My NW65SP2 Server has been running flawlessly for the last 3 years, until
last week:
The server has eTrust 7.1 and Arcserve 9.01 installed.
Now it is abending atleast 2/week. See below for sample logs.
Given that thisis the primary production server, I would like to rectify
this abend issue as soon as possible. My first thought is to go ahead and
apply SP6 ( we have'nt test SP7 in our environment). Since this is a big
step from SP2 to SP6, as a precaution, other than having a good backup, is
there anything else I need to do on the server first before applying SP6 ?
please advise !

Abend logs:
Server Longhorn halted Tuesday, November 27, 2007 8:47:26.867 am
Abend 1 on P00: Server-5.70.02: Page Fault Processor Exception (Error code
00000000)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 43434343 EBX = AB6D2301 ECX = ACFE8494 EDX = 43434343
ESI = 0000019D EDI = ACFE8494 EBP = B0463234 ESP = B0463230
EIP = 4D40FE2E FLAGS = 00010202
4D40FE2E 3A5802 CMP BL, [EAX+02]=?
EIP in DS.NLM at code start +00198E2Eh
Access Location: 0x43434345

The violation occurred while processing the following instruction:
4D40FE2E 3A5802 CMP BL, [EAX+02]
4D40FE31 72EA JB 4D40FE1D
4D40FE33 85D2 TEST EDX, EDX
4D40FE35 7409 JZ 4D40FE40
4D40FE37 3A5A02 CMP BL, [EDX+02]
4D40FE3A 7504 JNZ 4D40FE40
4D40FE3C 89D0 MOV EAX, EDX
4D40FE3E EB02 JMP 4D40FE42
4D40FE40 31C0 XOR EAX, EAX
4D40FE42 8D65FC LEA ESP, [EBP-04]



Running process: Server 00:90 Process
Thread Owned by NLM: SERVER.NLM
Stack pointer: B046260C
OS Stack limit: B045C020
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: --AB6D23A4 ?
--B0463248 ?
4D41026B (DS.NLM|nextSibling$FlmDefaultRec+15)
--AB6D23A4 ?
--ACFE8494 ?
--A9FB3A00 ?
--B0463274 ?
4D324620 (DS.NLM|findAttribute$FlmEntry+E1)
--AB6D23A4 ?
--ACFE8494 ?
--ACFE8494 ?
--4C91B180 (NETNLM32.NLM|gNetNLM32+8ED0)
4016BE27 (LIBC.NLM|NXRwUnlock+37)
--00000000 ?
--B0463344 ?
-4CB5ADE4 (DS.NLM|Wvf0co0$NBEntryH+4)
--A9FB3A00 ?
--B0463298 ?
4D323BA6 (DS.NLM|getAttribute$SMEntryHandle+38)
--A9FB3A00 ?
--0000019D ?
--00000000 ?
--B046328C ?
--0000000F ?
-4CB5ADE4 (DS.NLM|Wvf0co0$NBEntryH+4)
--B04632D8 ?
--B0463334 ?
4D3B3BC8 (DS.NLM|GetObjectVersion+E8)
--B046330C ?
--B04632AC ?
--0000019D ?
-4CB5AFF4 (DS.NLM|Wvf0co0$NBValueH+4)
--FFFFFFFF (LOADER.NLM|KernelTempAliasesEnd+FFF)
--00000000 ?
--00000000 ?
--00000000 ?
--00000000 ?
--00000000 ?
--FFFFFFFF (LOADER.NLM|KernelTempAliasesEnd+FFF)
--00000001 ?
4D2A0B60 (DS.NLM|use$NBEntryH+16)
--B0463530 ?
--00008F26 ?
--00000000 ?
--00000000 ?
-4CB5ADE4 (DS.NLM|Wvf0co0$NBEntryH+4)
--B0463530 ?
--B0463318 ?
4D3230A2 (DS.NLM|use$SMEntryHandle+C1)
--B0463530 ?
--00000000 ?
--A83B2540 ?
--00008F26 ?
--00000000 ?
--00000000 ?
-4CB5ADE4 (DS.NLM|Wvf0co0$NBEntryH+4)
--A9FB3A00 ?
--A83B2540 ?
--B0463330 ?
4D27C5E6 (DS.NLM|use$NBEntryH+15)
--B0463530 ?
--B04632D8 ?
--B046382C ?
--00000000 ?
--B0463598 ?
--B0463358 ?
4D3B3EA9 (DS.NLM|CheckObjectVersion+16)
--00008F26 ?
--B0463344 ?
--00000000 ?
--00000000 ?
--B046382C ?
--00000000 ?
--B0463598 ?
--B0463564 ?
4D3B5455 (DS.NLM|SkulkEntry+21F)
--00008F26 ?
--00000004 ?
--B046381C ?
-004B0055 ?
--005F0045 ?
-004E0055 (SERVER.NLM|OSAS+1255)
-00560049 ?
-00520045 (SERVER.NLM|lastBranchTable+27C5)
-00490053 ?
-00590054 ?
-004F005C (SERVER.NLM|ModuleTracker+4A64)
-0054003D ?
-00650072 (XSUP.NLM|(Data Start)+F072)
-00530065 (SERVER.NLM|RDebugPollTimeoutTimer+3111)
--00760072 ?
--00730063 ?
-004F005C (SERVER.NLM|ModuleTracker+4A64)
--003D0055 ?
-0044004E (SERVER.NLM|xAllocSizeTable+42A)
002D0053 (SERVER.NLM|CloseScreen+197)
-0067004D (XENGEXP.NLM|(Data Start)+304D)
--0074006D ?
-004F005C (SERVER.NLM|ModuleTracker+4A64)
--003D0055 ?

