If I understand correctly, the TIME_WAIT Status when you do a NETSTAT on the
server indicates that the connection has been closed, and it is waiting to
clear. Is that right? If so, we have a lot of SQL Server connections that
are in TIME_WAIT status mode. We may have well over 100 or so of these, and
they do not clear out very fast. Why would they stick around like that, and
how do I get them to clear out sooner? Could they potentially be causing
problems by not clearing out?
Thanks,
Jesse
Hi
Connection Pooling on the Client MDAC stack. By default the SQL Driver will
keep the connection open for 120 seconds after a "close" has been issued. If
another request comes along and it uses the same credentials to the same
server, it does not have to re-setup the TCP/IP connection. Instead it puts
it on the connection that has been around the longest in the TIME_WAIT
state.
Regards
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Jesse" <nospam@.fake.com> wrote in message
news:u9T48m3OFHA.1176@.TK2MSFTNGP12.phx.gbl...
> If I understand correctly, the TIME_WAIT Status when you do a NETSTAT on
> the server indicates that the connection has been closed, and it is
> waiting to clear. Is that right? If so, we have a lot of SQL Server
> connections that are in TIME_WAIT status mode. We may have well over 100
> or so of these, and they do not clear out very fast. Why would they stick
> around like that, and how do I get them to clear out sooner? Could they
> potentially be causing problems by not clearing out?
> Thanks,
> Jesse
>
|||I have looked into those settings, and they are set up as you stated,
however, these are staying in TIME_WAIT long after the 120 seconds. For
instance, I can log on to our server at 8:00 or 9:00 at night, when there is
no one on the server, and there are well over 100 connections left in
TIME_WAIT status. Any ideas why?
Jesse
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:Ol4H%23U5OFHA.3356@.TK2MSFTNGP12.phx.gbl...
> Hi
> Connection Pooling on the Client MDAC stack. By default the SQL Driver
> will keep the connection open for 120 seconds after a "close" has been
> issued. If another request comes along and it uses the same credentials to
> the same server, it does not have to re-setup the TCP/IP connection.
> Instead it puts it on the connection that has been around the longest in
> the TIME_WAIT state.
> Regards
> --
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
> IM: mike@.epprecht.net
> MVP Program: http://www.microsoft.com/mvp
> Blog: http://www.msmvps.com/epprecht/
> "Jesse" <nospam@.fake.com> wrote in message
> news:u9T48m3OFHA.1176@.TK2MSFTNGP12.phx.gbl...
>
Showing posts with label netstat. Show all posts
Showing posts with label netstat. Show all posts
Wednesday, March 28, 2012
Netstat TIME_WAIT on SQL Server Connections
If I understand correctly, the TIME_WAIT Status when you do a NETSTAT on the
server indicates that the connection has been closed, and it is waiting to
clear. Is that right? If so, we have a lot of SQL Server connections that
are in TIME_WAIT status mode. We may have well over 100 or so of these, and
they do not clear out very fast. Why would they stick around like that, and
how do I get them to clear out sooner? Could they potentially be causing
problems by not clearing out?
Thanks,
JesseHi
Connection Pooling on the Client MDAC stack. By default the SQL Driver will
keep the connection open for 120 seconds after a "close" has been issued. If
another request comes along and it uses the same credentials to the same
server, it does not have to re-setup the TCP/IP connection. Instead it puts
it on the connection that has been around the longest in the TIME_WAIT
state.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Jesse" <nospam@.fake.com> wrote in message
news:u9T48m3OFHA.1176@.TK2MSFTNGP12.phx.gbl...
> If I understand correctly, the TIME_WAIT Status when you do a NETSTAT on
> the server indicates that the connection has been closed, and it is
> waiting to clear. Is that right? If so, we have a lot of SQL Server
> connections that are in TIME_WAIT status mode. We may have well over 100
> or so of these, and they do not clear out very fast. Why would they stick
> around like that, and how do I get them to clear out sooner? Could they
> potentially be causing problems by not clearing out?
> Thanks,
> Jesse
>|||I have looked into those settings, and they are set up as you stated,
however, these are staying in TIME_WAIT long after the 120 seconds. For
instance, I can log on to our server at 8:00 or 9:00 at night, when there is
no one on the server, and there are well over 100 connections left in
TIME_WAIT status. Any ideas why?
Jesse
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:Ol4H%23U5OFHA.3356@.TK2MSFTNGP12.phx.gbl...
