Crash Dump Analysis Patterns (Part 137)
After getting my hands on crash dumps from Windows Azure cloud platform I discerned a few patterns and the first one is just called Cloud Environment. The pattern covers both development (emulator, if it exists) and real (staging and deployment) environments. This pattern is best diagnosed by looking at specific infrastructure modules:
0:016> lm m Wa*
start end module name
00000000`00b00000 00000000`00b0c000 WaWorkerHost
00000000`74fb0000 00000000`74fbd000 WaRuntimeProxy
0:016> lm m *Azure*
start end module name
00000000`57cd0000 00000000`57d26000 Microsoft_WindowsAzure_StorageClient
00000000`58820000 00000000`5886c000 Microsoft_WindowsAzure_Diagnostics
00000000`5c750000 00000000`5c764000 Microsoft_WindowsAzure_ServiceRuntime
Development platform can be distinguished for now by looking at ntdll version:
0:016> lmv m ntdll
start end module name
00000000`76de0000 00000000`76f5f000 ntdll
Loaded symbol image file: ntdll.dll
Image path: D:\Windows\System32\ntdll.dll
Image name: ntdll.dll
Timestamp: Fri May 13 21:45:21 2011 (4DCD9861)
CheckSum: 00188814
ImageSize: 0017F000
File version: 6.0.6002.18446
Product version: 6.0.6002.18446
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntdll.dll
OriginalFilename: ntdll.dll
ProductVersion: 6.0.6002.18446
FileVersion: 6.0.6002.18446 (rd_os_v1.110513-1321)
FileDescription: NT Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
0:016> lmv m ntdll
start end module name
00000000`775a0000 00000000`7774b000 ntdll
Loaded symbol image file: ntdll.dll
Image path: C:\Windows\System32\ntdll.dll
Image name: ntdll.dll
Timestamp: Tue Jul 14 02:32:27 2009 (4A5BE02B)
CheckSum: 001B1CB5
ImageSize: 001AB000
File version: 6.1.7600.16385
Product version: 6.1.7600.16385
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntdll.dll
OriginalFilename: ntdll.dll
ProductVersion: 6.1.7600.16385
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
FileDescription: NT Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.
We see that real Windows Azure is currently RD OS V1 (at least in a datacenter chosen for West European affinity during deployment).
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -