Tcpsvcs.exe uses super high virtual memory solution

Symptom:

The company has a server for DHCP service + file sharing service, and the operating system is windows server 2003 enterprise version + SP2. Open the task manager and find a process that is tcpsvcs.exe, which takes up about 1.9G of virtual memory. Compared with another server that uses similar functions, the process uses less than 10M of virtual memory, which is huge and obviously abnormal.

Troubleshooting process and reasons:

Find information about tcpsvcs.exe on the Internet. The explanation is: "tcpsvcs.exe" is part of the Microsoft Windows network component. This system process is used by computers to use dedicated TCP/IP network services such as DHCP, simple TCP and print services. This program is very important for the normal operation of your system. ”

Further, open a command prompt window, run the tasklist /svc command, view the services associated with each process, and see the following results:

svchost.exe 1904 TapiSrv svchost.exe 1916 TermService tcpsvcs.exe 2032 DHCPServer mcshield.exe 2076 McShield svchost.exe 2240 W3SVC

Visible, on this machine, tcpsvcs.exe is only related to the DHCP service.

Trying to restart the DHCP service and discovering that virtual memory is now back to normal. Early the next morning, I checked again and found that the virtual memory reached 1.9G. Compared with another normal DHCP server, the related parameters set in the DHCP service are compared, and no abnormality is found.

Helping the Internet encyclopedia, inputting relevant content for searching, and not finding anything of value. Also visit Microsoft's Support and Help Center at http://support.microsoft.com and find a knowledge base article that is very close to what I have described http://support.microsoft.com/kb/939928/en -cn. According to the article: "This problem occurs because the Dnsapi.dll module does not properly manage some memory resources. ” Moreover, this problem does not occur if the DNS dynamic update setting in the DHCP configuration parameters is turned off. After testing, I found out that this is the case.

Solution:

Method 1: Disable DHCP dynamic update function

1. Click Start, click Run, type dhcpmgmt.msc, and then click OK. 2. In the console tree, right-click the node that corresponds to the DHCP server, and then click Properties. 3. On the DNS tab, click to clear the Enable DNS dynamic update based on the following settings check box, and then Click OK

4. Restart the DHCP server service. For example, type the following at a command prompt, and then press ENTER: Net stopDHCPServer & & Netstart DHCPServer

This method is suitable for situations that do not require DNS dynamic updates. However, if there is an internal DNS service and the DHCP service is required to update the mapping relationship between the DHCP client's machine name and IP address to the DNS service to achieve the need to access the internal computer through the machine name, this function cannot be disabled. .

Method 2: Update Patch

Microsoft has patched this issue, but since the SP3 service pack for Windows Server 2003 has not been released, it can only be downloaded separately. The download method is as follows:

1. Open the knowledge base article http://support.microsoft.com/kb/939928/zh-cn

2. Click on the top of the page to select After the hot fix patch & rdquo; will automatically jump to the corresponding download page.

3. Select the appropriate version of the patch and enter your email address and submit it. The corresponding download address will be sent to the email address you filled out. Follow the instructions and links to download the email.

This method is the fundamental solution. However, there are certain risks. If the version is wrong, or for some other reason, other problems may occur after installation. Therefore, before using this method, be sure to carefully confirm your question, whether it is consistent with the knowledge in the knowledge base article, confirm that the selected patch version is correct, confirm that your windows server 2003 is already playing SP1 or SP2, etc. .