Sysinternals Homepage
Forum Home Forum Home > Windows Discussions > Troubleshooting
  New Posts New Posts RSS Feed: DPC (Deferred Procedure Calls)
  FAQ FAQ  Forum Search   Calendar   Register Register  Login Login

DPC (Deferred Procedure Calls)

 Post Reply Post Reply Page  <12345 54>
Author
Message Reverse Sort Order
Haysys View Drop Down
Newbie
Newbie
Avatar

Joined: 26 June 2010
Location: Sammamish, WA
Online Status: Offline
Posts: 12
Post Options Post Options   Quote Haysys Quote  Post ReplyReply Direct Link To This Post Topic: DPC (Deferred Procedure Calls)
    Posted: 27 June 2010 at 7:55pm
Hi,
 
Attached is the output file.
 
The machine is a SBS 2003 server with 12 clients and runs a lot of stuff, including Exchange, 4 instances of SQLServer, and various connectors used in providing the clients data. That said, it was running at idle when the snapshot was taken. In terms of malware ,ect., I ma convinced the machine is clean. If I need to do a clean boot with limited startup services, then please advise. From my point of view, the percentage of resources being consumed by normal ops is 1-2% (as indicated by ProcExplorer). Everything else is being consumed by the problem. My gut tells me it is the RAID system and/or one of the disks.
 
Again, thanks for your attention and help. I do appreciate it.
 
Cheers!!
 
David
David Hays
Back to Top
dirbase View Drop Down
Senior Member
Senior Member
Avatar

Joined: 26 March 2008
Online Status: Offline
Posts: 440
Post Options Post Options   Quote dirbase Quote  Post ReplyReply Direct Link To This Post Posted: 27 June 2010 at 5:19pm
Could you please confirm whether the DPCs are also present when the system is idle?
Please make sure that both dbghelp.dll and symsrv.dll from the Debugging Tools for Windows are present in the same directory as Kernrate_i386_XP.exe.
Then try the following command while online:
Kernrate_i386_XP.exe -m -b 4 -i 2500 -w 3 -s 10 -k 3 -j "symsrv*symsrv.dll**http://msdl.microsoft.com/download/symbols" -z hal -z intelppm -z ACPI -z ntkrnlpa >output.txt
and please upload the output.txt file here.
Back to Top
Haysys View Drop Down
Newbie
Newbie
Avatar

Joined: 26 June 2010
Location: Sammamish, WA
Online Status: Offline
Posts: 12
Post Options Post Options   Quote Haysys Quote  Post ReplyReply Direct Link To This Post Posted: 26 June 2010 at 6:35pm
Hi DirBase,
 
Thanks for responding.
 
Here is the txt file. Thanks!!
 
David Hays
Back to Top
dirbase View Drop Down
Senior Member
Senior Member
Avatar

Joined: 26 March 2008
Online Status: Offline
Posts: 440
Post Options Post Options   Quote dirbase Quote  Post ReplyReply Direct Link To This Post Posted: 26 June 2010 at 12:58pm
Hi Haysys,

The file you uploaded is not a kernrate output file (it's used for symbol resolution).
Please try first to launch kernrate without symbols options while the system is idle (no applications running)
Kernrate_i386_XP.exe  -w 3 -s 10 >modules.txt
and upload or copy here the resulting modules.txt file; so that we can first check what are the modules used the most.

Back to Top
Haysys View Drop Down
Newbie
Newbie
Avatar

Joined: 26 June 2010
Location: Sammamish, WA
Online Status: Offline
Posts: 12
Post Options Post Options   Quote Haysys Quote  Post ReplyReply Direct Link To This Post Posted: 26 June 2010 at 3:13am
Hello DirBase and all other helpful souls,
 
I'd like to piggyback on this thread, specifically your post of 04 January 2010 at 11:18am.
 
I have a Win Server 2003 SBS running a RAID and quite a few DB apps. I've noticed a drag on this machine and have been working to find the problem. The system is showing a 55% DPC and 35% IntelPPM CPU utilization. I obtained this info with KrView. The resource meter has nearly as much redline as blue.
 
I took your directive and ran the Kernrate_i386_xp line with symbols, and produced an output file that has info way beyond my understanding. I'm wondering if you would spend some of you valuable time looking at this and tell me what piece of hardware or element has gone awry and eating up so much of this machine's CPU resource.
 
