High bandwidth utilization / Gen.variant.kazy virus issue

Hi All We are a business critical organization(bank).huge traffic is originating from main policy manager server.we analyzed the traffic and it's originating from f secure update port where all the policy manger proxies connecting to.traffic size is about 2gb.its been happening since friday.all virus databases are up to date and virus definition updates are very small.other issue is, Gen.variant.kazy virus is detected by f-secure but it cannot be disinfected or deleted.those are two critical issues that we are having at the moment.your early feedback is much appreciated Thank you

Hello Asanka,
Could you please open a support ticket with fsdiag so that we can take a look at your problem?
Please review the following articles concerning your infection:
https://www.f-secure.com/v-descs/other_w32_generic.shtml
https://www.f-secure.com/v-descs/rogue_w32_systemtool.shtml

Similar Messages

High Bandwidth Utilization

Hi all,
i am a newbie here. Currently i am working as net admin which is i need to monitoring and manage my workplace network( education center )
I got a few question about network traffic flow. Here is the issued.
I got high bandwidth utilization so high after office hours which is only on night. as we know, after office hours there is no person at the office but the traffic flow on bandwidth utilization is high.
what are the possibilities of this issued? If there any possibilities that cause the event, I'd like to know everything that may cause it.
Thanks

What switches do you have?
What router are you using?
What servers do you have?
What time does the high utilization start and what time does it end?
Are you running backup across the WAN links?

Capwap high bandwidth utilization

Hello,
I would like to know if this traffic is correct... (wan link - remote APs)
minute:
15 minutes:
I think that something is wrong... there is a high bandwidth utilization.
All APs are configured with h-reap and local switching.
All traffic wan link - 15 minutes:
thanks.

Maybe this answer my question?
Ongoing Exchanges
Heartbeat
The LWAPP architecture provides for a heartbeat timer that is
      accomplished by a series of Echo Requests and Echo
      Responses. An AP periodically sends Echo Requests in order to
      determine the state of the connection between the AP and the WLC. In response,
      the WLC sends the Echo Response in order to acknowledge the receipt of the Echo
      Request. The AP, then, resets the heartbeat timer to the
      EchoInterval. The LWAPP protocol specification draft contains
      a detailed description of these timers. The system heartbeat, coupled with
      fallback mechanism, is 4 packets every 30 seconds and is comprised of these
      packets:
LWAPP ECHO_REQUEST from AP (78 bytes)
LWAPP Echo-Response to AP (64 bytes)
LWAPP PRIMARY_DISCOVERY_REQ from AP (93 bytes)
LWAPP Primary Discovery-Response to AP (97 bytes)
This exchange generates 33 bytes of traffic every 30 seconds.
RRM Measurements
There are two ongoing RRM exchanges. The first one, at every 60-second       interval, is the load and signal measurement and consists of 4 packets. This       exchange always adds up to 396 bytes:
LWAPP RRM_DATA_REQ from AP (107 bytes)
LWAPP Airewave-Director-Data Response to AP (64 bytes)
LWAPP RRM_DATA_REQ from AP (161 bytes)
LWAPP Airewave-Director-Data Response to AP (64 bytes)
The second sequence of packets is the noise measurement that includes a       statistics information request and response sequence. It is done every 180       seconds. This short exchange of packets averages approximately 2,660 bytes and       typically lasts 0.01 seconds. It consists of these packets:
LWAPP RRM_DATA_REQ from AP
LWAPP Airewave-Director-Data Response to AP
LWAPP RRM_DATA_REQ from AP
LWAPP Airewave-Director-Data Response to AP
LWAPP RRM_DATA_REQ from AP
LWAPP Airewave-Director-Data Response to AP
LWAPP RRM_DATA_REQ from AP
LWAPP Airewave-Director-Data Response to AP
LWAPP STATISTICS_INFO from AP
LWAPP Statistics-Info Response to AP
LWAPP RRM_DATA_REQ from AP
LWAPP Airewave-Director-Data Response to AP
LWAPP RRM_DATA_REQ from AP
LWAPP Airewave-Director-Data Response to AP
LWAPP RRM_DATA_REQ from AP 00:14:1b:59:41:80
LWAPP Airewave-Director-Data Response to AP
LWAPP RRM_DATA_REQ from AP
LWAPP Airewave-Director-Data Response to AP
LWAPP STATISTICS_INFO from AP
LWAPP Statistics-Info Response to AP

Hi, We are running domino application in windows server 2008r2 machine, we are facing High RAM utilization issue, but there is no such process are running.

