memory leak

[Dorn]

hello support,
we have a compaq dl380 g2 server with windows 2003 reporting memory leaks once a week, becomes unresponsive and has to be hard reset.
all hardware drivers/bios/firmware has been updated without solving the problem.

the server has the following software installed:
W2K3 Server Std. (member of an AD)
HP Utilities
IBM Tivoli Storage Manager Client
LanDesk 8.5
MSDE
Symantec Antivirus Client

the server runs for about a week without problems and then becomes unresponsive (no logon possible due to lack of ressources) with the following event entries:

Source: PerfDisc
Category: None
EventID: 2001
Description:Unable to read the disk performance information from the system. Disk performance counters must be enabled...

Source: Userenv
Category: None
EventID: 1053
Description:Windows cannot create registry key Software\Microsoft\Windows\CurrentVersion\Group Policy. (Access is denied. )....

Source: Storage Agents
Category: Alerter
EventID: 773
Description:The Remote Alerter Agent received an error on WaitForMultipleObjects call. The data contains the error code.....

Source: Application PopUp
Category: None
EventID: 333
Description:An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry...

Source: Srv
Category: None
EventID: 2019
Description:The server was unable to allocate from the system nonpaged pool because the pool was empty....

Source: cpqcissm
Category: None
EventID: 56
Description:The driver failed to allocate memory. ...

Source: Foundation Agents
Category: (17)
EventID: 4402
Description:The External Status MIB Agent could not create an SNMP session. The data contains the error code....

anybody got a hint where to start solving this issue ? i´m kind of stuck as i thought after updating all the bios/drivers it would be solved...

thanks in advance !
and

[Ivan Ferreira]

You sould create performance logs with perfmon, add relevant counters for CPU, MEMORY, DISKS, NETWORK.

You can also create a trace log.

This may be usefull. You can then focus on troublehooting the problematic area.

You can generate a memory dump and send it to support. To do this, use the EMS (bootcfg /ems on) and use the crashdump command.

[Jon Finley]

Have you installed all of the current patches (SP1), hotfixes, etc.??

Jon

[Dorn]

i will monitor ressources with tools provided by MS to get into this and let you know my results

[Andre Thompson_1]

Assuming that the above was done and you still get the smae problems,
this sounds like one of the applications you have is not Windows 2003 certified.

I would contact the manufacturers of all the software you have installed (or visit their support websites) to check if the version of the software you have running is for Windows 2003 server.

- Andre

[CWT Diemen]

Same problem here, came to this site via "event id 4402 Foundation Agents" and Google. Also a compaq dl380, only a g4 server with windows 2003, Memory leaks and hard reset.

So I´m very interested if you have found an answer or direction to search for a solution?

[Dorn]

thanks all,
the problem was caused by landesk software and was resolved with landesks service pack 1 for landesk 8.5.
cheers

[Dorn]

landesk 8.5 service pack 1 had to be installed