> Hi
> Connection Pooling on the Client MDAC stack. By default the SQL Driver
> will keep the connection open for 120 seconds after a "close" has been
> issued. If another request comes along and it uses the same credentials to
> the same server, it does not have to re-setup the TCP/IP connection.
> Instead it puts it on the connection that has been around the longest in
> the TIME_WAIT state.
> Regards
> --
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
> IM: mike@.epprecht.net
> MVP Program: http://www.microsoft.com/mvp
> Blog: http://www.msmvps.com/epprecht/
> "Jesse" <nospam@.fake.com> wrote in message
> news:u9T48m3OFHA.1176@.TK2MSFTNGP12.phx.gbl...
>
server indicates that the connection has been closed, and it is waiting to
clear. Is that right? If so, we have a lot of SQL Server connections that
are in TIME_WAIT status mode. We may have well over 100 or so of these, and
they do not clear out very fast. Why would they stick around like that, and
how do I get them to clear out sooner? Could they potentially be causing
problems by not clearing out?
Thanks,
JesseHi
Connection Pooling on the Client MDAC stack. By default the SQL Driver will
keep the connection open for 120 seconds after a "close" has been issued. If
another request comes along and it uses the same credentials to the same
server, it does not have to re-setup the TCP/IP connection. Instead it puts
it on the connection that has been around the longest in the TIME_WAIT
state.
Regards
--
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@.epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"Jesse" <nospam@.fake.com> wrote in message
news:u9T48m3OFHA.1176@.TK2MSFTNGP12.phx.gbl...
> If I understand correctly, the TIME_WAIT Status when you do a NETSTAT on
> the server indicates that the connection has been closed, and it is
> waiting to clear. Is that right? If so, we have a lot of SQL Server
> connections that are in TIME_WAIT status mode. We may have well over 100
> or so of these, and they do not clear out very fast. Why would they stick
> around like that, and how do I get them to clear out sooner? Could they
> potentially be causing problems by not clearing out?
> Thanks,
> Jesse
>|||I have looked into those settings, and they are set up as you stated,
however, these are staying in TIME_WAIT long after the 120 seconds. For
instance, I can log on to our server at 8:00 or 9:00 at night, when there is
no one on the server, and there are well over 100 connections left in
TIME_WAIT status. Any ideas why?
Jesse
"Mike Epprecht (SQL MVP)" <mike@.epprecht.net> wrote in message
news:Ol4H%23U5OFHA.3356@.TK2MSFTNGP12.phx.gbl...
> Hi
> Connection Pooling on the Client MDAC stack. By default the SQL Driver
> will keep the connection open for 120 seconds after a "close" has been
> issued. If another request comes along and it uses the same credentials to
> the same server, it does not have to re-setup the TCP/IP connection.
> Instead it puts it on the connection that has been around the longest in
> the TIME_WAIT state.
> Regards
> --
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
> IM: mike@.epprecht.net
> MVP Program: http://www.microsoft.com/mvp
> Blog: http://www.msmvps.com/epprecht/
> "Jesse" <nospam@.fake.com> wrote in message
> news:u9T48m3OFHA.1176@.TK2MSFTNGP12.phx.gbl...
>
Netstat shows Port 1433 Activity
When I run Netstat it shows many connections from Port 1433 on my server to
various ports on seemingly random computers. SQL Profiler and Enterprise Man
ager do not show logins or processes that correspond to this activity. Howev
er Task Manager does show increased memory and CPU time for sqlservr.exe As
time goes on the number of netstat connections increases until I reboot the
server.
I have SP3 and also disable Port 1434.
I don't know if this is related but if I Stop and then Start MSSQLSERVER Ser
vice, then SQL doesn't seem to work until I reboot the Server.
Does anyone know what is causing these network connections? I plan to use IP
SEC to filter certain IPs and Ports to reduce this but I would like to under
stand the problem better before I try to solve it.Netstat should show you only valid IP addresses connected to 1433 on your
server.
You can use PortQuery or Port reporter to validate this as well.
832919 New features and functionality in PortQry version 2.0
http://support.microsoft.com/?id=832919
Is SQL Server behind a firewall?
Are you using Standard SQL Security ?
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Kevin,
Thanks for your response.
Downloaded Port Reporter. It stated that the server did not provide process
mapping. Downloaded TCPView.
