Solved

Finding the source of a memory leak

Posted on 2010-08-17
7
1,218 Views
Last Modified: 2013-12-01
My Windows XP SP3 system has a memory leak. Using the Windows Task Manager, after a reboot the Paged Kernel Memory starts out at about 80MB, and grows to about 400MBs over a 3 day period. At this point my system locks and needs to be rebooted.

Using Poolmon I have determine the source of the leak is the pool tag "Strg". What I cannot determine is what application or process is using "Strg". When I search for the "Strg" string in driver .sys files, I do not get any hits. When I look in pooltag.txt, Strg has a description of Dynamic Translated Strings, but no driver listed.

Any help in determining what application or process is using pooltag "Strg" and causing the memory leak would be sincerely appreciated.
0
Comment
Question by:jziehm
  • 4
  • 2
7 Comments
 
LVL 11

Accepted Solution

by:
farjadarshad earned 250 total points
ID: 33461279
I would recommend you to use a sysinternals utility called process explorer. It will tell you exactly what you want. you can download it from here

http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
0
 
LVL 48

Expert Comment

by:dbrunton
ID: 33461562
>> Any help in determining what application or process is using pooltag "Strg" and causing the memory leak would be sincerely appreciated.

That could be anything.

See http://blogs.technet.com/b/yongrhee/archive/2009/06/24/pool-tag-list.aspx and you'll find

Strg - <unknown>    - Dynamic Translated strings

See http://forum.sysinternals.com/help-with-isolating-strg_topic22494_post117986.html for an example.

Generally you'll disable various applications and not use them for a period of days and see if you can isolate them that way.
0
 

Author Comment

by:jziehm
ID: 33468396
Both good suggestions. I will try the sysinternals Process Explorer first. If that does not supply the source of the memory leak, I will start shutting down applications / processes until I find the leak.
0
Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

 

Author Comment

by:jziehm
ID: 33470743
I have downloaded and played with the sysinternals Process Explorer. How do I determine which process is using the "Strg" pooltag? Thank you for your assistance.
0
 
LVL 48

Assisted Solution

by:dbrunton
dbrunton earned 250 total points
ID: 33477819
I don't think Process Explorer is the right tool in this case.

You may need to use poolmon but Process Explorer  could be useful.  Look carefully at the links following for guidelines on how to proceed.  The first one is talking about Exchange but goes into finding memory leaks.

http://blogs.technet.com/b/mikelag/archive/2009/09/15/how-to-monitor-and-troubleshoot-the-use-of-nonpaged-pool-memory-in-exchange-server-2003-or-in-exchange-2000-server.aspx

Others to read as well.

http://blogs.msdn.com/b/ntdebugging/archive/2006/12/18/understanding-pool-consumption-and-event-id_3a00_--2020-or-2019.aspx

http://support.microsoft.com/kb/177415
0
 

Author Comment

by:jziehm
ID: 33481431
Thank you for the suggestions. I will review them.
0
 

Author Closing Comment

by:jziehm
ID: 33493779
Thank you both for your assistance. It was very helpful.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

More and more people are using the enhanced small form-factor pluggable (SFP+) tranceivers, and speed is of utmost importance. Testing of speeds are critical to ensure that the devices will meet the speed requirements. There are some testing challen…
I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension (http://www.experts-exchange.com/discussions/210281/Attachments-with-no-extension.html). This reminded me of questions tha…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question