- The server starts rapidly establishing Transmission Control Protocol (TCP) connections to itself, which are kept open indefinitely. After you stop all client connections to the front-end server, the connections remain open.
- The Inetinfo.exe process consumes most of the available memory on the computer and accounts for a very large number of handles and threads. However, the Inetinfo.exe process may or may not consume an inordinate number of CPU cycles.
- The log files for the virtual server (Web site) that provides the services for Exchange 2000 Server list a large number of entries from a single user attempting to access the public Virtual directory. These entries are similar to the following.
Note These messages do not necessarily indicate malicious activity.-and-2002-02-06 11:02:09 192.168.1.100 test 192.168.1.120 80 GET /public/folder1/ Cmd=contents 503 Exchange-Server-Frontend-Proxy/6.0+Mozi...
Note The preceding error messages have been wrapped for readability.2002-02-06 11:02:09 192.168.1.100 test 192.168.1.120 80 PROPFIND /public/folder1/ - 503 Exchange-Server-Frontend-Proxy/6.0+Mozi...
Event ID: 2019
Source: Srv
Description: The server was unable to allocate from the system nonpaged pool because the pool was empty.