Sysinternals Homepage
Forum Home Forum Home > Windows Discussions > Troubleshooting
  New Posts New Posts RSS Feed - Virtual backup to CIFS Share
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Virtual backup to CIFS Share

 Post Reply Post Reply Page  12>
Author
Message
dleemills View Drop Down
Newbie
Newbie


Joined: 27 July 2009
Location: Des Moines, IA
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote dleemills Quote  Post ReplyReply Direct Link To This Post Topic: Virtual backup to CIFS Share
    Posted: 27 July 2009 at 7:57pm
I am backing up a Virtual Server to a CIFS share. The virtual server being backed up is quite large and creates a backup file of around 430 gig. My problem is on the windows 2003 server (DELL PE 2950) hosting the CIFS/SMB share where the backup file is being written. The problem is with a Highpoint RocketRaid 2322 card. The backup will work when it is written to a single drive using a Rosewill esata card. When backing up to the share on the 2322 everything seems to be fine until the backup file gets to about 35 gig, at which point the system process begins misbehaving, specifically the ntkrnlpa.exe and srv.sys . Two or three of the ntkrnlpa.exe processes start using more and more cpu time. By the time the file is 100 gig they are using a combined 20% and by the time the file is 200 gig they are using a combined 60% and my copy throughput is down to just 3 mbs.  I have updated all of the firmware and drivers on the system. I have been through all of the posts on this board with similar issues. I have a trouble ticket into HighPoint. Any help would be greatly appreciated. I have included the output from the kernrate and a screenshot of process explorer. I have the symbols loaded an configured. This information is taken when the file is about 60 gig and the system process is floating between 5 and 11% .
 
 /==============================\
<         KERNRATE LOG           >
 \==============================/
Date: 2009/07/27   Time: 13:31:41
Machine Name: DSM0SV07
Number of Processors: 2
PROCESSOR_ARCHITECTURE: x86
PROCESSOR_LEVEL: 6
PROCESSOR_REVISION: 0f06
Physical Memory: 4091 MB
Pagefile Total: 8015 MB
Virtual Total: 2047 MB
PageFile1: \??\C:\pagefile.sys, 4092MB
OS Version: 5.2 Build 3790 Service-Pack: 2.0
WinDir: C:\WINDOWS
Kernrate User-Specified Command Line:
kernrate_i386_xp.exe

Kernel Profile (PID = 0): Source= Time,
Using Kernrate Default Rate of 25000 events/hit
------------Overall Summary:--------------
P0     K 0:00:02.296 (17.6%)  U 0:00:00.609 ( 4.7%)  I 0:00:10.140 (77.7%)  DPC 0:00:00.406 ( 3.1%)  Interrupt 0:00:00.250 ( 1.9%)
       Interrupts= 48958, Interrupt Rate= 3752/sec.
P1     K 0:00:01.265 ( 9.7%)  U 0:00:00.140 ( 1.1%)  I 0:00:11.640 (89.2%)  DPC 0:00:00.531 ( 4.1%)  Interrupt 0:00:00.218 ( 1.7%)
       Interrupts= 48957, Interrupt Rate= 3752/sec.
TOTAL  K 0:00:03.562 (13.7%)  U 0:00:00.750 ( 2.9%)  I 0:00:21.781 (83.5%)  DPC 0:00:00.937 ( 3.6%)  Interrupt 0:00:00.468 ( 1.8%)
       Total Interrupts= 97915, Total Interrupt Rate= 7505/sec.

Total Profile Time = 13046 msec
                                       BytesStart          BytesStop         BytesDiff.
    Available Physical Memory   ,      3272265728,      3282415616,        10149888
    Available Pagefile(s)       ,      6418038784,      6417129472,         -909312
    Available Virtual           ,      2132606976,      2131558400,        -1048576
    Available Extended Virtual  ,               0,               0,               0
                                  Total      Avg. Rate
    Context Switches     ,       206079,         15795/sec.
    System Calls         ,       102411,         7849/sec.
    Page Faults          ,        76839,         5889/sec.
    I/O Read Operations  ,           85,         7/sec.
    I/O Write Operations ,           61,         5/sec.
    I/O Other Operations ,         1246,         96/sec.
    I/O Read Bytes       ,         3832,         45/ I/O
    I/O Write Bytes      ,        47256,         775/ I/O
    I/O Other Bytes      ,    506582126,         406567/ I/O
-----------------------------
Results for Kernel Mode:
-----------------------------
OutputResults: KernelModuleCount = 131
Percentage in the following table is based on the Total Hits for the Kernel
Time   9976 hits, 25000 events per hit --------
 Module                                Hits   msec  %Total  Events/Sec
hal                                    7464      13047    74 %    14302138
ntkrnlpa                               2068      13047    20 %     3962596
tcpip                                   203      13047     2 %      388978
bxvbdx                                  112      13047     1 %      214608
NDIS                                     29      13047     0 %       55568
win32k                                   23      13047     0 %       44071
bxnd52x                                  18      13047     0 %       34490
rr232x                                   12      13047     0 %       22993
Ntfs                                      9      13047     0 %       17245
netbt                                     6      13047     0 %       11496
fltmgr                                    6      13047     0 %       11496
srv                                       5      13047     0 %        9580
hardlock                                  5      13047     0 %        9580
Wdf01000                                  5      13047     0 %        9580
SCSIPORT                                  4      13047     0 %        7664
USBPORT                                   3      13047     0 %        5748
afd                                       1      13047     0 %        1916
ipsec                                     1      13047     0 %        1916
CLASSPNP                                  1      13047     0 %        1916
atapi                                     1      13047     0 %        1916
================================= END OF RUN ==================================
 
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Status: Offline
Points: 17531
Post Options Post Options   Thanks (0) Thanks(0)   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 28 July 2009 at 4:45am
Hi Dan,

I don't suppose the stack of the thread in question provides any additional info?
Daily affirmation:
net helpmsg 4006
Back to Top
dleemills View Drop Down
Newbie
Newbie


Joined: 27 July 2009
Location: Des Moines, IA
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote dleemills Quote  Post ReplyReply Direct Link To This Post Posted: 29 July 2009 at 6:40pm
srv.sys!ExpWorkerThread
 
ntkrnlpa.exe!KiSuspendThread
ntkrnlpa.exe!ReferenceVacbLevel+0x13
ntkrnlpa.exe!CcSetVacbLargeOffset+0x176
ntkrnlpa.exe!KiSwapContext+0x26
ntkrnlpa.exe!KiSwapThread+0x2e5
ntkrnlpa.exe!KeWaitForSingleObject+0x346
ntkrnlpa.exe!KiSuspendThread+0x18
ntkrnlpa.exe!KiDeliverApc+0x117
ntkrnlpa.exe!KiCheckForKernelApcDelivery+0x1c
srv.sys!SrvFsdRestartWriteAndX+0x39a
srv.sys!SrvSmbWriteAndX+0x73c
srv.sys!SrvProcessSmb+0xb7
srv.sys!WorkerThread+0x138
ntkrnlpa.exe!PspSystemThreadStartup+0x2e
ntkrnlpa.exe!KiThreadStartup+0x16

 
Back to Top
dleemills View Drop Down
Newbie
Newbie


Joined: 27 July 2009
Location: Des Moines, IA
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote dleemills Quote  Post ReplyReply Direct Link To This Post Posted: 29 July 2009 at 6:49pm
ntkrnlpa.exe!ExpWorkerThread
 
ntkrnlpa.exe!KiSuspendThread+0x18
ntkrnlpa.exe!KiDeliverApc+0x117
hal.dll!HalpDispatchSoftwareInterrupt+0x49
hal.dll!HalpCheckForSoftwareInterrupt+0x81
hal.dll!KfLowerIrql+0x62
hal.dll!KeReleaseQueuedSpinLock+0x2d
ntkrnlpa.exe!MmFlushSection+0x1da
ntkrnlpa.exe!CcFlushCache+0x3a6
ntkrnlpa.exe!CcWriteBehind+0x11b
ntkrnlpa.exe!CcWorkerThread+0x15a
ntkrnlpa.exe!ExpWorkerThread+0xeb
ntkrnlpa.exe!PspSystemThreadStartup+0x2e
ntkrnlpa.exe!KiThreadStartup+0x16
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Status: Offline
Points: 17531
Post Options Post Options   Thanks (0) Thanks(0)   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 29 July 2009 at 7:07pm
What does memory usage look like on the system, when the performance tanks?  Can you run livekd on the system, and check !vm?
Daily affirmation:
net helpmsg 4006
Back to Top
dleemills View Drop Down
Newbie
Newbie


Joined: 27 July 2009
Location: Des Moines, IA
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote dleemills Quote  Post ReplyReply Direct Link To This Post Posted: 29 July 2009 at 7:31pm

