IIS in Our system goes down almost every 2hours... No idea why it happens.. Followings are the log messages. Please help.
Windows event viewer:
The IIS Admin Service service terminated unexpectedly. It has done this 8 time(s). The following corrective action will be taken in 1 milliseconds: Run the configured recovery program.
The FTP Publishing Service service terminated unexpectedly. It has done this 8 time(s). The following corrective action will be taken in 0 milliseconds: No action.
The World Wide Web Publishing Service service terminated unexpectedly. It has done this 8 time(s). The following corrective action will be taken in 0 milliseconds: No action.
This happends every 2 hours. I've installed patches for the CodeRed worm. It did not cure. Could this be DoS attack? Environment: Windows 2000 Server with 1 gig of memory running SQL Server 2000 and MS Exchange server 5.5
no it is not a DoS attack, they do not work like that. DoS attacks are where someone floods your server with bogus traffic causing it to become swamped.
if IIS/W3SVC keep restarting for no apparent reason, then it is going to take sometime to track down your problem.
1) make sure you have enought ram in your machine 2) what sort of db do you use, and how much concurrent traffic does your site get 3) check all database connections are opened and closed correctly 4) check that all asp objects are being used/freed correctly 4) set your services to restart on failure (will minimise down time)
iistracer can be a handy ISAPI filter to install which will show you a little more about whats going on inside your IIS server. It may help to show you pages causing problems especially if you use it in combination with performance monitor to look at some of the other IIS counters.