Problem with alerts and ....

mp1 · Post by **mp1** » Thu Dec 20, 2007 4:15 am

Hi,

Since a few days we have some strange problems with the HM 6.82.
It seems, that there are some performance problems, although there are engough system resources available.

We get email, sms alerts, altough the RCC shows everything fine.
Another problem is, that we cann't connect via RCC remotely.
(Error. Out of memory while expanding memory stream)

An there are some other errors in the syslog - please see below.

[12/20/2007 07:54:50] Sys SNMP Trap Listener: UDP port #162 opened for listening
[12/20/2007 07:54:50] Sys Monitor started
[12/20/2007 07:54:50] Sys RCI enabled
[12/20/2007 08:49:49] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 08:51:59] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 08:55:59] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 08:57:39] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 08:59:05] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:00:29] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:01:34] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:02:39] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:04:02] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:07:19] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:10:51] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:12:14] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:16:09] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:17:43] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:22:54] Sys SMTP client error: Error reading StopBtn.Glyph.Data: System Error. Code: 8.
Not enough storage is available to process this command
[12/20/2007 09:22:54] Sys SMTP client error: Error reading StopBtn.Glyph.Data: System Error. Code: 8.
Not enough storage is available to process this command
[12/20/2007 09:22:55] Sys SMTP client error: Error reading StopBtn.Glyph.Data: System Error. Code: 8.
Not enough storage is available to process this command
[12/20/2007 09:22:55] Sys SMTP client error: Error reading StopBtn.Glyph.Data: System Error. Code: 8.
Not enough storage is available to process this command
[12/20/2007 09:22:56] Sys SMTP client error: Error reading StopBtn.Glyph.Data: System Error. Code: 8.
Not enough storage is available to process this command
[12/20/2007 09:22:56] Sys Error: cannot save log list.Unable to write to LogList.lst
[12/20/2007 09:23:00] Sys SMTP client error: Error reading StopBtn.Glyph.Data: System Error. Code: 8.
Not enough storage is available to process this command
[12/20/2007 09:23:01] Sys SMTP client error: Error reading StopBtn.Glyph.Data: System Error. Code: 8.
Not enough storage is available to process this command
[12/20/2007 09:23:01] Sys SMTP client error: Error reading StopBtn.Glyph.Data: System Error. Code: 8.

There is no antivirus software running.
I already disabled the odbc logging.
Maybe there are to many tests? 48 tests/sec

After a service restart, there are no erorrs for a few hours.

Do you have any idea, what this could be?

Thanks in advance

Martin

KS-Soft Europe · Post by **KS-Soft Europe** » Thu Dec 20, 2007 4:33 am

What Windows do you use? Service Pack?
Are you sure there is not antivirus installed on the machine, where HostMonitor is installed?
Have you done system upgrade, patches, etc recently?
Do you use "HTTP" test method?
Do you use "Traffic Monitor" test method?
Do you see any error messages in Event Viewer (Start > Settings > Control Panel > Administrative Tools > Event Viewer applet)?

Can you check resource usage for each process? You may use standard Windows Task Manager to check Handles, GDI and USER objects. What is the total resource usage on your system? How many Handles, GDI and USER objects are used by hostmon.exe process? What exact process does use the most of resources?

Regards,
Max

mp1 · Post by **mp1** » Thu Dec 20, 2007 4:56 am

Hi Max,

Thanks for the quick reply.

We use Windows Server 2003 Standard SP1 with the latest security patches;
I just saw, that on this server is no SP2 ... ooopps

We have 19 http tests, 33 URL requests and 37 traffic monitor tests.
In the applog there are many events with hostmon.exe and event 0: Not enough storage is available to process this command.

The resource usage looks fine.
On this server is a Symantec Enterprise Console installed - with Symantec Anitvirus for Servers, but the hostmonitor directories are excluded from scanning.

At the moment der hostmon.exe process use between 1 and ~ 25 % CPU usage. It's an ibm blade server with 2 x 3 GHz and 4 GB Ram.

Maybe I will install Hostmonitor 7 beta on a new server.
Are there maybe any know problems with version 7?

Best regards,

Martin

KS-Soft Europe · Post by **KS-Soft Europe** » Thu Dec 20, 2007 5:12 am

mp1 wrote:We have 19 http tests, 33 URL requests and 37 traffic monitor tests.

In some cases, HTTP test methods could lead to problem. I would suggest you to do the following: According to the Microsoft, you should change
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\SubSystems\Windows registry key.
There are present SharedSection parameter. By default, it is set as SharedSection=1024,3072,512. We recommend you to increase second and third values. You should set SharedSection=1024,6144,1024
Please read following articles to understand the meaning of changes:
http://support.microsoft.com/default.as ... -us;126962
http://support.microsoft.com/kb/184802/
Please note: foregoing articles contain information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs.

If the problem persists, We would suggest you to use "URL" test method instead of "HTTP".

We also have redesigned "Traffic Monitor" test method. It does not use Microsoft’s mgmtapi.dll anymore, this helps to avoid various problem caused by bugs in some versions of this DLL. But this version has not been available for download yet. The new version will be released in a day or two.

mp1 wrote:On this server is a Symantec Enterprise Console installed - with Symantec Anitvirus for Servers, but the hostmonitor directories are excluded from scanning.

Actually, most of antiviruses, like Symantec, McAfee, TrendMicro often lead to problems, especially related to SMTP protocol, it even can crash HostMonitor. At the same time antivirus scanners work fine (scanner - module that checks files and processes from time to time, scanners does not modify system DLLs and registry, does not intercept TCP traffic and so on). If you are unable to disable antivirus, we recommend at least to disable real-time protection module or add hostmon.exe to exclusions list. In fact, we recommend to install HostMonitor onto clean system.

mp1 wrote:At the moment der hostmon.exe process use between 1 and ~ 25 % CPU usage. It's an ibm blade server with 2 x 3 GHz and 4 GB Ram.

What about Handles usage? Memory?

mp1 wrote:Maybe I will install Hostmonitor 7 beta on a new server.

I would suggest you to wait several days until new version will be released.

Regards,
Max

mp1 · Post by **mp1** » Thu Dec 20, 2007 6:15 am

Hi,

Thanks for all the informations.

Although I already had an exclusion list, I will now disable autoprotect.

What about Handles usage? Memory?

At the moment HM use 53 mb memory, 1.200 handles and 210 GDI objects.

The eventlog entries confuse me.

"Not enogh storage is available to process this command"

I just saw: Maybe it's a problem with the harddisk, the disk is totally fragmented.

KS-Soft · Post by **KS-Soft** » Thu Dec 20, 2007 11:14 am

You may try version 7.06. Redesigned Traffic Monitor test method does not use Microsoft's mgmtapi.dll anymore, this helps to avoid various problem caused by bugs in some versions of this DLL.
If this will not help, then we will look into other direction...

Regards
Alex

mp1 · Post by **mp1** » Fri Dec 21, 2007 1:50 am

You may try version 7.06. Redesigned Traffic Monitor test method does not use Microsoft's mgmtapi.dll anymore, this helps to avoid various problem caused by bugs in some versions of this DLL.
If this will not help, then we will look into other direction...

I have done a defrag of the disk overnight and disabled some traffic monitor tests, now it seems to work fine.
Although I will update to version 7 after christmas.

Wish you all nice holidays.

Best regards,

Martin

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Dec 21, 2007 2:50 am

mp1 wrote:Although I will update to version 7 after christmas.

Please, let us know how it will work on your system.

mp1 wrote:Wish you all nice holidays.

Thank you.

We wish you a Merry Christmas and a Happy New Year!

Regards,
Max