*** Virtual Memory Usage ***
        Physical Memory:     1047198 (   4188792 Kb)
        Page File: \??\C:\pagefile.sys
          Current:   4190208 Kb  Free Space:   4112180 Kb
          Minimum:   4190208 Kb  Maximum:      4190208 Kb
        Available Pages:      774045 (   3096180 Kb)
        ResAvail Pages:       959613 (   3838452 Kb)
        Locked IO Pages:         220 (       880 Kb)
        Free System PTEs:     178490 (    713960 Kb)
        Free NP PTEs:          32766 (    131064 Kb)
        Free Special NP:           0 (         0 Kb)
        Modified Pages:          238 (       952 Kb)
        Modified PF Pages:         0 (         0 Kb)
        NonPagedPool Usage:    11941 (     47764 Kb)
        NonPagedPool Max:      65215 (    260860 Kb)
        PagedPool 0 Usage:     70677 (    282708 Kb)
        PagedPool 1 Usage:       549 (      2196 Kb)
        PagedPool 2 Usage:       542 (      2168 Kb)
        PagedPool 3 Usage:       545 (      2180 Kb)
        PagedPool 4 Usage:       543 (      2172 Kb)
        PagedPool Usage:       72856 (    291424 Kb)
        PagedPool Maximum:     90624 (    362496 Kb)
        Session Commit:          343 (      1372 Kb)
        Shared Commit:          2520 (     10080 Kb)
        Special Pool:              0 (         0 Kb)
        Shared Process:         5170 (     20680 Kb)
        PagedPool Commit:      72825 (    291300 Kb)
        Driver Commit:          2194 (      8776 Kb)
        Committed pages:      508465 (   2033860 Kb)
        Commit limit:        2051919 (   8207676 Kb)

        Total Private:        424832 (   1699328 Kb)
         04e0 dbsrv9.exe      263617 (   1054468 Kb)
         056c jrun.exe         45785 (    183140 Kb)
         0970 sqlservr.exe     16830 (     67320 Kb)
         07d0 sqlservr.exe     10545 (     42180 Kb)
         0950 k2server.exe     10080 (     40320 Kb)
         0874 sqlservr.exe      9390 (     37560 Kb)
         08cc sqlservr.exe      9359 (     37436 Kb)
         0848 sqlservr.exe      7065 (     28260 Kb)
         054c JNBDotNetSide.e   5249 (     20996 Kb)
         1644 explorer.exe      4829 (     19316 Kb)
         03a8 svchost.exe       3543 (     14172 Kb)
         0fa8 CcmExec.exe       2977 (     11908 Kb)
         178c mstsc.exe         2618 (     10472 Kb)
         0230 lsass.exe         2194 (      8776 Kb)
         13bc kd.exe            2039 (      8156 Kb)
         01f4 winlogon.exe      2002 (      8008 Kb)
         0a84 k2index.exe       1803 (      7212 Kb)
         05bc k2admin.exe       1661 (      6644 Kb)
         0774 inetinfo.exe      1452 (      5808 Kb)
         0f3c mssearch.exe      1408 (      5632 Kb)
         050c CakeService.exe   1183 (      4732 Kb)
         0f98 svchost.exe       1033 (      4132 Kb)
         12ec winlogon.exe      1000 (      4000 Kb)
         0370 svchost.exe        976 (      3904 Kb)
         0470 spoolsv.exe        906 (      3624 Kb)
         1118 wmiprvse.exe       887 (      3548 Kb)
         0f40 w3wp.exe           866 (      3464 Kb)
         0710 livekd.exe         755 (      3020 Kb)
         0e88 sqlagent.exe       698 (      2792 Kb)
         1018 svchost.exe        653 (      2612 Kb)
         0588 swsoc.exe          644 (      2576 Kb)
         0dac snmp.exe           586 (      2344 Kb)
         0574 swagent.exe        554 (      2216 Kb)
         0e54 sw_d.exe           513 (      2052 Kb)
         08bc wmiprvse.exe       511 (      2044 Kb)
         03e0 iscsiexe.exe       501 (      2004 Kb)
         1764 wuauclt.exe        488 (      1952 Kb)
         048c msdtc.exe          485 (      1940 Kb)
         0e1c DSM_BMU_SOLProx    478 (      1912 Kb)
         0224 services.exe       468 (      1872 Kb)
         11e4 wmiprvse.exe       451 (      1804 Kb)
         01d8 csrss.exe          418 (      1672 Kb)
         0e38 lmgrd.exe          385 (      1540 Kb)
         02bc cmd.exe            378 (      1512 Kb)
         1268 wmiprvse.exe       367 (      1468 Kb)
         0328 svchost.exe        353 (      1412 Kb)
         0398 svchost.exe        342 (      1368 Kb)
         16c0 sqlmangr.exe       329 (      1316 Kb)
         12d0 csrss.exe          300 (      1200 Kb)
         0dd0 lmgrd.exe          281 (      1124 Kb)
         0d24 taskmgr.exe        270 (      1080 Kb)
         0ed4 sqlwriter.exe      256 (      1024 Kb)
         1418 rdpclip.exe        249 (       996 Kb)
         0b7c regedit.exe        249 (       996 Kb)
         02d0 svchost.exe        225 (       900 Kb)
         0744 drvInst.exe        216 (       864 Kb)
         0e64 sqlbrowser.exe     185 (       740 Kb)
         1688 jusched.exe        177 (       708 Kb)
         0608 svchost.exe        143 (       572 Kb)
         0d8c svchost.exe        114 (       456 Kb)
         0580 swstrtr.exe        111 (       444 Kb)
         1144 logon.scr           98 (       392 Kb)
         0554 jrunsvc.exe         94 (       376 Kb)
         0708 hptsvr.exe          89 (       356 Kb)
         0534 CF8DotNetsvc.ex     70 (       280 Kb)
         01a8 smss.exe            43 (       172 Kb)
         0004 System               8 (        32 Kb)

Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Status: Offline
Points: 17531
Post Options Post Options   Thanks (0) Thanks(0)   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 29 July 2009 at 8:21pm
So you're out of physical RAM at this point.  Also, it like the system may be hitting the paged pool threshold - 80% of the pool is in use, and the system is likely trying to trim allocated pool memory. 

What's the output of !poolused?
Daily affirmation:
net helpmsg 4006
Back to Top
dleemills View Drop Down
Newbie
Newbie


Joined: 27 July 2009
Location: Des Moines, IA
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote dleemills Quote  Post ReplyReply Direct Link To This Post Posted: 29 July 2009 at 8:49pm
Looking at task manager and process explorer my physical memory looks fine.  Here is the output.
 

Pool Used:

