length issue in IIRF rule

Apr 26, 2010 at 11:12 AM

I am having a strange issue with my IIRF rules-I have 56 rules - no errors

When I run this url-

url-A-http://www.schoolsearch.in/nikdav-Centenary-Public-School-addresses-maps-schools-in-india/India-Delhi(NCR)-Bharat-National

all 56 rules are traveres and it gets a match in 56th rule

 

when I run-

url-B-http://www.schoolsearch.in/nikdav-Centenary-Public-School-addresses-maps-schools-in-india/India-Delhi(NCR)-Bharat-National-public

it runs only 55 rules and ends the IIRF log file and in browser I get connection was reset while loading the page

is it a length issue , but I have few urls in my site which run absolutely fine and have length more than above url

actually this url B should also get matched against 56th rule but lets suppose  none of the rule is matching then it should display atleast 404 page why connection reset..??

 

Rule 56th-

RewriteRule ^/((?!(\.aspx)|(\.asmx)|(\.txt)|(\.css)|(\.js)|(\.jpg)|(\.gif)|(\.png)|(\.php)|(\.htc)|(\.ico)|(\.zip)|(blog)|(\.swf)|(\.axd)|(oauth_token)|(\.xml)).)*$  /indexi.htm [L]

(If none of the rule is matched then 56th rule will definitely have a match - i have written this rule to control 404 error)

logs for both urls are -

 

----------------------------------------------------------------------------------------------------------------------------------------------------------

url A log

Mon Apr 26 06:52:31 - 57436 - DoRewrites: Url (no decoding): '/nikdav-Centenary-Public-School-addresses-maps-schools-in-india/India-Delhi(NCR)-Bharat-National'
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: depth=0
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 1 : 2 matches
Mon Apr 26 06:52:31 - 57436 - EvalCondition: Cond %{HTTP_HOST} ^schoolsearch\.in$ => FALSE
Mon Apr 26 06:52:31 - 57436 - EvalConditionList: rule 1, FALSE, Rule does not apply
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 2 : 2 matches
Mon Apr 26 06:52:31 - 57436 - EvalCondition: Cond %{HTTP_HOST} ^mail.schoolsearch\.in$ => FALSE
Mon Apr 26 06:52:31 - 57436 - EvalConditionList: rule 2, FALSE, Rule does not apply
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 3 : 2 matches
Mon Apr 26 06:52:31 - 57436 - EvalCondition: Cond %{HTTP_HOST} ^searchschool\.in$ => FALSE
Mon Apr 26 06:52:31 - 57436 - EvalConditionList: rule 3, FALSE, Rule does not apply
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 4 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 5 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 6 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 7 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 8 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 9 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 10 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 11 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 12 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 13 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 14 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 15 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 16 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 17 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 18 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 19 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 20 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 21 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 22 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 23 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 24 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 25 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 26 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 27 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 28 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 29 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 30 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 31 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 32 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 33 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 34 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 35 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 36 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 37 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 38 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 39 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 40 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 41 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 42 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 43 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 44 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 45 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 46 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 47 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 48 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 49 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 50 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 51 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 52 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 53 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 54 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 55 : -1 (No match)
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Rule 56 : 2 matches
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Result (length 11): /indexi.htm
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: Last Rule
Mon Apr 26 06:52:31 - 57436 - EvaluateRules: returning 1
Mon Apr 26 06:52:31 - 57436 - DoRewrites: Rewrite Url to: '/indexi.htm'
Mon Apr 26 06:52:31 - 57436 - HttpFilterProc: SF_NOTIFY_URL_MAP

--------------------------------------------------------------------------------------------------------------------------------------------------------

----------------------------------------------------------------------------------------------------------------------------------------------------------

URL B- logs


Mon Apr 26 06:54:37 - 47900 - DoRewrites: Url (no decoding): '/nikdav-Centenary-Public-School-addresses-maps-schools-in-india/India-Delhi(NCR)-Bharat-National-public'
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: depth=0
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 1 : 2 matches
Mon Apr 26 06:54:37 - 47900 - EvalCondition: Cond %{HTTP_HOST} ^schoolsearch\.in$ => FALSE
Mon Apr 26 06:54:37 - 47900 - EvalConditionList: rule 1, FALSE, Rule does not apply
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 2 : 2 matches
Mon Apr 26 06:54:37 - 47900 - EvalCondition: Cond %{HTTP_HOST} ^mail.schoolsearch\.in$ => FALSE
Mon Apr 26 06:54:37 - 47900 - EvalConditionList: rule 2, FALSE, Rule does not apply
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 3 : 2 matches
Mon Apr 26 06:54:37 - 47900 - EvalCondition: Cond %{HTTP_HOST} ^searchschool\.in$ => FALSE
Mon Apr 26 06:54:37 - 47900 - EvalConditionList: rule 3, FALSE, Rule does not apply
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 4 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 5 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 6 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 7 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 8 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 9 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 10 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 11 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 12 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 13 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 14 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 15 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 16 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 17 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 18 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 19 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 20 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 21 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 22 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 23 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 24 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 25 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 26 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 27 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 28 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 29 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 30 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 31 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 32 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 33 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 34 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 35 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 36 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 37 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 38 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 39 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 40 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 41 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 42 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 43 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 44 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 45 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 46 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 47 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 48 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 49 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 50 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 51 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 52 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 53 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 54 : -1 (No match)
Mon Apr 26 06:54:37 - 47900 - EvaluateRules: Rule 55 : -1 (No match)

----------------------------------------------------------------------------------------------------------------------------------------------------------

