Hi Neil - BSOD details are: Driver_Irql_not_less_or_equal 0x000000d1 in fw.sys
HP Management Log details are: Blue Screen Trap (BugCheck, STOP: 0x000000D1 (0xECE52CBC, 0x00000002, 0x00000000, 0xF709388F)) The Debugging Tool pointed to fw.sys driver at fault. All that changed just before problem started was a SmartDefense Update Thanks for your help Chris -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] Behalf Of Neil Pike Sent: 25 January 2007 14:07 To: [email protected] Subject: Re: [FW-1] BSOD - help needed Chris, A BSOD is a bug or a hardware fault. If it's always the same code and address then it almost certainly isn't hardware. Hardware caused BSOD's tend to result in a wide variety of BSOD codes and addresses. The fact that it's always fw.sys makes it "easier" to debug, as it's always firewall-1 that's either the direct cause or the victim of it every time. The BSOD could, for instance, be being caused by a memory leak or memory overwrite by a.n.other driver, but fw.sys is the thing that ends up crashing. What is the BSOD code? e.g. 0x0000000a, 0x00000050 etc. This gives the first clue as to what is going on. Install the Microsoft Debugging Tools for Windows on a pc and run that against the dump file to see what pointers it gives. The experts within that are pretty good at working out whether the faulting module was the cause or the victim. I would also check to see what, if anything changed in the days/weeks before the crashes started. The fault could be, for instance, caused by an MS hotfix that's been applied, new version of HP management software/drivers for instance. > We have Checkpoint Express FW-1 NG AI R55 with Hotfix 18 running on an HP > ML370 G3 server with 1GB memory. > > For several weeks now the server has been crashing fairly regularly, at > random, with fw.sys identified as the culprit in the BSOD. This only > happens Monday to Friday during office working houses. Somedays it doesn't > crash at all, others it crashes up to eight times. We have tried > Checkpoint Support but so far they haven't provided any solutions. Neil Pike Protech Computing Ltd Tel. 07710-168869 IM. [EMAIL PROTECTED] ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ********************************************************************** Information in this message may contain confidential and privileged information. If you are not the intended recipient please accept our apologies; please do not disclose, copy or distribute information in this e-mail or take any action in reliance on its contents: to do so is strictly prohibited and may be unlawful. Please inform us that this message has gone astray before deleting it. Thank you for your co-operation. NHSmail is used daily by over 100,000 staff in the NHS. Over a million messages are sent every day by the system. To find out why more and more NHS personnel are switching to this NHS Connecting for Health system please visit www.connectingforhealth.nhs.uk/nhsmail ********************************************************************** ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
