I am pretty sure this isn't a FP problem but maybe someone can help me.

[Rob]

My website is www.rollingbluethunder.com

Up until yesterday everything was running along fine. yesterday afternoon I
get an email from my hosting company saying this...

Robert,

Your website, rollingbluethunder.com was using 850MB of system memory this
afternoon. Due to problems level of usage was causing in a shared
environment, your website had to be stopped. A handle trace of files in use
at that time is attached below. Please let us know when you have determined
the cause of the problem and fixed it, and we will be able to restart your
website.

Ted Beckwith

---------------------------------

- Easy CGI Support

- (e-mail address removed)

- http://www.easycgi.com

---------------------------------

I did not change anything at all over the last few months with the website.

They started it back last night and everything was cool unitl about 1pm this
afternoon when they stopped my site again saying it was using over 800mb of
their resources.

I checked my statistics this morning and could not find any inordinate
amount of traffic to the site.

Anyone have any clue or suggestion?

 

[Thomas A. Rowe]

What type of content do you have on your site?

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Rob]

Mostly pictures, a blog, a message board, a small amount of music files and
abuot 3 short videos.

I got this in an email from them also telling me what programs were running
when they decided too much was being used.

------------------------------------------------------------------------------

DLLHOST.EXE pid: 5276 WEB31\IWAM_WEB31

18: File C:\WINNT\system32

58: Section \BaseNamedObjects\ComPlusCOMRegTable

d4: Section \BaseNamedObjects\__R_0000000000fe_SMem__

354: File C:\WINNT\system32\inetsrv\ASP.DLL

364: File C:\WINNT\system32\STDOLE2.TLB

4cc: Section \BaseNamedObjects\ASP_PERFMON_MAIN_BLOCK

4d0: Section
\BaseNamedObjects\ASP_PERFMON_BLOCK_bc7af7604d18d9f9f88451bfe966c6f2

4d4: File C:\Websites\rollingbluethunder243\rollingbluethunder.com

53c: File
C:\Websites\rollingbluethunder243\rollingbluethunder.com\cp\Scripts\ASP\MaxWebPortal

650: File C:\Program Files\Common Files\System\ado\msado15.dll

658: File C:\WINNT\system32\scrrun.dll

678: File
C:\Websites\rollingbluethunder243\rollingbluethunder.com\cp\Scripts\MaxWebPortal2\resources

680: File
C:\Websites\rollingbluethunder243\rollingbluethunder.com\cp\Scripts\MaxWebPortal2\include

688: File
C:\Websites\rollingbluethunder243\rollingbluethunder.com\cp\Scripts\MaxWebPortal2\lang

690: File
C:\Websites\rollingbluethunder243\rollingbluethunder.com\cp\Scripts\MaxWebPortal2

714: File C:\Websites\rollingbluethunder243\rollingbluethunder.com\_fpclass

750: File C:\WINNT\system32\inetsrv\browscap.dll

768: File C:\WINNT\system32\inetsrv

8cc: File C:\WINNT\system32\cdonts.dll

 

[Rob]

Thanks I will ask them if they will check into that possibility. It makes
sense to me that it would be this because as I say, I changed nothing and had
not problem prior to yesterday.

Thanks

 

[Thomas A. Rowe]

You need to check with the providers of your ASP MaxWebPortal application to see if it is possible
for someone to hack into the application and attempt to send email, since your host has indicated,
CDONTS.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Rob]

I understand the hacking thing. I asked them to check into the possibility
of an hacker attack and this is the latest response I recieved from them.

There is likely a script on your website that is taking system memory for a
process and then not giving it back, possibly with a database connection. You
should make sure that all your database connections are being closed. That is
about as far as I can help you with troubleshooting this issue without an in
depth knowledge of all the scripts used on your website. Your website is very
heavily trafficked, making it difficult to locate a specific script or file
that could be causing this issue.

With this response my question is how could my script suddenly stop working
properly after almost 4 months of no problems whatsoever.

I am beginning to feel like the wonderful support they promise is not as
wonderful as advertised.

