Does anyone know how to use poolmon.exe to track a memory leak?

I have a Windows SBS 2003 box that gets event ID's 2019 Source Srv and ID 333 Source Application Popup and then the server crashes. The server though appears to be up and running but all services including TCPIP stop. When I log into the server it hands and the only option I have is to reboot and the server is fine for a few days or weeks and then does the same thing. After research it is of course a memory leak issue and found lots of articles about using poolmon.exe to find the leak but all the forums and articles make it seem difficult to use and capture the problem for someone to use that has never used the tool before. Does someone have any easy articles or a GUI to help find this leak. it does say take snapshots every few hours of poolmon.exe but is there a way to write it to a log all the time so i dont have to check it all the time? Anyone with experence please help. Thanks,

Jimmy
forums712Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hardeep_SalujaCommented:
Hi Jimmy,

This is from where you can get all info about poolmon
http://msdn.microsoft.com/en-us/library/ms792884.aspx

If you want to get screenshots of setting it up .. i have attached a bmp file attached ... change it to .OST
Hope this will help you
Thanks
Hardeep
PMLC.bmp
0
forums712Author Commented:
Thanks for the link and the tool Hardeep, though the tool generates a .cab file. Will I be able to read the results from this file? Or is this tool just to generate a file that Microsoft can only look at. Thanks,

Jimmy
0
Hardeep_SalujaCommented:
It will generate a log file which is located at C:\
Even you can go through it and search for errors or failiures from web else call Microsoft and they can read for you..
0
OWASP: Avoiding Hacker Tricks

Learn to build secure applications from the mindset of the hacker and avoid being exploited.

forums712Author Commented:
Thanks again Hardeep. Do you know how to sort this out so I can see which process is the one that spiked up? Thanks,

Jimmy
0
Hardeep_SalujaCommented:
Hi I am attaching Poolmon log analyser by which you can get logs analysed..
This is a best way to check..
NOTE: Change extension from jpg to .msi
Thanks
PLAT.jpg
0
Hardeep_SalujaCommented:
hiii any update?
0
Hardeep_SalujaCommented:
I hope this had resolved most of your queries
0
forums712Author Commented:
Hi Hardeep,

Poolmon running fine so far and luckily server has not crashed since. If it does crash, is there any way we can read or sort this text file out? Thanks,

Jimmy
0
Hardeep_SalujaCommented:
Hii Jimmy.. good to hear from you after soo long..
Good to know that server has not crashed yet
if it does you can read them using Perfmon analyser
Also, i hope you have configured memory dump of server so that incase it crashes, you have way to get to exact reason why this happens.. this is read by Microsoft people who are experts in reading memory dump.. following is a Kb to setup and configure that > http://support.microsoft.com/kb/307973
Hope it will not crash anymore, if it does i think you have enough tools now :)
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Components

From novice to tech pro — start learning today.