jziehm
asked on
Finding the source of a memory leak
My Windows XP SP3 system has a memory leak. Using the Windows Task Manager, after a reboot the Paged Kernel Memory starts out at about 80MB, and grows to about 400MBs over a 3 day period. At this point my system locks and needs to be rebooted.
Using Poolmon I have determine the source of the leak is the pool tag "Strg". What I cannot determine is what application or process is using "Strg". When I search for the "Strg" string in driver .sys files, I do not get any hits. When I look in pooltag.txt, Strg has a description of Dynamic Translated Strings, but no driver listed.
Any help in determining what application or process is using pooltag "Strg" and causing the memory leak would be sincerely appreciated.
Using Poolmon I have determine the source of the leak is the pool tag "Strg". What I cannot determine is what application or process is using "Strg". When I search for the "Strg" string in driver .sys files, I do not get any hits. When I look in pooltag.txt, Strg has a description of Dynamic Translated Strings, but no driver listed.
Any help in determining what application or process is using pooltag "Strg" and causing the memory leak would be sincerely appreciated.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Both good suggestions. I will try the sysinternals Process Explorer first. If that does not supply the source of the memory leak, I will start shutting down applications / processes until I find the leak.
ASKER
I have downloaded and played with the sysinternals Process Explorer. How do I determine which process is using the "Strg" pooltag? Thank you for your assistance.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you for the suggestions. I will review them.
ASKER
Thank you both for your assistance. It was very helpful.
That could be anything.
See http://blogs.technet.com/b/yongrhee/archive/2009/06/24/pool-tag-list.aspx and you'll find
Strg - <unknown> - Dynamic Translated strings
See http://forum.sysinternals.com/help-with-isolating-strg_topic22494_post117986.html for an example.
Generally you'll disable various applications and not use them for a period of days and see if you can isolate them that way.