Windows 2019 server NTP increases memory utilisation by acquiring page table

  • Thread starter Thread starter Akash Pandey (akash.pandey)
  • Start date Start date
A

Akash Pandey (akash.pandey)

Guest
We started with a brand new windows server 2019 datacenter edition and installed an infrastructure monitoring agent on it and strictly no other program. The machine had 8 GB of memory. As part of monitoring NTP offset from sync'd host we scheduled an exe. The problem started after 10-11 days, the memory utilisation had increased to significant level >80%. On analysis we found it was a gradual increase and using RAMMAP we saw every time the exe will run it will leave behind 24k of memory in PAGE Table with 0 B in Private. Moreover this issue is specific to windows server 2019 we tried following same steps on windows server 2012 machine and it worked perfectly fine with no memory creeping issues.


Memory usage per task manager:


1d67bee0-ddf8-4f86-9777-e7605cace510?upload=true.png

Process Tab: We tried to look for processes using task manager Resource monitor and even WPT xperf utility but could not find any other process consuming such a high amount of memory.

df30b6fe-e573-4072-b390-e737787da964?upload=true.png


RAMMAP: As it can be seen here the exe scheduled has died already but is still holding page table memory.


31c4fe46-8852-45d5-a71b-bea872faa04a?upload=true.png


Total RAMMAP use counts:

1e6d5b33-8e22-4c10-a91b-8e866fb095b6?upload=true.png


This has lead to an unanswerable gradual memory spike. Can it be related to some windows server 2019 specific drivers or system files which is used by NTP?

Continue reading...
 

Similar threads

D
Replies
0
Views
110
Dona Sarkar and Brandon LeBlanc
D
D
Replies
0
Views
123
Dona Sarkar and Brandon
D
D
Replies
0
Views
110
Dona Sarkar and Brandon
D
T
Replies
43
Views
235
newsgroups.jd@gmail.com
N
Back
Top