Thanks for all who responded and anyone with any orther ideas feel free to
chime in.

 

[Thomas A. Rowe]

Most web host will not offer any support with the content or scripts used in your site, unless they
have provided the scripts or content. This is basically what your host has indicated. Some host will
offer support for a fee.
--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Jim Cheshire \(JIMCO\)]

My website is www.rollingbluethunder.com

Up until yesterday everything was running along fine. yesterday
afternoon I get an email from my hosting company saying this...

Robert,

Your website, rollingbluethunder.com was using 850MB of system memory
this afternoon. Due to problems level of usage was causing in a shared
environment, your website had to be stopped. A handle trace of files
in use at that time is attached below. Please let us know when you
have determined the cause of the problem and fixed it, and we will be
able to restart your website.

Ted Beckwith

Your host is talking about memory usage, not bandwidth. They haven't given
you enough information to have any clue. They have given you a list of
loaded modules in the process, but that doesn't tell you squat.

What they need to do is get a user mode dump and enable a tool that can
track VM allocations. Unfortunately, they likely won't do that to help you
with this problem. You're likely going to have to set up your own repro of
this issue and do it yourself.

Bear in mind that most people don't have the technical skills necessary to
do such analysis. If you're in that boat, I'm not sure what to tell you.


--
Jim Cheshire
JIMCO

If you use FrontPage, you need our add-ins!
http://www.jimcoaddins.com
=======================================

Come take our Flash survey!

=======================================
Coming soon!
JIMCO Close Window
Sign up to our mailing list for information.

 

[Rob]

I definitely am in that boat. I had this problem with my former host and in
the end they finally figured out that it was not my website that was causing
the problem at all, but by then I was so fed up with them accusing me and not
trying to be any help to me that I changed hosts.

The host is telling me that maybe I need to have a dedicated server instead
of a shared server. I feel like they are trying to get over on me.

I have toyed with the idea of just getting my own server. Any thoughts on
that?

 

[Thomas A. Rowe]

If you get your own server, then you will have to be prepared to manage it (backup, apply patches
and updates, etc.), unless you select a managed server plan, if offered.

However until you solve the current issue, moving to your own server may not solve the problem, and
you would have to be able to trouble shoot any issue that arise.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Thomas A. Rowe]

You should check ASP MaxWebPortal support forums and user comments:
http://www.maxwebportal.com/
http://www.maxwebportal.info/
http://www.aspin.com/func/review?tree=aspin/community&id=4284710
--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Mike Mueller]

Rob-
You just may want to check the scripts as they
suggested. One of the items you had listed was CDONTS which
does not release its memory unless the object calling it is
set to nothing. Probably the same thing would go for db
connection scripts.
What I would do is talk to your host about restarting
the site. I would have them track your memory usage along
with the server lofgs to see if you can find out what
page/script is taking up memory and not releasing it

