RE: MS Firewall Service (WSPSRV.EXE) memory leak?
- From: Warren Cundy <warrenc@xxxxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 24 Jan 2003 10:14:07 -0800
Great, thanks for the confirmation Tom.
Stupid question: our network runs entirely on SecureNAT right now, can web
proxy clients co-exist with SecureNAT?
Thanks
-Warren
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
> Sent: Thursday, January 23, 2003 4:49 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: MS Firewall Service (WSPSRV.EXE) memory leak?
>
>
> http://www.ISAserver.org
>
>
> Hi Warren,
>
> There is a recognized problem with the Wimamp Shoutcast
> protocol. A few people on the Web boards have mentioned the
> problem. The fix is to configure Winamp as a Web Proxy client, IIRC.
>
> HTH,
> Tom
> www.isaserver.org/shinder
>
>
> -----Original Message-----
> From: Warren Cundy [mailto:warrenc@xxxxxxxxxxxx]
> Sent: Thursday, January 23, 2003 11:28 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: MS Firewall Service (WSPSRV.EXE) memory leak?
>
>
> http://www.ISAserver.org
>
>
> Thanks Tom,
>
> We do use caching and I had tried disabling it with no
> effect. However, it has been running fine for the last two
> days, after disabling some streaming audio that some users
> were using. I don't know if the other site in question has a
> similar setup for users, but this could be part of the problem.
>
> I'll try to obtain that fix as well.
>
> Thanks
>
> -Warren
>
>
> > -----Original Message-----
> > From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
> > Sent: Wednesday, January 22, 2003 7:35 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: MS Firewall Service (WSPSRV.EXE) memory leak?
> >
> >
> > http://www.ISAserver.org
> >
> >
> > Hi guys,
> >
> > Check this out:
> >
> > ==========================
> > GrahamW
> > Junior Member
> > Member # 9179
> >
> > Rate Member posted October 31, 2002 04:02 PM
> > --------------------------------------------------------------
> > ----------
> > --------
> > I thought that I would update you guys on this. I used the
> > Microsoft Partner newsgroup and had a reply from Microsoft.
> >
> > >-----Original Message-----
> > >Hi Graham,
> > >
> > >We may narrow down the problem from these aspects:
> > >
> > >1. Do you install any 3rd party application filters in the
> > ISA server?
> > E.g.
> > >Surf Control, or WebTrends. You may temporarily disable all
> > of them and
> >
> > >then restart the server.
> > >
> > >2. Another possibility is that it is an known issue reported by
> > Microsoft:
> > >
> > >The peak in the memory usage may be seen when the data
> retrieval rate
> > >between ISA and the Web server that hosts the content is
> faster than
> > the
> > >data sending rate between ISA and the requesting client.
> > Typically this
> > may
> > >be seen when content is served from the Web Proxy cache or
> > if the link
> > >between ISA and the Web server that hosts the content is
> faster than
> > the
> > >link between ISA and the internal client that sends the request.
> > >
> > >To resolve this problem immediately, contact Microsoft
> > Product Support
> > >Services to obtain the fix. For a complete list of
> Microsoft Product
> > >Support Services phone numbers and information about support costs,
> > visit
> > >the following Microsoft Web site:
> > >
> > > http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS
> > >
> > >and provide this Q number to support center: Q321844 (Notes:
> > it is not
> > an
> > >public article so you may not see it from external web site)
> > >
> > >3. One of the internal box has virus on it and keeping send
> > udp packets
> > to
> > >ISA server internal interface. You may try to disable the internal
> > access
> > >or just use Network Monitor to capture the traffic to perform an
> > analysis.
> > >
> > >4. Disable the caching function and check if it is the corrupted
> > caching
> > >issue.
> > >
> > >Please let me know if this solves your problem or if you would like
> > further
> > >assistance.
> > >
> > >I look forward to hearing from you.
> > >Sincerely,
> > >
> > >Microsoft Online Support Engineer
> > ====================================
> >
> > HTH,
> > Tom
> > www.isaserver.org/shinder
> >
> >
> > -----Original Message-----
> > From: Wayne Small [mailto:wayne@xxxxxxxxxxxxxx]
> > Sent: Wednesday, January 22, 2003 9:06 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: MS Firewall Service (WSPSRV.EXE) memory leak?
> >
> >
> > http://www.ISAserver.org
> >
> >
> > Warren,
> >
> > I've seen this problem on one of our sites, but have not
> > resolved it. The ISA service would take up to 1.5GB of
> > firtual RAM over the period of 2 weeks. We traced the fact
> > that it only increased when we had VPN or RAS connections
> > inbound and that after working hours the increase would
> > cease. We lodged a support case with PSS, and eventually we
> > got to a point where the only option left was to run some
> > very invasive tools to monitor the systems usage - apparently
> > these tools would have caused a large impact on the system
> > due to their nature. The client
> > (understandably) did not want this level of degredation, and
> > we settled for a scheduled reboot each Sunday night. It's
> > been running solid since then - still using large amounts of
> > RAM though. As Microsoft had suggested that we were the only
> > ones affected by this issue we are hoping that it may be a
> > side effect of some other issue that may be fixed in a future
> > service pack. We have a large number of other sites running
> > almost the identical configuration without any issues like this.
> >
> > I know it's not an answer for you but I hope it helps to know
> > that others have seen it and how we got around it.
> >
> > Regards,
> > Wayne Small [SBS-MVP]
> > MCSE+I MCSE 2000
> > Technical Director - Correct Solutions Pty Ltd
> > For all the answers on Small Business Server 2000 - check out
> > www.sbsfaq.com
> >
> >
> > -----Original Message-----
> > From: Warren Cundy [mailto:warrenc@xxxxxxxxxxxx]
> > Sent: Tuesday, 14 January 2003 11:24 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] MS Firewall Service (WSPSRV.EXE) memory leak?
> >
> >
> > http://www.ISAserver.org
> >
> >
> > Hi guys,
> >
> > I'm running ISA Sp1 on Win2k Sp3. Recently ISA crashed a few
> > times, with only 2-3 days between crashes. I couldn't figure
> > out what it was, as there was nothing in the error logs, but
> > some perfmon analysis shows that
> > (sometimes) this service starts eating up memory and never
> > gives it back, finally leading to a crash.
> >
> > Any ideas? It gets up to something like 700mb of physical
> > and virtual memory. (512 on the server) What does this
> > service do? We don't run anything else on the ISA Server
> > itself. I have it serving up an internal ftp, web site, and
> > Exchange server. We use SecureNAT. The weird thing is that
> > nothing has been touched for at least 6 months, and this
> > problem showed up about 2-3 weeks ago.
> >
> > Thanks for any help.
> >
> > -Warren
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/
> > Windows Security Resource Site:
> > http://www.windowsecurity.com/ Windows 2000/NT > Fax Solutions:
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: wayne@xxxxxxxxxxxxxx To unsubscribe send a blank
> > email to $subst('Email.Unsub')
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/
> > Windows Security Resource Site:
> > http://www.windowsecurity.com/ Windows 2000/NT > Fax Solutions:
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a
> > blank email to $subst('Email.Unsub')
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Exchange Server Resource Site: http://www.msexchange.org/
> > Windows Security Resource Site:
> > http://www.windowsecurity.com/ Windows 2000/NT > Fax Solutions:
> > http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: warrenc@xxxxxxxxxxxx To unsubscribe send a blank
> > email to $subst('Email.Unsub')
> >
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: warrenc@xxxxxxxxxxxx
> To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
Other related posts:
