Solved

httpd.exe causing NIC 98% network utilization

Posted on 2014-01-07
9
1,053 Views
Last Modified: 2014-01-13
I have a server (Server 2003 Web Edition) that hosts a VNC remote support site using Apache that has been working well for years. All of a sudden, it started what amounted to a denial of service to the other computers on my network. I stopped a lot of services and things were normal. I assumed I had hit on the right thing but not sure what that was. Worked fine for months. Now, after running the latest Microsoft Updates (stupid!) over the weekend, the problem is back again. I have figured out that when the httpd.exe process starts to use CPU, then the NIC shoots up to 98% network utilization and I lose Internet on my network for a couple of minutes. If I manually kill httpd.exe, then immediately things go back to normal.  Problem is, I need the Apache running for the VNC site to work so I can't kill it completely. Help!
0
Comment
Question by:Profectus
  • 5
  • 2
  • 2
9 Comments
 
LVL 11

Expert Comment

by:Manjunath Sullad
Comment Utility
0
 

Author Comment

by:Profectus
Comment Utility
No anti-virus on this particular Server. It is used only for the role of hosting the VNC. I'll try the link, thanks. I looked there, and he describes a similar problem, but I cannot relate that fix to my situation.
0
 

Author Comment

by:Profectus
Comment Utility
Also, I am not seeing an inordinate use of the CPU, just the NIC
0
 
LVL 11

Expert Comment

by:Manjunath Sullad
Comment Utility
Install Windows System Resource Manager and monitor, It will monitor processor and memory resources to applications, users, Remote Desktop Services sessions, and Internet Information Services (IIS) application pools.

http://technet.microsoft.com/en-us/library/cc755056.aspx
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:Profectus
Comment Utility
That only manages processor and memory, neither of which are a problem, only the NIC popping intermittently at 96-100% of network utilization is a problem. the httpd.exe that is running never gets high on CPU or memory usage. And, it goes away after just a couple of minutes then returns.
0
 
LVL 37

Expert Comment

by:Bing CISM / CISSP
Comment Utility
also run TCP View to check how many and what kind of TCP connections that the process is working on. are the connections normal?

http://technet.microsoft.com/en-au/sysinternals/bb897437.aspx
0
 

Accepted Solution

by:
Profectus earned 0 total points
Comment Utility
Here's what seems to have solved my problem. The server has two on board NICs with one disabled and one connected. When trying to “repair” the NIC, I got an error that it couldn’t resolve DNS so I went to the router to investigate. My router has been set up to assign IPs based on specific MAC addresses. I noticed that the address in the router was for the disabled NIC and after making the change, the intermittent spikes in network activity went away. I’m assuming the spikes were caused by the NIC trying to resolve DNS for the Apache Server and failing. Now, why it worked so well before is a mystery to me. I know I switched NICs back and forth the last time I had the problem, but not this time. Thanks for the comments.
0
 
LVL 37

Expert Comment

by:Bing CISM / CISSP
Comment Utility
are the two NICs staying on the same subnet?
0
 

Author Closing Comment

by:Profectus
Comment Utility
None of the things suggested by the experts got at the real problem, which was the Network Card.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

One of the typical problems I have experienced is when you have to move a web server from one hosting site to another. You normally prepare all on the new host, transfer the site, change DNS and cross your fingers hoping all will be ok on new server…
Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now