Hi everyone!

I've trawled the TID's and forums for an answer to this, but can find
anything applicable.

For a few weeks now, one of our servers has been crashing sporadically.
Nothing is written to the abend or console logs, and the only place we've
found any record of the incidents is in the Hewlett Compaqard IML. For
each crash, the IML has two entries...

Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 321 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)

followed by

Abnormal Program Termination (Abend: Kernel detected an attempted context
switch when it was not allowed Running Process: Server 321 EIP: 21F168h)

The 'Server' and 'EIP:' numbers are different in each instance, but the
offset remains the same at +BBB8h.

The time/date stamp on each pair of entries are the same.

Server is NW6.5 SP6 and is patched to the same level as other servers
which don't exhibit this behaviour. It holds the master replica for our
tree and runs as a DA, but apart from that, nothing else is running on it
apart from BackupExec and McAfee. We've unloaded both of those for a trial
and it still failed.

Found some TID's mentioning nSure but none of that is loaded, and also
found another querying the version of TCPIP.MPM, but ours is dated 15 Feb
06 which is after the one suggested in the TID.

Any clues on how I can go about finding a solution to this would be
greatly appreciated.

Thanks

James

PS. Here are all the IML entries since the problem started back on the 9th
May, incase they are useful.

1 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 321 EIP:
21F168h) 6/5/2007 4:16PM 6/5/2007 4:16PM 1
2 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 321 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
6/5/2007 4:16PM 6/5/2007 4:16PM 1
3 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 13 EIP:
2243A8h) 6/4/2007 10:22AM 6/4/2007 10:22AM 1
4 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 13 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
6/4/2007 10:22AM 6/4/2007 10:22AM 1
5 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 235 EIP:
227148h) 5/30/2007 3:56PM 5/30/2007 3:56PM 1
6 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 235 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
5/30/2007 3:56PM 5/30/2007 3:56PM 1
7 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 145 EIP:
21E328h) 5/30/2007 11:22AM 5/30/2007 11:22AM 1
8 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 145 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
5/30/2007 11:22AM 5/30/2007 11:22AM 1
9 Abnormal Program Termination (Abend: Deadlock detected waiting for
spinlock currently owned by CPU 00 Running Process: Server 280 EIP:
10AD52h) 5/24/2007 3:36AM 5/24/2007 3:36AM 1
10 Abnormal Program Termination (Abend: CPU Hog Detected by Timer
Running Process: Server 280) 5/24/2007 3:36AM 5/24/2007 3:36AM 1
11 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 247 EIP:
221368h) 5/21/2007 10:02AM 5/21/2007 10:02AM 1
12 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 247 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
5/21/2007 10:02AM 5/21/2007 10:02AM 1
13 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 303 EIP:
21BDE8h) 5/18/2007 8:17AM 5/18/2007 8:17AM 1
14 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 303 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
5/18/2007 8:17AM 5/18/2007 8:17AM 1
15 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 239 EIP:
2239C8h) 5/16/2007 2:31PM 5/16/2007 2:31PM 1
16 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 239 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
5/16/2007 2:31PM 5/16/2007 2:31PM 1
17 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 234 EIP:
228E28h) 5/15/2007 9:19AM 5/15/2007 9:19AM 1
18 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 234 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
5/15/2007 9:19AM 5/15/2007 9:19AM 1
19 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 337 EIP:
227428h) 5/14/2007 1:56AM 5/14/2007 1:56AM 1
20 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 337 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
5/14/2007 1:56AM 5/14/2007 1:56AM 1
21 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 50 EIP:
225608h) 5/11/2007 9:59AM 5/11/2007 9:59AM 1
22 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 50 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
5/11/2007 9:59AM 5/11/2007 9:59AM 1
23 Abnormal Program Termination (Abend: Kernel detected an attempted
context switch when it was not allowed Running Process: Server 146 EIP:
222968h) 5/9/2007 10:38PM 5/9/2007 10:38PM 1
24 Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
Server 146 Code executing in module TCP.NLM v6.80b at offset +1BBB8h)
5/9/2007 10:38PM 5/9/2007 10:38PM 1