13 Replies Latest reply on Jan 31, 2018 12:46 PM by monique_intel

    esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.

    RonT

      On December 20, 2017 I installed the Intel Driver & Support Assistant and found that after a few hours of system uptime, my web browsers would not connect to the internet.

      Restarting the Windows OS always allowed the browsers to operate again (for a few more hours).

       

      Running netstat -o in Windows Powershell showed a VERY LARGE number of entries looking like this:

      TCP    192.168.0.3:55694      modem:5431             CLOSE_WAIT      9264

       

      Process 9264 was: esrv_svc.exe - Intel(R) System Usage Report process

       

      I uninstalled the Intel Driver & Support Assistant and another run of netstat -o showed the expected results.

        • 1. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
          Intel Corporation
          This message was posted on behalf of Intel Corporation

          Hello RonT,

           

          Thank you for joining the Intel® Community. I am sorry to hear you are having issues with this matter. 

           

          Please let me review this matter, I will update the thread as soon as possible.

           

          Regards,

          Amy C.

          • 2. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
            AlekDavis

            I have the same issue. A few hours after rebooting computer, it cannot connect to any website (even running on the same machine). The error in event log says:

             

            "TCP/IP failed to establish an outgoing connection because the selected local endpoint was recently used to connect to the same remote endpoint. This error typically occurs when outgoing connections are opened and closed at a high rate, causing all available local ports to be used and forcing TCP/IP to reuse a local port for an outgoing connection. To minimize the risk of data corruption, the TCP/IP standard requires a minimum time period to elapse between successive connections from a given local endpoint to a given remote endpoint."

             

            I ran Resource Monitor (this is Windows 10 x64 system running on a NUC Skull Canyon) and noticed that the esrv_svs.exe process  has tons of open connections. Once I killed the process, the system goes back to normal functioning. It sounds like the Intel(R) System Usage Report service is not closing connections properly. Pretty much makes the whole system dysfunctional.

             

            At the time of this post, I have all the latest Intel software and drivers installed (at least as reported by Intel(R) Driver Support Assistant).

            • 3. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
              krzemien

              The same here, spotted recently loads of Bits-Client / EventID: 16398 in System log (via Event Viewer):

               

              A new BITS job could not be created. The current job count for the user PC\username (60) is equal to or greater than the job limit (60) specified through group policy. To correct the problem, complete or cancel the BITS jobs that haven't made progress by looking at the error, and restart the BITS service. If this error recurs, contact your system administrator and increate the per-user and per-computer Group Policy job limits.

               

              Quick check using TCPView &  Process Explorer combo and I managed to narrow the culprit down to this process (esrv_svc.exe).

               

              It started in the New Year, once I updated to the latest Intel Driver & Support Assistanta and It (unsurprisingly) impacted other software I have, namely Garmin Express, which started splurting Sorry we're having a problem communicating with our servers messages, and it never had done it before.

              • 4. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
                mkrienke

                I'm having the same problem on my PC at home after rebuilding with the latest Windows 10 Creators Edition.  The computer is losing its LAN connection frequently.  Getting tired of rebooting almost every time I sit down at the computer, I dug deeper.  Running netstat -ano resulted in hundreds (maybe thousands) of results where the PID associated with esrv_svc.ext is using/attempting to use almost every port with a CLOSE_WAIT state.

                 

                It seems that the problem usually (maybe always) occurs when the computer awakens from sleep mode.

                 

                Event Viewer:

                TCP/IP failed to establish an outgoing connection because the selected local endpoint was recently used to connect to the same remote endpoint. This error typically occurs when outgoing connections are opened and closed at a high rate, causing all available local ports to be used and forcing TPC/IP to reuse a local port for an outgoing connection.  To minimize the risk of data corruption, the TCP/IP standard requires a minimum time period to elapse between successive connections from a given local endpoint to a given remote endpoint.

                 

                 

                • 5. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
                  krzemien

                  I also spotted exactly the same behaviour on another system (laptop with Win8.1 x64), my main one is PC with Win 10 x64.

                   

                  Also, and if that helps, I remember that Intel Driver & Support Assistant update process on both systems was rather strange: having declined to share my information with Intel there was the usual command prompt-alike window opened showing process of removing/updating (can't remember) one of these services: USER_ESRV_SVC_QUEENCREEK or USER_ESRV_SVC_WILLAMETTE - but in both cases this has not terminated itself and required me closing this window.

                  • 6. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
                    StingRay.Miller

                    Same issue.  Installed the "Intel Driver & Support Assistant" a few weeks ago with no issues.

                    It then detected new drivers for my Bluetooth and Wifi card.

                    After upgrading everything worked fine for about a week, then I start losing Internet.

                    My MultiPing and PingPlotters would still be pinging IPs and I could do a ping on a DNS name, but all browsers, Outlook and Skype said offline.

                    I then tried telnet and SSH and go the following error "An operation on a socket could not be performed because the system lacked sufficient buffer space or because a queue was full."

