See Abend log below. This appears to happens fairly routinely. Not every
Sunday early morning, but pretty close to it. Can't figure out what the
server is doing at this time (nothing scheduled) that may cause this to
happen. Obviously a bit of a PTIA!

All ideas are appreciated,

Chirstopher C. West
IT Manager (and recent Novell convert!)
Globalstar LLC


********************
Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.04

Address space GRPWISE.NCF removed Sunday, January 22, 2006 3:58:47.596 am
Abend 0 on P00: Server-5.70.04: Free detected corrupt preceeding redzone for
node 0xCCDFB0C0

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = C26CC5F4 EBX = C26CC5B8 ECX = FFFFFFC2 EDX = 00000000
ESI = 00000000 EDI = 00000000 EBP = 90640DD4 ESP = 90640DB0
EIP = 825B7CA6 FLAGS = 00000292
825B7CA6 83C40C ADD ESP, 0000000C
EIP in UNKNOWN memory area

The violation occurred while processing the following instruction:
825B7CA6 83C40C ADD ESP, 0000000C
825B7CA9 5B POP EBX
825B7CAA C3 RET
SYSCALLS.NLM|MARSHAL_AccountCharge:
825B7CAB 53 PUSH EBX
825B7CAC 56 PUSH ESI
825B7CAD 0FB7742424 MOVZX ESI, word ptr [ESP+24]
825B7CB2 89F3 MOV EBX, ESI
825B7CB4 8B442428 MOV EAX, [ESP+28]
825B7CB8 83FB00 CMP EBX, 00000000
825B7CBB 7505 JNZ 825B7CC2



Running process: Server 00:81 Process
Thread Owned by NLM: SERVER.NLM
Stack pointer: 90640DB0
User Space Stack limit: 0
Scheduling priority: 67371008
Wait state: 50500F0 Waiting for work
Stack: 825B7CA6 (SYSCALLS.NLM|MARSHAL_Abend+31)
--00000191 ?
--00000000 ?
--C26CC5B8 ?
--CCDFB0B8 ?
00364F93 (SERVER.NLM|NewSystemCall+D3)
--C26CC5B8 ?
--80000001 ?
--86F2E694 ?
--C26CC660 ?
--C15E7C80 ?
00365095 (SERVER.NLM|NewSystemCall+1D5)
--00000073 ?
--C26CC5B0 ?
--0000007B ?
--00000000 ?
--C4662F00 ?
--C26CFFF4 ?
--86C09A60 ?
--0001C000 (SERVER.NLM|BIOSDriveCount+1D10)
0022A5D7 (SERVER.NLM|BumpCurrentAddressSpaceWTD+21F)
--90640E6C ?
--C4662F00 ?
--C26CFFF4 ?
--8F577380 ?
--C26B3000 ?
--C26CFFF4 ?
--00000000 ?
--00000000 ?
--C26B4000 ?
--8F577380 ?
--C4662F00 ?
--8F577380 ?
--90640E6C ?
--C4662F00 ?
0022A7BA (SERVER.NLM|CallUser+9A)
--90640E6C ?
--C4662F00 ?
--90640E60 ?
--8F577380 ?
--00000000 ?
0021EA6D (SERVER.NLM|TcoNewUserThreadEntryPoint+51)
--90640E6C ?
--C4662F00 ?
--00000002 ?
--8F577380 ?
--00000000 ?
--8C47A460 ?
--00000000 ?
--00000000 ?
--00000000 ?
--00000000 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--34343434 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?
--65657246 ?

Additional Information:
The NetWare OS detected a problem with the system while executing a
process owned by SYSCALLS.NLM. It may be the source of the problem or there
may have been a memory corruption.

Loaded Modules:
LDAPX.NLM NetWare Extension APIs for LDAP SDK (Clib version)
Version 3.01 January 16, 2004
Code Address: F3F90000h Length: 000057D5h
Data Address: F3F8E000h Length: 00000DC0h
LDAPSSL.NLM NetWare SSL Library for LDAP SDK (Clib version)
Version 3.01 January 16, 2004
Code Address: F3FB1000h Length: 0005F331h
Data Address: F3F97000h Length: 000187DDh
LDAPSDK.NLM LDAP SDK Library (Clib version)
Version 3.01 January 16, 2004
Code Address: F401B000h Length: 0001CE2Bh
Data Address: F4013000h Length: 000066D9h
SPMNWCC.NLM Novell SPM Client for NWCC 2.3.7.0 20050125
Version 23700501.25 January 25, 2005
Code Address: F403C000h Length: 00010CFBh
Data Address: F4039000h Length: 00001340h
GWPOA.NLM GroupWise Post Office Agent (Release version)
Version 7.00 August 2, 2005
Code Address: F40AF000h Length: 00195734h
Data Address: F404E000h Length: 0005FF1Ch
XGCAL5.NLM XIS GroupWise Calendar (release version)
Version 7.00 August 2, 2005
Code Address: F4253000h Length: 0001195Bh
Data Address: F4246000h Length: 0000BFE4h
XGMSG5.NLM XIS GroupWise Messaging (release version)
Version 7.00 August 2, 2005
Code Address: F428C000h Length: 000D4500h
Data Address: F4266000h Length: 00024E31h
XGDM5.NLM XIS GroupWise Document Management (release version)
Version 7.00 August 2, 2005
Code Address: F4373000h Length: 0002B83Bh
Data Address: F4362000h Length: 0000FE3Dh
XGAB5.NLM XIS GroupWise Addressing (release version)
Version 7.00 August 2, 2005
Code Address: F43AF000h Length: 00034D0Bh
Data Address: F43A0000h Length: 0000D6DDh
XGBAS5.NLM XIS GroupWise Base (release version)
Version 7.00 August 2, 2005
Code Address: F43F8000h Length: 0005549Bh
Data Address: F43E5000h Length: 00011BF0h
DSAPI.NLM NetWare NWNet Runtime Library
Version 5.05.10 January 15, 2005
Code Address: F4451000h Length: 00000043h
Data Address: F444F000h Length: 00000024h
DSEVENT.NLM NetWare DSEvent Runtime Library
Version 6.00.03 October 5, 2005
Code Address: F4455000h Length: 00000633h
Data Address: F4453000h Length: 00000034h
GWMTA.NLM GroupWise MTA (release version)
Version 7.00 August 2, 2005
Code Address: F44AC000h Length: 001823BBh
Data Address: F4457000h Length: 00053B15h
NWSNUT.NLM NetWare NLM Utility User Interface
Version 7.00 August 10, 2005
Code Address: F4633000h Length: 00013418h
Data Address: F4631000h Length: 000006F8h
NETNLM32.NLM NetWare NWNet Runtime Library
Version 6.00.02 July 26, 2005
Code Address: F4D7B000h Length: 00035BE7h
Data Address: F4D75000h Length: 00004D75h
CALNLM32.NLM NetWare NWCalls Runtime Library
Version 6.00.02 July 26, 2005
Code Address: F4D58000h Length: 0001B769h
Data Address: F4D56000h Length: 00000510h
NCPNLM32.NLM NetWare NWNCP Runtime Library
Version 6.00.02 July 26, 2005
Code Address: F4DB2000h Length: 0001E263h
Data Address: 00000000h Length: 00000000h
GWENN5.NLM GroupWise Engine (release version)
Version 7.00 August 2, 2005
Code Address: F471E000h Length: 004A5990h
Data Address: F4648000h Length: 000D4907h
GWXIS12.NLM XML Integration Service
Version 1.00.01 June 24, 2005
Code Address: F4C29000h Length: 000F1A11h
Data Address: F4BC5000h Length: 00062ABFh
CLIB.NLM (Legacy) Standard C Runtime Library for NLMs
Version 5.90.11 July 14, 2005
Code Address: F4DFB000h Length: 0001898Eh
Data Address: F4DF7000h Length: 00002FB0h
NIT.NLM NetWare Interface Tools Library for NLMs
Version 5.90.11 July 14, 2005
Code Address: F4E18000h Length: 0001C694h
Data Address: F4E16000h Length: 00000690h
CLXNLM32.NLM NetWare NWCLX Runtime Library
Version 6.00.02 July 26, 2005
Code Address: F4D53000h Length: 00001213h
Data Address: F4D51000h Length: 000001B0h
LOCNLM32.NLM NetWare NWLocale Runtime Library
Version 6.00.02 May 10, 2005
Code Address: F4DEC000h Length: 000044BBh
Data Address: F4DEA000h Length: 00000B30h
UNICODE.NLM NetWare Unicode Runtime Library (UniLib-based) [optimized]
Version 7.00 October 26, 2004
Code Address: F4DF4000h Length: 000016F5h
Data Address: F4DF2000h Length: 00000504h
CLNNLM32.NLM NetWare NWClient Runtime Library
Version 6.00.02 July 26, 2005
Code Address: F4DD4000h Length: 00001C72h
Data Address: F4DD2000h Length: 00000130h
NLMLIB.NLM Novell NLM Runtime Library
Version 5.90.11 July 14, 2005
Code Address: F4E3B000h Length: 0002639Dh
Data Address: F4E36000h Length: 000038C0h
REQUESTR.NLM Novell NCP Requestor for NLMs
Version 5.90.11 July 14, 2005
Code Address: F4E66000h Length: 00020C53h
Data Address: F4E63000h Length: 000010B0h
THREADS.NLM Novell Threads Package for NLMs
Version 5.90.11 July 14, 2005
Code Address: F4E9B000h Length: 00018D78h
Data Address: F4E88000h Length: 000116C0h
LIBC.NLM Standard C Runtime Library for NLMs [optimized, 6]
Version 9.00.01 August 4, 2005
Code Address: F5287000h Length: 000CCF16h
Data Address: F5245000h Length: 00040FC0h
USERLIB.NLM NetWare Operating System Function Library
Version 5.60 May 9, 2005
Code Address: F5358000h Length: 0000491Eh
Data Address: F5355000h Length: 000011F0h