I've uploaded the Halmacpi.pdb. The ntkrnlpa.mdb file was over the 500k limit. If you need it, I'll get it to you.
 
Thanks for your attention... I do apprecciate it!!
 


Edited by Haysys - 26 June 2010 at 3:30am
David Hays
Back to Top
BigBlueMan View Drop Down
Newbie
Newbie
Avatar

Joined: 07 April 2010
Online Status: Offline
Posts: 1
Post Options Post Options   Quote BigBlueMan Quote  Post ReplyReply Direct Link To This Post Posted: 09 April 2010 at 7:20am
I had the same problem and have resolved it.  On Lenovo W500 I noticed a steady 17% CPU on one  core.  I installed Process Explorer and saw that it was all due to DPCs.  I used kernrate to determine that it was my Conexant SmartAudio HD driver - CHDAU32 - when Process Explorer showed this condition (frequently, for a couple of minutes at a time) I fired up kernrate for about 30 seconds or so, then hit control C to view the kernrate results.  I checked the driver version against Lenovo's website and it was at current level, but I decided to download the current driver and install it again.  The problem has not reappeared.  Kernrate identified the problem child, but kernrate is not too user friendly.  Try this:
- download kernrate  http://www.microsoft.com/downloads/details.aspx?familyid=d6e95259-8d9d-4c22-89c4-fad382eddcd1&displaylang=en
- run it and perform the setup in the KrView folder
- open a DOS window and cd to the program files\KrView\Kernrates directory
When you notice your problem child running hot in Process Explorer...
- fire off the kernrate_i386_XP.exe command (no args needed)
- let it run for 30 seconds or so and then press control c
You will see the output in the window.  My list shows CHDAU32 ranked as number two in CPU time the smoking gun...
Time   22611 hits, 25000 events per hit --------
 Module                                Hits   msec  %Total  Events/Sec
ntoskrnl                              19582      28859    86 %    16963512
CHDAU32                                2128      28859     9 %     1843445
hal                                     623      28859     2 %      539692
win32k                                   72      28859     0 %       62372


Good luck with your drivers...

Back to Top
gtbfl View Drop Down
Newbie
Newbie


Joined: 17 February 2010
Online Status: Offline
Posts: 4
Post Options Post Options   Quote gtbfl Quote  Post ReplyReply Direct Link To This Post Posted: 26 February 2010 at 6:02pm
I don't pretend to understand verifier, but my problems disappeared after I followed the steps in that link. My computer my be slower than it should be with the verifier installed but it did cause  my kernal CPUs to go from 20% to 1% so the system is much faster in comparison. Probably if I turn it off I would pick up some amount of incremental speed but because I don't really understand why or how verifier tool corrected the problem ( I still don't know what the problem was - just that the symptoms have disappeared )I am nervous about messing with it.  
Back to Top
snoone View Drop Down
Senior Member
Senior Member


Joined: 04 September 2009
Location: Amherst, NH
Online Status: Offline
Posts: 284
Post Options Post Options   Quote snoone Quote  Post ReplyReply Direct Link To This Post Posted: 23 February 2010 at 5:07pm
Are you saying that you solved your performance issues by enabling Driver Verifier? That is entirely bizarre, I'd guess that something else changed as well since Verifier makes thing slower by definition.
 
-scott
Back to Top
gtbfl View Drop Down
Newbie
Newbie


Joined: 17 February 2010
Online Status: Offline
Posts: 4
Post Options Post Options   Quote gtbfl Quote  Post ReplyReply Direct Link To This Post Posted: 23 February 2010 at 7:33am
This turned out to be a driver issue. The issue got fixed with microsoft verifier.exe tool but don't ask me how. You can see the steps I followed here :

http://www.bleepingcomputer.com/forums/index.php?showtopic=296141&st=15&gopid=1643974&#entry1643974
Back to Top
gtbfl View Drop Down
Newbie
Newbie


Joined: 17 February 2010
Online Status: Offline
Posts: 4
Post Options Post Options   Quote gtbfl Quote  Post ReplyReply Direct Link To This Post Posted: 17 February 2010 at 10:21pm
Thanks Phil, but i tried plugging the adapter into 2 different slots with no luck ( although booting with with it unplugged certainly worked well :-)  ).  If  you are taking about port as in something that can be changed through software then I have no idea how to do that .
Back to Top
 Post Reply Post Reply Page  <12345 54>

Forum Jump Forum Permissions View Drop Down