Hi, We are running domino application in windows server 2008r2 standard virtual machine, we are facing High RAM utilization issue, but there is no such process are running. Machine is running in ESXI host, most of the time it shows high RAM utilization.
We upgraded the ram from 6 to 8 GB, but still facing the issue,
Where as other VMs working fine.
Need a help to find out the issue.

Hi Sathish sampath,
You can use Resource monitor and Task Manager->Performance to monitor the RAM memory utilization, I also recommend you to download the
RAMMap to get more detailed memory information.
For more detailed information to troubleshoot this issue, please also refer to this thread:
memory performance problem. Please help.
You can also choose to post your monitor picture to help us to troubleshoot.
I holp this helps.

High CPU Utilization on Lync Mediation Servers -

All,
We are experiencing an issue for last couple of weeks where we are seeing very high CPU utilization on our Lync Mediation Servers (connected
directly to SIP gateway). It is resulting in a high Jitter value and so the poor call quality.
The CPU utilization is normal on mediation boxes on our other Lync hubs regardless of the number of inbound/outbound calls
but on new Lync hub, as soon as the call volume (inbound/outbound) reaches over ~10-15 calls, CPU peaks nearly 80%-90% utilization. To reduce the call volume, we have routed our outbound calls to different hub.
To resolve this we have already taken following troubleshooting actions:
Increase CPU Cores from 4 to 8 on original Mediation VM (The mediation boxes in other hubs have 4 CPU Cores and there is no issue)
Copied known good Mediation VM and replaced a mediation box on new Lync hub
Created new VM and deployed into Mediation Pool
Monitoring of HVH’s showed no resource allocation issue
No indication on Lync Logs or Monitoring reports as to the root cause of the issue
Raised this with our SIP suppliers to compare SIP configuration with all our SIPs and they came back with no differences.
Unfortunately, after all of the above actions, we have still seeing a high CPU utilization.
Can anyone suggest something which helps us to resolve this issue?
Any assistance appreciated
Cheers,
Hemat

Anti-virus exclusion list/exceptions properly configured on the affected Lync Mediation Servers? Using dynamic instead of fixed-size virtual disks? Is the host hypervisor on the official supported list (see
Windows Server Virtualization Validation Program)?
Also do check out the recently updated guide:
Planning a Lync Server 2013 Deployment on Virtual Servers
Thanks / rgds,
TechNet/MSDN Forum Moderator - http://www.leedesmond.com

Bandwidth Utilization Avg or Max for capacity Planning best practice

Hello All - This is a conceptual or Non-Cisco product question. Hope you can help me to get this best industry practice
I am doing a Capacity planning for the WAN Link Bandwidth. To study the last month bandwidth utilization in the MRTG graph, i am seeing two values
Average
Maximum.
To measure how much bandwidth my remote location is using which value i have to use. Average or Max?
Average is always low eg. 20% to 30%
Maximum is continuous 100% for 3 hour in 3 different intervals in a day and become 60% in rest of the day
What is the best practice followed in the networking industry to derive the upgrade size of the bandwidth by using the Utilization graph
regards,
SAIRAM

Hello.
It makes no sense to use average during whole day (or a month), as you do the capacity management to avoid business impact due to link utilization; and average does not help you to catch is the end-users experience any performance issues.
Typically your capacity management algorithm/thresholds are dependent on traffic patterns. As theses are really different cases if you run SAP+VoIP vs. youtube+Outlook. If you have any business critical traffic, you need to deploy QoS (unless you are allowed to increase link bandwidth infinitely).
So, I would recommend to use 95-percentile of maximum values on 5-15 minutes interval (your algorithm/thresholds will be really sensitive to pooling interval, so choose it carefully). After to collect baseline (for a month or so) - go and ask users about their experience and try to correlate poor experience with traffic bursts. This would help you to define thresholds for link upgrade triggers.
PS: proactive capacity management includes link planning for new sites and their impact on existing links (in HQ and other spoke).
PS2: also I would recommend to separately track utilization during business hours (business traffic) and non-business (service or backup traffic).

