LSASS.exe slowly increasing in memory and VM usage
From: Chiu (Chiu_at_discussions.microsoft.com)
Date: 11/15/04
- Next message: !SpamMe: "My regular user login suddenly doesn't see any printer on my win2k3 server"
- Previous message: Scott Harding - MS MVP: "Re: Cannot access company website"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 15 Nov 2004 10:16:03 -0800
Hello all,
Thanks for taking the time to read this.
I currently have a 2 node cluster with Windows 2000 Advance Server
installed. The primary role of this cluster is for running SQL Server 2000,
which handles quite a lot of queries each day (for example, over a million
insert queries for call records on a very busy evening).
The system as a whole ran fine for around 3 months, then recently we noticed
that the cluster had failed over to the secondary node. I lost what was in
the Event Viewer logs around the time of/prior the failover because the logs
filled up and removed the older entries.
Also, whilst the first node was in the 'failed' state, we kept getting error
messages such as 'Insufficient system resources to complete the requested
service'.
Looking in Task Manager, I noticed that the LSASS.exe process was using a
very high amount of memory (1,706MB memory and 1,834MB VM). I can't confirm
if this what caused the failover, but couldn't find anything else unusual.
I've spent some time trying to research issues with the LSASS.exe process
(such as the Sasser virus and when using Performance Monitor) but haven't
been able to find anything that's conclusive (not all of the symptoms seem to
match). The LSASS.exe memory values seem to be increasing by around 20MB per
day. I predict that the failover will re-occur in a few months.
The current setup is as follows:
Windows 2000 Advance Server
Build: 5.00.2195
Service Pack 4
Hotfixes:
Q831167
Q837009
KB329115
KB823182
KB823559
KB824105
KB825119
KB826232
KB828035
KB828741
KB828749
KB830051
KB835732
KB837001
KB839643
Q828026
Processor: Intel Dual Xeon processors
RAM: 4GB
I also see the following events quite frequently in the Event Viewer:
Event ID: 1704
Description: Security policy in the Group policy objects are applied
successfully.
Event ID: 17055
Description: 18264 : Database backed up: Database: BEDB, creation
date(time): 2004/08/03(00:43:55), pages dumped: 779, first LSN: 103:183:1,
last LSN: 103:185:1, number of dump devices: 1, device information: (FILE=1,
TYPE=DISK: {'C:\Program Files\VERITAS\Backup Exec\NT\Data\BEDB.bak'}).
Event ID: 701
Description: NTDS (352) Online defragmentation has completed a full pass on
database 'C:\WINNT\NTDS\ntds.dit'.
Does anyone have any suggestions on the cause of this issue?
Many thanks!
Chiu :)
- Next message: !SpamMe: "My regular user login suddenly doesn't see any printer on my win2k3 server"
- Previous message: Scott Harding - MS MVP: "Re: Cannot access company website"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
