[THIN] Re: Page file max out
- From: "Rick Mack" <Rick.Mack@xxxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Wed, 12 Jan 2005 06:38:19 +1000
Have Pavlo,
Nothing really ugly here. Though that depends on how long the systems
have been up.
The virus checking components head the list of course. I'd strongly
suggest you check inbound files only (scan on write). Things like
pagefiles should normally be excluded by default or you've found your
problem.
Updaterui is right up there, but is a user level process so it's worth
some interest.
Running multiple copies of updaterui can cause problems. Easy fix is to
use your TS GP to set updaterui file access to admins only.
Let's try that a and bit less aggressive virus checking and see what
happens.
Regards,
Rick
Ulrich Mack
Volante Systems
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Pavlo Ignatusha
Sent: Wednesday, 12 January 2005 2:41 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Page file max out
Hi Rick,
Thanks for the point.
I added Page Faults to my Task Manager and here is the top 6 processes
for the page faults counter (the servers are rebooted weekly so the
counter is probably 7 day worth)
SERVER 3 (DL380)
WinMgmts 9,929,800
McAfee 7,232,200
naPrdMgr 6,987,100
UpdaterUI 2,066,900
Spoolsv 1,279.100
IMAsrv 783.300
SERVER 2 (Older Intel)
McAfee 9,210,900
naPrdMgr 6,998,100
icabar 3,064,300
UpdaterUI 2,053,100
Spoolsv 1,500,100
Explorer 1,041,200
SERVER 1 (Older Intel)
McAfee 7,860,300
naPrdMgr 7,004,200
UpdaterUI 2,053,100 Administrator
UpdaterUI 2,004,100 user1
Spoolsv 1,404,100
IMAsrv 866.300
The McAfee is set to scan all on read and on write. The exclusion is
default McAfee's "Windows File Protection". Heuristics is on for new
program and macro viruses.
I remember having citrix servers in the separate EPO container with
different scanning settings. I will double-check with admin doing the AV
stuff what could happen to it.
Now what would be the common approach for scanning on Citrix? Scan on
read and do not scan on write, no heuristic scanning and exclude
WINNT/system32/spool, pagefiles, etc? Is better to say scan only
programm files or scan all files?
Thanks,
Pavlo Ignatusha
Systems Network Coordinator
Pembroke General Hospital
Tel. (613) 732-3675 ext.6150
Fax. (613) 732-9986
www.pemgenhos.org
"All that matters is love and work" - Sigmund Freud.
-----Original Message-----
From: Rick Mack [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Rick Mack
Sent: Friday, January 07, 2005 6:48 PM
To: thin@xxxxxxxxxxxxx
Subject: RE: [THIN] Re: Page file max out
Hi Pavlo,
Interesting application mix.
We can probably exclude MSoffice (with Access) and Acrobat and IE. Great
Plains is probably okay (except for disabling oplocks). I gues
Staffright and Accuterm97 would likely be the most promising
possibilities but it's basically a case of finding out what applications
(if any) are showing excesive pagefault activity.
Paging is a normal housekeeping function and the (Microsoft) operating
system will page long term inactive processes (and their DLLs) out of
memory regardless of the amount of free memory. The more processes you
have, and the bigger their memory footprint, the more paging you will
see.
It doesn't matter how fast your CPU and memory are if the limiting
factor is paging to a much slower disk subsystem. This is why products
like TScale etc are so effective. By allowing most DLLs to be used as
shared code, the per-process memory footprint is greatly reduced, as is
the amount of paging.
Anyway, "destructive" paging (system gets so slow its unuseable!) or
swapping generally only occurs when you've run out of physical memory so
what you're seeing there is kind of unusual. I'd normally look at
everything memory-wise (in perfmon) just to try and get a handle on
what's going on.
But initially you're looking for an application or system process with a
very high fault rate. Could be any number of things from there, but
that's a start.
regards,
Rick
Ulrich Mack
Volante Systems
_____
From: thin-bounce@xxxxxxxxxxxxx on behalf of Pavlo Ignatusha
Sent: Fri 7/01/2005 11:22 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Page file max out
Hi Rick,
Thanks for your help. I'll remove Page Swaps from load evaluator.
Here is more info about my setup:
30-40 users per server daytime.
Published Applications:
MS Office 2000
Adobe Acrobar 6 (both Reader and full package)
Microsoft (Great Plains) Dynamics (SQL client)
Fundvision (SQL client)
FRx reporting tools for Dynamics
StaffRight (old DBase time-management DB)
Accuterm97 (terminal programm for telnet to old Patient inf system) New
Patient Inf System (SQL client custom app) Some Access DBs IE 6 SP1
Servers are W2K Server SP4 with hotfixes:
822428
823980
824946
147222
MF XP FR3 with hotfix:
XE103W2K082
I've been running taskmgr with Memory usage and VM size but not the Page
Faults. Is the process in question suppose to show high Page Faults
value?
I tried perfmon but there are so many processes that I would like to
narrow it before going perfmon way if possible.
Thanks,
Pavlo Ignatusha
Systems Network Coordinator
Pembroke General Hospital
Tel. (613) 732-3675 ext.6150
Fax. (613) 732-9986
www.pemgenhos.org
"All that matters is love and work" - Sigmund Freud.
########################################################################
####
#########
This e-mail, including all attachments, may be confidential or
privileged. Confidentiality or privilege is not waived or lost because
this e-mail has been sent to you in error. If you are not the intended
recipient any use, disclosure or copying of this e-mail is prohibited.
If you have received it in error please notify the sender immediately by
reply e-mail and destroy all copies of this e-mail and any attachments.
All liability for direct and indirect loss arising from this e-mail and
any attachments is hereby disclaimed to the extent permitted by law.
########################################################################
####
#########
#####################################################################################
This e-mail, including all attachments, may be confidential or privileged.
Confidentiality or privilege is not waived or lost because this e-mail has been
sent to you in error. If you are not the intended recipient any use,
disclosure or copying of this e-mail is prohibited. If you have received it in
error please notify the sender immediately by reply e-mail and destroy all
copies of this e-mail and any attachments. All liability for direct and
indirect loss arising from this e-mail and any attachments is hereby disclaimed
to the extent permitted by law.
#####################################################################################
********************************************************
This Weeks Sponsor SeamlessPlanet.com Domain Names
Register your .com domain name for as low as $7.85
One of the lowest prices on the web! Part of The Kenzig Group.
http://www.seamlessplanet.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Awesome SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
