I'm trying to find a potential memory leak that is causing my Domain Controllers to stop responding after a week or so of uptime. I am getting event id 2019 that cooresponds with the issue. I have recently updated to Symantec ver. 10 (after which the issue started) and have applied the newest symevent driver but I have had the issue occur since then.
I am new to poolmon and the only tag I see increasing over time is NtFC. This is an example of what I see:
Tag: Type: Allocs Frees Diff Bytes Per Alloc
NtFC Nonp 1326746 (0) 974755 (0) 351991 47870776 (0)136
Mapped_Driver:
[ntfs.sys -
Does anyone know what the tag NtFC references? Any advice is appreciated and thanks in advance for any suggestions. Following is some more info.
Dell 2650
Windows 2003 Standard (Domain Contoller) Not SP1 yet.
Both servers have been running fine without issue for over 1 year. I have recently upgraded Veritas Backup Exec to version 10 but all other apps (besides symantec corp) and hardware have been stable for many months. The time the server stops responding is always between 4:00 and 4:15 am. There are no scheduled tasks or jobs occuring at that time that I can find. I do highly suspect SAV but Symantec's tech support tells me the symevent driver would solve the issue if it is the culprit.
I am new to poolmon and the only tag I see increasing over time is NtFC. This is an example of what I see:
Tag: Type: Allocs Frees Diff Bytes Per Alloc
NtFC Nonp 1326746 (0) 974755 (0) 351991 47870776 (0)136
Mapped_Driver:
[ntfs.sys -
Does anyone know what the tag NtFC references? Any advice is appreciated and thanks in advance for any suggestions. Following is some more info.
Dell 2650
Windows 2003 Standard (Domain Contoller) Not SP1 yet.
Both servers have been running fine without issue for over 1 year. I have recently upgraded Veritas Backup Exec to version 10 but all other apps (besides symantec corp) and hardware have been stable for many months. The time the server stops responding is always between 4:00 and 4:15 am. There are no scheduled tasks or jobs occuring at that time that I can find. I do highly suspect SAV but Symantec's tech support tells me the symevent driver would solve the issue if it is the culprit.