At the time I ran TCPView, instead of the usual connections on port 1433, t
here were many (about 25) established connections on port 1025, some from IP
addresses on the server that should not be establishing connections. All of
these were associated with msdtc.exe. I killed a couple of these processes.
When I killed the 2nd all the remaining disappeared. What does this indicat
e?
When I have observed many connections on port 1433 the state is usually WAIT
_STATE or FIN_2 something.
The server is a leased server at an ISP (Interland) that I administer remote
ly via Terminal Services. There are 2 NICs: 1 to their LAN and 1 to the Inte
rnet.
For firewall I hoped to use IPSEC. I assume that 'Standard SQL Security' mea
ns the same to you as to me (passwords, limit user capabilities) and the ans
wer is Yes.
If the connection state is not "ESTABLISHED' does that mean that other devic
es are attempting to connect unsuccessfully? Could these be port scanner vir
uses or similar?
The msdtc.exe ESTABLISHED connections caused me more concern. Does that mean
my server and another device were 'handshaking' or exchanging data?
Mike
At the time I ran TCPView, instead of the usual connections on port
1433, there were many (about 25) established connections on port 1025,
some from IP addresses on the server that should not be establishing
connections. All of these were associated with msdtc.exe. I killed a
couple of these processes. When I killed the 2nd all the remaining
disappeared. What does this indicate?
*** MSDTC is used for Distributed Transactions. If the IP address is not
from a machine
that you "Trust" , then this machine should be blocked.
When I have observed many connections on port 1433 the state is usually
WAIT_STATE or FIN_2 something.
*** TCP sessions have various states. FIN, TIME_WAIT are all valid states.
See:
137984 TCP Connection States and Netstat Output
http://support.microsoft.com/?id=137984
The server is a leased server at an ISP (Interland) that I administer
remotely via Terminal Services. There are 2 NICs: 1 to their LAN and 1
to the Internet.
*** Your provider should also have Firewall to prevent machines
from establishing connections. If they don't you should seriously consider
Publishing SQL from ISA Server.
For firewall I hoped to use IPSEC. I assume that 'Standard SQL
Security' means the same to you as to me (passwords, limit user
capabilities) and the answer is Yes.
*** If you only have certain valid clients that should be connecting to
your SQL Server
accross the internet, then IPSEc or a VPN could be used. Otherwise, since
your server
is open and using Standard Security, you'll be open to password guessing
attacks.
If the connection state is not "ESTABLISHED' does that mean that other
devices are attempting to connect unsuccessfully? Could these be port
scanner viruses or similar?
*** See TCP Connection States kb.
The msdtc.exe ESTABLISHED connections caused me more concern. Does that
mean my server and another device were 'handshaking' or exchanging
data?
*** If your SQL Server is not using Distributed Transactions, Stop the
MSDTC Server Service.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Kevin,
Thanks for your help.
Since I stopped the MSDTC Server Service the spurious connections on Port 14
33 and 1025 have not reoccurred. I still have some on Port 21 that look like
viruses trying to find an FTP connection. I'll use IPSEC to filter those.
Mikesql
various ports on seemingly random computers. SQL Profiler and Enterprise Man
ager do not show logins or processes that correspond to this activity. Howev
er Task Manager does show increased memory and CPU time for sqlservr.exe As
time goes on the number of netstat connections increases until I reboot the
server.
I have SP3 and also disable Port 1434.
I don't know if this is related but if I Stop and then Start MSSQLSERVER Ser
vice, then SQL doesn't seem to work until I reboot the Server.
Does anyone know what is causing these network connections? I plan to use IP
SEC to filter certain IPs and Ports to reduce this but I would like to under
stand the problem better before I try to solve it.Netstat should show you only valid IP addresses connected to 1433 on your
server.
You can use PortQuery or Port reporter to validate this as well.
832919 New features and functionality in PortQry version 2.0
http://support.microsoft.com/?id=832919
Is SQL Server behind a firewall?
Are you using Standard SQL Security ?
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Kevin,
Thanks for your response.
Downloaded Port Reporter. It stated that the server did not provide process
mapping. Downloaded TCPView.
At the time I ran TCPView, instead of the usual connections on port 1433, t
here were many (about 25) established connections on port 1025, some from IP
addresses on the server that should not be establishing connections. All of
these were associated with msdtc.exe. I killed a couple of these processes.
When I killed the 2nd all the remaining disappeared. What does this indicat
e?
When I have observed many connections on port 1433 the state is usually WAIT
_STATE or FIN_2 something.
The server is a leased server at an ISP (Interland) that I administer remote
ly via Terminal Services. There are 2 NICs: 1 to their LAN and 1 to the Inte
rnet.
For firewall I hoped to use IPSEC. I assume that 'Standard SQL Security' mea
ns the same to you as to me (passwords, limit user capabilities) and the ans
wer is Yes.
If the connection state is not "ESTABLISHED' does that mean that other devic
es are attempting to connect unsuccessfully? Could these be port scanner vir
uses or similar?
The msdtc.exe ESTABLISHED connections caused me more concern. Does that mean
my server and another device were 'handshaking' or exchanging data?
Mike
quote:|||Previous posting:
Originally posted by Kevin McDonnell [MSFT]
Netstat should show you only valid IP addresses connected to 1433 on your
server.
You can use PortQuery or Port reporter to validate this as well.
832919 New features and functionality in PortQry version 2.0
http://support.microsoft.com/?id=832919
Is SQL Server behind a firewall?
Are you using Standard SQL Security ?
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.
At the time I ran TCPView, instead of the usual connections on port
1433, there were many (about 25) established connections on port 1025,
some from IP addresses on the server that should not be establishing
connections. All of these were associated with msdtc.exe. I killed a
couple of these processes. When I killed the 2nd all the remaining
disappeared. What does this indicate?
*** MSDTC is used for Distributed Transactions. If the IP address is not
from a machine
that you "Trust" , then this machine should be blocked.
When I have observed many connections on port 1433 the state is usually
WAIT_STATE or FIN_2 something.
*** TCP sessions have various states. FIN, TIME_WAIT are all valid states.
See:
137984 TCP Connection States and Netstat Output
http://support.microsoft.com/?id=137984
The server is a leased server at an ISP (Interland) that I administer
remotely via Terminal Services. There are 2 NICs: 1 to their LAN and 1
to the Internet.
*** Your provider should also have Firewall to prevent machines
from establishing connections. If they don't you should seriously consider
Publishing SQL from ISA Server.
For firewall I hoped to use IPSEC. I assume that 'Standard SQL
Security' means the same to you as to me (passwords, limit user
capabilities) and the answer is Yes.
*** If you only have certain valid clients that should be connecting to
your SQL Server
accross the internet, then IPSEc or a VPN could be used. Otherwise, since
your server
is open and using Standard Security, you'll be open to password guessing
attacks.
If the connection state is not "ESTABLISHED' does that mean that other
devices are attempting to connect unsuccessfully? Could these be port
scanner viruses or similar?
*** See TCP Connection States kb.
The msdtc.exe ESTABLISHED connections caused me more concern. Does that
mean my server and another device were 'handshaking' or exchanging
data?
*** If your SQL Server is not using Distributed Transactions, Stop the
MSDTC Server Service.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Kevin,
Thanks for your help.
Since I stopped the MSDTC Server Service the spurious connections on Port 14
33 and 1025 have not reoccurred. I still have some on Port 21 that look like
viruses trying to find an FTP connection. I'll use IPSEC to filter those.
Mikesql
netstat on my server
A netstat on my MSSQL server shows
TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
ESTABLISHED
TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
I know the first four connections are servers on my domain, with asp pages
connecting to the DB. The other too I dont know what those are. Does that
mean that some other sites are connecting to my server as well? If so how
can I tell what they are accessing? And how can I stop them? Thses are just
some of the connections in netstat, what else should I be looking for and
what ports should I block for security?
Im new to MSSQL so any help or links would be appreciated.
Thank youhi,
more over run ping ,nslookup and tracert command to see what it returns ,
it will help full to isolate it more , is mailserver.uslive.net is a
mailserver for you ?! have you configure your SQL box for sendmail or any
such application.
:-)
Regards
--
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"rvegas@.rogers.com" wrote:
> A netstat on my MSSQL server shows
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
> TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
> ESTABLISHED
> TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
> I know the first four connections are servers on my domain, with asp pages
> connecting to the DB. The other too I dont know what those are. Does that
> mean that some other sites are connecting to my server as well? If so how
> can I tell what they are accessing? And how can I stop them? Thses are jus
t
> some of the connections in netstat, what else should I be looking for and
> what ports should I block for security?
> Im new to MSSQL so any help or links would be appreciated.
