Event 2019: The server was unable to allocate from the system nonpaged pool because the pool was empty

-

hi guys,

i've been trying solve issue customer long time now, problem it's intermittent may go month or more before issues.  server becomes more or less unresponsive (can still rdp it, won't provide user services dns/ad etc.) , starts logging 2019 event below -

event type:	error  event source:	srv  event category:	none  event id:	2019  date:		24/09/2010  time:		10:44:03  user:		n/a  computer:	ntserver01  description:  server unable allocate system nonpaged pool because pool empty.    more information, see , support center @ http://go.microsoft.com/fwlink/events.asp.

server windows sbs 2003 on hp dl380 updates applied.  sophos antivirus, not else installed.  may important intalled seperate server exchange 2007 exchange org, migrated mailboxes etc. disabled exchange services on sbs server.

issue happened again morning logged on , saw top "np pool" consumer dns.exe @ 700k, i restarted dns server service , server went running normally.  note once dns service restarted consuming 5000k of np pool.  doubt dns.exe problem here, suspect restarting freed enough np pool things start running again.  server still in state, running fine users on verge of going down again.

from task manager, dns.exe consuming 5000k of np pool, next lsass.exe @ 182k rest less 100k.  note inetinfo.exe has 510000 handles, seems excessive?  next biggest lsass.exe 19000 handles.  see inetinfo.exe has 4000k of paged pool while the next dns.exe 800k various other services 300k or less.

below poolmon server currently.  note after restarted dns.exe server is functioning @ point.

tag  type     allocs            frees            diff   bytes       per alloc

thre nonp    9500893 (   3)   9228029 (   5)   272864 170267136 ( -1248)    624
time nonp     498966 (   0)    244249 (   0)   254717 46867976 (     0)    184
irp  nonp   10454050 ( 173)  10440924 (  84)    13126 5819448 ( 59096)    443
mdl  nonp   13346386 (   8)  13314772 (  21)    31614 4050840 ( -1664)    128
lswi nonp          1 (   0)         0 (   0)        1 2576384 (     0) 2576384
file nonp  243870397 (1034) 243856192 ( 915)    14205 2175432 ( 18088)    153
vosm nonp      28535 (   0)     28501 (   0)       34 2064672 (     0)  60725
mmcm nonp         29 (   0)         3 (   0)       26 1712672 (     0)  65872
tcpt nonp    6120280 (   0)   6120246 (   0)       34 1458768 (     0)  42904
tpla nonp        256 (   0)         0 (   0)      256 1048576 (     0)   4096
tcpa nonp    7874940 (   4)   7872333 (   5)     2607  959376 (  -368)    368
afde nonp   52108726 (   6)  52105751 (   7)     2975  833000 (  -280)    280
pool nonp          6 (   0)         3 (   0)        3  610304 (     0) 203434
devi nonp      96553 (   0)     96097 (   0)      456  558352 (     0)   1224
ulco nonp       3392 (   0)      2559 (   0)      833  506464 (     0)    608
ccsc nonp   11365692 (  15)  11364308 (  15)     1384  442880 (     0)    320
nonp  167545334 (  53) 167536359 (  99)     8975  435616 ( -2624)     48
lswr nonp        128 (   0)         0 (   0)      128  416768 (     0)   3256
lsrf nonp    2140496 ( 121)   2138919 (   0)     1577  391096 ( 30008)    248
ntfr nonp     988808 (   0)    983752 (   0)     5056  324552 (     0)     64
vad  nonp   75198269 (  21)  75191670 (  69)     6599  316752 ( -2304)     48
mm   nonp      20964 (   0)     20945 (   0)       19  292736 (     0)  15407

 

 

hi guys,

i've been trying solve issue customer long time now, problem it's intermittent may go month or more before issues.  server becomes more or less unresponsive (can still rdp it, won't provide user services dns/ad etc.) , starts logging 2019 event below -

[cut]

take @ possible solutions

http://www.eventid.net/display.asp?eventid=2019&eventno=661&source=srv&phase=1

hth

edoardo benussi - microsoft® mvp
management infrastructure - systems administration
https://mvp.support.microsoft.com/profile/benussi
windows server italian forum moderator
edo[at]mvps[dot]org


Windows Server  >  Windows Server General Forum



Comments

Post a Comment

Popular posts from this blog

some help on Event 540

-
does event 540 me distinguish between user , administrator access?    this event generated ypon successfull logon, logon exactly? successful logon on system?   is there other way log administrator access system using event viewer?   thank valuable response   georges hi,   as far know, cannot distinguish between user , administrator access event 540. more information, please refer to:   event id: 540 http://www.microsoft.com/technet/support/ee/transform.aspx?prodname=windows+operating+system&prodver=5.0&evtid=540&evtsrc=security&lcid=1033   events 528 , 540 http://blogs.msdn.com/b/ericfitz/archive/2004/12/09/279282.aspx   regards, bruce this posting provided "as is" no warranties, , confers no rights. please remember click "mark answer" on post helps you, , click "unmark answer" if marked post not answer question. can beneficial other community members reading thread.
Read more

WMI Repository 4GB limit - Win 2003 Ent Question

-
Image
hi there, i've question size limit on wmi repository (being 4gb). if isn't correct place post this, apologies , can let me know wheere post this? i've come across few servers running citrix have reached limit on wmi repository size , need install ibm director agent hw monitoring. during install getting 'out of disk space' errors entered in mofcomp.log: "(mon apr 02 04:10:36 2012.172843) : error occurred while processing item 4: (mon apr 02 04:10:36 2012.172843) : error number: 0x8004103b, facility: wmi description: out of disk space" when error number http://msdn.microsoft.com/en-us/library/windows/desktop/aa394559%28v=vs.85%29.aspx i see this: wbem_e_out_of_disk_space 2147749947 (0x8004103b) disk out of space or 4 gb limit on wmi repository (cim repository) size reached. windows xp , windows 2000/nt:   disk out of space. i'm wondering if there reason why limit set 4gb or can increase needs be? can't seem find reas
Read more

Event ID 1302 (error 1307) DFS replication service encountered an error while writing to the debug log file

-
Image
hello. we @ step 0 of migration frs dfsr sysvol replication on windows 2008r2 dc. every time run powershell dfsrmig / getmigrationstate says: "unable create dfsr migration log file. error 1307. all domain controllers have migrated global state 'start'. migration has reached consistent state on domain controllers. succeeded." it creates event id 1302 in "dfs replication" event log, explaining error 1307 means: "this security id may not assigned ownder of object ". i already checked space limits, quotas, permissions on c:\windows\debug according microsoft support article unable fix it. although, there new entries added dfsr00095.txt log file despite error. dfsrxxxx file has not been archived .gz format, and, beleive, contains dfsr diagnostics , events. here of latest entries: 20150908 08:47:27.867 11616 sysm  3354 migration::sysvolmigration::getsysvolreadyflag [mig] sysvol ready 20150908 08:47:27.867 11616 sysm   456 migrati
Read more