https://www.dumpanalysis.org/blog/index.php/2007/11/12/crash-dump-analysis-patterns-part-35/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Sat, 06 Jun 2026 18:28:41 +0000 http://wordpress.org/?v=2.3.3 https://www.dumpanalysis.org/blog/index.php/2007/11/12/crash-dump-analysis-patterns-part-35/#comment-741681 Dmitry Vostokov Thu, 03 Sep 2015 18:13:56 +0000 https://www.dumpanalysis.org/blog/index.php/2007/11/12/crash-dump-analysis-patterns-part-35/#comment-741681 This pattern is now renamed to Object Distribution Anomaly (IRP). It was previously called IRP Distribution Anomaly. This is an example of pattern evolution in Pattern-Based Software Diagnostics. A pattern is refactored as a pattern specialization of a superpattern when similar patterns are identified. This pattern is now renamed to Object Distribution Anomaly (IRP). It was previously called IRP Distribution Anomaly. This is an example of pattern evolution in Pattern-Based Software Diagnostics. A pattern is refactored as a pattern specialization of a superpattern when similar patterns are identified.

]]> https://www.dumpanalysis.org/blog/index.php/2007/11/12/crash-dump-analysis-patterns-part-35/#comment-168332 Crash Dump Analysis » Blog Archive » Stack trace collection, special process, LPC and critical section wait chains, blocked thread, coupled machines, thread waiting time and IRP distribution anomaly: pattern cooperation Sun, 18 Jul 2010 14:09:09 +0000 https://www.dumpanalysis.org/blog/index.php/2007/11/12/crash-dump-analysis-patterns-part-35/#comment-168332 [...] threads have various Windows socket modules on their thread stacks and we check if there is any IRP distribution anomaly using !irpfind command. Counting IRPs we find the most of them are directed towards HTTP, Tcpip and [...] […] threads have various Windows socket modules on their thread stacks and we check if there is any IRP distribution anomaly using !irpfind command. Counting IRPs we find the most of them are directed towards HTTP, Tcpip and […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/11/12/crash-dump-analysis-patterns-part-35/#comment-166398 Crash Dump Analysis » Blog Archive » Icons for Memory Dump Analysis Patterns (Part 57) Tue, 13 Jul 2010 16:53:42 +0000 https://www.dumpanalysis.org/blog/index.php/2007/11/12/crash-dump-analysis-patterns-part-35/#comment-166398 [...] we introduce an icon for IRP Distribution Anomaly [...] […] we introduce an icon for IRP Distribution Anomaly […]

]]> https://www.dumpanalysis.org/blog/index.php/2007/11/12/crash-dump-analysis-patterns-part-35/#comment-156711 Crash Dump Analysis » Blog Archive » IRP distribution anomaly, inconsistent dump, execution residue, hardware activity, coincidental symbolic information, not my version, virtualized system: pattern cooperation Mon, 07 Jun 2010 23:44:05 +0000 https://www.dumpanalysis.org/blog/index.php/2007/11/12/crash-dump-analysis-patterns-part-35/#comment-156711 [...] A complete memory dump was collected. We open it and look at an IRP list. We find statistically higher number of IRPs belonging to Disk and DriverA device [...] […] A complete memory dump was collected. We open it and look at an IRP list. We find statistically higher number of IRPs belonging to Disk and DriverA device […]

]]>