defaultapppool crash

Topics: User Forum
Dec 9, 2008 at 10:59 PM

Hi There,

We're having an issue with our prod website crashing the default app pool from time to time and it looks like it may be related to the isapirewrite4.dll.

Our prod server is a Windows 2003 Server R2 with SP2 with IIS 6.0, running joomla 1.0.13

Ionics ISAPI rewrite was installed as part of the Artio SEF component in Joomla. The Artio SEF version is JoomSEF v2.2.4

The issue we have is that our defaultapppool is failing due to a number of failures over a 10 minute period with the errors cited below.

The errors that appear in the W2K3 event log are as follows:

SYSTEM LOG
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 9/12/2008
Time: 12:58:14 PM
User: N/A
Computer: 
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly. The process id was '5004'. The process exit code was '0xc0000005'.

APPLICATION LOG
Event Type: Error
Event Source: Application Error
Event Category: (100)
Event ID: 1000
Date: 9/12/2008
Time: 12:58:14 PM
User: N/A
Computer: </P>
Description:</P>
Faulting application w3wp.exe, version 6.0.3790.3959, faulting module IsapiRewrite4.dll, version 0.0.0.0, fault address 0x000067a9.

APPLICATION LOG
<FONT size=2>
<P>Event Type: Information</P>
<P>Event Source: Application Error</P>
<P>Event Category: (100)</P>
<P>Event ID: 1004</P>
<P>Date: 8/12/2008</P>
<P>Time: 8:35:19 PM</P>
<P>User: N/A</P>
<P>Computer: MELSERV07</P>
<P>Description:</P>
<P>Reporting queued error: faulting application w3wp.exe, version 6.0.3790.3959, faulting module IsapiRewrite4.dll, version 0.0.0.0, fault address 0x000067a9.</P>


The corresponding IIRF log (time wise)
<FONT size=2>
<P>--------------------------------------------</P>
<P>Mon Dec 08 20:56:00 2008 - Read .ini file: setting LogLevel to 1</P>
<P>Mon Dec 08 20:56:00 2008 - Read .ini file: Iteration Limit= 1</P>
<P>Mon Dec 08 20:56:00 2008 - ini line 12: RewriteCond %{URL} ^(/component/option,com) </P>
<P>Mon Dec 08 20:56:00 2008 - WARNING: unsupported RewriteCond modifier flag 'NC'</P>
<P>Mon Dec 08 20:56:00 2008 - ini line 13: RewriteCond %{URL} (/|\.htm|\.php|\.html|/[^.]*)$ </P>
<P>Mon Dec 08 20:56:00 2008 - WARNING: unsupported RewriteCond modifier flag 'NC'</P>
<P>Mon Dec 08 20:56:00 2008 - ini line 14: RewriteCond %{REQUEST_FILENAME} !-f </P>
<P>Mon Dec 08 20:56:00 2008 - ini line 15: RewriteCond %{REQUEST_FILENAME} !-d </P>
<P>Mon Dec 08 20:56:00 2008 - ini line 16: RewriteRule 1 /(.*) /index.php [L,U]</P>
<P>Mon Dec 08 20:56:00 2008 - ini line 23: RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) </P>
<P>Mon Dec 08 20:56:00 2008 - ini line 25: RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) </P>
<P>Mon Dec 08 20:56:00 2008 - ini line 27: RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) </P>
<P>Mon Dec 08 20:56:00 2008 - WARNING: unsupported RewriteCond modifier flag 'NC'</P>
<P>Mon Dec 08 20:56:00 2008 - ini line 29: RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) </P>
<P>Mon Dec 08 20:56:00 2008 - ini line 31: RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2}) </P>
<P>Mon Dec 08 20:56:00 2008 - ini line 33: RewriteRule 2 ^(.*)$ /index.php [F,L]</P>
<P>Mon Dec 08 20:56:00 2008 - WARNING: Redundant modifier flags - F,L</P>
<P>Mon Dec 08 20:56:00 2008 - Done reading .ini file: Found 2 rules (0 failed) on 36 lines</P>
<P>Mon Dec 08 20:56:00 2008 - Ionic URL Rewriting ISAPI Filter v1.2.12c</P>
<P>Mon Dec 08 20:56:00 2008 - Initialize, main threadId= 7588</P>
<P>Mon Dec 08 20:56:00 2008 - File watcher thread created.</P>
<P>Mon Dec 08 20:56:00 2008 - GetFilterVersion</P></FONT>

I've had a look at the http logs and the only thing I can find is that this problem seems to happen  when the HTTP verb 'OPTIONS' is used. e.g.

SOURCE IP, -, 12/10/2008, 9:51:00, W3SVC, webserver, IP ADDRESS, 15, 463, 200, 200, 0, OPTIONS, /, -,

I'm fairly new to this and am groping around in the dark a little bit, I wonder if anyone has seen anything like this or has some thoughts on what might be causing it? My own suspicion is that it is something like permissions but at this stage I'm really at a bit of dead end. Any thoughts greatly appreciated.

Thanks
Roger

 

Feb 16, 2009 at 10:09 PM
Just a followup to this post.

This issue was resolved by upgrading to the latest release of isapirewrite. v 1.2.15. We were running v1.2.12c