 

 

Coordinator
Apr 26, 2010 at 3:40 PM
I don't know. Because the log is truncated, It looks like the filter has crashed. But if that were the case, you'd get a stacktrace in the log file. So that doesn't make sense. Has there been a crash? Check the Windows Event Log for a message from the W3SVC. Also check the process ID on the log file. A changed process ID would indicate a new process, which would suggest a w3wp.exe crash. The rule you have there is more complicated than it needs to be, but that shouldn't, by itself, lead to a problem. If the problem is repeatable, though, you should be able to diagnose it and fix it. I tried it here, using the latest v2.1 of the filter, and didn't see the problem you described.
Apr 27, 2010 at 7:01 AM

URL-B -

http://www.schoolsearch.in/nikdav-Centenary-Public-School-addresses-maps-schools-in-india/India-Delhi(NCR)-Bharat-National-public

on running URl-B  I get following in Event Log

A process serving application pool 'DefaultAppPool' suffered a fatal communication error with the World Wide Web Publishing Service. The process id was '69016'. The data field contains the error number.

How to diagnose why this is happening..?

But I am not able to understand that Why this crash is not happening on running URL-A  they both hardly have any difference (just public in end)

Apr 27, 2010 at 8:50 AM

I run the debug diagnostic tool and found following -

In w3wp__PID__64604__Date__04_27_2010__Time_03_11_14AM__588__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!_SEH_prolog+1a in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to write to memory location 0x00f80f70 on thread 5

 

 

Report for w3wp__PID__64604__Date__04_27_2010__Time_03_11_14AM__588__Second_Chance_Exception_C0000005.dmp
Type of Analysis Performed   Crash Analysis
Machine Name   VPS629
Operating System   Windows Server 2003 Service Pack 2
Number Of Processors   2
Process ID   64604
Process Image   c:\WINDOWS\system32\inetsrv\w3wp.exe
System Up-Time   294 day(s) 10:47:57
Process Up-Time   0 day(s) 00:06:15


Thread 5 - System ID 42000
Entry point   w3tp!THREAD_MANAGER::ThreadManagerThread
Create time   4/27/2010 3:05:00 AM
Time spent in user mode   0 Days 0:0:0.0
Time spent in kernel mode   0 Days 0:0:0.0






Function     Arg 1     Arg 2     Arg 3   Source
ntdll!_SEH_prolog+1a     021a0000     00000000     00000020    
IIRF!pcre_exec+b174     00000020     00000000     00000000    
IIRF!pcre_exec+b4a9     00000020     00000000     1000747a    
IIRF+11c8     01078718     04000000     00fbfa8c    
w3core!W3_FILTER_CONTEXT::NotifyFilters+52d     04000000     00fbfa8c     00fbfa40    
w3core!W3_FILTER_CONTEXT::NotifyAuthComplete+39     00fbfa8c     00fbfa40     00000208    
w3core!W3_MAIN_CONTEXT::NotifyFilters+d0     04000000     00fbfa8c     00fbfa40    
w3core!W3_STATE_AUTHENTICATION::DoWork+950     01077ea8     00000000     00000000    
w3core!W3_MAIN_CONTEXT::DoWork+a6     00000000     00000000     00000000    
w3core!W3_MAIN_CONTEXT::OnNewRequest+55     010773e0     010773e0     5a361650    
w3dt!UL_NATIVE_REQUEST::DoStateProcess+48     00268678     00268684     00fbff5c    
w3dt!UL_NATIVE_REQUEST::DoWork+7f     00000a8e     000000ea     010773e4    
w3dt!OverlappedCompletionRoutine+1a     000000ea     00000a8e     010773e4    
w3tp!THREAD_POOL_DATA::ThreadPoolThread+73     00000000     00268710     5a300000    
w3tp!THREAD_POOL_DATA::ThreadPoolThread+24     00268678     00000000     00000000    
w3tp!THREAD_MANAGER::ThreadManagerThread+39     00268710     00000000     00000000    
kernel32!BaseThreadStart+34     5a301d70     00268710     00000000    




NTDLL!_SEH_PROLOG+1AIn w3wp__PID__64604__Date__04_27_2010__Time_03_11_14AM__588__Second_Chance_Exception_C0000005.dmp the assembly instruction at ntdll!_SEH_prolog+1a in C:\WINDOWS\system32\ntdll.dll from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to write to memory location 0x00f80f70 on thread 5

Module Information
Image Name: C:\WINDOWS\system32\ntdll.dll   Symbol Type:  PDB
Base address: 0x7c800000   Time Stamp:  Sat Feb 17 09:02:00 2007  
Checksum: 0x000bd6f9   Comments:   
COM DLL: False   Company Name:  Microsoft Corporation
ISAPIExtension: False   File Description:  NT Layer DLL
ISAPIFilter: False   File Version:  5.2.3790.3959 (srv03_sp2_rtm.070216-1710)
Managed DLL: False   Internal Name:  ntdll.dll
VB DLL: False   Legal Copyright:  © Microsoft Corporation. All rights reserved.
Loaded Image Name:  ntdll.dll   Legal Trademarks:   
Mapped Image Name:     Original filename:  ntdll.dll
Module name:  ntdll   Private Build:   
Single Threaded:  False   Product Name:  Microsoft® Windows® Operating System
Module Size:  768.00 KBytes   Product Version:  5.2.3790.3959
Symbol File Name:  c:\symcache\ntdll.pdb\93E72E109DC84F16AA54797E4DA8C1682\ntdll.pdb   Special Build:  &

 

I have no idea of this...!!