> Thank you
>
>|||Hi ,
is their any Internet connection running on your server ?! or Router ? is
your Web Application is allowed to access outside network ?! it clearly show
s
* wsp05956800wss.cr.net.cable.rogers.com:3063 ESTABLISHED * , which means
the Internet Connection is their which enale it to access outside local
domain too
* TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED * ,
this is a tcp port 1972 accessing your sql , if you have set some send mail
or any application like this .
more over ask your network team . and see SQL LOG for any activity logged
from this network and hey dont missed to read event log of Windows and
configure C2 Audit.
:-)
Regards
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"rvegas@.rogers.com" wrote:
> A netstat on my MSSQL server shows
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
> TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
> ESTABLISHED
> TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
> I know the first four connections are servers on my domain, with asp pages
> connecting to the DB. The other too I dont know what those are. Does that
> mean that some other sites are connecting to my server as well? If so how
> can I tell what they are accessing? And how can I stop them? Thses are jus
t
> some of the connections in netstat, what else should I be looking for and
> what ports should I block for security?
> Im new to MSSQL so any help or links would be appreciated.
> Thank you
>
>|||since your email is @.rogers.net i would get that one connection is you, as
for the other is your sql server sending notifications ?
<rvegas@.rogers.com> wrote in message
news:e6QXqFcAGHA.216@.TK2MSFTNGP15.phx.gbl...
>A netstat on my MSSQL server shows
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
> TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
> ESTABLISHED
> TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
> I know the first four connections are servers on my domain, with asp pages
> connecting to the DB. The other too I dont know what those are. Does that
> mean that some other sites are connecting to my server as well? If so how
> can I tell what they are accessing? And how can I stop them? Thses are
> just some of the connections in netstat, what else should I be looking for
> and what ports should I block for security?
> Im new to MSSQL so any help or links would be appreciated.
> Thank you
>|||Actually yes my server has a vb script that sends out emails.
Basically i want to know who is connecting to my server, and what they are
using.
My server is consuming a lot of ram and i want to find out why? maybe its
sites not releasing connections. How can i find this out?
Thanx
"David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
news:euohWjlAGHA.436@.TK2MSFTNGP10.phx.gbl...
> since your email is @.rogers.net i would get that one connection is you, as
> for the other is your sql server sending notifications ?
> <rvegas@.rogers.com> wrote in message
> news:e6QXqFcAGHA.216@.TK2MSFTNGP15.phx.gbl...
>|||you can use taskman to view what procs are using what memory.
also the current activity tab in EM will give you connection info.
PerfMon can aslo be used.
<rvegas@.rogers.com> wrote in message
news:OmOmw6mAGHA.3936@.TK2MSFTNGP12.phx.gbl...
> Actually yes my server has a vb script that sends out emails.
> Basically i want to know who is connecting to my server, and what they are
> using.
> My server is consuming a lot of ram and i want to find out why? maybe its
> sites not releasing connections. How can i find this out?
> Thanx
> "David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
> news:euohWjlAGHA.436@.TK2MSFTNGP10.phx.gbl...
>|||Hi,
the best thing is to check with SQL Profiler .
:-)
Regards
--
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"David J. Cartwright" wrote:
> you can use taskman to view what procs are using what memory.
> also the current activity tab in EM will give you connection info.
> PerfMon can aslo be used.
> <rvegas@.rogers.com> wrote in message
> news:OmOmw6mAGHA.3936@.TK2MSFTNGP12.phx.gbl...
>
>|||I have no RAM left on the server. Every time i logon and try anything the
server hanngs and needs to be rebooted.
The server has 2GB RAM and all is used up, so i need a way to figure which
domain is taking up all the ram.
Taskmanager shows sqlservr.exe taking up the ram.
I know i need to add ram, but first i want to make sure no users are abusing
the server.
"Andy Davis" <activecrypt@.gmail.com> wrote in message
news:D6BAD1B0-3550-4423-BB49-4EA2383EA093@.microsoft.com...[vbcol=seagreen]
> Hi,
> the best thing is to check with SQL Profiler .
> :-)
> Regards
> --
> Andy Davis
> Activecrypt Team
> ---
> SQL Server Encryption Software
> http://www.activecrypt.com
>
> "David J. Cartwright" wrote:
>|||you can restrict how much memery sql uses
<rvegas@.rogers.com> wrote in message
news:OyHnrPaBGHA.1312@.TK2MSFTNGP09.phx.gbl...
