66 73 at offs
> 0040: 65 74 20 30 30 30 30 30 et 00000
> 0048: 30 30 30 0d 0a 000..
>
>
> How can I solve this crashing? There is Restart service after 1 minute
> recovery policy on the service but it is not an exception when this error
> is
> in the event log more times (i.e. when a minute passes and SCM tries to
> restart the service, it crashes again..and then yet 6 times). The crashing
> occures in peak but also when there is no activity in the system. I have
> no
> idea what to do with this? Could someone help ?
>
> eXavier
>
>
| |
| eXavier 2005-10-24, 10:32 am |
| It is Biztalk 2004 Enterprise with SP1 on Windows Server 2003 Standard Ed.
Windows are updated with MS Update, but first in the staging environment and
then, if no problems occur, also in production environment.
But i saw this behavior also in development environment on Win2K.
We have 4 hosts: 1 for receive adapters (named Receive), 1 for
orchestrations (BiztalkServerApplication) and 2 for send (Send and SendMQ).
SendMQ is used only for send adapter with proprietary protocol on MQ. There
are 2 identical servers (Win2003 with Biztalk 2004 Enterprise) in Biztalk
Group and another 2 servers (also Win2003) for SQL cluster. Each Biztalk
host has two instances - one on each machine in Biztalk Group.
The system has been running for 1 month now. There is service window on
receive ports from 22:45 to 01:00 every day and there is lower load on
weekends. I did some statistics from event log on one of machines and found
that crashes:
BiztalkServerApplication: 67
Send: 49
Receive: 9
SendMQ: 1
Any idea ? Thanks in advance.
eXavier
"BizWorld" <moonis.tahir@gmail.com> wrote in message
news:OfF%23TeO1FHA.2008@TK2MSFTNGP10.phx.gbl...
> It can not be figure out unless you provide all Details like OS, any
Service
> pack installed for OS?
>
> Did you try to install SP1 for BizTalk 2004?
>
> Was this instance of BTS running befor and it stopped working after
> deploying some assumbly?
>
> Regards,
>
> BizWorld
>
> "eXavier" <fhns@centrum.cz> wrote in message
> news:%23P3h1yM1FHA.268@TK2MSFTNGP09.phx.gbl...
description;[vbcol=seagreen]
the[vbcol=seagreen]
error[vbcol=seagreen]
crashing[vbcol=seagreen]
>
>
| |
| eXavier 2005-10-24, 10:32 am |
| Do you mean aplication assembly or some Biztalk patch ? The application is
still evolving but I saw Btsntsvc crashing all the time (at average 2x per
day). The strange is that it crashes also e.g. at 4 a.m. when there is
absolutely no load. I have checked event logs on all involved machines and
also our application log and there is no evidence of any problems at that
time.
I also examined the event 1000 messages and found that the case with offset
00000000 is quite rare. The most often there is offset 6009294e and also
there is quite lot of offset 60094ede. No other values. What does the offset
mean? How should I interpret the message to have a glue where to search far?
Event Type: Error
Event Source: BizTalk NT Service
Event Category: None
Event ID: 1000
Date: 18.10.2005
Time: 16:46:58
User: N/A
Computer: CHDNT51
Description:
The description for Event ID ( 1000 ) in Source ( BizTalk NT Service )
cannot be found. The local computer may not have the necessary registry
information or message DLL files to display messages from a remote computer.
You may be able to use the /AUXSOURCE= flag to retrieve this description; see
Help and Support for details. The following information is part of the event:
btsntsvc.exe; 3.0.4902.0; unknown; 0.0.0.0; 6009294e.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 62 74 73 ure bts
0018: 6e 74 73 76 63 2e 65 78 ntsvc.ex
0020: 65 20 33 2e 30 2e 34 39 e 3.0.49
0028: 30 32 2e 30 20 69 6e 20 02.0 in
0030: 75 6e 6b 6e 6f 77 6e 20 unknown
0038: 30 2e 30 2e 30 2e 30 20 0.0.0.0
0040: 61 74 20 6f 66 66 73 65 at offse
0048: 74 20 36 30 30 39 32 39 t 600929
0050: 34 65 0d 0a 4e..