Additional Information:
The CPU encountered a problem executing code in DS.NLM. The problem
may be in that module or in data passed to that module by a process owned
by SERVER.NLM.

Loaded Modules:
TUI.NLM Textual User Interface MOAB_B40.528
Version 1.05.03 May 28, 1998
Code Address: B3BD9000h Length: 0000AEC9h
Data Address: 4C68D000h Length: 00000534h
PARSER.NLM NetWare MPR Command Parser
Version 3.05 June 26, 1998
Code Address: A8202000h Length: 00001A9Fh
Data Address: 40037000h Length: 000001FCh
LCMCIFS2.NLM Windows Native File Access Login Methods (Build 91 SP)
Version 2.00.09 September 14, 2007
Code Address: B105C000h Length: 0000E011h
Data Address: AAD43000h Length: 000016B0h
LSMCIFS2.NLM Windows Native File Access Login Methods (Build 103 SP)
Version 2.00.07 September 14, 2007
Code Address: B5090000h Length: 0000F071h
Data Address: 51A2C000h Length: 000017B0h
LSMAFP3.NLM Macintosh Native File Access Login Methods (Build 118 SP)
Version 2.00.11 September 14, 2007
Code Address: B4868000h Length: 0000F24Eh
Data Address: AAAA9000h Length: 000013C0h
CRLSM.NLM Challenge Response LSM v2.7.5.0
Version 2.07.05 August 20, 2007
Code Address: B584B000h Length: 00021A26h
Data Address: ABECC000h Length: 00009256h
MONITOR.NLM NetWare Console Monitor.
..
..
..
This abend occurred during backup. Abend 1 wasn't recorded.


Server Longhorn halted Tuesday, December 4, 2007 7:46:44.827 am
Abend 2 on P00: Server-5.70.02-1937: CPU Hog Detected by Timer

Registers:
CS = 0008 DS = 0010 ES = 0010 FS = 0010 GS = 0010 SS = 0010
EAX = FCE17BBC EBX = 4980D640 ECX = 49A4DC68 EDX = 00000001
ESI = 49AA9398 EDI = 4000C2C0 EBP = 8EAFFB98 ESP = 8EAFFB84
EIP = 00000000 FLAGS = 00000046


