Windows Server DNS/DHCP Client Memory Leak

Posted on 2012-08-23
Last Modified: 2013-06-10
Running Windows Server 2003 R2 SP2 w/16GBRAM. I noticed svchost.exe sometimes using 1.5GB of physical memory. Checking with Process Explorer showed this particular PID as DNS Client and DHCP Client services. I disabled DHCP Client since this server has a static IP, and memory usage dropped to 400MB yesterday. Now this morning, it was at 400MB or so. LAter this morning, svchost.exe is back up to 1.5GB even with DHCP client disabled. I noticed after a certain user logged in to TS on this server, if that makes any difference. System is clean of all malware/exploits, etc. Any ideas for the huge memory usage  for svchost.exe?
Question by:bigbangtech
    LVL 29

    Accepted Solution

    I think this is fine on the server. Are you facing issues with the server?

    What roles do you have on the server and what are the other services associated with svchost.exe are running?

    Author Comment

    It is being used as a file server, and up to 4 people log into it using Terminal Services to run apps, browsing, etc. When the server had 4GB of ram, things were slowing down, andthat's why I increased the memory to 16GB. Things are faster now, but now this particular svchost.exe is actually up to 1.9GB with just dns client running from it. That seems excessive/memory leak. And it seems to happen only with a particular user logged in.
    LVL 29

    Expert Comment

    by:Sudeep Sharma
    Check who all are connected to your system and making the DNS request from the server. I hope the server is not hosted to public.  Use TCPView to analyze the connection been made to source port 53.

    Or any other IP address who are connecting to it. Further what application are those users running on the server? Any P2P client which you have noticed?


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Suggested Solutions

    Many admins will agree: WSUS is is a nice invention but using it on the client side when updating a newly installed computer is still time consuming as you have to do several reboots and furthermore, the procedure of installing updates, rebooting an…
    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now