>I have no RAM left on the server. Every time i logon and try anything the
>server hanngs and needs to be rebooted.
> The server has 2GB RAM and all is used up, so i need a way to figure which
> domain is taking up all the ram.
> Taskmanager shows sqlservr.exe taking up the ram.
> I know i need to add ram, but first i want to make sure no users are
> abusing the server.
> "Andy Davis" <activecrypt@.gmail.com> wrote in message
> news:D6BAD1B0-3550-4423-BB49-4EA2383EA093@.microsoft.com...
>|||Hi,
nope it is not the solution , have you check EP for correct INDEX seeking !
statistics are all updated , index is defreged ! on top of all is your
application have complex calulation ?!
> The server has 2GB RAM and all is used up, so i need a way to figure which
> domain is taking up all the ram.
> Taskmanager shows sqlservr.exe taking up the ram.
> I know i need to add ram, but first i want to make sure no users are
> abusing the server.
-- IT SHOWS THAT YOUR SQL SERVER IS WITH IIS , RIGHT ?! I WOULD SUGGEST YOU
THAT CHOOSE RAID1 FOR OS AND RAID 5 OR RAID 10 (DEPENDS UPON READ / WRITE IS
MORE) BASED ON HOW YOUR APPLICATION WORKS (READ / WRITE MORE) .
ONE MORE THING , MAY BE YOU KNOW BUT IF YOU ARE USING STANDARD EDITION YOU
CAN NOT USE MORE THAN 2 GB OF RAM , YOU HAVE TO HAVE ENTERPRISE / DEV EDITIO
N
TO USE MORE THAN 2 GB OF RAM . READ MAXIMUM CAPICITY SPECIFICATION IN BOL
FOR MORE.
HTH
:-)
Regards
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"David J. Cartwright" wrote:
> you can restrict how much memery sql uses
> <rvegas@.rogers.com> wrote in message
> news:OyHnrPaBGHA.1312@.TK2MSFTNGP09.phx.gbl...
>
>
TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
ESTABLISHED
TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
I know the first four connections are servers on my domain, with asp pages
connecting to the DB. The other too I dont know what those are. Does that
mean that some other sites are connecting to my server as well? If so how
can I tell what they are accessing? And how can I stop them? Thses are just
some of the connections in netstat, what else should I be looking for and
what ports should I block for security?
Im new to MSSQL so any help or links would be appreciated.
Thank youhi,
more over run ping ,nslookup and tracert command to see what it returns ,
it will help full to isolate it more , is mailserver.uslive.net is a
mailserver for you ?! have you configure your SQL box for sendmail or any
such application.
:-)
Regards
--
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"rvegas@.rogers.com" wrote:
> A netstat on my MSSQL server shows
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
> TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
> ESTABLISHED
> TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
> I know the first four connections are servers on my domain, with asp pages
> connecting to the DB. The other too I dont know what those are. Does that
> mean that some other sites are connecting to my server as well? If so how
> can I tell what they are accessing? And how can I stop them? Thses are jus
t
> some of the connections in netstat, what else should I be looking for and
> what ports should I block for security?
> Im new to MSSQL so any help or links would be appreciated.
> Thank you
>
>|||Hi ,
is their any Internet connection running on your server ?! or Router ? is
your Web Application is allowed to access outside network ?! it clearly show
s
* wsp05956800wss.cr.net.cable.rogers.com:3063 ESTABLISHED * , which means
the Internet Connection is their which enale it to access outside local
domain too
* TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED * ,
this is a tcp port 1972 accessing your sql , if you have set some send mail
or any application like this .
more over ask your network team . and see SQL LOG for any activity logged
from this network and hey dont missed to read event log of Windows and
configure C2 Audit.
:-)
Regards
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"rvegas@.rogers.com" wrote:
> A netstat on my MSSQL server shows
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
> TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
> ESTABLISHED
> TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
> I know the first four connections are servers on my domain, with asp pages
> connecting to the DB. The other too I dont know what those are. Does that
> mean that some other sites are connecting to my server as well? If so how
> can I tell what they are accessing? And how can I stop them? Thses are jus
t
> some of the connections in netstat, what else should I be looking for and
> what ports should I block for security?
> Im new to MSSQL so any help or links would be appreciated.
> Thank you
>
>|||since your email is @.rogers.net i would get that one connection is you, as
for the other is your sql server sending notifications ?