Why is there no updates to the firefox throttle add-ons ? Is there an alternative? throttle is Bandwidth utilization throttling and monitoring extension for Firefox

Why is there no updates to the firefox throttle add-ons ? Is there an alternative? throttle is Bandwidth utilization throttling and monitoring extension for Firefox

Well, it's probably one of two things: either the awesome dude(tte) who developed this awesome extension was tired of updating or the changes in FFox software architecture carried out between version 3.x and 4+ created challenges that were too difficult for him to surmount or a combination of both. Honestly, I love Mozilla but I think they dropped the ball on the throttle issue. It's such an obvious and necessary function and it's so easy to implement. They should have included it a long time ago as in built feature. And, if you are browsing and looking at this post and you agree. Add a suggestion in mozilla.org. The more of us asking for this function, the better.
Meanwhile, I have the following solution for you:
Solution 0.6.9.23.11 (DIY Version of my Solution ):
Setting Up a Separate Portable Firefox 3.6.x that runs independently of and simultaneously to your latest version of Firefox
Get FireFox Portable 3.6.24:
http://portableapps.com/apps/internet/firefox_portable/localization#legacy36
It's a portable app, meaning that it's got all it's profiles and preference and application files in the same directory. It won't compete with your current installation of Firefox, has it's own separate extension folder etc...
Get Firefox Throttle 1.1.6
http://firefox-throttle.en.softonic.com/ (I couldn't find it in the official mozilla site)
It will be flagged as incompatible with even that old version of firefox (but it isn't). You just need to turn off compatibility checking. You can do that with this extension:
https://addons.mozilla.org/en-US/firefox/addon/add-on-compatibility-reporter/?src=search
If you have Bookmarks you want to port to the portable (bad pun intend), backup them up to bookmarks.json file on your desktop and import them to the portable version. You can export/import more stuff using FEBE addon but that's a whole world of headaches if you don't your doing.
Many of your extensions favourites extensions will no longer work on FFox 3.6.x but if, in that same addon's page, you look around until you find a link to previous versions of the addon, you will notice that the compatibility info is right below the version numbers. Just download and install the latest version that is compatible with you 3.6.x....
Voila mon ami! Your FFox 3.6 portable has just become your own private Download Mule whom you can throttle to your hearts content (ever throttle a real Mule??? I wouldn't try it, personally...) Do your regular browsing in another (unthrottled) browser and do your big downloads in the Mule...
If you want to keep using your brand spanking new Firefox for other types of browsing while using this portable Mule edition for the downloads, just add -p -no-remote to the shortcut leading to your Firefox Portable Mule edition.
For example, my taskbar shortcut to my Firefox Portable is:
""C:\Program Files (x86)\FirefoxPortableLegacy36\FirefoxPortable.exe"
I just changed it to:
"C:\Program Files (x86)\FirefoxPortableLegacy36\FirefoxPortable.exe" -p -no-remote
This will make it occupy it's own independent instance and I can use the both my Firefox Nightly and the Firefox Portable editions at the same time (each one, using a different profile ie. extensions, cookies, password, cache etc).
If you're on Linux, you can just run this on Wine and set the Windows Version to Windows 2000 in the Wine config,
If you want to get rid of the Portable Apps splash screen, click here:
http://www.ghacks.net/2011/06/06/getting-rid-of-portableapps-splash-screens/
Solution 0.6.9.23.11 (Non-DIY Version of my Solution):
Download my preconfigured but SWAGGED-THE-HECK-UP PortableFirefox 3.6
Having realized that some of you may find the above to be daunting. I took my own customize firefox portable, took out all my data and compressed the folder (it's portable, so it'll run as soon as you unzip it).
Here is a screenshot:
http://www.mediafire.com/?o95nkwo8y6q535j
Here is the download link:
http://www.mediafire.com/?xdw87ivf3184u2s
Don't forget to modify your Start/Taskbar shortcuts:
"C:\wherever you decide to put it\FirefoxPortableLegacy36-Swagged-UP!\FirefoxPortable.exe"
I just changed it to:
"C:\wherever you decide to put it\FirefoxPortableLegacy36-Swagged-UP!\FirefoxPortable.exe" -p -no-remote

LMS 4.2.3 Server high CPU Utilization

Hi All,
We are observing high CPU utilization on the lms server. tomcat is the process eating more than 1GB of the memory i checked from the task manager.
Server details:
device license : 100
windows server 2k8 R2, with 8gb physical memory.
anybody suggest what might be causing the issue.?? because of this performance reports were affected.
Regards,
Channa

