Server blue screening continuously 1

[komando]

Hello All,

We have a HP Proliant ML150 server in our environment that has windows 2003 standard edition. The role of this server is file server. It has been blue screening recently. Here is the debug analysis of the memory dump. I am suspecting a bad ram but please suggest if you have recommendations:

********************************************************

BugCheck C2, {7, 121a, f5c2f6da, f5d74b74}

Probably caused by : sfmsrv.sys ( sfmsrv!AfpFreeMemory+5b )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

BAD_POOL_CALLER (c2)
The current thread is making a bad pool request. Typically this is at a bad IRQL level or double freeing the same allocation, etc.
Arguments:
Arg1: 00000007, Attempt to free pool which was already freed
Arg2: 0000121a, (reserved)
Arg3: f5c2f6da, Memory contents of the pool block
Arg4: f5d74b74, Address of the block of pool being deallocated

Debugging Details:
------------------


BUGCHECK_STR: 0xc2_7

DEFAULT_BUCKET_ID: DRIVER_FAULT

PROCESS_NAME: System

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 808927bb to 80827451

STACK_TEXT:
f5d74ae8 808927bb 000000c2 00000007 0000121a nt!KeBugCheckEx+0x1b
f5d74b50 f5c19719 f5d74b74 00000000 0034a5b0 nt!ExFreePoolWithTag+0x477
f5d74b68 f5c2f6da 00000000 f5c26210 85e3c010 sfmsrv!AfpFreeMemory+0x5b
f5d74d70 f5c1a883 00000000 85eb89a8 00000000 sfmsrv!AfpProcessChangeNotify+0x750
f5d74dac 80948bb2 85772010 00000000 00000000 sfmsrv!AfpChangeNotifyThread+0x169
f5d74ddc 8088d4d2 f5c1a71a 00000000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
sfmsrv!AfpFreeMemory+5b
f5c19719 5f pop edi

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: sfmsrv!AfpFreeMemory+5b

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: sfmsrv

IMAGE_NAME: sfmsrv.sys

DEBUG_FLR_IMAGE_TIMESTAMP: 42435c9a

FAILURE_BUCKET_ID: 0xc2_7_sfmsrv!AfpFreeMemory+5b

BUCKET_ID: 0xc2_7_sfmsrv!AfpFreeMemory+5b

 

[itsp1965]

If you take a look at the beginning of your post;

BugCheck C2, {7, 121a, f5c2f6da, f5d74b74}

Probably caused by : sfmsrv.sys ( sfmsrv!AfpFreeMemory+5b )

This driver related to Services for Macintosh. You may want to check the MSKB regarding this since it was an issue for Win2K (don't know about Win2K3)
Hope this helps.

 

[komando]

Hi itsp1965,

Thanks for the reply. I already looked at that KB. But as it is for 2K, I can't patch my server with that. There is not much out there with this file and windows 2003. Thats why I am posting it in this forum.

Thanks

 

[itsp1965]

komando there are a couple of entries pertaining to this file and Windows 2003 in the KB. Take a look at the following;

http://support.microsoft.com/kb/897718/en-us

http://support.microsoft.com/kb/823356/en-us

Hope this helps

 

[komando]

Hello itsp1965,

Thanks for pointing me in right direction. It turned out that culprit was Veritas continous protection server service. As soon as I removed it the server is now working normally. I now have a case with veritas where they will look into it.

Thanks a bunch