Thanks a lot,
eXavier
"BizWorld" wrote:
> It can not be figure out unless you provide all Details like OS, any Service
> pack installed for OS?
>
> Did you try to install SP1 for BizTalk 2004?
>
> Was this instance of BTS running befor and it stopped working after
> deploying some assumbly?
>
> Regards,
>
> BizWorld
>
> "eXavier" <fhns@centrum.cz> wrote in message
> news:%23P3h1yM1FHA.268@TK2MSFTNGP09.phx.gbl...
>
>
>
| |
| chawlaa@gmail.com 2005-11-02, 5:50 pm |
| Hi there!
I am having the same problem on our production server. Were you able to
find a solution to yours?
Regards
Amit
eXavier wrote:[vbcol=seagreen]
> Do you mean aplication assembly or some Biztalk patch ? The application is
> still evolving but I saw Btsntsvc crashing all the time (at average 2x per
> day). The strange is that it crashes also e.g. at 4 a.m. when there is
> absolutely no load. I have checked event logs on all involved machines and
> also our application log and there is no evidence of any problems at that
> time.
>
> I also examined the event 1000 messages and found that the case with offset
> 00000000 is quite rare. The most often there is offset 6009294e and also
> there is quite lot of offset 60094ede. No other values. What does the offset
> mean? How should I interpret the message to have a glue where to search far?
>
> Event Type: Error
> Event Source: BizTalk NT Service
> Event Category: None
> Event ID: 1000
> Date: 18.10.2005
> Time: 16:46:58
> User: N/A
> Computer: CHDNT51
> Description:
> The description for Event ID ( 1000 ) in Source ( BizTalk NT Service )
> cannot be found. The local computer may not have the necessary registry
> information or message DLL files to display messages from a remote computer.
> You may be able to use the /AUXSOURCE= flag to retrieve this description; see
> Help and Support for details. The following information is part of the event:
> btsntsvc.exe; 3.0.4902.0; unknown; 0.0.0.0; 6009294e.
> Data:
> 0000: 41 70 70 6c 69 63 61 74 Applicat
> 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> 0010: 75 72 65 20 20 62 74 73 ure bts
> 0018: 6e 74 73 76 63 2e 65 78 ntsvc.ex
> 0020: 65 20 33 2e 30 2e 34 39 e 3.0.49
> 0028: 30 32 2e 30 20 69 6e 20 02.0 in
> 0030: 75 6e 6b 6e 6f 77 6e 20 unknown
> 0038: 30 2e 30 2e 30 2e 30 20 0.0.0.0
> 0040: 61 74 20 6f 66 66 73 65 at offse
> 0048: 74 20 36 30 30 39 32 39 t 600929
> 0050: 34 65 0d 0a 4e..
>
>
> Thanks a lot,
> eXavier
>
>
>
> "BizWorld" wrote:
>
| |
| eXavier 2005-11-03, 5:55 pm |
| Not yet. We have contacted Biztalk support. Currently they are analyzing our
dumps.
eXavier
"chawlaa@gmail.com" wrote:
> Hi there!
>
> I am having the same problem on our production server. Were you able to
> find a solution to yours?
>
> Regards
> Amit
>
>
> eXavier wrote:
>
>
| |
| eXavier 2005-11-10, 5:59 pm |
| Thanks to Biztalk support we found the problem in invalid handling of
performance counters. We used System.Diagnostics.Process instance to get
ProcessName (for logging purposes). It is not documented in SDK but the
property does something with performance counters. In our case it updated SNA
counters but unfortunatelly it made a call to unloaded DLL (we reference DB2
data managed provider from HIS but in this application it was not used and
therefore probably not loaded).
Simply, we just replaced call to Process.ProcessName with
Process.MainModule.ModuleName (it gets similar result) and so we get rid of
the crashing.
Hope this helps.
eXavier
"eXavier" wrote:
[vbcol=seagreen]
> Not yet. We have contacted Biztalk support. Currently they are analyzing our
> dumps.
> eXavier
>
> "chawlaa@gmail.com" wrote:
>
|
|
|
|