Netware 5.x server abends during Norton Antivirus update.

[joeyngu]

Hello there,

I am in a difficult situation with our NW 5.x server. At 9:00 AM every morning the server abends during Antivirus update. I just took over this position a week ago and I'm trying to put pieces together. We're running the latest Norton antivirus software and the clients are being updated without any problem but, its during this update for reason the server abends and everything comes to a complete hault. I really need some quick help, solutions, TIDs or away of fixing it. I'm coming from the MS side of the table but I'm a quick learner.
All suggestions are welcome and thank you in advance.

 

[marvhuffaker]

Look at the SYS:SYSTEM\ABEND.LOG. Each abend is dated, and the last oen should be near the bottom, followed by a bunch of modules.

Even if it is Norton that is running when it crashes, you need to look at the abend.log file to see what exact module or modules are involved so you can troubleshoot them specifically.

Another thing you could do temporarily, is remove the Norton load line from the AUTOEXEC.NCF and boot the server, and see if the system crashes with out it. You might find it has nothing to do with Norton.

It would also be hand to know.. are you NW5.0 or NW5.1, what are your patch levels, and what exact NAV are you using?

Marvin Huffaker MCNE, CNE
Marvin Huffaker Consulting

http://www.redjuju.com

 

[joeyngu]

Thanks, I'll check the abend.log to see exact module is that could be causing the problem. I'll answer the other questions when I go to office on Monday.
** The server is sometimes going for a week without crashing, but still I want find out what is causing these crashes.

 

[rsebasti]

Gee...

I am getting the same for Mcafee. Here's my abend log any idears...

Abend 1 on P00: Server-5.00j: Page Fault Processor Exception (Error code 00000000)
Registers:
CS = 0008 DS = 0010 ES = 0010 FS = 0010 GS = 0010 SS = 0010
EAX = B42D9040 EBX = 00000000 ECX = 00010017 EDX = 00000000
ESI = 00000000 EDI = 00010017 EBP = CC003B04 ESP = B47CB794
EIP = D0B778EE FLAGS = 00010282
D0B778EE 3B7210 CMP ESI,[EDX+10]=?
EIP in FILESYS.NLM at code start +0002C8EEh
Access Location: 0x00000010
Running process: NETSHLD SCScan010 Process
Created by: NetWare Application
Thread Owned by NLM: NETSHLD.NLM
Additional Information:
The CPU encountered a problem executing code in FILESYS.NLM. The problem may be in that module or in data passed to that module by a process owned by NETSHLD.NLM.


========================================
I learnt the most
when I stopped talking...

 

[TheLad]

What versions are you running (eg. NetWare including Service Pack and NetShield version)

-----------------------------------------------------
"It's true, its damn true!"
-----------------------------------------------------

 

[rsebasti]

TheLad,

Novell 5.0 with SP6a and Netshield 4.6.

Thnx lad...

Maybe there is a way to direct troubleshoot the abend logs themselves. But the issue is pretty clear - Netshield. Any ideas...



========================================
I learnt the most
when I stopped talking...

 

[marvhuffaker]

do you have the post SP6 FILESYS.NLM patch installed? That may help. Netshield caused it but it happened in FILESYS.NLM.

There is also a Netsheild 4.6.1 that you might want to get.

Marvin Huffaker MCNE, CNE
Marvin Huffaker Consulting

http://www.redjuju.com