Sysinternals Homepage
Forum Home Forum Home > Sysinternals Utilities > Process Explorer
  New Posts New Posts RSS Feed: DLL's loaded in System process show 0 bytes
  FAQ FAQ  Forum Search   Calendar   Register Register  Login Login

DLL's loaded in System process show 0 bytes
 Post Reply Post Reply Page  123>
Author
Message Reverse Sort Order
  Share Topic Share Topic  Topic Search Topic Search  Topic Options Topic Options
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Topic: DLL's loaded in System process show 0 bytes
    Posted: 22 August 2008 at 12:10am
Hm, this topic seems somewhat similar...
Daily affirmation:
net helpmsg 4006
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 20 August 2008 at 2:39am
I had to reboot the server because of VSS errors
Do the VSS errors offer any clue as to what may be going on?
 
We were getting Delayed Write Failures before we lost the volume in Disk Manager.
Hardware connections OK?  Diagnostics pass?
 
a memory mapping failed.
Perhaps, not adequate contiguous space to perform the mapping?  Any specific error codes (anything in the other data?)?
 
Chkdsk isn't reporting any errors on any volumes, correct?  And there were no other events in the Event Logs leading up to this?


Edited by molotov - 20 August 2008 at 2:40am
Daily affirmation:
net helpmsg 4006
Back to Top
jeffbry View Drop Down
Newbie
Newbie


Joined: 18 August 2008
Online Status: Offline
Posts: 15 		Post Options Post Options   Quote jeffbry Quote  Post ReplyReply Direct Link To This Post Posted: 20 August 2008 at 12:05am
Now I am really confused..
 
The system process dropped to 10MB earlier today.  I had to reboot the server because of VSS errors and volumes disappearing.  System process went back to 2GB.. few hours later its now 800MB. 
 
!VM shows Shared Commit with same value, even though system is at 800MB
 
I setup ProcMon for boot logging next time we lose a volume.
 
We were getting Delayed Write Failures before we lost the volume in Disk Manager.
 
Also seeing VolSnap event 84 .. "a memory mapping failed.  Consider increasing the size of the paging file."
 
Is it because of the system process consuming memory that we have disk problems or is it because we have disk problems, the system process is consuming memory ??
 
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 19 August 2008 at 4:18pm
Windows Internals' Chapter 5: "Startup and Shutdown" has a section called "Boot Process" that would seem relevant.
 
May also find the following to be of interest:
(Looks like parts 3 and 4 are MIA)
 
Wonder if Process Monitor's bootlogging may be useful to attempt?  How much free space is there on the boot drive?
 
(memory.dmp still exists).
Not sure what you mean by this...


Edited by molotov - 19 August 2008 at 4:18pm
Daily affirmation:
net helpmsg 4006
Back to Top
jeffbry View Drop Down
Newbie
Newbie


Joined: 18 August 2008
Online Status: Offline
Posts: 15 		Post Options Post Options   Quote jeffbry Quote  Post ReplyReply Direct Link To This Post Posted: 19 August 2008 at 4:04pm
DPE is set to 0
 
Is there a doc or blog that outlines the steps in which things load when booting?  I put the /SOS and /basevideo switch in boot.ini and I can see that we hang right after chkdsk (memory.dmp still exists).  We sit on the screen that says "Windows has finished checking the disk" for about 10 min and then I see the splash for "applying computer settings" so I am curious to find out what we are hanging on at the point during boot.


Edited by jeffbry - 19 August 2008 at 4:05pm
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 19 August 2008 at 12:04pm
memory management thread stacks
Nothing specific - my thought was that something unusual may stand out.
 
windbg is not my specialty
Same here...  Embarrassed
 
Out of curiosity - what's DisablePagingExecutive set to?
Daily affirmation:
net helpmsg 4006
Back to Top
jeffbry View Drop Down
Newbie
Newbie


Joined: 18 August 2008
Online Status: Offline
Posts: 15 		Post Options Post Options   Quote jeffbry Quote  Post ReplyReply Direct Link To This Post Posted: 19 August 2008 at 4:05am
start time is unknown, but the server has only been in production for a couple months now so I suspect it has been there from the beginning.
 
Stopping SQL and/or VS doesnt help, either does stopping DPM.
 
!vm 2 shows basically the same thing. Shared Commit is now 2101184 kb
 
Is there something in the memory management thread stacks that you would like to see from the !vm ?
 
I did create a memory.dmp with crash.exe but windbg is not my specialty so didnt get very far looking at the dump.
 
We have another server setup the same way exhibiting the same problem (allthough system process is at 750MB).  Also, I have yet another DPM server with a system process of 500MB (that doesnt have VSR2, but does have SQL and is running on Dell HW instead of HP)... however, my DPM VM is only sitting at 268K so I dont think it could be DPM related.
 
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 19 August 2008 at 3:31am
When did this start happening?
 
Is the system currently in production?
 
Also curious what effect stopping SQL Server and Virtual Server may have, if possible and if that wasn't included in previous exercises...
 
Try the !vm 2 command in LiveKD and see what output you get.
 
Daily affirmation:
net helpmsg 4006
Back to Top
jeffbry View Drop Down
Newbie
Newbie


Joined: 18 August 2008
Online Status: Offline
Posts: 15 		Post Options Post Options   Quote jeffbry Quote  Post ReplyReply Direct Link To This Post Posted: 19 August 2008 at 3:15am
It gets in this state right at boot.  As a matter of fact, it takes 15 minutes to boot; there is a blank screen that long right after the initial splash screen and before we start to see the desktop.  We have the same problem in safe mode.  The box will become sluggish at time.  Seems to come in waves every 60-120 seconds and will last for 60 seconds.  We also suspect this is slowing down DPM.
 
We are running DPM 2007, SQL 2005 and Virutal Server (no VM's running though).  We have an MSA1500 attached via Emulex HBA's.  All drivers and firmware have been updated.  McAfee A/V was uninstalled.  Hotfix 954337 was installed.  Again, disabling all services from msconfig doesnt help either. 
 
No citrix and no relevant events.
 
I can run liveKD


Edited by jeffbry - 19 August 2008 at 3:17am
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 19 August 2008 at 3:08am
Shared commit does look high.  How long does it take for the system to get into this state?  What types of software is the system running?  Any Citrix?  Are you able to run LiveKD on the system?  What types of problems, if any, are you seeing?  Any relevant events in the Event Logs?
Daily affirmation:
net helpmsg 4006
Back to Top
 Post Reply Post Reply Page  123>

Forum Jump Forum Permissions View Drop Down