Finding the source of a memory leak

My Windows XP SP3 system has a memory leak. Using the Windows Task Manager, after a reboot the Paged Kernel Memory starts out at about 80MB, and grows to about 400MBs over a 3 day period. At this point my system locks and needs to be rebooted.

Using Poolmon I have determine the source of the leak is the pool tag "Strg". What I cannot determine is what application or process is using "Strg". When I search for the "Strg" string in driver .sys files, I do not get any hits. When I look in pooltag.txt, Strg has a description of Dynamic Translated Strings, but no driver listed.

Any help in determining what application or process is using pooltag "Strg" and causing the memory leak would be sincerely appreciated.
jziehmAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

farjadarshadCommented:
I would recommend you to use a sysinternals utility called process explorer. It will tell you exactly what you want. you can download it from here

http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dbruntonQuid, Me Anxius Sum?  Illegitimi non carborundum.Commented:
>> Any help in determining what application or process is using pooltag "Strg" and causing the memory leak would be sincerely appreciated.

That could be anything.

See http://blogs.technet.com/b/yongrhee/archive/2009/06/24/pool-tag-list.aspx and you'll find

Strg - <unknown>    - Dynamic Translated strings

See http://forum.sysinternals.com/help-with-isolating-strg_topic22494_post117986.html for an example.

Generally you'll disable various applications and not use them for a period of days and see if you can isolate them that way.
0
jziehmAuthor Commented:
Both good suggestions. I will try the sysinternals Process Explorer first. If that does not supply the source of the memory leak, I will start shutting down applications / processes until I find the leak.
0
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

jziehmAuthor Commented:
I have downloaded and played with the sysinternals Process Explorer. How do I determine which process is using the "Strg" pooltag? Thank you for your assistance.
0
dbruntonQuid, Me Anxius Sum?  Illegitimi non carborundum.Commented:
I don't think Process Explorer is the right tool in this case.

You may need to use poolmon but Process Explorer  could be useful.  Look carefully at the links following for guidelines on how to proceed.  The first one is talking about Exchange but goes into finding memory leaks.

http://blogs.technet.com/b/mikelag/archive/2009/09/15/how-to-monitor-and-troubleshoot-the-use-of-nonpaged-pool-memory-in-exchange-server-2003-or-in-exchange-2000-server.aspx

Others to read as well.

http://blogs.msdn.com/b/ntdebugging/archive/2006/12/18/understanding-pool-consumption-and-event-id_3a00_--2020-or-2019.aspx

http://support.microsoft.com/kb/177415
0
jziehmAuthor Commented:
Thank you for the suggestions. I will review them.
0
jziehmAuthor Commented:
Thank you both for your assistance. It was very helpful.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
System Utilities

From novice to tech pro — start learning today.