![]() |
DPC (Deferred Procedure Calls) |
Post Reply
|
Page <12345 54> |
| Author | |
Haysys
Newbie
Joined: 26 June 2010 Location: Sammamish, WA Online Status: Offline Posts: 12 |
Post Options
Quote Reply
Topic: DPC (Deferred Procedure Calls)Posted: 27 June 2010 at 7:55pm |
|
Hi,
Attached is the output file.
The machine is a SBS 2003 server with 12 clients and runs a lot of stuff, including Exchange, 4 instances of SQLServer, and various connectors used in providing the clients data. That said, it was running at idle when the snapshot was taken. In terms of malware ,ect., I ma convinced the machine is clean. If I need to do a clean boot with limited startup services, then please advise. From my point of view, the percentage of resources being consumed by normal ops is 1-2% (as indicated by ProcExplorer). Everything else is being consumed by the problem. My gut tells me it is the RAID system and/or one of the disks.
Again, thanks for your attention and help. I do appreciate it.
Cheers!!
David
|
|
|
David Hays
|
|
![]() |
|
dirbase
Senior Member
Joined: 26 March 2008 Online Status: Offline Posts: 440 |
Post Options
Quote Reply
Posted: 27 June 2010 at 5:19pm |
|
Could you please confirm whether the DPCs are also present when the system is idle?
Please make sure that both dbghelp.dll and symsrv.dll from the Debugging Tools for Windows are present in the same directory as Kernrate_i386_XP.exe. Then try the following command while online: Kernrate_i386_XP.exe -m -b 4 -i 2500 -w 3 -s 10 -k 3 -j "symsrv*symsrv.dll**http://msdl.microsoft.com/download/symbols" -z hal -z intelppm -z ACPI -z ntkrnlpa >output.txt and please upload the output.txt file here. |
|
![]() |
|
Haysys
Newbie
Joined: 26 June 2010 Location: Sammamish, WA Online Status: Offline Posts: 12 |
Post Options
Quote Reply
Posted: 26 June 2010 at 6:35pm |
|
David Hays
|
|
![]() |
|
dirbase
Senior Member
Joined: 26 March 2008 Online Status: Offline Posts: 440 |
Post Options
Quote Reply
Posted: 26 June 2010 at 12:58pm |
|
Hi Haysys,
The file you uploaded is not a kernrate output file (it's used for symbol resolution). Please try first to launch kernrate without symbols options while the system is idle (no applications running) Kernrate_i386_XP.exe -w 3 -s 10 >modules.txt and upload or copy here the resulting modules.txt file; so that we can first check what are the modules used the most. |
|
![]() |
|
Haysys
Newbie
Joined: 26 June 2010 Location: Sammamish, WA Online Status: Offline Posts: 12 |
Post Options
Quote Reply
Posted: 26 June 2010 at 3:13am |
|
Hello DirBase and all other helpful souls,
I'd like to piggyback on this thread, specifically your post of 04 January 2010 at 11:18am.
I have a Win Server 2003 SBS running a RAID and quite a few DB apps. I've noticed a drag on this machine and have been working to find the problem. The system is showing a 55% DPC and 35% IntelPPM CPU utilization. I obtained this info with KrView. The resource meter has nearly as much redline as blue.
I took your directive and ran the Kernrate_i386_xp line with symbols, and produced an output file that has info way beyond my understanding. I'm wondering if you would spend some of you valuable time looking at this and tell me what piece of hardware or element has gone awry and eating up so much of this machine's CPU resource.
I've uploaded the Halmacpi.pdb. The ntkrnlpa.mdb file was over the 500k limit. If you need it, I'll get it to you.
Thanks for your attention... I do apprecciate it!!
Edited by Haysys - 26 June 2010 at 3:30am |
|
|
David Hays
|
|
![]() |
|
BigBlueMan
Newbie
Joined: 07 April 2010 Online Status: Offline Posts: 1 |
Post Options
Quote Reply
Posted: 09 April 2010 at 7:20am |
|
I had the same problem and have resolved it. On Lenovo W500 I noticed a steady 17% CPU on one core. I installed Process Explorer and saw that it was all due to DPCs. I used kernrate to determine that it was my Conexant SmartAudio HD driver - CHDAU32 - when Process Explorer showed this condition (frequently, for a couple of minutes at a time) I fired up kernrate for about 30 seconds or so, then hit control C to view the kernrate results. I checked the driver version against Lenovo's website and it was at current level, but I decided to download the current driver and install it again. The problem has not reappeared. Kernrate identified the problem child, but kernrate is not too user friendly. Try this:
- download kernrate http://www.microsoft.com/downloads/details.aspx?familyid=d6e95259-8d9d-4c22-89c4-fad382eddcd1&displaylang=en - run it and perform the setup in the KrView folder - open a DOS window and cd to the program files\KrView\Kernrates directory When you notice your problem child running hot in Process Explorer... - fire off the kernrate_i386_XP.exe command (no args needed) - let it run for 30 seconds or so and then press control c You will see the output in the window. My list shows CHDAU32 ranked as number two in CPU time the smoking gun... Time 22611 hits, 25000 events per hit -------- Module Hits msec %Total Events/Sec ntoskrnl 19582 28859 86 % 16963512 CHDAU32 2128 28859 9 % 1843445 hal 623 28859 2 % 539692 win32k 72 28859 0 % 62372 Good luck with your drivers... |
|
![]() |
|
gtbfl
Newbie
Joined: 17 February 2010 Online Status: Offline Posts: 4 |
Post Options
Quote Reply
Posted: 26 February 2010 at 6:02pm |
|
I don't pretend to understand verifier, but my problems disappeared after I followed the steps in that link. My computer my be slower than it should be with the verifier installed but it did cause my kernal CPUs to go from 20% to 1% so the system is much faster in comparison. Probably if I turn it off I would pick up some amount of incremental speed but because I don't really understand why or how verifier tool corrected the problem ( I still don't know what the problem was - just that the symptoms have disappeared )I am nervous about messing with it.
|
|
![]() |
|
snoone
Senior Member
Joined: 04 September 2009 Location: Amherst, NH Online Status: Offline Posts: 284 |
Post Options
Quote Reply
Posted: 23 February 2010 at 5:07pm |
|
Are you saying that you solved your performance issues by enabling Driver Verifier? That is entirely bizarre, I'd guess that something else changed as well since Verifier makes thing slower by definition.
-scott
|
|
![]() |
|
gtbfl
Newbie
Joined: 17 February 2010 Online Status: Offline Posts: 4 |
Post Options
Quote Reply
Posted: 23 February 2010 at 7:33am |
|
This turned out to be a driver issue. The issue got fixed with microsoft verifier.exe tool but don't ask me how. You can see the steps I followed here :
http://www.bleepingcomputer.com/forums/index.php?showtopic=296141&st=15&gopid=1643974&#entry1643974 |
|
![]() |
|
gtbfl
Newbie
Joined: 17 February 2010 Online Status: Offline Posts: 4 |
Post Options
Quote Reply
Posted: 17 February 2010 at 10:21pm |
|
Thanks Phil, but i tried plugging the adapter into 2 different slots with no luck ( although booting with with it unplugged certainly worked well :-) ). If you are taking about port as in something that can be changed through software then I have no idea how to do that .
|
|
![]() |
|
Post Reply
|
Page <12345 54> |
| Forum Jump | Forum Permissions ![]() You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |