We have been having major problems with a server abending post the
install of SP5

Its a SBS server running groupwise. There is another server on site
which runs bordermanager and Arcserve, This second server has been
running fine even though it was updated at the same time.

The server runs on a compaq DL380. We have stopped powerchute as this
was upsetting JAVA to start with and stopped the indexing service on the
POA as this was upset post the applying of SP5 for Groupwise SP5 (we
think the later versions found corruption that earlier versions did not
see - this ought to be fixed when we run GWCHECK later)

Meanwhile though the server has taken to abend in the early hours, no-one
is on the system (though it is backing up)

I have included a copy of the abend log

To answer some points before we start, its a XEON server hyperthreading
IS turned off but the server DOES physically have 2 processors. We have
applied nw65sp5, nw65os5a, and n65nss5a.

Anyone have any ideas!! Thanks in Advance!


Server XXX_SRV halted Wednesday, 26 July 2006 2:13:40.231 am
Abend 1 on P01: Server-5.70.05: Page Fault Processor Exception (Error
code 00000000)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 0000003F EBX = B0EE94A0 ECX = 00000CC2 EDX = 00000032
ESI = 0000DE47 EDI = 00002000 EBP = 9BA0DD2C ESP = 9BA0DCFC
EIP = 882E90E3 FLAGS = 00010202
882E90E3 3A1401 CMP DL, [ECX+EAX]=?
EIP in COMN.NSS at code start +000A80E3h
Access Location: 0x00000D01

The violation occurred while processing the following instruction:
882E90E3 3A1401 CMP DL, [ECX+EAX]
882E90E6 0F85CE000000 JNZ 882E91BA
882E90EC 8B45E0 MOV EAX, [EBP-20]
882E90EF 83C002 ADD EAX, 00000002
882E90F2 89C2 MOV EDX, EAX
882E90F4 8B33 MOV ESI, [EBX]
882E90F6 C1EA0C SHR EDX, 0C
882E90F9 29F2 SUB EDX, ESI
882E90FB 25FF0F0000 AND EAX, 00000FFF
882E9100 8B549330 MOV EDX, [EBX+EDX*4+30]



Running process: Server 01:237 Process
Thread Owned by NLM: SERVER.NLM
Stack pointer: 9BA0DD0C
OS Stack limit: 9BA06020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: --AB463160 ?
--0000DE47 (LOADER.NLM|KernelAddressSpace+DE47)
--0000FE47 (LOADER.NLM|KernelAddressSpace+FE47)
--0000FE4A (LOADER.NLM|KernelAddressSpace+FE4A)
--0000FCC1 (LOADER.NLM|KernelAddressSpace+FCC1)
00011E46 (LOADER.NLM|(Global Code Start)+1A6)
--B6973032 ?
--00000058 (LOADER.NLM|KernelAddressSpace+58)
--B0EE9432 ?
--B6973040 ?
--9BA0DDA8 ?
--B0EE94A0 ?
--9BA0DD74 ?
882EA0F4 (COMN.NSS|CCDAnalyzeFile+774)
--B0EE94A0 ?
--9BA0DD5C ?
--9BA0DD60 ?
--B0EF3128 ?
--00001FFE (LOADER.NLM|KernelAddressSpace+1FFE)
--B0EE94CC ?
--0000FE47 (LOADER.NLM|KernelAddressSpace+FE47)
--B0EE94B0 ?
--B0EE94E0 ?
--B0EE94B8 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--000007E8 (LOADER.NLM|KernelAddressSpace+7E8)
--B0EE9432 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--B0EE94A0 ?
--00000005 (LOADER.NLM|KernelAddressSpace+5)
--9BA0DDF4 ?
882EB085 (COMN.NSS|CCDCompressFile+3A5)
--B0EE94A0 ?
--B6973040 ?
--9BA0DDA8 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00001C2A (LOADER.NLM|KernelAddressSpace+1C2A)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--000066F8 (LOADER.NLM|KernelAddressSpace+66F8)
--0000974F (LOADER.NLM|KernelAddressSpace+974F)
--009DEA8D ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00001000 (LOADER.NLM|KernelAddressSpace+1000)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--2C7F30A2 ?
--B6973040 ?
--B0EE94EC ?
--B0EE94F8 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000010 (LOADER.NLM|KernelAddressSpace+10)
--B0EE94E4 ?
--9BA0DEE4 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--9BA0DEF8 ?
882FB3C2 (COMN.NSS|NWALGO_compressStream+D2)
--9BA0DE84 ?
--9BA0DE54 ?
--9BA0DEB4 ?
000135F8 (LOADER.NLM|PnFarJumpFixup+25C)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--9BA0DEE8 ?
882FAE84 (COMN.NSS|COPY_ALGOStartup+24)
--9BA0DE20 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000013 (LOADER.NLM|KernelAddressSpace+13)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000014 (LOADER.NLM|KernelAddressSpace+14)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--0000000F (LOADER.NLM|KernelAddressSpace+F)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000100 (LOADER.NLM|KernelAddressSpace+100)
--0009AFC0 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000014 (LOADER.NLM|KernelAddressSpace+14)
--946B58FC ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--946B58D8 ?
--00000003 (LOADER.NLM|KernelAddressSpace+3)

Additional Information:
The CPU encountered a problem executing code in COMN.NSS. The
problem may be in that module or in data passed to that module by a
process owned by SERVER.NLM.