473,320 Members | 2,048 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

Could aspnet_wp.exe recycle be due to hackers?

Hi all, I have a couple of Win2000 servers running IIS and an asp.NET web application, and have seen sporadic errors in the event logs:

aspnet_wp.exe (PID:PIDNumber) was recycled because memory consumption exceeded the SizeLimit MB (Percentage percent of available RAM)

The app I'm running doesn't deal with anything even approaching large amounts of data (there's a datagrid which displays a max 13x6 grid, all fields less than 50 characters), and does not upload files. The errors seem to come at random times, whether or not there is activity in the app (I know this because I log all user operations to a SQL Server database). I have been running performance logs on the machine, and noticed a huge spike for 'ASP.NET APPS v 1.1.4xxx' Requests/sec right before the crashes.
I'm wondering if anyone has seen this before, and if the cause could be some type of DOS or similar attack on the server... and if so, what can I do to stop it? Any experiences/advice is appreciated,
-Ringo

Nov 18 '05 #1
4 1522
Check your web server logs. If you're under attack, it should show up there.

--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
Big things are made up
of lots of little things.

"ringo" <rgp@ringosoft*NoSpam*.com> wrote in message
news:i3***********************@twister.southeast.r r.com...
Hi all, I have a couple of Win2000 servers running IIS and an asp.NET web application, and have seen sporadic errors in the event logs:
aspnet_wp.exe (PID:PIDNumber) was recycled because memory consumption exceeded the SizeLimit MB (Percentage percent of available RAM)
The app I'm running doesn't deal with anything even approaching large amounts of data (there's a datagrid which displays a max 13x6 grid, all
fields less than 50 characters), and does not upload files. The errors seem
to come at random times, whether or not there is activity in the app (I know
this because I log all user operations to a SQL Server database). I have
been running performance logs on the machine, and noticed a huge spike for
'ASP.NET APPS v 1.1.4xxx' Requests/sec right before the crashes. I'm wondering if anyone has seen this before, and if the cause could be some type of DOS or similar attack on the server... and if so, what can I do
to stop it? Any experiences/advice is appreciated, -Ringo

Nov 18 '05 #2
well you have a couple of issues here the first being that this is iis5 so
all process as spawned inside aspnet worker process so memory adds up on a
per process basis. The other thing is that if you are returning large
datasets and not cleaning them out, they will build up in the worker process
eventually causing it to recycle. You need to monitor your memory
consumption a bit more closely.

I wouldn't rule out an attack either but it just seems a lot less likely
from where i sit.
--
Regards,
Alvin Bruney
Got tidbits? Get it here...
http://tinyurl.com/3he3b
"ringo" <rgp@ringosoft*NoSpam*.com> wrote in message
news:i3***********************@twister.southeast.r r.com...
Hi all, I have a couple of Win2000 servers running IIS and an asp.NET web application, and have seen sporadic errors in the event logs:
aspnet_wp.exe (PID:PIDNumber) was recycled because memory consumption exceeded the SizeLimit MB (Percentage percent of available RAM)
The app I'm running doesn't deal with anything even approaching large amounts of data (there's a datagrid which displays a max 13x6 grid, all
fields less than 50 characters), and does not upload files. The errors seem
to come at random times, whether or not there is activity in the app (I know
this because I log all user operations to a SQL Server database). I have
been running performance logs on the machine, and noticed a huge spike for
'ASP.NET APPS v 1.1.4xxx' Requests/sec right before the crashes. I'm wondering if anyone has seen this before, and if the cause could be some type of DOS or similar attack on the server... and if so, what can I do
to stop it? Any experiences/advice is appreciated, -Ringo

Nov 18 '05 #3
ringo <rgp@ringosoft*NoSpam*.com> wrote in message news:<i3***********************@twister.southeast. rr.com>...
Hi all, I have a couple of Win2000 servers running IIS and an asp.NET web application, and have seen sporadic errors in the event logs:

aspnet_wp.exe (PID:PIDNumber) was recycled because memory consumption exceeded the SizeLimit MB (Percentage percent of available RAM)

The app I'm running doesn't deal with anything even approaching large amounts of data (there's a datagrid which displays a max 13x6
grid, all fields less than 50 characters), and does not upload files.
The errors seem to come at random times, whether or not there is
activity in the app (I know this because I log all user operations to
a SQL Server database). I have been running performance logs on the
machine, and noticed a huge spike for 'ASP.NET APPS v 1.1.4xxx'
Requests/sec right before the crashes. I'm wondering if anyone has seen this before, and if the cause could be some type of DOS or similar attack on the server... and if so, what can I do to stop it? Any experiences/advice is appreciated,
-Ringo


Listen to yourself: "My program is slow and there are other problems:
someone must be hacking into my system."

