I know the server is not fully patched, but it has been running for years
with no problem. At this point, it is serving as a GroupWise server, file
server and DHCP server. We are running an old version of Backup Exec and
Symantec recommended against patching beyond SP5 as they said it was
untested with our version.

On March 28, I got a series of errors and abends, the first abend from that
date is below. After about 5 minutes of trying to shut down the server
properly, I had to hard power down as I had no keyboard functionality. On
April 1, I got another abend, immediately followed by the server restarting
itself. That is also listed below. I did not include the Loaded Modules
information, but can if necessary. Anything I need to be looking at to
figure out why this has suddenly started happening?

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.05

Server MAIN halted Thursday, March 28, 2013 3:41:01.145 pm
Abend 1 on P00: Server-5.70.05: Page Fault Processor Exception (Error code
00000000)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = 05000000 EBX = 9A3FF840 ECX = 8BA8FB40 EDX = 00000000
ESI = 00040000 EDI = 00000000 EBP = 4EE9B578 ESP = 4EE9B56C
EIP = 8718335C FLAGS = 00010206
8718335C 8B38 MOV EDI, [EAX]=?
EIP in GWENN5.NLM at code start +0000635Ch
Access Location: 0x05000000

The violation occurred while processing the following instruction:
8718335C 8B38 MOV EDI, [EAX]
8718335E 50 PUSH EAX
8718335F FF5708 CALL near ptr [EDI+08]
87183362 59 POP ECX
87183363 8B532C MOV EDX, [EBX+2C]
87183366 85D2 TEST EDX, EDX
87183368 741E JZ 87183388
8718336A 0FB6450C MOVZX EAX, byte ptr [EBP+0C]
8718336E 2501000000 AND EAX, 00000001
87183373 85C0 TEST EAX, EAX



Running process: GWTCP-HPMP-Handler_18 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 4EE9B62C
OS Stack limit: 4EE8D040
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: -8452BFF4 (GWENN5.NLM|(Data Start)+FFF4)
--9A3FF840 ?
--9A021120 ?
--4EE9B590 ?
871929D0 ?
--9A3FF840 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--9A021120 ?
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--4EE9B5A0 ?
871933BE ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
-8451DB54 (GWENN5.NLM|(Data Start)+1B54)
--4EE9B5B4 ?
871998E8 ?
--00000001 (LOADER.NLM|KernelAddressSpace+1)
-8451DB30 (GWENN5.NLM|(Data Start)+1B30)
-8451DB54 (GWENN5.NLM|(Data Start)+1B54)
--4EE9B5C4 ?
87199A10 ?
--9A021124 ?
-8451E9E8 (GWENN5.NLM|(Data Start)+29E8)
--4EE9B5D4 ?
871999A0 ?
--8C76A9C0 ?
--96F7AEA0 ?
--4EE9B5E0 ?
8719333F ?
--9A021124 ?
--4EE9B5F8 ?
87191771 ?
--9A021120 ?
-8452BFF4 (GWENN5.NLM|(Data Start)+FFF4)
--96F7AEA0 ?
-8451DAAA (GWENN5.NLM|(Data Start)+1AAA)
--4EE9B60C ?
871915EA ?
--96F7AEA0 ?
--96F7AEA0 ?
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--4EE9B61C ?
8719281E ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
-8451DACE (GWENN5.NLM|(Data Start)+1ACE)
--4EE9B630 ?
871998E8 ?
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--8B608D60 ?
-8451DACE (GWENN5.NLM|(Data Start)+1ACE)
--4EE9B640 ?
87199A10 ?
--96F7AEA4 ?
-8451E9E8 (GWENN5.NLM|(Data Start)+29E8)
--4EE9B650 ?
871999A0 ?
--8B608540 ?
-8451DAAA (GWENN5.NLM|(Data Start)+1AAA)
--4EE9B65C ?
871923DF ?
--96F7AEA4 ?
--4EE9B670 ?
8722DC3A (GWENN5.NLM|GWENN5@FlmIndexRebuild+1BAA)
--96F7AEA0 ?
--8B608D60 ?
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--4EE9B680 ?
8722DCBE (GWENN5.NLM|GWENN5@FlmIndexRebuild+1C2E)
--88234E20 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--4EE9B690 ?
8722DC88 (GWENN5.NLM|GWENN5@FlmIndexRebuild+1BF8)
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--8B615460 ?
--4EE9B6B8 ?
871D29D3 ?
--8B608D60 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
-8452BFAC (GWENN5.NLM|(Data Start)+FFAC)
80040000 (DS.NLM|GetReplicaType+81)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
-8452BFAC (GWENN5.NLM|(Data Start)+FFAC)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--88234E20 ?
--4EE9B6E0 ?
871D279F ?
--8B615460 ?
--4EE9B6D0 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--8B615460 ?
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--4EE9B748 ?
--4EE9B700 ?
871D26B1 ?
--4EE9B6F0 ?
--8B608740 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
-84527CE9 (GWENN5.NLM|(Data Start)+BCE9)
--A036E300 ?

