Hi all, in my Windows Server 2003 SP2 Environment (Exchange 2003 Cluster) I found a memory leak in kernel memory of the AfdP tag. This tag belongs from AFD.sys (Ancillary Function Driver for WinSock). A Microsoft KB exists that explain an existing identical problem for Windows Server 2000 fix with the "latest service pack" (http://support.microsoft.com/kb/296265). Some registry key *COULD* mitigate the problem http://www.microsoft.com/italy/technet/security/guidance/secmod109.mspx, I suppose. Any ideas or suggestions is appreciated. Thanks

More details. Name Probability Object Change Start End Percent Rate/hour AfdP Definite Bytes 11340056 1236928 12576984 916 31546

First step. Fixing “Speed & Duplex” speed Disabling "TCP Large Send Offload (IPv4)" set value to NONE Disabling "IPv4 Checksum Offload" set value to NONE

Hi , Network interface card interfaces between TCP and sockets and sockets is implemented in AFD.sys , we need to check which communication is causing the "high bites usage " you can use xperf utility which gives you advance debugging capability to debug the issue.

Hi, Please turn off the SNP features and check the result: An update to turn off default SNP features is available for Windows Server 2003-based and Small Business Server 2003-based computers http://support.microsoft.com/kb/948496 Hope it helps.This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.