spoolsv.exe using up network bandwidth


Recommended Posts

We just implemented Meraki Wireless (Z1 model) to all of our outside agents. I've noticed on one user so far that there is a TON of data going across the VPN to our print server (uses about 1mb of his connection). Total 3Gbs this morning. I went to our print server, opened up resource monitor and found that the spoolsv.exe is the process that is using the data. His laptop isn't the only one doing this. There are also internal users that this is happening to. He has nothing to print, and the other users don't have anything printing or in the queue either. You can tell when a user that is working correctly, prints. The data spikes until the print job is finished sending. The users that are having this problem is constantly sending data, both send and receive.

has anyone else ran into this problem? I've looked all over the internet and found some users that have had the problem but nothing to fix it. I can shutdown the spooler service, but once it's started again the data starts to flow. I've done that on both the clients and the server. I've also made sure to check/clear the queue on both the server and the clients.

Yes it is going to. print jobs are huge, and they aren't compressed. a 2 meg word file could be a 100meg raw file (which is what gets sent to the printer), it depends on what they are printing. fix this issue by having local printers or by finding a way to transmit the print job compressed over the vpn to the printer network end and uncompress there.

We have done this with terminal servers being accessed over the vpn for years with the use of universal print servers like uniprint, screwdrivers, thinprint, etc. Basically you print on the terminal server, it compresses the print job to your client and it uses your client printer to expand and print the job locally. This worked great for dial up users trying to print locally when using rdp connecting to the server at the office. It saved a ton on bandwidth and kept printing quick vs waiting 30 min to print a job.

  On 22/02/2013 at 19:44, sc302 said:

Yes it is going to. print jobs are huge, and they aren't compressed. a 2 meg word file could be a 100meg raw file (which is what gets sent to the printer), it depends on what they are printing. fix this issue by having local printers or by finding a way to transmit the print job compressed over the vpn to the printer network end and uncompress there.

We have done this with terminal servers being accessed over the vpn for years with the use of universal print servers like uniprint, screwdrivers, thinprint, etc. Basically you print on the terminal server, it compresses the print job to your client and it uses your client printer to expand and print the job locally. This worked great for dial up users trying to print locally when using rdp connecting to the server at the office. It saved a ton on bandwidth and kept printing quick vs waiting 30 min to print a job.

I'm sorry, but I don't think it's that easy. Since he's an outside user, he has his own printer and he prints to that. It doesn't do him that well since he works out of the office however he has the ability to print to a printer here. He doesn't though, and even if you he did, he's not printing stuff all day. Today he's transfered 7.71GB to our print server on port 49162 if that helps anyone. Almost all day it has transfered at 1.6 mb/s continuously.

One of the users that it happens to here I was on her computer, she was definetly not printing anything. It also transfers a small amount about all day.

I just printed out a 2.9MB pdf. Watching the spooler it was a 800+MB raw file being printed. You can easily see that if I were to print that over the internet it would take a lot of bandwidth and it would take forever to print on a slow connection.

Does he print to the printer there, is that were you are seeing this or does he print to his printer next to him and that is where you are seeing it?

If he is printing next to him through a remote desktop connection or someone is send him a job over the internet, oh yes it will take every bit of that and is absolutely no surprise to me. Just think, how many times I would have to print that to reach your total...maybe 8 copies?

The only way around that is to compress it and get it to spool locally.

post-118098-0-44693900-1361569978.jpg

post-118098-0-09697900-1361570124.jpg

Ok, if you aren't printing, how are you monitoring this on your network? Ignore the above if you are sure the end users aren't printing.

btw

http://www.neuber.co...poolsv.exe.html

"The spoolsv.exe file is located in the folder C:\Windows\System32. In other cases, spoolsv.exe is a virus, spyware, trojan or worm!"

Could be something not nice.

  On 22/02/2013 at 21:53, sc302 said:

I just printed out a 2.9MB pdf. Watching the spooler it was a 800+MB raw file being printed. You can easily see that if I were to print that over the internet it would take a lot of bandwidth and it would take forever to print on a slow connection.

Does he print to the printer there, is that were you are seeing this or does he print to his printer next to him and that is where you are seeing it?

If he is printing next to him through a remote desktop connection or someone is send him a job over the internet, oh yes it will take every bit of that and is absolutely no surprise to me. Just think, how many times I would have to print that to reach your total...maybe 8 copies?

The only way around that is to compress it and get it to spool locally.

I'm telling you it's not that easy. If he prints it's going to be to the printer next to him, not over the VPN back to the main office. We can monitor how much and where the data is going from meraki. 2 days he sent 13.13 gb over the VPN. 11.26gb of that was to the print server, and he's not printing anything. Definetly not any books! The rest of the 1.87gb is email, VOIP phone, and file sharing...