Mike


:I understand the hacking thing. I asked them to check into
the possibility
: of an hacker attack and this is the latest response I
recieved from them.
:
: There is likely a script on your website that is taking
system memory for a
: process and then not giving it back, possibly with a
database connection. You
: should make sure that all your database connections are
being closed. That is
: about as far as I can help you with troubleshooting this
issue without an in
: depth knowledge of all the scripts used on your website.
Your website is very
: heavily trafficked, making it difficult to locate a
specific script or file
: that could be causing this issue.
:
: With this response my question is how could my script
suddenly stop working
: properly after almost 4 months of no problems whatsoever.
:
: I am beginning to feel like the wonderful support they
promise is not as
: wonderful as advertised.
:
: Thanks for all who responded and anyone with any orther
ideas feel free to
: chime in.
:
: "Rob Giordano (Crash Gordon®)" wrote:
:
: > I don't know exactly howthey do it..but I talkin about
cracker hackers...they'll crack software then somehow put up
files/crackz/serialz on otherpeoples websites where you cant
see them...then tell the world where to download them...then
as soon as their discovered they move somewhere else. Of
course the victim only sees increased traffic etc.
: >
: >
: > > Thanks I will ask them if they will check into that
possibility. It makes
: > > sense to me that it would be this because as I say, I
changed nothing and had
: > > not problem prior to yesterday.
: > >
: > > Thanks
: > >
: > > "Rob Giordano (Crash Gordon®)" wrote:
: > >
: > > > I'm no expert on this, but maybe someone's hacking
your bandwidth. Your host should be able to find it if it
is.
: > > >
: > > >
: > > > > My website is www.rollingbluethunder.com
: > > > >
: > > > > Up until yesterday everything was running along
fine. yesterday afternoon I
: > > > > get an email from my hosting company saying
this...
: > > > >
: > > > > Robert,
: > > > >
: > > > > Your website, rollingbluethunder.com was using
850MB of system memory this
: > > > > afternoon. Due to problems level of usage was
causing in a shared
: > > > > environment, your website had to be stopped. A
handle trace of files in use
: > > > > at that time is attached below. Please let us know
when you have determined
: > > > > the cause of the problem and fixed it, and we will
be able to restart your
: > > > > website.
: > > > >
: > > > > Ted Beckwith
: > > > >
: > > > > ---------------------------------
: > > > >
: > > > > - Easy CGI Support
: > > > >
: > > > > - (e-mail address removed)
: > > > >
: > > > > - http://www.easycgi.com
: > > > >
: > > > > ---------------------------------
: > > > >
: > > > > I did not change anything at all over the last few
months with the website.
: > > > >
: > > > > They started it back last night and everything was
cool unitl about 1pm this
: > > > > afternoon when they stopped my site again saying
it was using over 800mb of
: > > > > their resources.
: > > > >
: > > > > I checked my statistics this morning and could not
find any inordinate
: > > > > amount of traffic to the site.
: > > > >
: > > > > Anyone have any clue or suggestion?
: > > > >
: > > > >
: > > > >
: > > > >
: > > >
: >

 

[Jim Cheshire \(JIMCO\)]

Rob-
You just may want to check the scripts as they
suggested. One of the items you had listed was CDONTS which
does not release its memory unless the object calling it is
set to nothing. Probably the same thing would go for db
connection scripts.
What I would do is talk to your host about restarting
the site. I would have them track your memory usage along
with the server lofgs to see if you can find out what
page/script is taking up memory and not releasing it

Mike

They really need to track allocations in order to get any useful data.
Perfmon data can tell them when the increase happens and what the process
is, but there are a ton of components that can be running in the process.
In order to get component-level isolation, you have to track the
allocations. That's the only way to know for sure.

It seems unlikely to me that you're going to be able to use this much memory
in CDONTS objects unless you are sending e-mails like mad, but it could be
anything.

--
Jim Cheshire
JIMCO

If you use FrontPage, you need our add-ins!
http://www.jimcoaddins.com
=======================================

Come take our Flash survey!

=======================================
Coming soon!
JIMCO Close Window
Sign up to our mailing list for information.

 

[Thomas A. Rowe]

I am thinking that there is a failure to close tables/database in the Portal application and/or a
bug in the code that allows the portal to be used to send spam, and CDONTS will lockup at about 1500
emails when looping thru a database for email addresses and other fields.

In the link I posted, some users indicated code issues.

--
==============================================
Thomas A. Rowe (Microsoft MVP - FrontPage)
WEBMASTER Resources(tm)

FrontPage Resources, WebCircle, MS KB Quick Links, etc.
==============================================

 

[Jim Cheshire \(JIMCO\)]

I am thinking that there is a failure to close tables/database in the
Portal application and/or a bug in the code that allows the portal to
be used to send spam, and CDONTS will lockup at about 1500 emails
when looping thru a database for email addresses and other fields.
In the link I posted, some users indicated code issues.

Yes, and yes to Rob. This is the type of thing I do for a living (in my
real job) and I tend to always go right towards determining root cause.

--
Jim Cheshire
JIMCO

If you use FrontPage, you need our add-ins!
http://www.jimcoaddins.com
=======================================

Come take our Flash survey!

=======================================
Coming soon!
JIMCO Close Window
Sign up to our mailing list for information.