Cannot identify tag that is depleting non-paged pool

E

Evan

I have a Windows 2000 Server running terminal services that is hanging 1-2
time each day. There is usually an error in the System log a few minutes
before the hang: Srv, 2019, Error, The server was unable to allocate from
the
system nonpaged pool because the pool was empty

I have used the tool poolmon.exe to view the non-paged pool and see that
something with a tag of "Even" has grown as large as 178MB while the next
largest item is only 5MB. I have to assume this "Even" is the problem, but
I cannot find any way to identify what driver it belongs to. Task Manager
does report that the non-paged pool is pushing 200MB, while on comparable
terminal servers it is around 15MB.

There is supposed to be a file called pooltag.txt that lists tags for
Microsoft components at least, but this is not installed with poolmon nor is
it part of the current DDK although I have found several Q articles
indicating that pooltag can be found in both these places. There is a
command "poolmon /c" which is supposed to anaylyze your system and create
its own localtag.txt file, I just get an error that some DDLs are missing,
even though I installed .net sdk which is supposed to have them--I suspect
that this command only works on XP and 2003.

Some articles I have read indicate to use a debugger and set a break point
to find who owns "Even", but I am not a programmer and frankly neither know
how to do this nor know if it advisable to set this up on a production
server--I am willing to learn if this is what I have to do.

Any thoughts at all, or if I need to take this to a programming group please
let me knwo whare it shoudl go.

Thanks for any help at all!

Evan McNally
"Offcicial whipping boy of a bad server"
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top