NonPaged Paged

Tag Allocs Used Allocs Used

TSQ 1 56 0 0 UNKNOWN pooltag ' TSQ', please update pooltag.txt

ARFT 0 0 3 96 UNKNOWN pooltag 'ARFT', please update pooltag.txt

ARpn 47 3640 0 0 UNKNOWN pooltag 'ARpn', please update pooltag.txt

ARpo 96 17808 0 0 UNKNOWN pooltag 'ARpo', please update pooltag.txt

AUsb 1 32 0 0 UNKNOWN pooltag 'AUsb', please update pooltag.txt

AcdN 2 1072 0 0 TDI AcdObjectInfoG

AcpA 3 192 1 504 ACPI arbiter data , Binary: acpi.sys

AcpD 60 20480 0 0 ACPI device data , Binary: acpi.sys

AcpF 13 520 0 0 ACPI interface data , Binary: acpi.sys

AcpM 0 0 2 152 ACPI miscellaneous data , Binary: acpi.sys

AcpO 3 152 0 0 ACPI object data , Binary: acpi.sys

AcpP 4 352 0 0 ACPI power data , Binary: acpi.sys

AcpR 3 2384 9 1392 ACPI resource data , Binary: acpi.sys

AcpS 72 1880 15 608 ACPI string data , Binary: acpi.sys

Acpg 1 88 0 0 UNKNOWN pooltag 'Acpg', please update pooltag.txt

Acpi 1 136 0 0 UNKNOWN pooltag 'Acpi', please update pooltag.txt

Acpt 1 184 0 0 UNKNOWN pooltag 'Acpt', please update pooltag.txt

Adap 14 3976 0 0 Adapter objects

Adbe 0 0 18 78272 Adobe's font driver

AfdB 16 26016 0 0 Afd data buffer , Binary: afd.sys

AfdC 2101 336160 0 0 Afd connection structure , Binary: afd.sys

AfdE 115 32200 0 0 Afd endpoint structure , Binary: afd.sys

AfdL 54 2160 0 0 Afd local address buffer , Binary: afd.sys

AfdP 17 2704 0 0 Afd poll info , Binary: afd.sys

AfdR 10 320 0 0 Afd remote address buffer , Binary: afd.sys

AfdT 3 304 0 0 Afd transport info , Binary: afd.sys

AfdX 0 0 107 29960 Afd context buffer , Binary: afd.sys

Afdh 2 96 0 0 Afd address list change buffer , Binary: afd.sys

Afdr 4 824 0 0 Afd ERESOURCE buffer , Binary: afd.sys

Afdt 0 0 2 320 Afd transport address buffer , Binary: afd.sys

AksH 0 0 1 176 UNKNOWN pooltag 'AksH', please update pooltag.txt

AksT 3 120 0 0 UNKNOWN pooltag 'AksT', please update pooltag.txt

Aksc 1 312 0 0 UNKNOWN pooltag 'Aksc', please update pooltag.txt

AmlC 4 32768 0 0 ACPI AMLI Pooltags

AmlH 1 65536 0 0 ACPI AMLI Pooltags

AmlI 2 392 0 0 ACPI AMLI Pooltags

AmlR 1 32 0 0 ACPI AMLI Pooltags

ApcS 1 24 0 0 UNKNOWN pooltag 'ApcS', please update pooltag.txt

ArbA 0 0 60 245760 ARBITER_ALLOCATION_STATE_TAG , Binary: nt!arb

ArbL 0 0 124 32736 ARBITER_ORDERING_LIST_TAG , Binary: nt!arb

ArbM 60 1440 0 0 ARBITER_MISC_TAG , Binary: nt!arb

ArbR 0 0 120 3840 ARBITER_RANGE_LIST_TAG , Binary: nt!arb

AtmA 0 0 685 44104 Atoms

AtmT 0 0 9 5544 Atom tables

BCM0 8 522632 0 0 UNKNOWN pooltag 'BCM0', please update pooltag.txt

BCM1 12 3144 0 0 UNKNOWN pooltag 'BCM1', please update pooltag.txt

BCM2 48 4352 0 0 UNKNOWN pooltag 'BCM2', please update pooltag.txt

BCM3 36 6472 0 0 UNKNOWN pooltag 'BCM3', please update pooltag.txt

BCM4 4 128 0 0 UNKNOWN pooltag 'BCM4', please update pooltag.txt

BCM5 42 2688 0 0 UNKNOWN pooltag 'BCM5', please update pooltag.txt

BCM6 48 4224 0 0 UNKNOWN pooltag 'BCM6', please update pooltag.txt

BCM7 49 22736 0 0 UNKNOWN pooltag 'BCM7', please update pooltag.txt

BCMa 2 131072 0 0 UNKNOWN pooltag 'BCMa', please update pooltag.txt

Bmfd 0 0 68 116816 Font related stuff

CBRe 6 240 0 0 CallbackRegistration

CM 13 520 0 0 Configuration Manager (registry) , Binary: nt!cm

CM10 0 0 13 18408 Internal Configuration manager allocations , Binary: nt!cm

CM11 0 0 2 8192 Internal Configuration manager allocations , Binary: nt!cm

CM13 0 0 1 4096 Internal Configuration manager allocations , Binary: nt!cm

CM16 0 0 89 397312 Internal Configuration manager allocations , Binary: nt!cm

CM17 0 0 11 90112 Internal Configuration manager allocations , Binary: nt!cm

CM19 0 0 1 600 Internal Configuration manager allocations , Binary: nt!cm

CM22 0 0 1 1008 Internal Configuration manager allocations , Binary: nt!cm

CM24 0 0 1 4096 Internal Configuration manager allocations , Binary: nt!cm

CM25 0 0 19 262144 Internal Configuration manager allocations , Binary: nt!cm

CM26 0 0 8 65536 Internal Configuration manager allocations , Binary: nt!cm

CM27 0 0 9 8568 Internal Configuration manager allocations , Binary: nt!cm

CM28 0 0 2 8192 Internal Configuration manager allocations , Binary: nt!cm

CM29 0 0 18 147456 Internal Configuration manager allocations , Binary: nt!cm

CM32 0 0 10 40960 Internal Configuration manager allocations , Binary: nt!cm

CM35 0 0 24 1540096 Internal Configuration manager allocations , Binary: nt!cm

CM39 0 0 528 157824 Internal Configuration manager allocations , Binary: nt!cm

CM44 298 9512 0 0 Internal Configuration manager allocations , Binary: nt!cm

CM45 0 0 2 48 Internal Configuration manager allocations , Binary: nt!cm

CM7 0 0 109 3488 Internal Configuration manager allocations , Binary: nt!cm

CMAl 0 0 173 708608 internal registry memory allocator pool tag , Binary: nt!cm

CMCa 0 0 2 40960 Configuration Manager Cache (registry) , Binary: nt!cm

CMDa 0 0 2797 412352 value data cache pool tag , Binary: nt!cm

CMIn 0 0 552 14928 Configuration Manager Index Hint Tag , Binary: nt!cm

CMNb 0 0 2071 96672 Configuration Manager Name Tag , Binary: nt!cm

CMSb 0 0 1 8192 internal stash buffer pool tag , Binary: nt!cm

CMSc 0 0 378 110192 security cache pooltag , Binary: nt!cm

CMVI 0 0 1865 67464 value index cache tag , Binary: nt!cm

CMVa 0 0 6269 366528 value cache value tag , Binary: nt!cm

CMVw 0 0 645 30960 registry mapped view of file , Binary: nt!cm

CMnb 0 0 330 18480 registry notify blocks , Binary: nt!cm

CMpa 295 18880 0 0 registry post apcs , Binary: nt!cm

CMpb 0 0 300 14400 registry post blocks , Binary: nt!cm

COMX 2 48 11 1032 serial driver allocations , Binary: serial.sys

CPnp 140 35840 0 0 ClassPnP transfer packets , Binary: classpnp.sys

Call 6 432 0 0 kernel callback object signature , Binary: nt!ex

Cbrb 0 0 1 24 UNKNOWN pooltag 'Cbrb', please update pooltag.txt

CcBc 125 17000 0 0 Cache Manager Bcb from pool , Binary: nt!cc

CcBr 13 520 0 0 Cache Manager Bitmap range , Binary: nt!cc

CcPc 48 4608 0 0 Cache Manager Private Cache Map , Binary: nt!cc

CcSc 704 225280 0 0 Cache Manager Shared Cache Map , Binary: nt!cc

CcVa 1 49152 0 0 Cache Manager Initial array of Vacbs , Binary: nt!cc

CcVl 64 46080 0 0 Cache Manager Vacb Level structures (large streams) , Binary: nt!cc

CcVp 60 13368 0 0 Cache Manager Array of Vacb pointers for a cached stream , Binary: nt!cc

CcWK 2 272 0 0 Kernel Cache Manager lookaside list , Binary: nt!cc

CcWk 8 192 0 0 Kernel Cache Manager lookaside list , Binary: nt!cc

CcWq 24 576 0 0 Cache Manager Work Queue Item , Binary: nt!cc

Cdic 1 72 0 0 CDFS Irp Context , Binary: cdfs.sys

Cont 2 144 0 0 Contiguous physical memory allocations for device drivers

DARD 0 0 1 2360 UNKNOWN pooltag 'DARD', please update pooltag.txt

DOPE 34 2992 0 0 Device Object Power Extension (po component)

Dacl 0 0 1 96 Temp allocations for object DACLs

Ddk 4 160 1 144 Default for driver allocated memory (user's of ntddk.h)

Desk 13 2496 0 0 UNKNOWN pooltag 'Desk', please update pooltag.txt

Devi 408 383424 0 0 Device objects

Dfsm 2 64 0 0 Eng event allocation (ENG_KEVENTALLOC,ENG_ALLOC) in ntgdi\gre

Dh 1 0 0 1 112 DirectDraw/3D DirectDraw object

Dict 2 336 0 0 StorCreateDictionary storport!_STOR_DICTIONARY.Entries , Binary: storport.sys

Dire 0 0 72 14976 Directory objects

Dmio 2 1040 2 232 UNKNOWN pooltag 'Dmio', please update pooltag.txt

Dmiq 1 264 0 0 UNKNOWN pooltag 'Dmiq', please update pooltag.txt

Dnod 161 47656 0 0 Device node structure

DrDr 6 344 1 24576 Global object , Binary: rdpdr.sys

DrEx 3 120 0 0 Exchange object , Binary: rdpdr.sys

DrIC 3 168 0 0 I/O context object , Binary: rdpdr.sys

Driv 132 31312 0 0 Driver objects

Dump 7 229808 0 0 Bugcheck dump allocations

Evel 1 24 0 0 EFS file system filter driver lookaside list

Even 5782 281376 0 0 Event objects

FLex 4 256 0 0 exclusive file lock

FLfl 0 0 17 1224 exported (non-private) file lock

FLli 17 680 0 0 per-file lock information

FLln 2 80 0 0 shared lock tree node

FLsh 2 112 0 0 shared file lock

FMfi 1 120 0 0 Fast IO dispatch table , Binary: fltmgr.sys

FMfn 2 576 0 0 NAME_CACHE_NODE structure , Binary: fltmgr.sys

FMfr 1 8192 0 0 FLT_FRAME structure , Binary: fltmgr.sys

FMic 4 1056 0 0 IRP_CTRL structure , Binary: fltmgr.sys

FMla 1 584 0 0 Per-processor IRPCTRL lookaside lists , Binary: fltmgr.sys

FMpl 2 4232 0 0 Cache aware pushLock , Binary: fltmgr.sys

FMpr 1 200 0 0 FLT_PRCB structure , Binary: fltmgr.sys

FMus 0 0 2 40 Unicode string , Binary: fltmgr.sys

FMvo 7 7080 0 0 FLT_VOLUME structure , Binary: fltmgr.sys

FMwi 1 40 0 0 Work item structures , Binary: fltmgr.sys

FSfm 1566 62640 0 0 File System Run Time Fast Mutex Lookaside List , Binary: nt!fsrtl

FSim 0 0 1424 182272 File System Run Time Mcb Initial Mapping Lookaside List , Binary: nt!fsrtl

FSmg 4 1120 0 0 File System Run Time , Binary: nt!fsrtl

FSrN 8 384 159 15264 File System Run Time , Binary: nt!fsrtl

FSrm 53 6784 90 83040 File System Run Time , Binary: nt!fsrtl

FSro 6 240 6 240 File System Run Time , Binary: nt!fsrtl

FSrt 1 904 0 0 File System Run Time allocations (DO NOT USE!) , Binary: nt!fsrtl

FatI 1 80 0 0 Fat IrpContexts , Binary: fastfat.sys

File 5325 817176 0 0 File objects

Flop 1 40 0 0 floppy driver

Fsrc 1 24 0 0 Filesystem recognizer (fsrec.sys) , Binary: fsrec.sys

FstB 8 35872 0 0 ntos\fstub

FxDr 1 240 0 0 KMDF driver globals/generic pool allocation tag. Fallback tag in case driver tag is unusable. , Binary: wdf01000.sys

