Re: [Declude.JunkMail] Declude crashing and taking up 99% CPU

2001-09-12 Thread Travis Sullivan

are http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q142676 
and http://support.microsoft.com/directory/article.asp?ID=kb;en-us;Q126962 . 

Thanks Scott, I know you are only trying to help and I commend your efforts on helping 
us through this situation.  If you remember, I was the one that brought those URLs to 
you.  Unfortunately, we have never experienced these problems before declude came into 
our software usage.

I have also taken the above steps, along with disabling DrWatson's visual reports 
(which seem to have helped by the way, two weeks instead of one week failures).

If anyone has any further advise, I am eagerly, but patiently, waiting.

Again, maybe a newer version of Imail is better??? We use 5.09.  Also, is this problem 
apparent in windows 2000?

Travis
---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] Declude crashing and taking up 99% CPU

2001-09-12 Thread R. Scott Perry


> >other similar information?  What *exactly* does the error message say, the
> >complete text of it?  I can't recall ever seeing NT/2000 report a crash
> >without at least the memory address that the crash occurred at.
>
>user32.dll is the main text of the message.  There is just the pop up 
>window reporting that user32.dll has failed.

What you describe cannot be distinguished with the Microsoft 
"Too-many-service-started-processes" problem.  Unless I get the exact text 
of the message, I'll have to assume that that is the problem.  The links 
are http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q142676 
and http://support.microsoft.com/directory/article.asp?ID=kb;en-us;Q126962 .

There are several sources of this problem.  One is that Microsoft has an 
apparently undocumented type of memory that it allocates to (again, 
apparently) all processes.  It apparently allocates a certain amount of 
memory to each process, which can differ based on whether the process was 
started normally or through a service.  Microsoft says it allocates this 
memory to force ill-behaved programs from consuming too much resources -- 
but doesn't explain why it allocates all those precious resources even if 
they are not needed.  It sounds like they are used for GUI stuff (icons, 
palettes, mouse pointers, etc.) that aren't used in most services anyways.

So this problem can exist with any programs.  The reason it is so apparent 
in IMail (with or without Declude) is that IMail [1] runs as a service and 
[2] creates a new process (rather than thread) for each E-mail that needs 
to be delivered.  The problem gets even worse with Declude creating extra 
processes for the virus scanning.

We are trying to find a way to prevent this problem, which may or may not 
be possible to do (it may only be possible to offload it, so that it can 
only happen once the smtp32.exe process is started, for example).  However, 
this is a difficult process since Microsoft is referring to undocumented 
memory (their >1gig MSDN knowledge base references to "desktop heap", the 
term they use for this type of memory, only brings up articles about this 
problem, no documentation of the memory type).

-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] Declude crashing and taking up 99% CPU

2001-09-12 Thread Travis Sullivan

>other similar information?  What *exactly* does the error message say, the 
>complete text of it?  I can't recall ever seeing NT/2000 report a crash 
>without at least the memory address that the crash occurred at.

user32.dll is the main text of the message.  There is just the pop up window reporting 
that user32.dll has failed.  Once this happens, we can't open anything, performance 
monitor, the mail server config utility, everything brings up this user32.dll error.

Please send me the URL, I would like to see it.  I will also write down the exact 
error message next time.

thanks,
Travis
---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] Declude crashing and taking up 99% CPU

2001-09-12 Thread R. Scott Perry


>I know scott needs this declude debug file...

The .gp1/.gp2 files are the only reliable way we can take care of a problem 
when Declude crashes and those files are created.  So you are right, we do 
need those files when they are created.

>but when declude crashes our system, yes it just happened 1st time in 
>nearly two weeks, there is no trace
>as to what is causing this.

That's a problem.  My understanding is that the error message only includes 
the name of the mail server, and does not include the memory address or any 
other similar information?  What *exactly* does the error message say, the 
complete text of it?  I can't recall ever seeing NT/2000 report a crash 
without at least the memory address that the crash occurred at.

>The problem is consistant, user32.dll is fubar'ed and nothing will work,
>even if we close out all the declude processes, 100s of them, the user32.dll
>will not work and therefore we have to reboot.

That sounds an awful lot like the "0xC142" problem, as that often 
involves user32.dll.  How do you know that user32.dll is fubared?  Do you 
see other error messages not related to Declude that show user32.dll?  If 
so, that would strongly suggest the "0xC000142" problem that has been 
discussed recently.  I can dig up the URL for the Microsoft page that 
explains the problem and possible fix if it looks like this is the problem.

>I am affraid that I must remove declude until this issue is resolved.

That's one reason why we would like to resolve it.

What is the *EXACT* error message that is showing up?

>Scott, if you wish to call me, please do.  I would like to help everyone get
>relieve from declude crashing servers.

Again, I need the EXACT error message.  Unfortunately, just "Declude 
crashed" isn't good enough.  Microsoft is pretty good these days about 
crashes, and usually reports enough information that the problem can be 
solved with a bit of work.
  -Scott

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Declude crashing and taking up 99% CPU

2001-09-12 Thread Terrence Koeman

Hello,

As far as I can see there is no declude.gp2 file. I just e-mailed the
declude.gp1 file to [EMAIL PROTECTED]

--
Regards,

Terrence Koeman

Technical Director/Administrator
MediaMonks B.V. (www.mediamonks.nl)

Please quote all replies in correspondence.

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
> Sent: Tuesday, September 11, 2001 14:59
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] Declude crashing and taking up 99% CPU
>
>
>
> >Hello, since I upgraded to declude 1.25a sometimes the following
happens:
> >
> >1. Declude logs something like this:
> >
> >09/11/2001 04:18:48 Q743b0de (Error 5 at 77fcb9b1 v1.25a)
> >09/11/2001 04:18:48 Q743b0de (log part 1 saved as C:\declude.gp1)
> >09/11/2001 04:18:48 Q743b0de (Error 5 at 77fcb892 v1.25a)
> >09/11/2001 04:18:48 Q743b0de (log part 1 saved as C:\declude.gp1)
>
> If you E-mail us the declude.gp1 and declude.gp2 files, we can find out
> what is causing this.  Those are not text files, and almost always have
> non-viewable portions in them.
>  -Scott
>
> ---
>
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  You can E-mail
> [EMAIL PROTECTED] for assistance.  You can visit our web
> site at http://www.declude.com .
>

 smime.p7s