Running process: Server 00:62 Process
Thread Owned by NLM: SERVER.NLM
Stack pointer: 8EAFFF80
OS Stack limit: 8EAF8040
CPU 0 (Thread 89BF42A0) is in a NO SLEEP state
Scheduling priority: 67371008
Wait state: 3031111 Intermedidate Goto READY
Stack: --FCE17BBC ?
497EBE09 (LIBNSS.NLM|nssSpinLock+9)
497FD462 (NSS.NLM|NSSMPK_LockNss+62)
-49A4DC68 (NSS.NLM|NSSMPK_spinlock+0)
4980D640 (NSS.NLM|fireAlarm+0)
--8EAFFBAC ?
4980D64B (NSS.NLM|fireAlarm+B)
--4000C2C0 ?
-49AA9398 (NSS.NLM|AlarmWorkToDo+0)
4980D640 (NSS.NLM|fireAlarm+0)
-49AA9398 (NSS.NLM|AlarmWorkToDo+0)
00355DB8 (SERVER.NLM|kDoFastWorkToDo+28)
-49AA9398 (NSS.NLM|AlarmWorkToDo+0)
--4000C320 ?
--00000003 ?
--4000C2C0 ?
-49AA9398 (NSS.NLM|AlarmWorkToDo+0)
--00000000 ?
--3DD12160 ?
00228F5C (SERVER.NLM|kWorkToDoCheckAllRunFast+A4)
--3DD12160 ?
--00010001 ?
--00000000 ?
--00000001 ?
--00000046 ?
002296C4 (SERVER.NLM|MpkSystemWork+68)
--00010001 ?
--00000000 ?
0021FF7A (SERVER.NLM|SchedSwitch+31E)
--89BF4460 ?
--00186299 ?
--03A18E70 ?
--00000046 ?
00217190 (SERVER.NLM|RealCSleepUntilInterrupt+50)
-004E164C (SERVER.NLM|FSCachePoolTransferInYieldType+4)
--52EE519C ?
--00000012 ?
00355BAF (SERVER.NLM|SleepUntilInterrupt+C)
--8EAFFC34 ?
--8EAFFC34 ?
--4EE6B140 (IPFLT.NLM|fs_global_ip_log+C0CC)
--00000046 ?
00356A21 (SERVER.NLM|DelayMyself+3A)
--00000292 ?
--00000000 ?
00355BB6 (SERVER.NLM|RescheduleFromInterruptNoSave+0)
--89BF42A0 ?
--00000012 ?
--4EE6B140 (IPFLT.NLM|fs_global_ip_log+C0CC)
--0006AA7A ?
--00000000 ?
--00000000 ?
--00000000 ?
--4EE6B280 (IPFLT.NLM|fs_global_ip_log+C20C)
--89BF4460 ?
4EF5D729 (SLPTCP.NLM|bindEventProcedureWTD+29)
--00000012 ?
--4EE6B140 (IPFLT.NLM|fs_global_ip_log+C0CC)
--4EE6B280 (IPFLT.NLM|fs_global_ip_log+C20C)
--00000000 ?
--00000000 ?
--4C8B7240 ?
4EB1ABE3 (TCP.NLM|UDPIPXSend+1AEF)
--4CFF4F10 (SNMP.NLM|sa_InitializingSystem+C340)
--4C8B7240 ?
--00000003 ?
--4F2DE000 ?
4CA5514A (STREAMS.NLM|nd_set_long+882)
--4CFF4F10 (SNMP.NLM|sa_InitializingSystem+C340)
--4C8B7240 ?
--4CBD8460 (DHOST.NLM|?_V%%YAXPAX%Z+6E40)
--5118C0A0 ?
4EA0A59A (WSPIP.NLM|ipmapSessnRelease+A)
--00000000 ?
4EA073B0 (WSPIP.NLM|TCP_CtlCallBack+18C)
--00000100 ?
--89BF42A0 ?
--F8A84544 ?
--F8A84540 ?
0021D4EC (SERVER.NLM|kRWWriteUnlock+44)
0021D5CF (SERVER.NLM|kRWWriteUnlock+127)
--F8A84544 ?
--00000000 ?
--00000000 ?
--00000100 ?
--0CBB0398 ?
4C7AC64C (SLP.NLM|SLPDeRegisterAllTransportAddress+60)
--F8A84540 ?
--00000000 ?
--230100E0 ?
--0CBB0398 ?
4EF5D671 (SLPTCP.NLM|unbindEventProcedureWTD+15)
--89BF4460 ?
--00000000 ?
--89BF4460 ?
4EF5D658 (SLPTCP.NLM|unbindEventProcedure+20)
--00000000 ?
00296A73 (SERVER.NLM|EventReport+257)
--8EAFFDB8 ?
--00000000 ?

Additional Information:
The NetWare OS detected a problem with the system while executing a
process owned by SERVER.NLM. It may be the source of the problem or there
may have been a memory corruption.