FxL2 0 0 1 48 KMDF Loader Pool allocation , Binary: wdfldr.sys

FxL5 0 0 1 128 KMDF Loader Pool allocation , Binary: wdfldr.sys

FxL7 1 88 0 0 KMDF Loader Pool allocation , Binary: wdfldr.sys

FxLa 1 40 0 0 KMDF Loader Pool allocation , Binary: wdfldr.sys

FxLc 1 40 0 0 KMDF Loader Pool allocation , Binary: wdfldr.sys

FxLg 1 4096 0 0 KMDF IFR log tag , Binary: wdf01000.sys

GDev 0 0 10 33760 Gdi pdev

GFil 0 0 8 632 Gdi engine descriptor list

Gbaf 0 0 64 45056 GDITAG_BRUSH_FREELIST , Binary: win32k.sys

Gcac 0 0 42 269104 Gdi glyph cache

Gcsl 0 0 2 976 Gdi string resource script names

Gdbr 0 0 2 160 Gdi driver brush realization

Gdcf 0 0 71 3976 GDITAG_DC_FREELIST , Binary: win32k.sys

Gdde 2 80 0 0 Gdi ddraw event

Gdev 0 0 2 464 Gdi GDITAG_DEVMODE

Gdrs 0 0 25 31880 Gdi GDITAG_DRVSUP

Gdwd 6 528 1 24 GDITAG_WATCHDOG , Binary: win32k.sys

Gebr 0 0 7 2480 Gdi ENGBRUSH

Gffv 0 0 244 17568 Gdi FONTFILEVIEW

Gfnt 0 0 62 47616 GDITAG_RFONT , Binary: win32k!RFONTOBJ::bRealizeFont

Gfsb 0 0 2 16384 Gdi font sustitution list

Gfsm 4 160 0 0 Gdi Fast mutex

Ggb 0 0 35 54304 Gdi glyph bits

Ggdv 0 0 9 1112 Gdi GDITAG_GDEVICE

Gglb 0 0 2 8192 Gdi temp buffer

Ggls 0 0 330 25168 Gdi glyphset

Gh04 0 0 1 392 GDITAG_HMGR_SPRITE_TYPE , Binary: win32k.sys

Gh05 0 0 45 543704 GDITAG_HMGR_SPRITE_TYPE , Binary: win32k.sys

Gh08 0 0 10 9312 GDITAG_HMGR_SPRITE_TYPE , Binary: win32k.sys

Gh09 0 0 2 1232 GDITAG_HMGR_SPRITE_TYPE , Binary: win32k.sys

Gh0< 0 0 122 3904 GDITAG_HMGR_SPRITE_TYPE , Binary: win32k.sys

Gh14 0 0 24 10816 GDITAG_HMGR_SPRITE_TYPE , Binary: win32k.sys

Gh15 0 0 420 2280672 GDITAG_HMGR_SPRITE_TYPE , Binary: win32k.sys

Gh18 0 0 13 14560 GDITAG_HMGR_SPRITE_TYPE , Binary: win32k.sys

Gh1< 0 0 122 3904 GDITAG_HMGR_SPRITE_TYPE , Binary: win32k.sys

Ghab 0 0 478 53536 GDITAG_PFE_HASHBUCKET , Binary: win32k!FHOBJ::bAddPFELink

Ghas 0 0 6 2640 GDITAG_PFE_HASHTABLE , Binary: win32k!FHMEMOBJ::FHMEMOBJ

Gini 6 128 0 0 Gdi fast mutex

Gla1 2 224 307 633648 GDITAG_HMGR_LOOKASIDE_DC_TYPE , Binary: win32k.sys

Gla4 2 224 455 87360 GDITAG_HMGR_LOOKASIDE_RGN_TYPE , Binary: win32k.sys

Gla5 2 224 594 232848 GDITAG_HMGR_LOOKASIDE_SURF_TYPE , Binary: win32k.sys

Gla8 2 224 108 17280 GDITAG_HMGR_LOOKASIDE_PAL_TYPE , Binary: win32k.sys

Gla: 2 224 296 194176 GDITAG_HMGR_LOOKASIDE_LFONT_TYPE , Binary: win32k.sys

Gla; 2 224 0 0 GDITAG_HMGR_LOOKASIDE_RFONT_TYPE , Binary: win32k.sys

Gla@ 2 224 325 46800 GDITAG_HMGR_LOOKASIDE_BRUSH_TYPE , Binary: win32k.sys

Gldv 0 0 24 12992 Gdi Ldev

Glnk 0 0 748 11968 Gdi PFELINK

Gmap 0 0 2 608 Gdi font map signature table

Gpat 0 0 4 16160 GDITAG_PATHOBJ , Binary: win32k.sys

Gpfe 0 0 244 37072 GDITAG_PFF_INDEXES , Binary: win32k!PFFMEMOBJ::bAllocPFEData

Gpff 0 0 244 50272 Gdi physical font file

Gpft 0 0 4 960 Gdi font table

GreA 0 0 2 64 UNKNOWN pooltag 'GreA', please update pooltag.txt

Gsem 188 14976 0 0 Gdi Semaphores

Gsp 0 0 51 9384 Gdi sprite

Gspr 0 0 2 880 Gdi sprite grow range

Gtmw 0 0 48 3840 Gdi TMW_INTERNAL

Gxlt 0 0 16 2608 Gdi Xlate

HT1H 0 0 1 2232 UNKNOWN pooltag 'HT1H', please update pooltag.txt

HT40 0 0 2 16384 UNKNOWN pooltag 'HT40', please update pooltag.txt

Hal 15 198720 0 0 Hardware Abstraction Layer , Binary: hal.dll

Haps 0 0 1 120 UNKNOWN pooltag 'Haps', please update pooltag.txt

HdCl 8 3456 2 240 HID Client Sample Driver

HidC 49 5560 4 352 HID Class

HidP 12 2416 0 0 HID Parser

HidU 16 1152 0 0 UNKNOWN pooltag 'HidU', please update pooltag.txt

Hk15 2 288 0 0 UNKNOWN pooltag 'Hk15', please update pooltag.txt

Hk46 0 0 1 136 UNKNOWN pooltag 'Hk46', please update pooltag.txt

Hk47 0 0 1 4096 UNKNOWN pooltag 'Hk47', please update pooltag.txt

Hk61 3 480 0 0 UNKNOWN pooltag 'Hk61', please update pooltag.txt

Hk63 2 320 0 0 UNKNOWN pooltag 'Hk63', please update pooltag.txt

Hk64 2 256 0 0 UNKNOWN pooltag 'Hk64', please update pooltag.txt

Hkla 1 8192 0 0 UNKNOWN pooltag 'Hkla', please update pooltag.txt

ID04 1 136 0 0 UNKNOWN pooltag 'ID04', please update pooltag.txt

ID09 1 128 0 0 UNKNOWN pooltag 'ID09', please update pooltag.txt

IPpo 115 14008 0 0 IP Offload buffers , Binary: tcpip.sys

IPpp 53 4072 0 0 UNKNOWN pooltag 'IPpp', please update pooltag.txt

Ica 67 58040 0 0 UNKNOWN pooltag 'Ica ', please update pooltag.txt

Icp 8 320 0 0 I/O completion packets queue on a completion ports

IdeP 12 3512 0 0 atapi IDE

IdeX 2 128 0 0 PCI IDE

Ifs 3 4272 4 249968 Default file system allocations (user's of ntifs.h)