Hi Channa,
log into dbreader using the following::
http://servername : 1741/dbreader/dbreader.html
or
https:// servername : 443/dbreader/dbreader.html
user Id is DBA
Database Name is upm
password :: user defined (by default password is c2ky2k)
1. Here is the query to get the pollerwise managed MIBObjects:
"select count (*), PollerName from Poller_Details_Table a,Poller_Definition_Table b where a.PollerId = b.PollerId and b.Poller_State NOT IN (1) Group by b.PollerName;"
2. Here is the query to get the total mibobject count for the active pollers
“select count (*) from Poller_Details_Table a,Poller_Definition_Table b where a.PollerId =
b.PollerId and b.Poller_State NOT IN (1);”
Hope it will help
Thanks-
Afroz
***Ratings Encourages Contributors ***

Desktop Window Manager high CPU utilization

I have several Windows 2012 servers that are showing high CPU utilization (70% or higher) coming from the Desktop Window Manager. I do not have the Desktop Experience feature installed on these machines. The interesting thing is that the process
for dwm.exe does not show up as a service that I can stop or restart. I've read through the various posts about re-registering dmw.exe so that the service shows up again, but nothing has worked. Since these are application and file servers with
no need for regular desktop use, I don't really need any fancy desktop graphics or performance. I have the Advanced Performance Options set to 'Background services'. Can anyone tell me how to stop dwm.exe or at least reduce it's CPU footprint?
Thanks,
Joe

Hi Joe,
Based on my research, On Windows 8 and Windows Server 2012, DWM is used at all times and cannot be disabled.
For more detailed information, please refer to this article:
Desktop Window Manager is always on:
To troubleshoot the high usage of CPU, I would like to recommend to follow this article to collect and analyse the relevant log files and dump files:
Troubleshooting High CPU performance issues - Part 1
If you want to analyse the dump file, I also recommend you can open case and contact Microsoft support.
I hope this helps.

Top Wireless Client Bandwidth Utilization on WCS?

Hi, there.
Can I get the top wireless client bandwidth utilization info / report from WCS? I would like to know how high they can reach, and how many are those 'power users', so far I only find "Busiest Clients" but not quite certain sure about the meanings of the "threshold" and "utilization' besides, the minimum interval is 1 hour, which seems to long for me, I would like to have some data like MRTG which is in 5 minutes range, thanks.
Leo

Welcome to the discussions!
There is no "relay" function in the "extend a wireless network" setup. Each AX that is set to extend communicates directly to the Time Capsule and not to another device that might be between it and the Time Capsule.
If you need the "relay" function, your only real option to setup the WDS configuration to see if that might work better in your circumstance.
When you say that you have one AX setup as a client only, this implies that it is set to "join a wireless network". In the "join" setting, the AX only receives a wireless signal, it does not "extend" or rebroadcast the wireless signal. You might want to try setting this device to "extend" to see if that might help the network performance.

3750 Bandwidth Utilization

Hello,
Is there a way to look at the bandwidth utilization on a per port basis on the 3750 switches? Trying to track down a possible issue remote;y and nothing like WireShark is onsite.
Thanks in advance.
All replies rated.

You can enter "show interface summary" to see the tx rate and rx rate for each port. Very easy to read format.
To use wireshark remotely, you could always use ERSPAN, which would send the monitor session to a remote switch. If I'm not sure of the commands I'm entering on a remote switch, I normally do a "reload in 15". In case I lose connectivity, it will reload in x number of minutes to restore service. Save you a commute to the remote site to restore service. Just don't forget to cancel the reload when you are finished.
https://supportforums.cisco.com/document/139236/understanding-spanrspanand-erspan#comment-10119266
If you have network monitoring software, it should show the top talker along with the ip address.
show arp | i x.x.xx
this will return the mac
then enter show mac address-table address xxxx.xxxx.xxxx
this will show the interface that learned the mac.
show cdp neigh to verify the port isn't connected to another switch.
Keep entering sh mac and sh cdp until you locate the port with the mac of the top talker.
You can shut the port and see if the trouble goes away.
Just be careful when shutting ports. Its easy to shut the wrong port and lose connectivity.