Loaded Modules:
FSTAPE.NLM BrightStor ARCserve 9.01 File Server Backup/Restore
(Build 617.000 04/23/04)
Version 9.01 April 23, 2004
Code Address: 7894D000h Length: 0003E06Bh
Data Address: 7898C000h Length: 00020394h
APROCESS.NLM BrightStor ARCserve 9.01 Device Activity Dispatcher
(Build 617.006 02/11/04)
Version 9.01 February 11, 2004
Code Address: 7879B000h Length: 0003B7EBh
Data Address: 787D7000h Length: 000904A8h
CPWDPLSM.NLM Novell Change NDS Password PLSM 2.7.2.0 20060104
Version 27200601.04 January 4, 2006
Code Address: 56CD4000h Length: 0000DD0Bh
Data Address: 56CE2000h Length: 000013D0h
X509LSM.NLM Novell Simple X.509 LSM 2.7.2.0 20060104
Version 27200601.04 January 4, 2006
Code Address: 56CBA000h Length: 0000D818h
Data Address: 56CC8000h Length: 00001820h
X509ALSM.NLM Novell Advanced X.509 LSM 2.7.2.0 20060104
Version 27200601.04 January 4, 2006
Code Address: 56C88000h Length: 000112B6h
Data Address: 56C9A000h Length: 000028A0h
LCMCIFS2.NLM Windows Native File Access Login Methods (Build 91 SP)
Version 2.00.09 September 14, 2007
Code Address: 56C4F000h Length: 0000E011h
Data Address: 56C5E000h Length: 000016B0h
LSMCIFS2.NLM Windows Native File Access Login Methods (Build 103 SP)
Version 2.00.07 September 14, 2007
Code Address: 56C37000h Length: 0000F071h
Data Address: 56C47000h Length: 000017B0h
USCLSM.NLM Novell Universal SmartCard LSM 2.7.2.0 20060104
Version 27200601.04 January 4, 2006
Code Address: 56C06000h Length: 000112B6h
Data Address: 56BE5000h Length: 000028A0h
PWDLCM.NLM Novell Simple Password Proxy LCM 2.7.2.0 20060203
Version 27200602.03 February 3, 2006
Code Address: 56BB9000h Length: 0000E25Bh
Data Address: 56BC8000h Length: 000014D0h
PWDLSM.NLM Novell Simple Password LSM 2.7.2.0 20060203
Version 27200602.03 February 3, 2006
Code Address: 56B1D000h Length: 000106FBh
Data Address: 56B2E000h Length: 00001AA0h
LSMAFP3.NLM Macintosh Native File Access Login Methods (Build 118 SP)
Version 2.00.11 September 14, 2007
Code Address: 56AC9000h Length: 0000F24Eh
Data Address: 56AFF000h Length: 000013C0h
LSMCIFS.NLM NMAS Login Server Module for CIFS - MS Windows File
System for NetWare
Version 1.20 March 5, 2003
Code Address: 56AAE000h Length: 0000EB2Ah
Data Address: 56ABD000h Length: 00001610h
GSSLSMNW.NLM Novell Kerberos GSSAPI LSM
Version 1.00.02 July 21, 2004
Code Address: 56B4E000h Length: 00035BA6h
Data Address: 56A69000h Length: 0001094Ah
ETADVLSM.NLM Novell Entrust LSM 2.7.2.0 20060104
Version 27200601.04 January 4, 2006
Code Address: 56A57000h Length: 000112B6h
Data Address: 5697D000h Length: 000028A0h
EPWDLSM.NLM Novell Enhanced Password LSM 2.7.2.0 20060104
Version 27200601.04 January 4, 2006
Code Address: 56A2E000h Length: 0001245Bh
Data Address: 567F7000h Length: 000018C0h
LCMMD5.NLM Novell SASL DIGEST-MD5 Proxy LCM 2.7.2.0 20060104
Version 27200601.04 January 4, 2006
Code Address: 56963000h Length: 0000D95Bh
Data Address: 567EB000h Length: 00001360h
LSMMD5.NLM Novell SASL DIGEST-MD5 LSM 2.7.2.0 20060104
Version 27200601.04 January 4, 2006
Code Address: 56808000h Length: 0000FA7Bh
Data Address: 56783000h Length: 00001410h
CRLSM.NLM Challenge Response LSM v2.7.5.0
Version 2.07.05 August 20, 2007
Code Address: 56A89000h Length: 00021A26h
Data Address: 56771000h Length: 00009256h