ImRP 0 0 1 120 Imapi.sys from adaptec

Io.. 1 1032 0 0 UNKNOWN pooltag ' Io', please update pooltag.txt

Io 205 111200 110 4520 general IO allocations , Binary: nt!io

IoCc 0 0 118 1888 Io completion context , Binary: nt!io

IoCo 139 10008 0 0 UNKNOWN pooltag 'IoCo', please update pooltag.txt

IoEr 9 1376 0 0 Io error log packets , Binary: nt!io

IoFs 0 0 3 72 Io shutdown packet , Binary: nt!io

IoNm 0 0 1839 245280 Io parsing names , Binary: nt!io

IoSh 18 432 0 0 Io shutdown packet , Binary: nt!io

IoTi 20 640 0 0 Io timers , Binary: nt!io

IoUs 5 120 0 0 I/O SubSystem completion Context Allocation , Binary: nt!io

Ioin 13 14456 0 0 Io interrupts

IpEQ 1 2208 0 0 event queue , Binary: ipsec.sys

IpLA 1 248 0 0 lookaside lists , Binary: ipsec.sys

IpSI 1027 53272 0 0 initial allocations , Binary: ipsec.sys

IpTI 3 5400 0 0 timers , Binary: ipsec.sys

Irp 787 269040 0 0 Io, IRP packets

Isap 1 16 2 192 Pnp Isa bus extender

Job 2 864 0 0 UNKNOWN pooltag 'Job ', please update pooltag.txt

KbdC 5 4960 0 0 Keyboard Class Driver

Ke 1 296 1 8192 Kernel data structures

Key 0 0 1734 180264 Key objects

Keye 0 0 1 64 UNKNOWN pooltag 'Keye', please update pooltag.txt

KrbC 0 0 4 384 Kerberos Client package , Binary: ksecdd.sys

Ksec 6 5352 2 64 Security device driver , Binary: ksecdd.sys

L2T1 1 1064 0 0 ndis\l2tp / MTAG_ADAPTERCB

L2T4 1 4016 0 0 ndis\l2tp / MTAG_VCTABLE

L2Ti 2 104 0 0 ndis\l2tp / MTAG_UTIL

LBbn 0 0 3 192 Name

LBdi 1 168 0 0 POOL_DOMAIN_INFO

LBpn 0 0 3 120 Paged Name

LBpt 0 0 1 408 Paged transport

LBtn 3 216 0 0 Transport name

LBxp 1 592 0 0 Transport

LSac 0 0 4 168 BlockTypeAdminCheck

LSbf 0 0 10 2320 buffer descriptor

LScn 75 53400 0 0 connection

LSdb 20 2520 20 1912 data buffer

LSep 4 1568 0 0 endpoint

LSfn 0 0 3 96 BlockTypeFSName

LSlf 0 0 14 1680 LFCB

LSmf 0 0 24 6688 MFCB

LSnh 67 2144 0 0 nonpaged block header

LSni 0 0 1 48 BlockTypeNameInfo

LSpc 0 0 56 11648 paged connection

LSpm 28 2688 0 0 paged MFCB

LSpr 0 0 2 144 paged RFCB

LSrf 26 6448 0 0 RFCB

LSsd 0 0 12 1344 BlockTypeShareSecurityDescriptor

LSsh 38 2736 19 7680 share

LSsr 0 0 19 616 search

LSss 0 0 35 2720 session

LStb 66 9888 195 13296 table

LStc 0 0 3 384 tree connect

LStr 0 0 53 15648 transaction

LSwi 1 2740224 0 0 initial work context

LSwq 2 1824 0 0 BlockTypeWorkQueue

LSwr 128 1048576 0 0 raw work context

Lfs 0 0 131 12384 Lfs allocations

LfsI 0 0 2 131072 Lfs allocations

LfsS 5 520 5 1840 UNKNOWN pooltag 'LfsS', please update pooltag.txt

Lfsr 5 81920 0 0 UNKNOWN pooltag 'Lfsr', please update pooltag.txt

List 23 552 0 0 kernel utilities list allocation

LpcM 0 0 4 1440 Local procedure call message blocks

MPIO 7 488 0 0 UNKNOWN pooltag 'MPIO', please update pooltag.txt

MPLB 5 1032 0 0 UNKNOWN pooltag 'MPLB', please update pooltag.txt

MPSP 7 288 0 0 UNKNOWN pooltag 'MPSP', please update pooltag.txt

Mapr 1 2056 0 0 arc firmware registry routines

Mdl 1648 236952 0 0 Io, Mdls

Mdp 8 2048 0 0 Memory Descriptor Lists , Binary: netio.sys

Mm 19 444288 7 944 general Mm Allocations , Binary: nt!mm

MmCa 1262 135024 0 0 Mm control areas for mapped files , Binary: nt!mm

MmCi 565 129440 0 0 Mm control areas for images , Binary: nt!mm

MmCm 1168 24225248 0 0 Calls made to MmAllocateContiguousMemory , Binary: nt!mm

MmDT 4 1304 150 10528 Mm debug , Binary: nt!mm

MmDb 1 144 0 0 NtMapViewOfSection service , Binary: nt!mm

MmDm 32 2560 0 0 deferred MmUnlock entries , Binary: nt!mm

MmEx 2 64 0 0 Mm events , Binary: nt!mm

MmHi 10 480 0 0 Mm image entry - allocated per session , Binary: nt!mm

MmHt 2 4112 0 0 session space PTE data , Binary: nt!mm

MmIn 10 1600 0 0 Mm inpaged io structures , Binary: nt!mm

MmLd 131 15248 0 0 Mm load module database , Binary: nt!mm

MmMl 1 40 0 0 physical memory range information , Binary: nt!mm

MmPd 1 16384 0 0 Mm page table commitment bitmaps , Binary: nt!mm

MmSP 1 12288 0 0 SLIST entries for system PTE NB queues , Binary: nt!mm

MmSc 154 8624 0 0 subsections used to map data files , Binary: nt!mm

MmSd 102721 5752376 0 0 extended subsections used to map data files , Binary: nt!mm

MmSe 1 32 0 0 Mm secured VAD allocation , Binary: nt!mm

MmSg 0 0 1 80 Mm segments , Binary: nt!mm

MmSm 0 0 869 55616 segments used to map data files , Binary: nt!mm

MmSt 0 0 65714 269953640 Mm section object prototype ptes , Binary: nt!mm

MmSy 23 1288 0 0 Mm PTE and IO tracking logs , Binary: nt!mm

MmWe 31 5208 0 0 Work entries for writing out modified filesystem pages. , Binary: nt!mm

MmWw 2 96 0 0 Write watch VAD info , Binary: nt!mm

Mmdl 1 40 0 0 Mm Mdls for flushes , Binary: nt!mm

Mmpr 4 160 0 0 Mm physical VAD roots , Binary: nt!mm

Mmpv 6 288 0 0 Physical view VAD info , Binary: nt!mm

Mmww 2 1080 0 0 Write watch bitmap VAD info , Binary: nt!mm

MntA 15 6744 66 5752 UNKNOWN pooltag 'MntA', please update pooltag.txt

MsFD 1 264 1 16 Mailslot root DCB and its name buffer

MsFg 1 64 0 0 Mailslot global resource

MsvC 0 0 64 25792 Msv/Ntlm client package , Binary: ksecdd.sys

MuoC 4 7352 0 0 MOUSE_POOL_TAG Mouse Class Driver

Mup 5 408 422 45200 Multiple UNC provider allocations, generic , Binary: mup.sys

MupI 4 192 0 0 Windows Server 2003 and prior versions: DFS Irp Context allocation , Binary: mup.sys

Muta 1159 79456 0 0 Mutant objects

NBSa 1 80 0 0 address block

NBSf 6 5888 0 0 FCB

NBSl 1 2112 0 0 LANA block

NBSn 2 256 0 0 copy of user NCB

NBqh 5 160 0 0 Non-blocking queue entries used to carry the real data in the queue.

NDPt 2 4176 0 0 TCPIP , Binary: ndis.sys

NDPw 2 4176 0 0 WAN_PACKET_TAG , Binary: ndis.sys

NDam 41 4872 0 0 NdisAllocateMemory , Binary: ndis.sys

NDan 13 1248 0 0 adapter name , Binary: ndis.sys

NDch 1 208 0 0 NDIS_TAG_CONFIG_HANDLE , Binary: ndis.sys

NDco 11 1144 0 0 NDIS_TAG_CO , Binary: ndis.sys

NDcs 5 120 0 0 NDIS_TAG_NET_CFG_OPS_ID , Binary: ndis.sys

NDdb 6 2248 0 0 DMA block , Binary: ndis.sys

NDfa 3 424 0 0 NDIS_TAG_FILTER_ADDR , Binary: ndis.sys

NDfm 6 672 0 0 NDIS_TAG_FAKE_MAC , Binary: ndis.sys

NDmo 11 3120 0 0 NDIS_TAG_M_OPEN_BLK , Binary: ndis.sys

NDnd 2 1184 0 0 NDIS_TAG_POOL_NDIS , Binary: ndis.sys

NDoa 4 1120 0 0 NDIS_TAG_OID_ARRAY , Binary: ndis.sys

NDpb 6 1632 0 0 protocol block , Binary: ndis.sys

NDpc 1 192 0 0 NDIS_TAG_PROTOCOL_CONFIGURATION , Binary: ndis.sys

NDpf 17 4888 0 0 NDIS_TAG_FILTER , Binary: ndis.sys

NDpk 3 272 0 0 NDIS_TAG_PKT_PATTERN , Binary: ndis.sys

NDpp 51 172752 0 0 packet pool , Binary: ndis.sys

NDse 0 0 5 928 NDIS_TAG_SECURITY , Binary: ndis.sys

NDst 3 88 0 0 NDIS_TAG_STRING , Binary: ndis.sys

NDw1 6 7368 0 0 NDIS_TAG_WMI_GUID_TO_OID , Binary: ndis.sys

NDwh 6 816 0 0 NDIS_TAG_WRAPPER_HANDLE , Binary: ndis.sys

NPLL 2 208 0 0 UNKNOWN pooltag 'NPLL', please update pooltag.txt

Nb01 2 2208 0 0 NetBT allocations

Nb02 1 40 0 0 NetBT allocations

Nb03 1 16 0 0 NetBT allocations

Nb05 11 1760 0 0 NetBT allocations

Nb07 4 1216 0 0 NetBT allocations

Nb16 6 960 0 0 NetBT allocations

Nb17 1 120 0 0 NetBT allocations

Nb27 2 1280 0 0 NetBT allocations

Nb36 1 32 0 0 NetBT allocations

Nb37 1 56 0 0 NetBT allocations

Nb39 2 160 0 0 NetBT allocations

NbL0 37 6808 0 0 NetBT allocations

NbL1 71 13064 0 0 NetBT allocations

NbL2 28 5152 0 0 NetBT allocations

NbL3 1 184 0 0 NetBT allocations

Nbt0 7 952 0 0 NetBT allocations

Nbt8 1 16 0 0 NetBT allocations

NbtC 7 840 0 0 NetBT allocations

NbtD 76 12768 0 0 NetBT allocations

NbtR 1 136 0 0 NetBT allocations

Nbta 1 40 0 0 NetBT allocations

Nbtg 2 32 0 0 NetBT allocations

Nbtl 137 19728 0 0 NetBT allocations

Nbtw 3 440 0 0 NetBT allocations

None 4 2449488 1 128 call to ExAllocatePool

NpFC 0 0 4 96 ROOT_DCB CCB , Binary: npfs.sys

NpFD 0 0 1 112 DCB, directory block , Binary: npfs.sys

NpFc 116 9280 116 15776 CCB, client control block , Binary: npfs.sys

NpFn 81 4672 0 0 Name block , Binary: npfs.sys

NpFr 56 2240 0 0 DATA_ENTRY records (read/write buffers) , Binary: npfs.sys

NpFs 0 0 53 3816 Client security context , Binary: npfs.sys

NpfF 0 0 81 9720 Npfs Allocations , Binary: npfs.sys

Npfs 1 272 0 0 Npfs Allocations , Binary: npfs.sys

NtFB 0 0 25 756496 BitmpSup.c , Binary: ntfs.sys

NtFC 0 0 37 2648 Create.c , Binary: ntfs.sys

NtFI 0 0 232 32816 IndexSup.c , Binary: ntfs.sys

NtFL 20 22232 107 4280 LogSup.c , Binary: ntfs.sys

NtFS 0 0 492 135152 SecurSup.c , Binary: ntfs.sys

NtFU 0 0 115 13984 usnsup.c , Binary: ntfs.sys

NtFd 0 0 231 18480 DirCtrl.c , Binary: ntfs.sys

NtFf 1 40 16 131552 FsCtrl.c , Binary: ntfs.sys

NtFs 2204 91200 2388 120592 StrucSup.c , Binary: ntfs.sys

Ntf0 3 196608 1922 78704 general pool allocation , Binary: ntfs.sys

NtfC 0 0 220 26400 CCB , Binary: ntfs.sys

NtfD 0 0 1 168 DEALLOCATED_RECORDS , Binary: ntfs.sys

NtfE 0 0 255 51000 INDEX_CONTEXT , Binary: ntfs.sys

NtfF 0 0 1134 1061424 FCB_INDEX , Binary: ntfs.sys

NtfI 30 1200 0 0 NTFS_IO_CONTEXT , Binary: ntfs.sys

NtfM 0 0 24 1152 NTFS_MCB_ENTRY , Binary: ntfs.sys

NtfR 2 48 0 0 READ_AHEAD_THREAD , Binary: ntfs.sys

NtfS 0 0 15 6120 SCB_INDEX , Binary: ntfs.sys

NtfT 4 352 0 0 SCB_SNAPSHOT , Binary: ntfs.sys

NtfV 5 480 0 0 VPB , Binary: ntfs.sys

Ntfc 2 144 433 31176 CCB_DATA , Binary: ntfs.sys

Ntff 22 4576 1021 833136 FCB_DATA , Binary: ntfs.sys

Ntfi 290 78880 0 0 IRP_CONTEXT , Binary: ntfs.sys

Ntfl 0 0 19 3040 LCB , Binary: ntfs.sys

Ntfm 0 0 4 1088 NTFS_MCB_ARRAY , Binary: ntfs.sys

Ntfn 2204 89048 0 0 SCB_NONPAGED , Binary: ntfs.sys

Ntfo 0 0 3120 413336 SCB_INDEX normalized named buffer , Binary: ntfs.sys

Ntfr 3211 206472 0 0 ERESOURCE , Binary: ntfs.sys

Ntfs 0 0 4 1344 SCB_DATA , Binary: ntfs.sys

Ntft 35 12480 0 0 SCB (Prerestart) , Binary: ntfs.sys

Nuio 2 288 0 0 UNKNOWN pooltag 'Nuio', please update pooltag.txt

ObCI 2 272 0 0 object creation lookaside list , Binary: nt!ob

ObCi 8 448 0 0 captured information for ObCreateObject , Binary: nt!ob

ObDi 0 0 1694 40656 object directory , Binary: nt!ob

ObDm 0 0 31 1736 object device map , Binary: nt!ob

ObHd 0 0 172 6784 object handle count data base , Binary: nt!ob

ObNM 2 272 0 0 name buffer per processor lookaside pointers , Binary: nt!ob

ObNm 0 0 1709 112056 object names , Binary: nt!ob

ObSc 0 0 296 45152 Object security descriptor cache block , Binary: nt!ob

ObjT 31 14384 0 0 object type objects , Binary: nt!ob

Obtb 0 0 184 436336 object tables via EX handle.c , Binary: nt!ob

OlmC 79 6568 0 0 Offload Manager Connections , Binary: tcpip.sys

OlmI 1 280 0 0 Offload Manager Interfaces , Binary: tcpip.sys

PLoc 0 0 2 64 UNKNOWN pooltag 'PLoc', please update pooltag.txt

PSwt 1 32 0 0 Power switch structure , Binary: nt!po

PTIa 1 1024 0 0 UNKNOWN pooltag 'PTIa', please update pooltag.txt

PTIw 1 48 0 0 UNKNOWN pooltag 'PTIw', please update pooltag.txt

PTPa 1 544 0 0 UNKNOWN pooltag 'PTPa', please update pooltag.txt

PTPc 1 4008 0 0 UNKNOWN pooltag 'PTPc', please update pooltag.txt

PX2. 1 2008 0 0 UNKNOWN pooltag ' PX2', please update pooltag.txt

PX3. 2 1200 0 0 UNKNOWN pooltag ' PX3', please update pooltag.txt

PX5. 2 144 0 0 UNKNOWN pooltag ' PX5', please update pooltag.txt

PX9. 2 224 0 0 UNKNOWN pooltag ' PX9', please update pooltag.txt

PXb. 1 608 0 0 UNKNOWN pooltag ' PXb', please update pooltag.txt

PXd. 1 344 0 0 UNKNOWN pooltag ' PXd', please update pooltag.txt

PXg. 2 144 0 0 UNKNOWN pooltag ' PXg', please update pooltag.txt

PXh. 2 256 0 0 UNKNOWN pooltag ' PXh', please update pooltag.txt

PXl. 1 2008 0 0 UNKNOWN pooltag ' PXl', please update pooltag.txt

ParL 0 0 6 336 Parallel link driver

PciB 23 15184 94 15096 PnP pci bus enumerator , Binary: pci.sys

PlBd 2 4192 0 0 UNKNOWN pooltag 'PlBd', please update pooltag.txt

PnPi 1 80 0 0 UNKNOWN pooltag 'PnPi', please update pooltag.txt

PoSL 0 0 2 32 Power shutdown event list

PooL 2 16384 0 0 Phase 0 initialization of the executive component, paged and nonpaged small pool lookaside structures

Pool 3 4280320 0 0 Pool tables, etc.

Port 360 11520 654 121296 Port objects

Pp 0 0 489 42512 UNKNOWN pooltag 'Pp ', please update pooltag.txt

PpEB 1 256 0 0 PNP_POOL_EVENT_BUFFER , Binary: nt!pnp

PpEL 1 88 0 0 PNP_DEVICE_EVENT_LIST_TAG , Binary: nt!pnp

PpUB 1 144 0 0 PNP_USER_BLOCK_TAG , Binary: nt!pnp

Ppen 1 32 99 10936 routines to perform device enumeration , Binary: nt!pnp

Ppin 0 0 1 40 plug-and-play initialization , Binary: nt!pnp

Ppio 0 0 3 288 plug-and-play IO system APIs , Binary: nt!pnp

Ppre 0 0 162 20224 resource allocation and translation , Binary: nt!pnp

Ppsu 0 0 284 13208 plug-and-play subroutines for the I/O system , Binary: nt!pnp

Prcr 2 64 3 240 Processr driver allocations , Binary: processr.sys

Proc 68 45152 0 0 Process objects , Binary: nt!ps

PsIm 0 0 186 4464 Thread impersonation (PS_IMPERSONATE_INFORMATION, pre-Vista) , Binary: nt!ps

PsQb 14 1008 0 0 Process quota block , Binary: nt!ps

PsTp 0 0 824 19776 Thread termination port block , Binary: nt!ps

Psta 2 32 0 0 Power management system state , Binary: nt!ps

Qpcf 3 264 0 0 ClassificationFamily

Qpct 5 560 0 0 Client blocks

Qpfd 2 48 0 0 FragmentDb

Qphf 4 304 0 0 HandleFactory

Qppd 6 176 0 0 GenPatternDb

Qpph 12 416 0 0 PathHash

Qppt 1 392 0 0 Protocol

Qprz 10 240 0 0 Rhizome

R100 37 245856 45 5461800 UNKNOWN pooltag 'R100', please update pooltag.txt

RBev 1 88 0 0 RedBook Filter Driver, static allocations

RBrg 1 120 0 0 RedBook Filter Driver, static allocations

REMP 2 176 0 0 UNKNOWN pooltag 'REMP', please update pooltag.txt

RRle 0 0 528 25344 RTL_RANGE_LIST_ENTRY_TAG

Ra12 6 1584 0 0 RaidBusEnumeratorAllocateUnitResources storport!_BUS_ENUM_RESOURCES.DataBuffer , Binary: storport.sys

RaAM 1 40 0 0 RaidAllocateAddressMapping storport!_MAPPED_ADDRESS , Binary: storport.sys

RaCD 1 200 0 0 RaUnitScsiGetDumpPointersIoctl , Binary: storport.sys

RaDR 1 32 0 0 RaidpBuildAdapterBusRelations storport!_DEVICE_RELATIONS , Binary: storport.sys

RaDS 4 352 2 104 StorCreateAnsiString storport!_STRING.Buffer , Binary: storport.sys

RaDf 40 4000 0 0 RaidInitializeDeferredQueue storport!_RAID_DEFERRED_QUEUE.FreeList , Binary: storport.sys

