I tried figuring this out, but abends seem to be really close, and yet different. Seems like you have to be really knowledgable to really understand these logs.

This server runs all the GW agents (ie Doc, WebAccess, etc) and GWAVA4. It has been running all these for the last 2 years. Although we only upgraded to GW8sp2 this past summer.

For the past 2 months, it appears that we are getting the same issue happen. Here's a copy of the whole "event" from the last abend event:

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.08

Server BIZ halted Wednesday, January 12, 2011 11:45:11.308 am
Abend 1 on P00: Server-5.70.08: Page Fault Processor Exception (Error code 00000000)

Registers:
CS = 0008 DS = 0023 ES = 0023 FS = 0023 GS = 0023 SS = 0010
EAX = 00000000 EBX = ABA511AC ECX = A6C7A680 EDX = 00000000
ESI = 00000000 EDI = 9C069474 EBP = 9C0694A8 ESP = 9C069454
EIP = 9B1EDDD7 FLAGS = 00010246
9B1EDDD7 8B441602 MOV EAX, [ESI+EDX+02]=?
EIP in GWINTER.NLM at code start +00031DD7h
Access Location: 0x00000002

The violation occurred while processing the following instruction:
9B1EDDD7 8B441602 MOV EAX, [ESI+EDX+02]
9B1EDDDB 8907 MOV [EDI], EAX
9B1EDDDD 833F00 CMP [EDI], 00000000
9B1EDDE0 750E JNZ 9B1EDDF0
9B1EDDE2 B801810000 MOV EAX, 00008101
9B1EDDE7 EB09 JMP 9B1EDDF2
9B1EDDE9 8D842000000000 LEA EAX, [EAX+00000000]
9B1EDDF0 31C0 XOR EAX, EAX
9B1EDDF2 89C6 MOV ESI, EAX
9B1EDDF4 85F0 TEST EAX, ESI



Running process: gwinter 7 Process
Thread Owned by NLM: GWINTER.NLM
Stack pointer: 9C069778
OS Stack limit: 9C049900
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: --9C06948C ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--0000001A (LOADER.NLM|KernelAddressSpace+1A)
--A6C7A680 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--A6C7A680 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--000054B9 (LOADER.NLM|KernelAddressSpace+54B9)
--00000003 (LOADER.NLM|KernelAddressSpace+3)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000020 (LOADER.NLM|KernelAddressSpace+20)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--9B07139C ?
--9B07346C ?
--9C069590 ?
--9C0694CC ?
9B1EDB11 ?
--ABA511AC ?
--A6C7A0E0 ?
--ABA511AC ?
--A6C7A0E0 ?
-9A3A6450 (GWINTER.NLM|(Data Start)+9450)
--9C069590 ?
9B1EDA40 ?
--9C0694E8 ?
9B1E8E07 ?
--9B07138C ?
--9C069590 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--9C069864 ?
9B1C1E7F (GWINTER.NLM|(Code Start)+5E7F)
--9B07138C ?
--9C069590 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--A52A9D00 ?
0022D401 (SERVER.NLM|MpkSystemWork+C1)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--ABA511AC ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--9C069554 ?
9AC56FC9 (GWENN5.NLM|GWENN5@WpioGetDiskStat+259)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00015180 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--9441D020 ?
-94739262 (BSDSOCK.NLM|(Data Start)+262)
-94739248 (BSDSOCK.NLM|(Data Start)+248)
--0000001A (LOADER.NLM|KernelAddressSpace+1A)
--9B0752F7 ?
--0000001A (LOADER.NLM|KernelAddressSpace+1A)
--A52A9D00 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--A52A9D00 ?
00217B2A (SERVER.NLM|BufferFree+A)
--9B07139C ?
0020B455 (SERVER.NLM|kCVDestroy+9D)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--ABA511AC ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--9B074FCC ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00003124 (LOADER.NLM|KernelAddressSpace+3124)
--00000092 (LOADER.NLM|KernelAddressSpace+92)
93102E00 (TCPIP.NLM|UDPChksumECB+920)
--00000292 (LOADER.NLM|KernelAddressSpace+292)
--89E022A4 ?
930D702D (TCPIP.NLM|IPSendWithRoute+7AD)
--943B3814 ?
--89E02224 ?
--FFFFFFFF ?
--89E02268 ?
--00000014 (LOADER.NLM|KernelAddressSpace+14)
--946B1E2C ?
--89E02224 ?
--89E02268 ?
930D69A3 (TCPIP.NLM|IPSendWithRoute+123)
--89E02224 ?
--946B1E2C ?
--89E02224 ?
--0000014D (LOADER.NLM|KernelAddressSpace+14D)

Additional Information:
The CPU encountered a problem executing code in GWINTER.NLM. The problem may be in that module or in data passed to that module by a process owned by GWINTER.NLM.

(I deleted the "Loaded Modules" part of this log as my 1 try at posting said I was WAY over the allowed charector limit)
Thanks
Twiggy