  On 22/02/2013 at 22:12, sc302 said:

Ok, if you aren't printing, how are you monitoring this on your network? Ignore the above if you are sure the end users aren't printing.

btw

http://www.neuber.co...poolsv.exe.html

"The spoolsv.exe file is located in the folder C:\Windows\System32. In other cases, spoolsv.exe is a virus, spyware, trojan or worm!"

Could be something not nice.

Meraki gives you a lot of information on what is going on, on your network. I can look at how much file sharing is going on, what computers are sending a lot of data and to who. They've got graphs and everything.. I noticed a lot of data going across the VPN from one user, I look and see most of the data is going to our print server. On our print server (Windows 2008), I went to Performance Monitor and you can drill down to what process is using the network. I did that and found it was spoolsv.exe.

It's defenetly not a virus... (On the server anyway, it's a brand new build).

The only thing I found so far was that it's possibly a corrupt printer install. I'm going to attempt to reinstall the printers sometime this week. Here is where I found some more information.

http://devhen.wordpress.com/2006/12/18/windows-spoolsvexe-using-99-cpu

It's not causing any CPU usage problem...

  • 2 months later...
  • 3 years later...
This topic is now closed to further replies.
  • Posts

    • Send more sensitive documents to Meta. What could possibly go wrong...
    • I have not heard of that name in a while. I stopped reading his content and listening to him some time ago.
    • Consumer Reports is flat out wrong. Wouldn't be the first time it's a fact that when you have more moving parts, you have more room for failure. Less points of failure when all you replace on an EV is the tires and the wipers.
    • WYSIWYG Web Builder 20.2.2 by Razvan Serea Web Buialder is a WYSIWYG (What-You-See-Is-What-You-Get) program used to create complete web sites. WYSIWYG means that the finished page will display exactly the way it was designed. The program generates HTML (HyperText Markup Language) tags while you point and click on desired functions; you can create a web page without learning HTML. Just drag and drop objects to the page position them "anywhere" you want and when youre finished publish it to your web server (using the build in Publish tool). Web Builder gives you full control over the content and layout of your web pages. One Web Builder project file can hold multiple web pages. Desktop publishing for the web, build web sites as easy as Drag & Drop "One Click Publishing" No FTP program needed. No special hosting required, use with any Hosting Service! Easily create forms using the built-in Form Wizard plus Form validation tools and built-in CAPTCHA. Advanced graphics tools like shapes, textart, rotation, shadows and many other image effects. Fully integrated jQuery UI (Accordion, Tabs etc), animations, effects and built-in ThemeRoller theme editor. Google compatible sitemap generator / PayPal eCommerce Tools Many navigation tools available: Navigation bars, tab menus, dropdown menus, sitetree, slidemenus. Built-in Slide Shows, Photo Galleries, Rollover images, Banners etc. Support for YouTube, Flash Video, Windows Media Player and many other video formats. Unique extension (add-on) system with already more than 250 extensions available! Create HTML5 / CSS3 websites today HTML5 document type (optimized HTML5 output). HTML5 audio/video and YouTube HTML5 support. HTML5 forms: native form validation, new input types and options, web storage. HTML5 canvas and svg support in shapes and other drawing tools. CSS3 @font-face. Use non web safe fonts in all modern browsers. CSS3 opacity, border radius, box shadow. CSS3 gradients. Add cool gradient effects using native CSS3 (no images). CSS3 navigation menu. Create awesome menus without using JavaScript or images. CSS3 animations and transitions. Including support for 2D and 3D transforms! Features for advanced users: Login Tools/Page Password Protection. Built-in Content Management System with many plug-ins (guestbook, faq, downloads, photo album etc). Add custom HTML code with the HTML tools. JavaScript Events: Show/hide objects (with animation), timers, move objects, change styles etc. Layers: Sticky layer, Docking layer, Floating layer, Modal layer, Anchored layer, Strechable layer and more! jQuery Theme Manager, create your own themes for the built-in jQuery UI widgets. Style Manager (global styling, H1, H2, H3 etc). Master Frames and Master Objects: reuse common element in your website. and much more! WYSIWYG Web Builder 20.2.2 changelog: Improved: Minor change in HTML formatting of the Overlay Menu. Fixed: Issue with aspect ratio of HTML Video. Download: WYSIWYG Web Builder 64-bit | 30.1 MB (Shareware) Download: WYSIWYG Web Builder 32-bit | 28.0 MB Screenshot: >> Click here << Link: Home Page | Templates | Free extras/addons | Changelog Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • Collaborator
      Mighty Pen went up a rank
      Collaborator
    • Week One Done
      emptyother earned a badge
      Week One Done
    • Week One Done
      DarkWun earned a badge
      Week One Done
    • Very Popular
      valkyr09 earned a badge
      Very Popular
    • Week One Done
      suprememobiles earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      568
    2. 2
      +FloatingFatMan
      189
    3. 3
      ATLien_0
      179
    4. 4
      Skyfrog
      112
    5. 5
      Xenon
      110
  • Tell a friend

    Love Neowin? Tell a friend!