                     

                    I then looked at Netstat and realized all of my sessions were full.  I attached the Netstat outputs as well as the debug file for the Intel program.

                     

                    I restarted esrv_svc_queencreek service and all is fixed.  Except the issues keep reoccurring every 4-6 hours.

                    I tried to stop the service and mark it disabled, but it re-enables itself and starts again.

                    • 7. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
                      krzemien

                      I think something's cooking @ Intel about it, from Intel® Driver & Support Assistant FAQ in the last two days:

                       

                      The Intel® Driver & Support Assistant (Intel® DSA) is getting a tune up.  We are sorry for the inconvenience. If you need a driver or software, please use Intel Download Center.

                      • 8. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
                        monique_intel

                        Hi RonT, AlekDavis, krzemien, mkrienke, StingRay.Miller

                        This is Monique with Intel Corporation and I am the Project Manager for IDSA.  The DSA installer is bundled with an additional optional program offered to users at the start of DSA install called the Intel Computing Improvement Program, which is managed by a different team here at Intel.  I relayed the issues reported on this thread to that team and they have updated their ICIP installer by putting a limit on the number of TCP ports that esrv_svc.exe can open. This fix for ICIP has been incorporated into IDSA 3.1.2.2 version which was released on Thursday January 18th.

                         

                        To get the updated versions, please try running the IDSA scan and you should be prompted to upgrade. Or you can choose to completely uninstall IDSA using Control Panel & Uninstall Programs.  Then reinstall fresh from https://www.intel.com/content/www/us/en/support/detect.html.  You can choose to DECLINE when asked to opt into the Intel Computing Improvement Program. You can also completely uninstall the Intel Computing Improvement Program from your system again by going to Control Panel & Uninstall Programs.

                         

                        New version should work more effectively with all browsers (IE v11, Edge, Firefox & Chrome).  If the scan doesn't start up after upgrade or installation, you might also clear your browser cache.

                         

                        Thanks for your feedback on the issue and for your patience while our teams revised the applications.

                        Monique with Intel Corporation

                        • 9. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
                          krzemien

                          Hello Monique with Intel Corporation

                           

                          Many thanks for your response / update.

                           

                          As far as I understand - and witnessed it during IDSA installation - user can accept or decline his/her involvement with Intel Computing Improvement Program... As I declined, where would this any/excessive traffic come from? Probably moot point now, but I thought I would raise it?

                           

                          In either case I need to report that the new IDSA does not seem to work correctly either:

                           

                          On Windows 8.1 laptop it throws the following screen:

                           

                          Intel.JPG

                           

                          On Windows 10 PC it merely opens/redirects from Intel® Driver & Support Assistant to Intel® Driver & Support Assistant FAQ page.

                           

                          I uninstalled previous version of IDSA in both cases - and in both cases declined, when was asked about joining Intel Computing Improvement Program.

                          • 10. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
                            monique_intel

                            krzemien  I will have to ask the development team who support the ICIP program to get an answer to your question.   As far as IDSA is concerned, please try clearing your browser cache history and then rescanning IDSA.  That has seemed to work for some people who were still getting routed to the FAQ page.  Please let me know if that worked for you.

                            Thanks,

                            Monique with Intel Corporation

                            • 11. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
                              krzemien

                              Thanks for your response.

                               

                              Another question worth asking this team is: why Intel Computing Improvement Program gets installed even if user declines to participate during ISDA installation? I had to remove it separately at later stage?

                              (Wouldn't it be better to concentrate on resolving issue introduced earlier rather than adding bells and whistles whoa re of no benefit to any average user?)

                               

                              I will check ISDA behaviour on another user's account on my PC - I (as always) doubt that clearing browser's cache has anything to do with it though.

                               

                              EDITED TO ADD:

                               

                              I opened https://www.intel.com/content/www/us/en/support/intel-driver-support-assistant.html on both machines in Internet Explorer and it worked okay. The behaviour as per the above screenshot is while using latest Firefox 57.0.4 with Ghostery, uBlock and AdBlockPlus - so I guess IDSA seems triggering something that one of these plug-ins do not like.

                              Hope this will be of some help.

                              • 12. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
                                krzemien

                                Just to conclude: it does look like it's working correctly on my both machines (& latest Firefox 58.0.1 either) - with me not changing / clearing anything up.

                                 

                                I gather that this thread might be closed / marked as resolved?

                                • 13. Re: esrv_svc.exe - Intel(R) System Usage Report process allocates MANY TCP Ports in CLOSE_WAIT state.
                                  monique_intel

                                  Hi krzemien.  Yes, I agree this thread can be marked as resolved.  I finally received a reply today from the team who manages the ICIP installer in response to the 2 inquiries you asked in earlier posts:  Their investigation determined this was a bug and are currently working to resolve it in their next version release.

                                   

                                  Thanks again and glad to hear DSA is scanning correctly for you.

                                  Monique with Intel Corporation