Crash Dump Analysis Patterns (Part 164)
When looking at network packet pools using NDIS WinDbg extension we might see increased number of allocated blocks possibly correlated with network problems, for example:
0: kd> !ndiskd.pktpools * normal
Pool Allocator BlocksAllocated BlockSize PktsPerBlock PacketLength
8a467e20 b9090f96 0×1 0×1000 0×14 0xc8 tcpip!ARPRegister+119
8a491460 ba4eea56 0×1 0×1000 0×14 0xc8 wanarp!WanpInitializeNdis+a8
8a466508 b905d368 0×1 0×1000 0xd 0×138 tcpip!InitForwardingPools+53
8a373578 b905becb 0×3 0×1000 0×11 0xe8 tcpip!AllocIPPacketList+59
8a466580 b9095ac5 0×1 0×1000 0xe 0×118 tcpip!IPInit+e0
8a460958 bac40a97 0xb 0×1000 0×14 0xc8 vmxnet+a97
0: kd> !ndiskd.pktpools * no sent packets
Pool Allocator BlocksAllocated BlockSize PktsPerBlock PacketLength
8a467e20 b9090f96 0×1 0×1000 0×14 0xc8 tcpip!ARPRegister+119
8a491460 ba4eea56 0×1 0×1000 0×14 0xc8 wanarp!WanpInitializeNdis+a8
8a466508 b905d368 0×1 0×1000 0xd 0×138 tcpip!InitForwardingPools+53
8a373578 b905becb 0xa3 0×1000 0×11 0xe8 tcpip!AllocIPPacketList+59
8a466580 b9095ac5 0×1 0×1000 0xe 0×118 tcpip!IPInit+e0
8a460958 bac40a97 0×9b 0×1000 0×14 0xc8 vmxnet+a97
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -