Manny21555 Posted March 17, 2015 Posted March 17, 2015 Hi All, I had a problem with one of our servers yesterday - the unwanted BSOD! I managed to reboot the server (Virtual sever) which then loaded up fine but with the following information: Problem signature: Problem Event Name: BlueScreen OS Version: 6.1.7601.2.1.0.274.10 Locale ID: 2057 Additional information about the problem: BCCode: 12e BCP1: FFFFFA8004556000 BCP2: FFFFFA8004C38010 BCP3: 00000000033AC0A9 BCP4: 0000000000010000 OS Version: 6_1_7601 Service Pack: 1_0 Product: 274_3 I must state other VM's on located on the same physical server are running okay. I have access on the server now which is a good start - Luckily we have a fail over with this server and the fail over has worked fine. But as you can imagine i want to get this up and running just in case! Any idea's? Any help would be appreciated Cheers, Manny
Patrick Posted March 17, 2015 Posted March 17, 2015 Have you had a look in event viewer to see if it offers any more clues?
Manny21555 Posted March 17, 2015 Author Posted March 17, 2015 Hi PatrickC, Yeah i've had a look but not much information Here is what i found (this is under windows Error Reporting & the General Tab) : Event Name: BlueScreen Response: Not available Cab Id: 0 Problem signature: P1: P2: P3: P4: P5: P6: P7: P8: P9: P10: Analysis symbol: Rechecking for solution: 0 Report Id: 031615-8174-01 Report Status: 4 Here is what the error reporting says in the Details Tab: [TD="width: 15"]- [TD="width: 130"]System [TD="width: 15"] [TD="width: 15"] [TD="width: 15"]- [TD="width: 130"]Provider [TD="width: 15"] [TD="width: 15"] [TD="width: 12"] [TD="width: 105"][ Name] Windows Error Reporting [TD="width: 15"] [TD="width: 15"] [TD="width: 15"]- [TD="width: 130"]EventID 1001 [TD="width: 15"] [TD="width: 15"] [TD="width: 12"] [TD="width: 105"][ Qualifiers] 0 [TD="width: 15"] [TD="width: 15"] [TD="width: 15"] [TD="width: 130"]Level 4 [TD="width: 15"] [TD="width: 15"] [TD="width: 15"] [TD="width: 130"]Task 0 [TD="width: 15"] [TD="width: 15"] [TD="width: 15"] [TD="width: 130"]Keywords 0x80000000000000 [TD="width: 15"] [TD="width: 15"] [TD="width: 15"]- [TD="width: 130"]TimeCreated [TD="width: 15"] [TD="width: 15"] [TD="width: 12"] [TD="width: 105"][ SystemTime] 2015-03-16T15:39:42.000000000Z [TD="width: 15"] [TD="width: 15"] [TD="width: 15"] [TD="width: 130"]EventRecordID 42393 [TD="width: 15"] [TD="width: 15"] [TD="width: 15"] [TD="width: 130"]Channel Application Not much to go by really Any ideas? Cheers, Manny
Patrick Posted March 17, 2015 Posted March 17, 2015 Ahh yeah that's much to go on. Have a look in the application logs, other than that, I'm not too sure.
Manny21555 Posted March 17, 2015 Author Posted March 17, 2015 Hi PartickC, I've looked around but still nothing in event viewer.. I've looked under Evernt Viewer>windows logs>application and nothing (thats what i copied/pasted above).. I've managed to get the .dmp file and look at this via bluescreen view. The bug check code is 0x0000012e and the filenames having this issues are ntfs.sys and ntoskrnl.exe - as its a VM it could be a physical that has failed but all is green. (we use SSD's in the physical server - i'm thinking one of the drives have failed but I've checked them and its healthy!) Again not much help from Microsoft here I think its a physical issue with a SSD on the server but i need to turn all off VM's to find out which one has failed (NTFS). This is what i'm guessing anyway! Any other idea's? Cheers, Manny
Patrick Posted March 17, 2015 Posted March 17, 2015 I'd say you could be right. After hours diagnosis is probably your best bet.
Arthur Posted March 17, 2015 Posted March 17, 2015 I think its a physical issue with a SSD on the server Not OCZ or Crucial SSDs are they?
john Posted March 17, 2015 Posted March 17, 2015 Maybe worth reading up on dump analysis - How to Analyze a BSOD Crash Dump I've done it before with good options and found faulty hardware and drivers so can be most useful.
Manny21555 Posted March 18, 2015 Author Posted March 18, 2015 Hi All, Thanks for getting back to me with all the suggestions Its almost half term break so i will turn off all VM's and do a chkdsk in the Easter holiday.. I looked on the VM performance & most other settings but everything is coming back healthy, obviously i need to do some more digging but for now the server is on and the school is running okay so i wont touch it until we break up! The drives are SSD Fujitsu drives, if one has gone then i believe we are covered by Dell so they should ship one out Will keep you guys posted if anything else happens or If i need any help! Thanks all! Manny
SHimmer45 Posted March 18, 2015 Posted March 18, 2015 Maybe worth reading up on dump analysis - How to Analyze a BSOD Crash Dump I've done it before with good options and found faulty hardware and drivers so can be most useful. BlueScreenView is a nice tool which i have used to read minidump files in the fast, iirc it colour codes items for easier reading http://www.nirsoft.net/utils/blue_screen_view.html
Manny21555 Posted March 18, 2015 Author Posted March 18, 2015 Hi Shimmer, I used bluescreenview and found the ntfs.sys file & ntoskrnl.exe was highlighted in red I stated this above, i still think a physical drive has gone on the server, we are using a RAID 50 at the moment but as its live and all is working i wont touch it until the Easter holiday when i have chance to turn off the VM's and dig some more Thanks Manny
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now