WinGate 6 - excessive memory and CPU consumption

Sep 21 04 12:07 am

Hi,

I am back again with another problem. For the last 2 hours or so, we find that WinGate is consuming almost 85 to 98% of a 3 Ghtz processor and 700+ MB of the available 1 GB of memory. We also notice that there are hundreds of NAT-TCP connections from one or more machines... we have been trying to stop the WinGate engine, but it's going into wait (Stopping...) state and it is not shutting down. A reboot of the machine also doesn't fix the problem. Any ideas?

Aniruddha.

Sep 21 04 12:23 am

Hundreds of connections?

Sounds like there could be a virus at work.

Also, try the instructions below to make sure there is not a problem with the history files.

Larry

Sep 21 04 4:10 am

labull wrote:Hundreds of connections?

Sounds like there could be a virus at work.

Also, try the instructions below to make sure there is not a problem with the history files.

Larry

Hey, I tried what you have written in your footer and it seems to have done the trick! :-) Thanks mate!

Regards,

Aniruddha.

Nov 16 04 11:06 pm

Hi,

We are facing the hundreds of connections problem once again. There's no virus and this time, removing the two History files didn't work either. Any clues?

Ani.

Nov 17 04 7:52 am

Are they maybe running a peer to peer sharing program? (Bearshare / something similar)

Nov 17 04 1:09 pm

Pascal wrote:Are they maybe running a peer to peer sharing program? (Bearshare / something similar)

No, none whatsoever.

Aniruddha.

Nov 17 04 1:11 pm

Where were those connections going? Tracing them to find out where they were going would give you a good indication of what program was doing it. If you post the destination here (Or email them directly) I can help you find out what possibly was doing this.

Is it the same destination ip repeatedly, or is it a different one all the time?

Nov 17 04 1:19 pm

Pascal wrote:Where were those connections going? Tracing them to find out where they were going would give you a good indication of what program was doing it. If you post the destination here (Or email them directly) I can help you find out what possibly was doing this.

Is it the same destination ip repeatedly, or is it a different one all the time?

Okay, I'll check that out and get back to you.

Thanks.

Aniruddha.

Nov 17 04 1:20 pm

Side thought: Which version of WinGate are you using? I suspect it's 6.x from your previous posts - is it 6.0.3?

Nov 17 04 1:34 pm

Pascal wrote:Side thought: Which version of WinGate are you using? I suspect it's 6.x from your previous posts - is it 6.0.3?

Yes, it's 6.0.3.

Ani.