<rvegas@.rogers.com> wrote in message
news:e6QXqFcAGHA.216@.TK2MSFTNGP15.phx.gbl...
>A netstat on my MSSQL server shows
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2060 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com:2114 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp1.mydomain.com.com:2195 ESTABLISHED
> TCP MSSQL12:ms-sql-s c2-asp9.mydomain.com:2215 ESTABLISHED
> TCP MSSQL12:ms-sql-s wsp05956800wss.cr.net.cable.rogers.com:3063
> ESTABLISHED
> TCP MSSQL12:ms-sql-s mailserver.uslive.net:1972 ESTABLISHED
> I know the first four connections are servers on my domain, with asp pages
> connecting to the DB. The other too I dont know what those are. Does that
> mean that some other sites are connecting to my server as well? If so how
> can I tell what they are accessing? And how can I stop them? Thses are
> just some of the connections in netstat, what else should I be looking for
> and what ports should I block for security?
> Im new to MSSQL so any help or links would be appreciated.
> Thank you
>|||Actually yes my server has a vb script that sends out emails.
Basically i want to know who is connecting to my server, and what they are
using.
My server is consuming a lot of ram and i want to find out why? maybe its
sites not releasing connections. How can i find this out?
Thanx
"David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
news:euohWjlAGHA.436@.TK2MSFTNGP10.phx.gbl...
> since your email is @.rogers.net i would get that one connection is you, as
> for the other is your sql server sending notifications ?
> <rvegas@.rogers.com> wrote in message
> news:e6QXqFcAGHA.216@.TK2MSFTNGP15.phx.gbl...
>|||you can use taskman to view what procs are using what memory.
also the current activity tab in EM will give you connection info.
PerfMon can aslo be used.
<rvegas@.rogers.com> wrote in message
news:OmOmw6mAGHA.3936@.TK2MSFTNGP12.phx.gbl...
> Actually yes my server has a vb script that sends out emails.
> Basically i want to know who is connecting to my server, and what they are
> using.
> My server is consuming a lot of ram and i want to find out why? maybe its
> sites not releasing connections. How can i find this out?
> Thanx
> "David J. Cartwright" <davidcartwright@.hotmail.com> wrote in message
> news:euohWjlAGHA.436@.TK2MSFTNGP10.phx.gbl...
>|||Hi,
the best thing is to check with SQL Profiler .
:-)
Regards
--
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"David J. Cartwright" wrote:
> you can use taskman to view what procs are using what memory.
> also the current activity tab in EM will give you connection info.
> PerfMon can aslo be used.
> <rvegas@.rogers.com> wrote in message
> news:OmOmw6mAGHA.3936@.TK2MSFTNGP12.phx.gbl...
>
>|||I have no RAM left on the server. Every time i logon and try anything the
server hanngs and needs to be rebooted.
The server has 2GB RAM and all is used up, so i need a way to figure which
domain is taking up all the ram.
Taskmanager shows sqlservr.exe taking up the ram.
I know i need to add ram, but first i want to make sure no users are abusing
the server.
"Andy Davis" <activecrypt@.gmail.com> wrote in message
news:D6BAD1B0-3550-4423-BB49-4EA2383EA093@.microsoft.com...[vbcol=seagreen]
> Hi,
> the best thing is to check with SQL Profiler .
> :-)
> Regards
> --
> Andy Davis
> Activecrypt Team
> ---
> SQL Server Encryption Software
> http://www.activecrypt.com
>
> "David J. Cartwright" wrote:
>|||you can restrict how much memery sql uses
<rvegas@.rogers.com> wrote in message
news:OyHnrPaBGHA.1312@.TK2MSFTNGP09.phx.gbl...
>I have no RAM left on the server. Every time i logon and try anything the
>server hanngs and needs to be rebooted.
> The server has 2GB RAM and all is used up, so i need a way to figure which
> domain is taking up all the ram.
> Taskmanager shows sqlservr.exe taking up the ram.
> I know i need to add ram, but first i want to make sure no users are
> abusing the server.
> "Andy Davis" <activecrypt@.gmail.com> wrote in message
> news:D6BAD1B0-3550-4423-BB49-4EA2383EA093@.microsoft.com...
>|||Hi,
nope it is not the solution , have you check EP for correct INDEX seeking !
statistics are all updated , index is defreged ! on top of all is your
application have complex calulation ?!