RaHI 6 648 0 0 RaSaveDriverInitData storport!_HW_INITIALIZATION_DATA , Binary: storport.sys

RaME 2 10000 0 0 RiAllocateMiniportDeviceExtension , Binary: storport.sys

RaPC 1 24 0 0 RaInitializeConfiguration storport!_PORT_CONFIGURATION_INFORMATION.AccessRanges , Binary: storport.sys

RaPD 2 64 0 0 RaidGetPortData storport!RaidpPortData , Binary: storport.sys

RaRL 2 224 0 0 RaidInitializeResourceList storport!_RAID_RESOURCE_LIST , Binary: storport.sys

RaTM 3 6168 0 0 RaInitializeTagList storport!_QUEUE_TAG_LIST.Buffer , Binary: storport.sys

RceT 1 131072 0 0 UNKNOWN pooltag 'RceT', please update pooltag.txt

ReEv 401 9624 0 0 Resource Event

ReSe 204 6528 0 0 Resource Semaphore

ReTa 385 15976 0 0 Resource Extended Table

RsfD 1 64 0 0 UNKNOWN pooltag 'RsfD', please update pooltag.txt

RxCa 2 64 0 0 connection engine address

RxCc 4 800 0 0 connection engine connection

RxCt 2 176 4 176 connection engine transport

RxFc 0 0 9 5384 FCB

RxIr 8 7232 0 0 RxContext (IrpContext)

RxMs 2 3216 1 24 misc.

RxMx 0 0 3 264 minirdr dispatch table

RxNc 0 0 61 4456 NameCache (not currently used)

RxNf 2 528 0 0 nonpaged FCB

RxNr 4 2376 0 0 NetRoot

RxSc 2 656 0 0 SrvCall

RxVn 5 1256 0 0 VNetRoot

SABD 0 0 3 328 UNKNOWN pooltag 'SABD', please update pooltag.txt

SMBi 13 20712 1 128 UNKNOWN pooltag 'SMBi', please update pooltag.txt

SWbr 0 0 1 104 bus reference

SWda 0 0 1 40 POOLTAG_DEVICE_ASSOCIATION

SWdr 0 0 2 272 device reference

SWfd 1 216 0 0 POOLTAG_DEVICE_FDOEXTENSION

SWid 0 0 1 88 device ID

ScB4 16 1696 0 0 Storage descriptor header , Binary: classpnp.sys

ScC1 0 0 3 360 Registry path buffer , Binary: classpnp.sys

ScC7 2 64 0 0 Sense info buffer , Binary: classpnp.sys

ScC9 4 320 0 0 Device Control SRB , Binary: classpnp.sys

ScCI 2 64 0 0 Sense info buffers , Binary: cdrom.sys

ScCs 0 0 2 96 Assorted string data , Binary: cdrom.sys

ScDg 0 0 1 168 update disk geometry paths

ScDs 6 192 0 0 start device paths

ScFs 6 624 0 0 Mass storage driver tags

ScFt 11 16744 13 1376 Mass storage driver tags

ScLM 6 576 0 0 Media Change Detection , Binary: classpnp.sys

ScLq 8 1600 0 0 Release queue , Binary: classpnp.sys

ScPA 0 0 1 24 Access Ranges

ScPC 8 15808 0 0 reset bus code

ScPD 33 16104 0 0 SRB_DATA allocations

ScPG 1 16 0 0 Global memory

ScPI 2 192 0 0 Init data chain

ScPR 0 0 2 256 Scsiport

ScPT 0 0 1 112 interface mapping

ScPV 0 0 1 24 Device map allocations

ScPh 1 80 0 0 HwDevice Ext

ScPm 1 40 0 0 address mapping lists

ScPq 2 296 0 0 inquiry data

ScPr 2 224 0 0 resource list copy

ScRV 2 80 2 256 Volume entry

ScRp 16 2352 7 368 Partition entry

ScRt 0 0 8 368 Table entry

ScTL 1 2040 0 0 Mass storage driver tags

ScUn 1 32 0 0 Default Tag for pnp class driver allocations

ScpP 1 168 0 0 scsi PortConfig copies

Scs$ 5 360 0 0 Tag for pnp class driver's SRB lookaside list

Sdba 0 0 206 16376 Application compatibility Sdb* allocations

SeAc 0 0 6 624 Security ACL , Binary: nt!se

SeCL 11 880 0 0 Security CONTEXT_TAG , Binary: nt!se

SeFS 0 0 1 16 SEP_FILE_SYSTEM_NOTIFY_CONTEXT , Binary: nt!se

SeLS 0 0 1 72 Security Logon Session tracking array , Binary: nt!se

SeLs 0 0 39 1248 Security Logon Session , Binary: nt!se

SePa 67 9960 1 16 Process audit image names and captured polity structures , Binary: nt!se

SePr 0 0 3 104 Security Privilege Set , Binary: nt!se

SeSc 0 0 1 56 Captured Security Descriptor , Binary: nt!se

SeSd 7 816 15 1816 Security Descriptor , Binary: nt!se

SeSi 0 0 28 664 Security SID , Binary: nt!se

SeTd 341 21824 341 28968 Security Token dynamic part , Binary: nt!se

Sect 0 0 1078 96880 Section objects

Sema 1120 64064 0 0 Semaphore objects

SmAd 1 120 1 272 session setup/admin exchange

SmDO 6 432 0 0 deferred open context (special build only)

SmEc 1 64 0 0 echo buffer (special build only)

SmMa 1 272 0 0 mid atlas (special build only)

SmMm 18 15008 0 0 smbmini managed datastructures

SmMs 0 0 5 848 misc.

SmMt 2 104 0 0 mailslot buffer (special build only)

SmNr 0 0 3 160 NetRoot (special build only)

SmQP 0 0 3 168 params for directory query transact (special build only)

SmSr 2 104 0 0 Server (special build only)

SmTp 5 280 0 0 server transport tag

SmVc 1 136 0 0 smbmini connectionengine VC (special build only)

SmVr 3 744 0 0 VNetroot (special build only)