Windows Server 2012 High Memory Utilization(Three Hyper-V Instance Configure in this Server For Lync)

Hello There,
Issue: High Memory Utilization in Below Scenario. Pl. See the below configuration of Win 12 Server
Pl. see for committed memory bytes . m little bit confused that about committed memory
OS: Windows Server 2012
Memory: Total 24 GB Free:1.3 GB Committed:27.6 GB
App Configure: Three Hyper V Instances Configure For Lync Server 2013
Pls provide me solution on this issue

Virtual memory system. Committed memory is the physical memory for which space has been reserved in the disk paging file. So, you are paging, which is quite common in virtual memory systems.
On a completely different topic. Lync is an application that works best on real cores. Most systems are configured by default to use hyperthreading. Hyperthreading increases the logical processor count on a system and logical processors
are treated equally. Since a hyperthread 'core' (logical processor) performs at a small fraction of a real core (logical processor), if you are running VMs that work best with real cores, it is best to change your BIOS on the Hyper-V host to disable
hyperthreading, sometimes called simultaneous multithreading (SMT).
. : | : . : | : . tim

SCCM 2012 Agent and high CPU utilization.

We have numerous Windows workstations and servers running with very high CPU utilization. Services are slow to start and login can take an hour. The service running with high CPU is svchost.exe, we determined that it is Windows Management Instrumentation
that is causing high CPU in svchost.exe.
If we stop or uninstall the SCCM 2012 Agent, everything calms down on the computer.
Any ideas as to way this would be?

Same issue seen on a clients and KB2617858 resolves it. I am deploying using the App model no problem with x86 and x64 hotfixes with requisite OS requirements. Is there a way to configure to only apply to those that it applies to...if that makes sense. I
ask because my B&C x64 W7Sp1 image does not require it (I have not included it) whereas other non-B&C do - what's the condition or applicability (or non-applicability) if not as listed on the KB..! If I run it one W7 machine it says it doesn't apply
and isn't already, whereas another it installs..!
http://support.microsoft.com/kb/2705357:
To apply this hotfix, you must be running one of the following operating systems:
Windows 7
Windows 7 Service Pack 1 (SP1)
Windows Server 2008 R2
Windows Server 2008 R2 Service Pack 1 (SP1)
..obviously, if a client has the issue it applies :)
Donald Rumsfeld's 'known unknowns' comes to mind here. Sorry.

What is the cause of high processor utilization?

We have Netware 6.5 SP8. About a month ago we started getting high processor utilization (in Monitor it goes up to around 50% - 55%) on the server every day around 11:00AM, and it stays high for about an hour, and then after an hour or so, it will drop back down to normal. During the high utilization time, the server really slows down to a crawl causing major user problems. I have no idea what is causing this; as far as I know nothing has changed on the server. I checked the backup system and nothing is running. I also checked the cron file and no cron jobs are running. In Monitor checking the Kernel, Busies Threads doesn't give much information either. It always shows something like "Server 34" or "Server 17". Is there any way to find out what is causing the high utilization?
Thanks....

