Solved

Finding the source of a memory leak

Posted on 2010-08-17
7
1,215 Views
Last Modified: 2013-12-01
My Windows XP SP3 system has a memory leak. Using the Windows Task Manager, after a reboot the Paged Kernel Memory starts out at about 80MB, and grows to about 400MBs over a 3 day period. At this point my system locks and needs to be rebooted.

Using Poolmon I have determine the source of the leak is the pool tag "Strg". What I cannot determine is what application or process is using "Strg". When I search for the "Strg" string in driver .sys files, I do not get any hits. When I look in pooltag.txt, Strg has a description of Dynamic Translated Strings, but no driver listed.

Any help in determining what application or process is using pooltag "Strg" and causing the memory leak would be sincerely appreciated.
0
Comment
Question by:jziehm
  • 4
  • 2
7 Comments
 
LVL 11

Accepted Solution

by:
farjadarshad earned 250 total points
Comment Utility
I would recommend you to use a sysinternals utility called process explorer. It will tell you exactly what you want. you can download it from here

http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
0
 
LVL 47

Expert Comment

by:dbrunton
Comment Utility
>> Any help in determining what application or process is using pooltag "Strg" and causing the memory leak would be sincerely appreciated.

That could be anything.

See http://blogs.technet.com/b/yongrhee/archive/2009/06/24/pool-tag-list.aspx and you'll find

Strg - <unknown>    - Dynamic Translated strings

See http://forum.sysinternals.com/help-with-isolating-strg_topic22494_post117986.html for an example.

Generally you'll disable various applications and not use them for a period of days and see if you can isolate them that way.
0
 

Author Comment

by:jziehm
Comment Utility
Both good suggestions. I will try the sysinternals Process Explorer first. If that does not supply the source of the memory leak, I will start shutting down applications / processes until I find the leak.
0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 

Author Comment

by:jziehm
Comment Utility
I have downloaded and played with the sysinternals Process Explorer. How do I determine which process is using the "Strg" pooltag? Thank you for your assistance.
0
 
LVL 47

Assisted Solution

by:dbrunton
dbrunton earned 250 total points
Comment Utility
I don't think Process Explorer is the right tool in this case.

You may need to use poolmon but Process Explorer  could be useful.  Look carefully at the links following for guidelines on how to proceed.  The first one is talking about Exchange but goes into finding memory leaks.

http://blogs.technet.com/b/mikelag/archive/2009/09/15/how-to-monitor-and-troubleshoot-the-use-of-nonpaged-pool-memory-in-exchange-server-2003-or-in-exchange-2000-server.aspx

Others to read as well.

http://blogs.msdn.com/b/ntdebugging/archive/2006/12/18/understanding-pool-consumption-and-event-id_3a00_--2020-or-2019.aspx

http://support.microsoft.com/kb/177415
0
 

Author Comment

by:jziehm
Comment Utility
Thank you for the suggestions. I will review them.
0
 

Author Closing Comment

by:jziehm
Comment Utility
Thank you both for your assistance. It was very helpful.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Introduction: When experiencing some peculiar problem with the functioning of your PC, how many times has it happened that you look for a solution and even google can’t help? It could be that you are one of the only few people on earth who ma…
I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension (http://www.experts-exchange.com/discussions/210281/Attachments-with-no-extension.html). This reminded me of questions tha…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now