一例nntask引发邮件服务器宕机问题分析
用户反映Domino 邮件服务器频繁宕机，其中最早发生的一次宕机距离上次重启仅经过了2天。
检查NSD，发现：引发宕机的是 Symantec Antivirus for Domino 的 nntask 任务
Server Name: Lotus/FTM
Host Name: TEST
Build: 8.5.2FP1 (32-bit server)
OS: Windows/2003 5.2 (32-bit) (Build 3790), PlatID=2, Service Pack 2 (2
Processors)
Date: Sun Feb 17 12:12:18 2013
Uptime: 2 days 01:29:37
############################################################
### FATAL THREAD 19/20 [ nntask: 1638: 1368]
### FP=0x4dd343a0, PC=0x7814455c, SP=0x2af5d844
### stkbase=2af60000, total stksize=126976, used stksize=10172
### EAX=0x00000000, EBX=0x2af5f1c3, ECX=0x56413f2e, EDX=0x0000002f
### ESI=0x2af5d8e4, EDI=0x2a161fd0, CS=0x0000001b, SS=0x00000023
### DS=0x00000023, ES=0x00000023, FS=0x0000003b, GS=0x00000000
Flags=0x00010202
Exception code: c0000005 (ACCESS_VIOLATION)
############################################################
[ 1] 0x7814455c MSVCR80.strlen+12 (54522d74,52504354,2e333144,33393634)
.. SOBJ: addr=0x4de000f8, h=0xf0102e5d t=0xc130 (BLK_TLA)
.. SOBJ: addr=0x4d0e0360, h=0xf010296b t=0xc275 (BLK_NSFT)
.. Database: D:LotusDominoDatamailjohndoe.nsf
.... DBH: 807, By: CN=LOTUS/O=FTM, WasAccessed=Yes
...... doc: HDB= 807, NoteID=2807590, hNote=0x0008, flags=0100,
class=0001
检查 console.log 可以看到在每次宕机前，Symantec AV for Domino都正在扫描mailjohndoe.nsf邮件库中的特定文档。
[1638:0016-1368] 17/02/2013 12:12:15 PM SMSDOM detected the scan error
(Content too deep) in database John Doe, document NT002ACFA6, author
Admin/ftm, component Message body. The document is ignored.
D:LotusDominoDatamailjohndoe.nsf
Version = 51.0
SizeLimit = 1331200, WarningThreshold = 819200
ReplicaID = 0x482566b2:0x00273109
bContQueue = NSFPool [ 00566cc5]
Offline = No
DeleteInProgress = No
FDGHandle = 0xf0241fb5, RefCnt = 1, Dirty = Y
DB Sem = (FRWSEM:0x0244) state=0, waiters=0, refcnt=0, nlrdrs=0
Writer=[ : 0000]
SemContQueue ( RWSEM:#0:0x029d) rdcnt=-1, refcnt=0 Writer=[ :
0000], n=0, wcnt=-1, Users=-1, Owner=[ : 0000]
By: [ nntask: 1638: 0016] DBH= 807, User=CN=LOTUS/O=FTM
建议用户联系Symantec 技术支持 (support.symantec.com)修复此问题。
在问题被修复之前，为避免服务器再次宕机，建议关闭Domino服务器，并采取以下措施：
1. 将 mailjohndoe.nsf 移出服务器的数据目录
2. 参考技术文档，查找编号为 NT002ACFA6 的文档并删除
标题: Finding Notes documents using @NoteID
链接: http://www.ibm.com/support/docview.wss?rs=899&uid=swg21087186
标题: 如何使用 @NoteID 找到对应的Notes文档
链接: http://www.ibm.com/support/techdocs/cn/viewdoc/detail?DocId=1847679F16005
3. 将 johndoe.nsf 移回 mail 目录
4. 重新启动 Domino 服务器
