Thanks Tom, We do use caching and I had tried disabling it with no effect. However, it has been running fine for the last two days, after disabling some streaming audio that some users were using. I don't know if the other site in question has a similar setup for users, but this could be part of the problem. I'll try to obtain that fix as well. Thanks -Warren > -----Original Message----- > From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] > Sent: Wednesday, January 22, 2003 7:35 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: MS Firewall Service (WSPSRV.EXE) memory leak? > > > http://www.ISAserver.org > > > Hi guys, > > Check this out: > > ========================== > GrahamW > Junior Member > Member # 9179 > > Rate Member posted October 31, 2002 04:02 PM > -------------------------------------------------------------- > ---------- > -------- > I thought that I would update you guys on this. I used the > Microsoft Partner newsgroup and had a reply from Microsoft. > > >-----Original Message----- > >Hi Graham, > > > >We may narrow down the problem from these aspects: > > > >1. Do you install any 3rd party application filters in the > ISA server? > E.g. > >Surf Control, or WebTrends. You may temporarily disable all > of them and > > >then restart the server. > > > >2. Another possibility is that it is an known issue reported by > Microsoft: > > > >The peak in the memory usage may be seen when the data retrieval rate > >between ISA and the Web server that hosts the content is faster than > the > >data sending rate between ISA and the requesting client. > Typically this > may > >be seen when content is served from the Web Proxy cache or > if the link > >between ISA and the Web server that hosts the content is faster than > the > >link between ISA and the internal client that sends the request. > > > >To resolve this problem immediately, contact Microsoft > Product Support > >Services to obtain the fix. For a complete list of Microsoft Product > >Support Services phone numbers and information about support costs, > visit > >the following Microsoft Web site: > > > > http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS > > > >and provide this Q number to support center: Q321844 (Notes: > it is not > an > >public article so you may not see it from external web site) > > > >3. One of the internal box has virus on it and keeping send > udp packets > to > >ISA server internal interface. You may try to disable the internal > access > >or just use Network Monitor to capture the traffic to perform an > analysis. > > > >4. Disable the caching function and check if it is the corrupted > caching > >issue. > > > >Please let me know if this solves your problem or if you would like > further > >assistance. > > > >I look forward to hearing from you. > >Sincerely, > > > >Microsoft Online Support Engineer > ==================================== > > HTH, > Tom > www.isaserver.org/shinder > > > -----Original Message----- > From: Wayne Small [mailto:wayne@xxxxxxxxxxxxxx] > Sent: Wednesday, January 22, 2003 9:06 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: MS Firewall Service (WSPSRV.EXE) memory leak? > > > http://www.ISAserver.org > > > Warren, > > I've seen this problem on one of our sites, but have not > resolved it. The ISA service would take up to 1.5GB of > firtual RAM over the period of 2 weeks. We traced the fact > that it only increased when we had VPN or RAS connections > inbound and that after working hours the increase would > cease. We lodged a support case with PSS, and eventually we > got to a point where the only option left was to run some > very invasive tools to monitor the systems usage - apparently > these tools would have caused a large impact on the system > due to their nature. The client > (understandably) did not want this level of degredation, and > we settled for a scheduled reboot each Sunday night. It's > been running solid since then - still using large amounts of > RAM though. As Microsoft had suggested that we were the only > ones affected by this issue we are hoping that it may be a > side effect of some other issue that may be fixed in a future > service pack. We have a large number of other sites running > almost the identical configuration without any issues like this. > > I know it's not an answer for you but I hope it helps to know > that others have seen it and how we got around it. > > Regards, > Wayne Small [SBS-MVP] > MCSE+I MCSE 2000 > Technical Director - Correct Solutions Pty Ltd > For all the answers on Small Business Server 2000 - check out > www.sbsfaq.com > > > -----Original Message----- > From: Warren Cundy [mailto:warrenc@xxxxxxxxxxxx] > Sent: Tuesday, 14 January 2003 11:24 AM > To: [ISAserver.org Discussion List] > Subject: [isalist] MS Firewall Service (WSPSRV.EXE) memory leak? > > > http://www.ISAserver.org > > > Hi guys, > > I'm running ISA Sp1 on Win2k Sp3. Recently ISA crashed a few > times, with only 2-3 days between crashes. I couldn't figure > out what it was, as there was nothing in the error logs, but > some perfmon analysis shows that > (sometimes) this service starts eating up memory and never > gives it back, finally leading to a crash. > > Any ideas? It gets up to something like 700mb of physical > and virtual memory. (512 on the server) What does this > service do? We don't run anything else on the ISA Server > itself. I have it serving up an internal ftp, web site, and > Exchange server. We use SecureNAT. The weird thing is that > nothing has been touched for at least 6 months, and this > problem showed up about 2-3 weeks ago. > > Thanks for any help. > > -Warren > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Exchange Server Resource Site: http://www.msexchange.org/ > Windows Security Resource Site: > http://www.windowsecurity.com/ Windows 2000/NT > Fax Solutions: > http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion > List as: wayne@xxxxxxxxxxxxxx To unsubscribe send a blank > email to $subst('Email.Unsub') > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Exchange Server Resource Site: http://www.msexchange.org/ > Windows Security Resource Site: > http://www.windowsecurity.com/ Windows 2000/NT > Fax Solutions: > http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion > List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a > blank email to $subst('Email.Unsub') > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Exchange Server Resource Site: http://www.msexchange.org/ > Windows Security Resource Site: > http://www.windowsecurity.com/ Windows 2000/NT > Fax Solutions: > http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion > List as: warrenc@xxxxxxxxxxxx To unsubscribe send a blank > email to $subst('Email.Unsub') >