Browse by Tags

Tagged Content List
  • Blog Post: Making minidumps more useful

    Miniport: meet minidump Minidumps are a small (~100kb) record of a crash.  As their name suggests, they’re optimized for small size… at the expense of usefulness.  Minidumps include just enough information to see the stack of the faulting thread, but they don’t generally have other threads...
  • Blog Post: !ndiskd.nbl -log

    All your NBL are belong to !ndiskd Last time we talked about !ndiskd.pendingnbls .  This command shows you which component currently holds an NBL.  But what if you want to see how the NBL got there?  That sounds like a job for !ndiskd.nbl-log ! Starting with Windows 8 and Windows Server...
  • Blog Post: !ndiskd.pendingnbls

    I’ve got your NBLs right here The most common issue we see in NDIS drivers is a “lost packet”.  You have lost a packet when NDIS gives your driver a NET_BUFFER_LIST (NBL) and your driver never returns the packet back to NDIS.  A lost packet will often show up as a hang during Pause or a 0x9F...
  • Blog Post: WPP and KD

    Industrial-strength tracing in an industrial-strength debugger Last time we talked about controlling WPP from the command-line.  This is great if you need to send instructions to a customer to collect logs, or if you want to automatically enable NDIS tracing on all your test machines.  ...
  • Blog Post: Debugging with NDISKD

    Chapter three of a beginner’s guide to debugging with NDISKD In Part 1 of the series , we set up a kernel debugger. In the second installment , we took a closer look at ndiskd’s output for miniports. Today, we will use what we know to debug an actual network issue. The symptoms are...
  • Blog Post: NDISKD and !miniport

    The second installment of a beginner’s guide to debugging with NDISKD Last time we set up the debugger, looked at !ndiskd.help , and dumped out a table of active miniports. Today we’ll continue our laboratory by examining a specific miniport. As before, we use !ndiskd.miniports to get...
  • Blog Post: Getting started with NDISKD

    Part 1 of a beginner’s guide to debugging with NDISKD If you haven’t already, grab the updated WDK with its new ndiskd debugger extension . You’ll need it for today’s laboratory exercise: getting started with ndiskd. If you are new to Windows kernel debugging, check out...
  • Blog Post: What causes a bug check 0xD1 (IRQL_NOT_LESS_OR_EQUAL)

    The MSDN document summarizes the cause for the D1 (IRQL_NOT_LESS_OR_EQUAL) pretty well, for people who know how the memory manager in Windows works. It basically says that the cause is: A driver tried to access an address that is pageable (or that is completely invalid) while the IRQL was too high. This...
  • Blog Post: Troubleshoot a Windows bluescreen, a.k.a bugcheck, a.k.a blue screen of death

    I have read a lot of posts in multiple forums on the internet where people ask "My machine keeps bluescreen-ining, what do I do?"... a common response is "Reinstall Windows and the problem will most likely go away". This is a wrong answer because if you simply reinstall Windows you don't know what caused...
Page 1 of 1 (9 items)