CERTLCM.NLM Novell SASL EXTERNAL Proxy LCM 2.7.2.0 20060104
Version 27200601.04 January 4, 2006
Code Address: 566F2000h Length: 0000DA1Bh
Data Address: 566ED000h Length: 00001380h
CERTLSM.NLM Novell SASL EXTERNAL LSM 2.7.2.0 20060104
Version 27200601.04 January 4, 2006
Code Address: 566DC000h Length: 0000E6DBh
Data Address: 566EB000h Length: 00001390h
TAPEALRT.NLM Tape Alert 2.1 SNMP Agent For NetWare (Build 614.000
09/02/03)
Version 9.01 September 2, 2003
Code Address: 563C0000h Length: 0000A27Dh
Data Address: 56010000h Length: 000021C0h
STANDARD.NLM BrightStor ARCserve 9.01 Standard Tape Support (Build
620.001 07/20/04)
Version 9.01 July 20, 2004
Code Address: 56338000h Length: 0000E6BEh
Data Address: 56995000h Length: 000989ACh
UNIDMSVR.NLM CA Universal RPC Device Manager (Build 617.001 01/09/04)
Version 9.01 January 9, 2004
Code Address: 5678C000h Length: 00023BCFh
Data Address: 5242B000h Length: 00004F06h
TAPESVR.NLM BrightStor ARCserve 9.01 SCSI Tape Driver (Build 620.001
07/20/04)
Version 9.01 July 20, 2004
Code Address: 56824000h Length: 0007F8B5h
Data Address: 568A5000h Length: 000454F8h
DISCOVER.NLM CA Discovery Module (Build 617.006 02/11/04)
Version 9.01 February 11, 2004
Code Address: 56529000h Length: 00012A5Ah
Data Address: 5669A000h Length: 0004111Ch
UNIDB.NLM CA Universal Database Manager (Build 614.000 09/02/03)
Version 9.01 September 2, 2003
Code Address: 5570E000h Length: 00011678h
Data Address: 4004C000h Length: 00002B70h
POOLUTIL.NLM CA File System Pool Utility Module (Build 614.000
09/02/03)
Version 9.01 September 2, 2003
Code Address: 4F3A6000h Length: 00000A9Eh
Data Address: 4F3A7000h Length: 0000007Ch
UNIQSVR.NLM CA Universal RPC Queue Manager (Build 614.000 09/02/03)
Version 9.01 September 2, 2003
Code Address: 56728000h Length: 000224F8h
Data Address: 5647F000h Length: 000129A8h
ARCSERVE.NLM BrightStor ARCserve 9.01 Scheduler (Build 614.000
09/02/03)
Version 9.01 September 2, 2003
Code Address: 5662A000h Length: 0004F077h
Data Address: 565AB000h Length: 0002244Ch
ASDB.NLM BrightStor ARCserve 9.01 Database (Build 617.006 02/11/04)
Version 9.01 February 11, 2004
Code Address: 56549000h Length: 0002E116h
Data Address: 5636F000h Length: 000156C0h
CATIRPC.NLM CA RPC Interface (Build 614.008 09/18/03)
Version 9.01 September 18, 2003
Code Address: 560C1000h Length: 000132C4h
Data Address: 560DA000h Length: 0001A178h
CANWPABD.NLM BrightStor ARCserve 9.01 SCSI Board Driver (Build
614.000 09/02/03)
Version 9.01 September 2, 2003
Code Address: 55722000h Length: 00008B49h
Data Address: 50B0F000h Length: 00004630h
BOARDSVR.NLM BrightStor ARCserve 9.01 SCSI Board Server (Build
614.000 09/02/03)
Version 9.01 September 2, 2003
Code Address: 50674000h Length: 000034EFh
Data Address: 50622000h Length: 00000C30h
CANWPA.CDM BrightStor ARCserve 9.01 SCSI CDM Device Driver (Build
614.000 09/02/03)
Version 9.00 September 2, 2003
Code Address: 4F148000h Length: 00001BBAh
Data Address: 0B3D9000h Length: 00006710h
CSDBAPIB.NLM ARCserve Database API (Build 614.000 09/02/03)
Version 9.01 September 2, 2003
Code Address: 4F1C8000h Length: 0000374Ch
Data Address: 50593000h Length: 00005620h
WPSD.NLM ServiceDescriptor Natives NLM
Version 1.00 June 7, 2004
Code Address: 55850000h Length: 00000119h
Data Address: 55851000h Length: 0000005Ch