https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Mon, 11 May 2026 12:40:22 +0000 http://wordpress.org/?v=2.3.3 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-741699 Dmitry Vostokov Mon, 25 Apr 2016 12:44:59 +0000 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-741699 If using LiveKd for child Hyper-V partitions (-hv) we should use -p option to pause the partition. If using LiveKd for child Hyper-V partitions (-hv) we should use -p option to pause the partition.

]]> https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-741693 Dmitry Vostokov Wed, 27 Jan 2016 10:18:56 +0000 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-741693 An example of Mirror Dump in LiveKd: LiveKd and mirror dump example: http://blogs.msdn.com/b/ntdebugging/archive/2016/01/22/virtual-machine-managment-hangs-on-windows-server-2012-r2-hyper-v-host.aspx An example of Mirror Dump in LiveKd: LiveKd and mirror dump example: http://blogs.msdn.com/b/ntdebugging/archive/2016/01/22/virtual-machine-managment-hangs-on-windows-server-2012-r2-hyper-v-host.aspx

]]> https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-741643 Dmitry Vostokov Sun, 29 Dec 2013 11:20:13 +0000 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-741643 More options for consistency from LiveKd: http://technet.microsoft.com/en-us/sysinternals/bb897415.aspx More options for consistency from LiveKd: http://technet.microsoft.com/en-us/sysinternals/bb897415.aspx

]]> https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-428242 Dmitry Vostokov Thu, 23 Feb 2012 17:37:41 +0000 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-428242 The new version of LiveKd pauses a VM while saving a memory dump: http://technet.microsoft.com/en-ie/sysinternals/bb897415 The new version of LiveKd pauses a VM while saving a memory dump: http://technet.microsoft.com/en-ie/sysinternals/bb897415

]]> https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-186337 Crash Dump Analysis » Blog Archive » Structural Memory Patterns (Part 1) Fri, 24 Sep 2010 10:52:24 +0000 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-186337 [...] Inconsistent Dump [...] […] Inconsistent Dump […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-185922 Crash Dump Analysis » Blog Archive » Case Study: Extremely Inconsitent Dump and CPU Spike Wed, 22 Sep 2010 21:57:03 +0000 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-185922 [...] Debugging Experts Magazine Online 100% CPU consumption was reported for one system and a complete memory dump was generated. Unfortunately, it was very inconsistent: [...] […] Debugging Experts Magazine Online 100% CPU consumption was reported for one system and a complete memory dump was generated. Unfortunately, it was very inconsistent: […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-156716 Crash Dump Analysis » Blog Archive » IRP distribution anomaly, inconsistent dump, execution residue, hardware activity, coincidental symbolic information, not my version, virtualized system: pattern cooperation Mon, 07 Jun 2010 23:46:07 +0000 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-156716 [...] WinDbg reports another current thread running on the same processor so we obviously have an inconsistent dump and should exercise [...] […] WinDbg reports another current thread running on the same processor so we obviously have an inconsistent dump and should exercise […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-137618 Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 11) Wed, 24 Mar 2010 14:56:10 +0000 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-137618 [...] Today we introduce an icon for Inconsistent Dump pattern: [...] […] Today we introduce an icon for Inconsistent Dump pattern: […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-128778 Crash Dump Analysis » Blog Archive » Inconsistent dump, stack trace collection, LPC, thread, process, executive resource wait chains, missing threads and waiting thread time: pattern cooperation Sat, 27 Feb 2010 02:06:52 +0000 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-128778 [...] case study to show various wait chain patterns. The complete memory dump from a frozen system is inconsistent, saved by LiveKd. Stack trace collection shows many threads waiting for LPC [...] […] case study to show various wait chain patterns. The complete memory dump from a frozen system is inconsistent, saved by LiveKd. Stack trace collection shows many threads waiting for LPC […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-103488 Crash Dump Analysis » Blog Archive » Insufficient memory, handle leak, wait chain, deadlock, inconsistent dump and overaged system: pattern cooperation Sun, 08 Nov 2009 22:48:17 +0000 https://www.dumpanalysis.org/blog/index.php/2007/01/24/crash-dump-analysis-patterns-part-7/#comment-103488 [...] check paged pool usage but the output is inconsistent (shown in magenta [...] […] check paged pool usage but the output is inconsistent (shown in magenta […]

]]>