The very existence of this software antipattern indicates that you
will never ever be a decent programmer and that you _may_ be
delusional. A real programmer would search his own code for errors for
_hours_ before looking elesewhere; after that a good programmer would
look at the _system_ for problems; only when he saw hard evidence
would an _excellent_ programmer conclude that third parties were
changing his system.

Find another job - perhaps salesman or preacher. You will never be
more than an embarrassment as a programmer.
tom
Nov 18 '05 #4
sounds like tommy forgot to take his meds today
"parley" <pa**********@yahoo.com> wrote in message
news:8a**************************@posting.google.c om...
ringo <rgp@ringosoft*NoSpam*.com> wrote in message

news:<i3***********************@twister.southeast. rr.com>...
Hi all, I have a couple of Win2000 servers running IIS and an asp.NET web application, and have seen sporadic errors in the event logs:
aspnet_wp.exe (PID:PIDNumber) was recycled because memory consumption exceeded the SizeLimit MB (Percentage percent of available RAM)
The app I'm running doesn't deal with anything even approaching

large amounts of data (there's a datagrid which displays a max 13x6
grid, all fields less than 50 characters), and does not upload files.
The errors seem to come at random times, whether or not there is
activity in the app (I know this because I log all user operations to
a SQL Server database). I have been running performance logs on the
machine, and noticed a huge spike for 'ASP.NET APPS v 1.1.4xxx'
Requests/sec right before the crashes.
I'm wondering if anyone has seen this before, and if the cause could be some type of DOS or similar attack on the server... and if so, what can I do
to stop it? Any experiences/advice is appreciated, -Ringo


Listen to yourself: "My program is slow and there are other problems:
someone must be hacking into my system."

The very existence of this software antipattern indicates that you
will never ever be a decent programmer and that you _may_ be
delusional. A real programmer would search his own code for errors for
_hours_ before looking elesewhere; after that a good programmer would
look at the _system_ for problems; only when he saw hard evidence
would an _excellent_ programmer conclude that third parties were
changing his system.

Find another job - perhaps salesman or preacher. You will never be
more than an embarrassment as a programmer.
tom

Nov 18 '05 #5

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
by: majid | last post by:
What means this error in event viewer? "aspnet_wp (PID: 1556) was recycled because it failed to ping message" .
7
by: Clement | last post by:
hi, i have an asp.net site and is using SQL Server 2k. i realize the aspnet_wp.exe memory usage keep growing and i will receive an error for the pages that call the sql connection. others page...
2
by: Luther Miller | last post by:
I have a server setup that is dedicate to providing a "proxy" by exposing a web service that calls methods in a 3rd party ActiveX control and then returns the results. Sometimes, the aspnet_wp work...
2
by: Jack | last post by:
I got the error in event viewer, aspnet_wp.exe was stopped unexpected, because it consumes too much memory when running my asp.net application, does anybody know what's the problem is? Any help...
2
by: Cynthia | last post by:
Hi, I have a two Load Balanced servers running MS Content Mangement Server 2002. Both servers runs asp.net applications. On one of the nodes, aspnet_wp.exe process behaves as following: -...
1
by: Derek Martin | last post by:
Hi list, I have created a web app with VS2k3.net using VB.net and everything was working fine until something went wrong and now all attempts to get at *any* .net based page on the server returns...
3
by: Ramesh Dodamani | last post by:
Environment: XP Pro, VS.Net 2003, .Net 1.1.4322 with SP1 & KB Hotfix 886903 P4 2.2GHz, 1 GB RAM My system was working fine till a few weeks back when I started seeing the following errors. ...
2
by: ruca | last post by:
Hi gurus, Can anyone tell me please when I really must setup the value of memory that aspnet_wp or w3wp must use in IIS server machine? What I mean is that we have clients that have diferent...
2
by: cmilhench | last post by:
Hi We have a problem with memory consumption of my aspnet_wp.exe worker process. The proccess consumes more and more memory until eventualy we start getting out of memory Exceptions. Configuring...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
0
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
0
by: Defcon1945 | last post by:
I'm trying to learn Python using Pycharm but import shutil doesn't work
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.