Comments on: Crash Dump Analysis Patterns (Part 73) https://www.dumpanalysis.org/blog/index.php/2008/07/29/crash-dump-analysis-patterns-part-73/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Wed, 06 May 2026 05:49:30 +0000 http://wordpress.org/?v=2.3.3 By: Dmitry Vostokov https://www.dumpanalysis.org/blog/index.php/2008/07/29/crash-dump-analysis-patterns-part-73/#comment-741680 Dmitry Vostokov Mon, 10 Aug 2015 20:12:35 +0000 https://www.dumpanalysis.org/blog/index.php/2008/07/29/crash-dump-analysis-patterns-part-73/#comment-741680 Another example of no sessions: 0: kd> !session There are ZERO session on machine. 0: kd> !process 0 0 **** NT ACTIVE PROCESS DUMP **** PROCESS fffffa8003c77b10 SessionId: none Cid: 0004 Peb: 00000000 ParentCid: 0000 DirBase: 00187000 ObjectTable: fffff8a0000012f0 HandleCount: 231. Image: System PROCESS fffffa80050afb10 SessionId: none Cid: 0198 Peb: 7fffffdf000 ParentCid: 0004 DirBase: a9cf0000 ObjectTable: fffff8a000525970 HandleCount: 22. Image: smss.exe Another example of no sessions:

0: kd> !session
There are ZERO session on machine.

0: kd> !process 0 0
**** NT ACTIVE PROCESS DUMP ****
PROCESS fffffa8003c77b10
SessionId: none Cid: 0004 Peb: 00000000 ParentCid: 0000
DirBase: 00187000 ObjectTable: fffff8a0000012f0 HandleCount: 231.
Image: System

PROCESS fffffa80050afb10
SessionId: none Cid: 0198 Peb: 7fffffdf000 ParentCid: 0004
DirBase: a9cf0000 ObjectTable: fffff8a000525970 HandleCount: 22.
Image: smss.exe

]]>