Could aspnet_wp.exe recycle be due to hackers?

  • Thread starter Thread starter ringo
  • Start date Start date
R

ringo

Hi all,
I have a couple of Win2000 servers running IIS and an asp.NET web application, and have seen sporadic errors in the event logs:

aspnet_wp.exe (PID:PIDNumber) was recycled because memory consumption exceeded the SizeLimit MB (Percentage percent of available RAM)

The app I'm running doesn't deal with anything even approaching large amounts of data (there's a datagrid which displays a max 13x6 grid, all fields less than 50 characters), and does not upload files. The errors seem to come at random times, whether or not there is activity in the app (I know this because I log all user operations to a SQL Server database). I have been running performance logs on the machine, and noticed a huge spike for 'ASP.NET APPS v 1.1.4xxx' Requests/sec right before the crashes.

I'm wondering if anyone has seen this before, and if the cause could be some type of DOS or similar attack on the server... and if so, what can I do to stop it? Any experiences/advice is appreciated,

-Ringo
 
Hi Ringo,

There was a problem with v1.0 of the framework where that process would get
recycled periodically filling up the event log as you described. Seems like
you're running 1.1 though, have you got all the service packs?

Tim

ringo said:
Hi all,
I have a couple of Win2000 servers running IIS and an asp.NET web
Click to expand...
application, and have seen sporadic errors in the event logs:
aspnet_wp.exe (PID:PIDNumber) was recycled because memory consumption
Click to expand...
exceeded the SizeLimit MB (Percentage percent of available RAM)
The app I'm running doesn't deal with anything even approaching large
Click to expand...
amounts of data (there's a datagrid which displays a max 13x6 grid, all
fields less than 50 characters), and does not upload files. The errors seem
to come at random times, whether or not there is activity in the app (I know
this because I log all user operations to a SQL Server database). I have
been running performance logs on the machine, and noticed a huge spike for
'ASP.NET APPS v 1.1.4xxx' Requests/sec right before the crashes.
I'm wondering if anyone has seen this before, and if the cause could be
Click to expand...
some type of DOS or similar attack on the server... and if so, what can I do
to stop it? Any experiences/advice is appreciated,
 
Back
Top