Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Network Performance Monitor (NPM) > Capture a memory dump

Capture a memory dump

Table of contents

Updated March 11th, 2016

Overview

If a process appears to have a memory leak, you will need to capture a memory dump to confirm the leak. The following procedure provides the steps required to capture a memory dump.

Environment

All supported SolarWinds products

Steps

To capture a memory dump:

  1. Determine the process ID (PID), as indicated in the following steps:
    1. Open Task Manager (press Ctrl+Alt+Del, and then click Start Task Manager.)
    2. Open the Processes tab.
    3. Click View > Select Columns.
    4. Check PID (Process Identifier), and then click OK.
  2. Record the PID assigned to the process that appears to be leaking memory.
  3. Download the correct Debug Tools archive for your server (32- or 64-bit):
  4. Extract the Debug Tools archive to an appropriate location on your Orion server.
  5. Open a command prompt and navigate to the location of your extracted archive.
    Note: the extracted archive should include TakeSnapShot.bat.
  6. Run TakeSnapShot.bat PID#, PID# is the PID of the apparently leaking process. For example, if you suspect that a process with a PID of 1234 is leaking, execute TakeSnapShot.bat 1234.
  7. Wait for the minimized window in your task bar to open and close
    Note:The window may have a title similar to cdb.exe or the full path of the extracted archive. It may take up to a few minutes for the operation to start, finish, and close on its own.
  8. There should be Output directory in the folder of the extracted archive. Create a .zip archive and send it to the SolarWinds Support representative who requested it.
    Note: Your new. compressed archive may be rather large.

 

Last modified
15:17, 15 May 2017

Tags

Classifications

Public