检查NSD，发现：引发宕机的是 Symantec Antivirus for Domino 的 nntask 任务
Server Name: Lotus/FTM
Host Name: TEST
Build: 8.5.2FP1 (32-bit server)
OS: Windows/2003 5.2 (32-bit) (Build 3790), PlatID=2, Service Pack 2 (2
Processors)
Date: Sun Feb 17 12:12:18 2013
Uptime: 2 days 01:29:37
############################################################
### FATAL THREAD 19/20 [ nntask: 1638: 1368]
### FP=0x4dd343a0, PC=0x7814455c, SP=0x2af5d844
### stkbase=2af60000, total stksize=126976, used stksize=10172
### EAX=0x00000000, EBX=0x2af5f1c3, ECX=0x56413f2e, EDX=0x0000002f
### ESI=0x2af5d8e4, EDI=0x2a161fd0, CS=0x0000001b, SS=0x00000023
### DS=0x00000023, ES=0x00000023, FS=0x0000003b, GS=0x00000000
Flags=0x00010202
Exception code: c0000005 (ACCESS_VIOLATION)
############################################################
[ 1] 0x7814455c MSVCR80.strlen+12 (54522d74,52504354,2e333144,33393634)
.. SOBJ: addr=0x4de000f8, h=0xf0102e5d t=0xc130 (BLK_TLA)
.. SOBJ: addr=0x4d0e0360, h=0xf010296b t=0xc275 (BLK_NSFT)
.. Database: D:LotusDominoDatamailjohndoe.nsf
.... DBH: 807, By: CN=LOTUS/O=FTM, WasAccessed=Yes
...... doc: HDB= 807, NoteID=2807590, hNote=0x0008, flags=0100,
class=0001
检查 console.log 可以看到在每次宕机前，Symantec AV for Domino都正在扫描mailjohndoe.nsf邮件库中的特定文档。
[1638:0016-1368] 17/02/2013 12:12:15 PM SMSDOM detected the scan error
(Content too deep) in database John Doe, document NT002ACFA6, author
Admin/ftm, component Message body. The document is ignored.
D:LotusDominoDatamailjohndoe.nsf
Version = 51.0
SizeLimit = 1331200, WarningThreshold = 819200
ReplicaID = 0x482566b2:0x00273109
bContQueue = NSFPool [ 00566cc5]
Offline = No
DeleteInProgress = No
FDGHandle = 0xf0241fb5, RefCnt = 1, Dirty = Y
DB Sem = (FRWSEM:0x0244) state=0, waiters=0, refcnt=0, nlrdrs=0
Writer=[ : 0000]
SemContQueue ( RWSEM:#0:0x029d) rdcnt=-1, refcnt=0 Writer=[ :
0000], n=0, wcnt=-1, Users=-1, Owner=[ : 0000]
By: [ nntask: 1638: 0016] DBH= 807, User=CN=LOTUS/O=FTM
建议用户联系Symantec 技术支持 (support.symantec.com)修复此问题。
在问题被修复之前，为避免服务器再次宕机，建议关闭Domino服务器，并采取以下措施：
1. 将 mailjohndoe.nsf 移出服务器的数据目录
2. 参考技术文档，查找编号为 NT002ACFA6 的文档并删除
标题: Finding Notes documents using @NoteID
链接: http://www.ibm.com/support/docview.wss?rs=899&uid=swg21087186
标题: 如何使用 @NoteID 找到对应的Notes文档
链接: http://www.ibm.com/support/techdocs/cn/viewdoc/detail?DocId=1847679F16005
3. 将 johndoe.nsf 移回 mail 目录
4. 重新启动 Domino 服务器
如果觉得我的文章对您有用，请点赞。您的支持将鼓励我继续创作！
赞2Ctrl+Enter 发表
作者其他文章
评论 0 · 赞 0
评论 0 · 赞 0
评论 0 · 赞 0
评论 0 · 赞 0
评论 0 · 赞 3
添加新评论0 条评论