In addition to David's comments, love the minions reference, I'd only add that in NoRM you can see the stack trace of a process. NoRM --> Diagnose Server --> Profile / Debug --> Server XXX ( from the list, you can see the %utilization ) This also works for any process you see running, but since your issue is in server work to do's we'll look at them.
After a few times you can catch the WTO in the act of actually processing work. The output will include something like the following... including a work description and the source of the work. This is NOT always present, as most of the time the worker thread is idle and you will see a very abbreviated stack dump and not much else. Keep trying and you will get a more detailed looking output referencing a type of work as well as potentially the module and stack dump of what is happening.
-- Bob
Example:
Code:
Thread Name Server 11
Thread ID 8AA3A5A0
Parent NLM SERVER.NLM
Processor Assignment 0
Total Execution Time days: 20, hours: 20, minutes: 46, seconds: 4, milliseconds: 304
MP Status In classic NetWare
Stack Bottom 896C2040
Current Stack Pointer 896C9A18
Stack Top 896C9FC0
Stack Size 32,640 Bytes
Suspend Reason Blocked on Semaphore
Work Description _SkulkerWorkerProc (Outbound Replication) <-- Ah Ha!
Semaphore Information
Semaphore Name NOVDB
Semaphore ID 8FCA90A0
Semaphore Value -1
Threads Waiting on Semaphore 1
Current Owner Server 11
Active Work To Do Information <-- All of this is useful to know.
Work To Do ID 8FF4BC14
Work Location 90C86CE2 (DS.NLM|BackgroundEvent+0)
Work To Do Description DS AES Process
Work Owner DS.NLM
Stack:
896C9A18: 00226431 (SERVER.NLM|SchedSwitch+2A9)
896C9A1C: --896C9A50 ?
896C9A20: --00000246 (LOADER.NLM|KernelAddressSpace+246)
896C9A24: --8FCA90A0 ?
896C9A28: --1C23E388 ?
896C9A2C: 002168A4 (SERVER.NLM|kSemaphoreWait+E0)
896C9A30: --896C9A50 ?
896C9A34: --ADB0BB24 ?
896C9A38: --ABA05828 ?
896C9A3C: --8FF3A408 ?
896C9A40: 90E67991 (DS.NLM|waitToComplete$F_IOBuffer+14)
896C9A44: --8FCA90A0 ?
896C9A48: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9A4C: --8FF3A408 ?
896C9A50: --896C9A60 ?
896C9A54: 90E6751B (DS.NLM|waitForAllPendingIO$F_IOBufferMgr+14)
896C9A58: --ABA05828 ?
896C9A5C: --8A9AD088 (NSSWIN.NLM|DisplayHelp+9B8)
896C9A60: --896C9A94 ?
896C9A64: 90D90D47 (DS.NLM|completeTransWrites$F_Rfl+2D0)
896C9A68: --8FF3A408 ?
896C9A6C: --FE2D4900 ?
896C9A70: --896C9A94 ?
896C9A74: --896C9AAC ?
896C9A78: --00000001 (LOADER.NLM|KernelAddressSpace+1)
896C9A7C: --00000001 (LOADER.NLM|KernelAddressSpace+1)
896C9A80: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9A84: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9A88: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9A8C: --ADB0BB24 ?
896C9A90: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9A94: --896C9B0C ?
896C9A98: 90D85794 (DS.NLM|flmCommitDbTrans+4FB)
896C9A9C: --8A9AD088 (NSSWIN.NLM|DisplayHelp+9B8)
896C9AA0: --ADB0BB24 ?
896C9AA4: --00000001 (LOADER.NLM|KernelAddressSpace+1)
896C9AA8: --00000001 (LOADER.NLM|KernelAddressSpace+1)
896C9AAC: --8AA3A5A0 ?
896C9AB0: --ADB0BB24 ?
896C9AB4: --3C8D5048 ?
896C9AB8: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9ABC: 00214492 (SERVER.NLM|kMutexUnlock+10A)
896C9AC0: --8AA3A5A0 ?
896C9AC4: --00000001 (LOADER.NLM|KernelAddressSpace+1)
896C9AC8: --8ACF71EC (DHOST.NLM|?_V__YAXPAX_Z+2BDC)
896C9ACC: --896C9B04 ?
896C9AD0: --ADB0BB24 ?
896C9AD4: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9AD8: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9ADC: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9AE0: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9AE4: --3C8D5048 ?
896C9AE8: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9AEC: --00000001 (LOADER.NLM|KernelAddressSpace+1)
896C9AF0: --8ACF7288 (DHOST.NLM|?_V__YAXPAX_Z+2C78)
896C9AF4: --00000001 (LOADER.NLM|KernelAddressSpace+1)
896C9AF8: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9AFC: --8ACF7064 (DHOST.NLM|?_V__YAXPAX_Z+2A54)
896C9B00: --896C9C3C ?
896C9B04: --00000000 (LOADER.NLM|KernelAddressSpace+0)
896C9B08: --ADB0BB24 ?
896C9B0C: --896C9C28 ?
896C9B10: 90D859E9 (DS.NLM|FlmDbTransCommit+CB)
896C9B14: --ADB0BB24 ?

High CPU Utilization by J2EE engine

Dear team,
I want to find the tread causing high CPU utilization within the "jlaunch" process. As stated in SAP note: 743204. I ran the command "tps -a <pid> -a" in the development box and it it running fine. But the same command in the production portal is giving us the following error:
jueppci:/#/usr/sap/tps -a
Initialize measurement (10 sec) ...Memory fault(coredump)
I did a strings command om the core and I got
jueppci:/#strings core
libdl.so
Why is tps not running properly ?

Hello,
Thanks Russell. It is HP-UX 11.31 (11i v3). We have opened a Very High Message with SAP. SAP AG and HP are working with us to solve this issue. We will be applying some patches and doing a lot of Java parameter changes !
I'll update the solution once the system is stable and the case with SAP is closed.

High bandwidth utilization / Gen.variant.kazy virus issue

Similar Messages

Maybe you are looking for