PRB: IIS 4.0 causes User Mode Process dump to generate a memory dump when remotely monitored with performance monitor (275494)


The information in this article applies to:

  • Microsoft Internet Information Server 4.0
This article was previously published under Q275494
We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SYMPTOMS

When you run a User Mode Process dump from the OEM Support Tools kit (http://www.microsoft.com/downloads/release.asp) on a Microsoft Windows NT 4.0 Service Pack 6a (SP6a)/Internet Information Server (IIS) version 4.0 server that is being remotely monitored by Performance Monitor, the User Mode Process dump may repeatedly generate memory dump files. In addition, you may see the following event in the event log: Event ID: 201
Src: Udmpsvc
User Mode Process Dump service was started successfully.

Event ID: 1010
Source: Perflib
The Collect Procedure for the "InetInfo" service in DLL "infoctrs.DLL" generated an exception or returned an invalid status. Performance data returned by counter DLL will be not be returned in Perf Data Block. Exception or status code returned is data DWORD 0.

CAUSE

This problem occurs because the User Mode Process dump can only be configured to dump a process on first chance exceptions. These dumps are being generated because of first chance "access violations" that are handled by the performance counters, which do not cause IIS to crash. However, because the User Mode Process dump cannot be configured to ignore these first chance exceptions (or first chance exceptions of any kind), it generates a dump file.

RESOLUTION

There are two workarounds for this issue:
  • Do not run performance monitor against the IIS server remotely while the User Mode Process dump is being used.
  • Use the IIS Exception Monitor and the Script file customization wizard to configure the IIS Exception Monitor to ignore first chance access violations.

STATUS

This behavior is by design.
Modification Type:MajorLast Reviewed:11/16/2005
Keywords:kbprb KB275494
©2004 Microsoft Corporation. All rights reserved.