Additional Information:
The CPU encountered a problem executing code in GWENN5.NLM. The problem
may be in that module or in data passed to that module by a process owned by
GWPOA.NLM.
************************************************** **********************

Novell Open Enterprise Server, NetWare 6.5
PVER: 6.50.05

Server MAIN halted Monday, April 1, 2013 3:04:26.024 pm
Abend 1 on P00: Server-5.70.05: Page Fault Processor Exception (Error code
00000000)

Registers:
CS = 0008 DS = 0010 ES = 0010 FS = 0010 GS = 0010 SS = 0010
EAX = 00010000 EBX = 00010001 ECX = 00010000 EDX = 00000000
ESI = 00010000 EDI = 00000001 EBP = 89217EC0 ESP = 89217EB4
EIP = 87817CDA FLAGS = 00010203
87817CDA 8A00 MOV AL, [EAX]=?
EIP in GWENN5.NLM at code start +004E7CDAh
Access Location: 0x00010000

The violation occurred while processing the following instruction:
87817CDA 8A00 MOV AL, [EAX]
87817CDC 84C0 TEST AL, AL
87817CDE 75D0 JNZ 87817CB0
87817CE0 8D65F4 LEA ESP, [EBP-0C]
87817CE3 89F0 MOV EAX, ESI
87817CE5 5F POP EDI
87817CE6 5E POP ESI
87817CE7 5B POP EBX
87817CE8 5D POP EBP
87817CE9 C3 RET



Running process: GWTCP-HPMP-Handler_4 Process
Thread Owned by NLM: GWPOA.NLM
Stack pointer: 89217A68
OS Stack limit: 89209060
Scheduling priority: 67371008
Wait state: 3030070 Yielded CPU
Stack: --00000000 (LOADER.NLM|KernelAddressSpace+0)
--8BB3558C ?
--00010000 (LOADER.NLM|KernelAddressSpace+10000)
--89217ED8 ?
8783BB25 (GWENN5.NLM|GWENN5@WpioWrite+165)
--00010000 (LOADER.NLM|KernelAddressSpace+10000)
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--929A1C0E ?
--929A1A28 ?
--89217EEC ?
8783ABDE (GWENN5.NLM|GWENN5@WpioExtractName+4E)
--00010000 (LOADER.NLM|KernelAddressSpace+10000)
--929A1C60 ?
--929A1A28 ?
--89217F20 ?
875CF9AE (GWENN5.NLM|GWENN5@WpeDistAddToBuffer+29FE)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00010000 (LOADER.NLM|KernelAddressSpace+10000)
--929A1C60 ?
--929A1C60 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
87583DB7 (GWENN5.NLM|GWENN5@WpcomTCPWrite+277)
--929A1C60 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--8BB3558C ?
--88271154 ?
--89217F50 ?
87609C93 (GWENN5.NLM|GWENN5@WpeGetPackedField+C53)
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--00010000 (LOADER.NLM|KernelAddressSpace+10000)
--8BB3558C ?
--8ECFCC80 ?
--8BB35580 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00010000 (LOADER.NLM|KernelAddressSpace+10000)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--88271154 ?
--929A1A28 ?
--89217F74 ?
87608FD7 (GWENN5.NLM|GWENN5@WpeGetStructFields+157)
--88271154 ?
--929A1A28 ?
--00001A93 (LOADER.NLM|KernelAddressSpace+1A93)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--8ECFCC80 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--892180B0 ?
8762A135 (GWENN5.NLM|GWENN5@WpeTransWriteTransEcl+1705)
--88271154 ?
--929A1A28 ?
--9020A800 ?
--91641720 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
87583AFE (GWENN5.NLM|GWENN5@WpcomTCPRead+1BE)
--87F80E40 ?
--9081DE05 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--89217FB8 ?
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--00000003 (LOADER.NLM|KernelAddressSpace+3)
--9020A820 ?
--00000002 (LOADER.NLM|KernelAddressSpace+2)
--00000633 (LOADER.NLM|KernelAddressSpace+633)
--89218044 ?
--0000A412 (LOADER.NLM|KernelAddressSpace+A412)
--00044210 (LOADER.NLM|PSD_LibraryErrno+5200)
--929A1A20 ?
--929A1A20 ?
--9020A800 ?
--89217FFC ?
--8BB35580 ?
-00442BD0 (SERVER.NLM|xAllocSizeTable+60)
--89218040 ?
C0089CCF (THREADS.NLM|free+F)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
8781AFA3 (GWENN5.NLM|GWENN5@_WpmemFree+13)
--9081DD80 ?
--9081A41C ?
--892180BC ?
8762475B (GWENN5.NLM|GWENN5@WpeTransReadTransEng+4C7B)
--89218040 ?
--803B44FC (TCPIP.NLM|ntohl+17D4)
--00000000 (LOADER.NLM|KernelAddressSpace+0)
--C07A7E44 ?
--00000082 (LOADER.NLM|KernelAddressSpace+82)
--C07A7D80 ?
--803B4430 (TCPIP.NLM|ntohl+1708)
--00000001 (LOADER.NLM|KernelAddressSpace+1)
--AB506949 ?
--803B4430 (TCPIP.NLM|ntohl+1708)
C06AAE7B (TCP.NLM|TCPAnyAddrCheck+474F)
--803B4430 (TCPIP.NLM|ntohl+1708)
--89218038 ?
--87F80E40 ?
--00000006 (LOADER.NLM|KernelAddressSpace+6)
87405E81 (GWENN5.NLM|GWENN5@BCEFSetHeader+3A1)

Additional Information:
The CPU encountered a problem executing code in GWENN5.NLM. The problem
may be in that module or in data passed to that module by a process owned by
GWPOA.NLM.