Solved

Memory Leak error, that only occurs, when i rename my server, and give a specific ip address?

Posted on 2006-07-04
8
5,185 Views
Last Modified: 2009-02-24
I've got a memory leak error on my windows 2003 std edt server. the strange thing is, it ONLY happens if i rename the server, and change its ip address to that of an old server on our domain. I'm trying to upgrade our fileserver, so i've got a brand new dl380, with windows 2003 std edt. It's been running for a month now(on the domain) all ok, no errors at all. On the weekend, i planned to put it live. I took the old fileserver (called fileserver, Win2k) off the domain, and into a workgroup, changed its ip address and re-booted, all ok. I then started work on the new fileserver (called temp2), i dropped it into a workgroup, changed its name to "fileserver" (left in workgroup) and re-booted. I then changed it IP address to reflect the original fileserver's address, re-booted. I then joined the new fileserver, to the domain. Everything looked good all the mapped drives worked fine. BUT, about an hour later, i could't access the new fileserver, tried pinging, but that failed as well. Went to site, checked out the event logs, and there were lots of error messages stating: "the server was unable to allocate from the system nonpaged pool because the pool was empty". I restarted the server this fixed it, but it then died about 2 hours later. I reversed the process of naming it, as stated above, and now its back to Temp2, and there are no problems? How can the change of name and ip address cause these problems?

I've found an article on the hp website which has all the error messages and symptoms that i'm having, but, this error is constant, and was resolved by updating Landesk software, i've attached the errors:


we have a compaq dl380 g2 server with windows 2003 reporting memory leaks once a week, becomes unresponsive and has to be hard reset.
all hardware drivers/bios/firmware has been updated without solving the problem.

the server has the following software installed:
W2K3 Server Std. (member of an AD)
HP Utilities
IBM Tivoli Storage Manager Client
LanDesk 8.5
MSDE
Symantec Antivirus Client

the server runs for about a week without problems and then becomes unresponsive (no logon possible due to lack of ressources) with the following event entries:

Source: PerfDisc
Category: None
EventID: 2001
Description:Unable to read the disk performance information from the system. Disk performance counters must be enabled...

Source: Userenv
Category: None
EventID: 1053
Description:Windows cannot create registry key Software\Microsoft\Windows\CurrentVersion\Group Policy. (Access is denied. )....

Source: Storage Agents
Category: Alerter
EventID: 773
Description:The Remote Alerter Agent received an error on WaitForMultipleObjects call. The data contains the error code.....

Source: Application PopUp
Category: None
EventID: 333
Description:An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry...

Source: Srv
Category: None
EventID: 2019
Description:The server was unable to allocate from the system nonpaged pool because the pool was empty....

Source: cpqcissm
Category: None
EventID: 56
Description:The driver failed to allocate memory. ...

Source: Foundation Agents
Category: (17)
EventID: 4402
Description:The External Status MIB Agent could not create an SNMP session. The data contains the error code....  
0
Comment
Question by:rtl_support
  • 4
  • 4
8 Comments
 
LVL 28

Expert Comment

by:Michael Pfister
ID: 17035530
Try removing ALL HP management agents and tools from your box before renaming it. You can reinstall them afterwards. Also check if there are newer versions to download from HP.

If it doesn't help, also remove before renaming

> IBM Tivoli Storage Manager Client
> LanDesk 8.5
> Symantec Antivirus Client

Hope it helps,

Michael

0
 

Author Comment

by:rtl_support
ID: 17035547
Thanks for your advice, but can i ask, why don't these applications, cause a memory leak, before i rename it? As i said, this problem only occurs, after i've renamed the server, and changed the IP address?

Thanks
0
 
LVL 28

Accepted Solution

by:
Michael Pfister earned 500 total points
ID: 17035603
I remember having a lot of troubles with HP agents under different circumstances.
They bring their own web server and stuff I don' t like but you have to install them otherwise you can't manage your servers.
I'd guess they store the server name and/or IP address during setup and if you change it later some subroutines wreak havoc because the name has changed.

You can go and try to find the culprit by using perfmon to watch each process for allocating nonpaged memory and not freeing it.
Start perfmon and select:
Process -> Pool Nonpaged Bytes -> All instances

Ctrl-H turns on highlighting, just browse through the indicator list until you find the one going up. Since you're talking about hours it should go up quite fast.

Hope it helps,

Michael
0
 

Author Comment

by:rtl_support
ID: 17035637
Thanks for that, it makes sense. I'll try it tonight, and update you tomorrow.
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:rtl_support
ID: 17040603
Hello,

I removed all agents, but still problematic. Managed to get the poolmon logs this morning, when it was in a "locked" state, and found this:

Memory: 1048032K Avail:  654712K  PageFlts:    30   InRam Krnl: 2152K P:19168K
 Commit: 290812K Limit: 960032K Peak: 293552K            Pool N:206316K P:19636K
 System pool information
 Tag  Type     Allocs                  Frees                      Diff       Bytes       Per Alloc

 McOp Nonp    1184743 (   0)               0 (   0)     1184743    104257384 (     0)     88
 McFN Nonp    3451689 ( 642)   2266947 ( 642)    1184742     85312680 (     0)     72
 Even Nonp     106339 (  11)       104168 (  12)           2171        106768 (   -48)     49
 Vad  Nonp      57550 (   6)           55742 (   6)           1808          86784 (     0)     48

I assume thats a mcafee tag (we have mcafee av). I will remove mcafee tonight, once i confirm the tag. I'll keep you posted.
0
 
LVL 28

Expert Comment

by:Michael Pfister
ID: 17040789
Never saw this with McAfee but everything is possible... I just wonder because you mentioned Symantec Antivirus Client in your original post. I hope you don't have 2 anti-virus programs installed on the same system?!?

And I must admit: I'm not impartial when it comes to HP agents ...;-)
0
 

Author Comment

by:rtl_support
ID: 17089284
Hello,

Resolved the problem. It was related to mcafee. And they have a patch to resolve this on there website (you'll need at least patch 11)

Applied the patch, and monitored using poolmon, all ok.

Thanks for your help
0
 
LVL 28

Expert Comment

by:Michael Pfister
ID: 17089524
Glad I could help, but why only "C"?

http://www.experts-exchange.com/help.jsp#hi55
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now