Questions tagged [poolmon]

10 questions
8
votes
1 answer

How do I determine what application is leaking nonpaged memory?

We recently had an issue on our live server that caused our Web App to stop responding. All we were getting were 503 errors until we rebooted the server then it was fine. Eventually I traced it back to the httperr.log and found a whole lot of…
Developer
  • 273
  • 1
  • 3
  • 11
3
votes
2 answers

Where can I download poolmon.exe for Windows Server 2003?

I can only find the Windows XP version. I don't have the Windows Server 2003 cd handy.
Luke
  • 2,063
  • 7
  • 27
  • 30
3
votes
3 answers

Diagnosing "File" tag memory leak in poolmon.exe on 2008R1SP2

We have a memory leak plaguing many of our 2008R1SP2 file servers. The "File" non paged memory tag in poolmon.exe will leak until shared folders are no longer available, and then RDP goes down with it (and we have to reboot via console). Sometimes…
kiwisan
  • 183
  • 2
  • 10
3
votes
3 answers

Is poolmon or an Equivalent Tool Available for Windows Server 2008?

Is there a version of poolmon available for Windows Server 2008 64-bit? This KB article says it only applies to versions up to Server 2003. Is this tool (or something equivalent) available for Server 2008? (I'm new to the Windows Server world, and…
Adam Holmberg
  • 225
  • 2
  • 3
  • 5
2
votes
0 answers

Poolmon Nonp total bytes not equal to Perfmon Memory > Nonpaged Pool Bytes

We are monitoring a server for a potential Nonpaged Pool memory leak. So we setup a cmd batch file to output to the Nonpaged Pool allocation every 10 mins. We also setup a perfmon counter log to capture Memory > Nonpaged Pool Bytes. As well as an…
1
vote
0 answers

win2008 has memory leak with DWPT tag

My win2008 server has memory leak. I installed WDK and use poolmon. I think that is the problem in DWPT tag (see screenshot, first row). I try to find corresponding driver using Marks article…
Alex Molskiy
  • 111
  • 1
1
vote
1 answer

How to analyze the output of poolmon

I've read the KB articles about poolmon but they don't tell me how to analyze the numbers. My first guess is to look for drivers where the value in the column "Diff" is very high. Is that correct? In my case, that would be these processes: Tag …
Aaron Digulla
  • 954
  • 1
  • 13
  • 24
1
vote
2 answers

Automatically capture the output of poolmon

I'm hunting of a memory pool leak using poolmon. In the KB article, they explain how to capture the output manually using cut&paste. Isn't there a way to automate this? Since the tool doesn't seem to support it, my idea was to run two command…
Aaron Digulla
  • 954
  • 1
  • 13
  • 24
0
votes
1 answer

memory leak - RaCT driver tag

I'm having an issue with Nonpaged pool using 129GB of RAM on HP ProLiant DL380 Gen9 running Windows Server 2012 R2. I used Poolmon.exe to trace out that RaCT is using 127GB but I can't find any info on that RaCT Tag. I have looked through…
JS_93650
  • 1
  • 1
0
votes
1 answer

poolmon: Which driver uses "Thre"?

One step further: On my machine, the pool tagged "Thre" grows about 1MB/day. Searching for "Thre" with findstr returns about every *.sys file on my harddisk. Any ideas how I could reduce the number of possible culprits?
Aaron Digulla
  • 954
  • 1
  • 13
  • 24