Prerequisites
We’ll use the ExTra.exe and ProcDump Tools to take traces that will capture the issue.
To take memory dump of Store.exe and EdgeTransport.exe for deep code level analysis.
Download ProcDump: http://technet.microsoft.com/en-US/sysinternals/dd996900
The instructions
Scenario
Mails get stuck in some servers, not always the same, but the common point between the servers is that it’s always queues which point to the same database (messages for users in a particular database).
Event Log analysis does not show any issues, event with Event Logging set to “Expert” for MSExchange Transport and MSExchangeIS store delivery components.
We need to take traces that will capture what Exchange is trying to do, and that will enable Microsoft to tell what object is blocking the queue(s).
Traces
Traces: take both ExTra traces and Dumps from Store and Transport (or other process if it’s for a different scenario)
These will be analyzed by an accredited Microsoft Engineer.
1 of 2 > Extra.exe
Launch ExTra.exe (available by default on Exchange 2010 and Exchange 2013) and choose the “Trace Control” option
Then click on “Set manual trace tags” on the next screen:
Then select the components we with to trace (for our scenario example, Transport and StoreDriver)
and click on the below “Start Tracing” link.
To stop the tracing, when the issue will occur and when the Dumps below will be taken, click on “Stop Tracing now”
2 of 2> process memory dump:
- On one HUB, run this from the ProcDump directory:
procdump.exe -ma –n 3 –s 15 -accepteula edgetransport.exe c:\dumps
- On the Mailbox Server, run this from the ProcDump directory:
procdump.exe -ma –n 3 –s 15 -accepteula store.exe c:\dumps