Microsoft KB Archive/275494

= PRB: IIS 4.0 causes User Mode Process dump to generate a memory dump when remotely monitored with performance monitor =

Article ID: 275494

Article Last Modified on 11/16/2005

-

APPLIES TO


 * Microsoft Internet Information Server 4.0

-



This article was previously published under Q275494



We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx



SYMPTOMS
When you run a User Mode Process dump from the OEM Support Tools kit (http://www.microsoft.com/downloads/release.asp) on a Microsoft Windows NT 4.0 Service Pack 6a (SP6a)/Internet Information Server (IIS) version 4.0 server that is being remotely monitored by Performance Monitor, the User Mode Process dump may repeatedly generate memory dump files. In addition, you may see the following event in the event log: Event ID: 201

Src: Udmpsvc

User Mode Process Dump service was started successfully.

Event ID: 1010

Source: Perflib

The Collect Procedure for the &quot;InetInfo&quot; service in DLL &quot;infoctrs.DLL&quot; generated an exception or returned an invalid status. Performance data returned by counter DLL will be not be returned in Perf Data Block. Exception or status code returned is data DWORD 0.



CAUSE
This problem occurs because the User Mode Process dump can only be configured to dump a process on first chance exceptions. These dumps are being generated because of first chance &quot;access violations&quot; that are handled by the performance counters, which do not cause IIS to crash. However, because the User Mode Process dump cannot be configured to ignore these first chance exceptions (or first chance exceptions of any kind), it generates a dump file.



RESOLUTION
There are two workarounds for this issue:
 * Do not run performance monitor against the IIS server remotely while the User Mode Process dump is being used.
 * Use the IIS Exception Monitor and the Script file customization wizard to configure the IIS Exception Monitor to ignore first chance access violations.



STATUS
This behavior is by design.

Additional query words: perfmon

Keywords: kbprb KB275494

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.