> The server has 2GB RAM and all is used up, so i need a way to figure which
> domain is taking up all the ram.
> Taskmanager shows sqlservr.exe taking up the ram.
> I know i need to add ram, but first i want to make sure no users are
> abusing the server.
-- IT SHOWS THAT YOUR SQL SERVER IS WITH IIS , RIGHT ?! I WOULD SUGGEST YOU
THAT CHOOSE RAID1 FOR OS AND RAID 5 OR RAID 10 (DEPENDS UPON READ / WRITE IS
MORE) BASED ON HOW YOUR APPLICATION WORKS (READ / WRITE MORE) .
ONE MORE THING , MAY BE YOU KNOW BUT IF YOU ARE USING STANDARD EDITION YOU
CAN NOT USE MORE THAN 2 GB OF RAM , YOU HAVE TO HAVE ENTERPRISE / DEV EDITIO
N
TO USE MORE THAN 2 GB OF RAM . READ MAXIMUM CAPICITY SPECIFICATION IN BOL
FOR MORE.
HTH
:-)
Regards
Andy Davis
Activecrypt Team
---
SQL Server Encryption Software
http://www.activecrypt.com
"David J. Cartwright" wrote:
> you can restrict how much memery sql uses
> <rvegas@.rogers.com> wrote in message
> news:OyHnrPaBGHA.1312@.TK2MSFTNGP09.phx.gbl...
>
>
netstat doesnt show me 1433 port LISTENING
Sometimes when I setup ms SQL Server 2000 in a machine and i run
"netstat -na" doesnt show me 1433 port listening, and sometimes it
does. why is that?
thanke
Hi
Check in the server network utility that you are actually using this port,
if you are using a named instance the default is to allocate the port
dynamically.
John
"ing.edmundo" wrote:
> Sometimes when I setup ms SQL Server 2000 in a machine and i run
> "netstat -na" doesnt show me 1433 port listening, and sometimes it
> does. why is that?
> thanke
>
"netstat -na" doesnt show me 1433 port listening, and sometimes it
does. why is that?
thanke
Hi
Check in the server network utility that you are actually using this port,
if you are using a named instance the default is to allocate the port
dynamically.
John
"ing.edmundo" wrote:
> Sometimes when I setup ms SQL Server 2000 in a machine and i run
> "netstat -na" doesnt show me 1433 port listening, and sometimes it
> does. why is that?
> thanke
>
netstat doesnt show me 1433 port LISTENING
Sometimes when I setup ms SQL Server 2000 in a machine and i run
"netstat -na" doesnt show me 1433 port listening, and sometimes it
does. why is that?
thankeHi
Check in the server network utility that you are actually using this port,
if you are using a named instance the default is to allocate the port
dynamically.
John
"ing.edmundo" wrote:
> Sometimes when I setup ms SQL Server 2000 in a machine and i run
> "netstat -na" doesnt show me 1433 port listening, and sometimes it
> does. why is that?
> thanke
>
"netstat -na" doesnt show me 1433 port listening, and sometimes it
does. why is that?
thankeHi
Check in the server network utility that you are actually using this port,
if you are using a named instance the default is to allocate the port
dynamically.
John
"ing.edmundo" wrote:
> Sometimes when I setup ms SQL Server 2000 in a machine and i run
> "netstat -na" doesnt show me 1433 port listening, and sometimes it
> does. why is that?
> thanke
>
netstat doesnt show me 1433 port LISTENING
Sometimes when I setup ms SQL Server 2000 in a machine and i run
"netstat -na" doesnt show me 1433 port listening, and sometimes it
does. why is that?
thankeHi
Check in the server network utility that you are actually using this port,
if you are using a named instance the default is to allocate the port
dynamically.
John
"ing.edmundo" wrote:
> Sometimes when I setup ms SQL Server 2000 in a machine and i run
> "netstat -na" doesnt show me 1433 port listening, and sometimes it
> does. why is that?
> thanke
>
"netstat -na" doesnt show me 1433 port listening, and sometimes it
does. why is that?
thankeHi
Check in the server network utility that you are actually using this port,
if you are using a named instance the default is to allocate the port
dynamically.
John
"ing.edmundo" wrote:
> Sometimes when I setup ms SQL Server 2000 in a machine and i run
> "netstat -na" doesnt show me 1433 port listening, and sometimes it
> does. why is that?
> thanke
>
Subscribe to:
Posts (Atom)