Strg 0 0 54 3352 Dynamic Translated strings

Symb 0 0 245 19600 Symbolic link objects

Symt 0 0 245 13064 Symbolic link target strings

TAPI 2 176 0 0 ntos\ndis\ndistapi

TC2r 2 48 0 0 TCP/IP network protocol , Binary: TCP

TCCS 1 208 0 0 TCP/IP network protocol , Binary: TCP

TCI4 1 432 0 0 TCP/IP network protocol , Binary: TCP

TCI5 1 264 0 0 TCP/IP network protocol , Binary: TCP

TCIV 2 272 0 0 TCP/IP network protocol , Binary: TCP

TCIZ 25 1256 0 0 TCP/IP network protocol , Binary: TCP

TCIa 1 104 0 0 TCP/IP network protocol , Binary: TCP

TCIm 1 64 0 0 TCP/IP network protocol , Binary: TCP

TCIr 1 200 0 0 TCP/IP network protocol , Binary: TCP

TCIt 2 3040 0 0 TCP/IP network protocol , Binary: TCP

TCIv 1 192 0 0 TCP/IP network protocol , Binary: TCP

TCIw 1 696 0 0 TCP/IP network protocol , Binary: TCP

TCIy 2 96 0 0 TCP/IP network protocol , Binary: TCP

TCPA 62 22816 0 0 TCP/IP network protocol , Binary: TCP

TCPB 11 15848 0 0 TCP/IP network protocol , Binary: TCP

TCPC 2393 201528 0 0 TCP connection pool , Binary: TCP

TCPT 62 28144 0 0 TCB pool , Binary: TCP

TCPY 1 328 0 0 SYN-TCB pool , Binary: TCP

TCPa 8 256 0 0 TCP/IP network protocol , Binary: TCP

TCPc 2514 120672 0 0 TCP/IP network protocol , Binary: TCP

TCPi 1 344 0 0 TCP/IP network protocol , Binary: TCP

TCPp 11 45056 0 0 TCP/IP network protocol , Binary: TCP

TCPr 56 4288 0 0 TCP request pool , Binary: TCP

TCPt 28 1422648 0 0 TCP/IP network protocol , Binary: TCP

TChc 2 8192 0 0 TCP/IP header pools , Binary: TCP

TChe 2 8192 0 0 TCP/IP header pools , Binary: TCP

TChi 2 8192 0 0 TCP/IP header pools , Binary: TCP

TCht 2 8192 0 0 TCP/IP header pools , Binary: TCP

TChu 2 8192 0 0 TCP/IP header pools , Binary: TCP

TCiA 47 4136 0 0 TCP/IP network protocol , Binary: TCP

TCiJ 1 40 0 0 TCP/IP network protocol , Binary: TCP

TCiK 1 40 0 0 TCP/IP network protocol , Binary: TCP

TCiQ 49 3920 0 0 TCP/IP network protocol , Binary: TCP

TCiS 1 24 0 0 TCP/IP network protocol , Binary: TCP

TCij 1 152 0 0 TCP/IP network protocol , Binary: TCP

TD 23 4376 0 0 UNKNOWN pooltag 'TD ', please update pooltag.txt

TDIa 8 704 0 0 UNKNOWN pooltag 'TDIa', please update pooltag.txt

TDIc 8 640 0 0 TDI resource

TDId 8 472 0 0 TDI resource

TDIe 2 192 0 0 TDI resource

TDIf 8 576 0 0 TDI resource

TDIg 7 216 0 0 TDI resource

TDIk 4 2536 0 0 TDI resource

TDIu 2 248 0 0 TDI resource

TDIv 2 32 0 0 TDI resource

TOBJ 24 2800 0 0 Topology object , Binary: rdpdr.sys

TPLA 128 524288 0 0 UNKNOWN pooltag 'TPLA', please update pooltag.txt

TSRM 11 2288 0 0 UNKNOWN pooltag 'TSRM', please update pooltag.txt

TSdd 0 0 37 357608 RDPDD - Hydra Display Driver , Binary: rdpdd.sys

TSlc 0 0 1 32 RDPWD - Hydra Licensing , Binary: rdpwd.sys

TSmc 0 0 12 6368 PDMCS - Hydra MCS Protocol Driver

TSwd 3 200 10 425800 RDPWD - Hydra Winstation Driver , Binary: rdpwd.sys

TcFp 1 264 0 0 UNKNOWN pooltag 'TcFp', please update pooltag.txt

TcpB 54 13896 0 0 TCP Offload Blocks , Binary: tcpip.sys

Thre 994 620256 0 0 Thread objects , Binary: nt!ps

Time 56 10352 0 0 Timer objects , Binary: nt!ke

Tnnl 64 16488 0 0 UNKNOWN pooltag 'Tnnl', please update pooltag.txt

Toke 0 0 341 427600 Token objects , Binary: nt!se

Ttfd 0 0 456 484248 TrueType Font driver

TunP 0 0 3 544 Tunnel cache oddsized pool-allocated elements

UHUB 24 2568 5 272 Universal Serial Bus Hub

UMAS 8 352 0 0 UNKNOWN pooltag 'UMAS', please update pooltag.txt

UlAO 1 120 0 0 App Pool Object , Binary: http.sys

UlAP 2 144 0 0 App Pool Process , Binary: http.sys

UlBS 7 2504 0 0 tags. Note: In-use tags are of the form "Ul??" or "Uc??".and Free tags are of the form "uL??" or "uC??"; , Binary: http.sys

UlCA 1 392 0 0 tags. Note: In-use tags are of the form "Ul??" or "Uc??".and Free tags are of the form "uL??" or "uC??"; , Binary: http.sys

UlCB 1 24 0 0 tags. Note: In-use tags are of the form "Ul??" or "Uc??".and Free tags are of the form "uL??" or "uC??"; , Binary: http.sys

UlCC 3 456 0 0 Control Channel , Binary: http.sys

UlCE 0 0 3 344 Config Group Tree Entry , Binary: http.sys

UlCH 0 0 2 160 Config Group Tree Header , Binary: http.sys

UlCJ 1 184 0 0 Config Group Object Pool , Binary: http.sys

UlCK 6 3712 0 0 Chunk Tracker , Binary: http.sys

UlCL 1 152 2 672 Config Group LogDir , Binary: http.sys

UlCO 129 78432 0 0 Connection , Binary: http.sys

UlCP 0 0 1 8192 tags. Note: In-use tags are of the form "Ul??" or "Uc??".and Free tags are of the form "uL??" or "uC??"; , Binary: http.sys

UlCY 0 0 1 24 Connection Count Entry , Binary: http.sys

UlDR 0 0 1 32 Deferred Remove Item , Binary: http.sys

UlEB 1 392 0 0 tags. Note: In-use tags are of the form "Ul??" or "Uc??".and Free tags are of the form "uL??" or "uC??"; , Binary: http.sys

UlEP 1 296 0 0 Endpoint , Binary: http.sys

UlFP 1 48 0 0 Filter Process , Binary: http.sys

UlFT 1 104 0 0 Filter Channel , Binary: http.sys

UlFU 7 21416 0 0 Full Tracker , Binary: http.sys

UlFW 1 392 0 0 Filter Write Tracker , Binary: http.sys

UlHR 9 10952 0 0 Internal Request , Binary: http.sys

UlHT 0 0 1 4198400 Hash Table , Binary: http.sys

UlIC 6 592 0 0 Irp Context , Binary: http.sys

UlIR 7 9848 0 0 Internal Response , Binary: http.sys

UlLF 1 96 0 0 Log File Entry , Binary: http.sys

UlLH 2 64 0 0 Log File Handle , Binary: http.sys

UlLL 1 392 6 417792 Log File Buffer , Binary: http.sys

UlLS 7 49544 0 0 Ansi Log Data Buffer , Binary: http.sys

UlLT 1 392 0 0 Binary Log Data Buffer , Binary: http.sys

UlNP 3 816 0 0 Non-Paged Data , Binary: http.sys

UlOT 4 16384 0 0 Opaque ID Table , Binary: http.sys

UlPS 0 0 1 32 tags. Note: In-use tags are of the form "Ul??" or "Uc??".and Free tags are of the form "uL??" or "uC??"; , Binary: http.sys

UlRP 9 5000 0 0 Request Buffer , Binary: http.sys

UlSO 1 136 0 0 Site Counter Entry , Binary: http.sys

UlTD 1 80 0 0 UL_TRANSPORT_ADDRESS , Binary: http.sys

UlTT 7 504 0 0 Thread Tracker , Binary: http.sys

UlWI 1 64 0 0 Work Item , Binary: http.sys

Umrx 1 200 0 0 UNKNOWN pooltag 'Umrx', please update pooltag.txt

Urdr 0 0 13 520 USERTAG_REDIRECT , Binary: win32k!SetRedirectionBitmap

UsDI 0 0 9 2544 USERTAG_DEVICEINFO , Binary: win32k!CreateDeviceInfo

Usac 0 0 11 1232 USERTAG_ACCEL , Binary: win32k!_CreateAcceleratorTable

Usai 0 0 5 120 USERTAG_ATTACHINFO , Binary: win32k!zzzAttachThreadInput

UsbC 15 696 0 0 UNKNOWN pooltag 'UsbC', please update pooltag.txt

Uscb 0 0 4 616 USERTAG_CLIPBOARD , Binary: win32k!_ConvertMemHandle

Usci 0 0 5 760 USERTAG_CLIENTTHREADINFO , Binary: win32k!InitSystemThread

Uscl 0 0 40 2640 USERTAG_CLASS , Binary: win32k!ClassAlloc

Usct 0 0 16 768 USERTAG_CHECKPT , Binary: win32k!CkptRestore

Uscu 0 0 370 35520 USERTAG_CURSOR , Binary: win32k!_CreateEmptyCursorObject

Usd9 0 0 1 48 USERTAG_DDE9 , Binary: win32k!xxxCsDdeInitialize

Usdc 0 0 19 912 USERTAG_DCE , Binary: win32k!CreateCacheDC

User 6 384 0 0 USERTAG_ERESOURCE , Binary: win32k!InitCreateUserCrit

Usfd 1 8192 0 0 UNKNOWN pooltag 'Usfd', please update pooltag.txt

Ushk 0 0 27 864 USERTAG_HOTKEY , Binary: win32k!_RegisterHotKey

Usih 0 0 18 576 USERTAG_IMEHOTKEY , Binary: win32k!SetImeHotKey

Uskb 0 0 2 160 USERTAG_KBDLAYOUT , Binary: win32k!xxxLoadKeyboardLayoutEx

Uskf 0 0 2 208 USERTAG_KBDFILE , Binary: win32k!LoadKeyboardLayoutFile

Uskt 0 0 2 5360 USERTAG_KBDTABLE , Binary: win32k!ReadLayoutFile

Usla 6 672 0 0 USERTAG_LOOKASIDE , Binary: win32k!InitLockRecordLookaside

Uspi 0 0 206 30888 USERTAG_PROCESSINFO , Binary: win32k!MapDesktop

Uspo 2 80 0 0 USERTAG_POWER , Binary: win32k!QueuePowerRequest

Uspp 2 80 9 1680 USERTAG_PNP , Binary: win32k!AllocateAndLinkHidTLCInf

Usqm 0 0 10 560 USERTAG_SQM , Binary: win32k!_WinSqmAllocate

Usqu 0 0 155 40920 USERTAG_Q , Binary: win32k!InitQEntryLookaside

Usse 0 0 1 32 USERTAG_SECURITY , Binary: win32k!SetDisconnectDesktopSecu

Ussm 0 0 8 576 USERTAG_SMS , Binary: win32k!InitSMSLookaside

Ussw 0 0 2 720 USERTAG_SWP , Binary: win32k!_BeginDeferWindowPos

Ussy 43 1528 8 1064 USERTAG_SYSTEM , Binary: win32k!xxxDesktopThread

Usti 0 0 155 54560 USERTAG_THREADINFO , Binary: win32k!AllocateW32Thread

Ustm 0 0 18 1008 USERTAG_TIMER , Binary: win32k!InternalSetTimer

Ustx 0 0 6 240 USERTAG_TEXT , Binary: win32k!NtUserDrawCaptionTemp

Usvl 0 0 1 32 USERTAG_VWPL , Binary: win32k!VWPLAdd

Uswd 0 0 3 528 USERTAG_WINDOW , Binary: win32k!xxxCreateWindowEx

Uswl 0 0 2 664 USERTAG_WINDOWLIST , Binary: win32k!BuildHwndList

Vad 3803 182544 0 0 Mm virtual address descriptors , Binary: nt!mm

VadF 1 32 0 0 VADs created by a FreeVM splitting , Binary: nt!mm

VadS 2926 93632 0 0 Mm virtual address descriptors (short) , Binary: nt!mm

Vadl 1317 84288 0 0 Mm virtual address descriptors (long) , Binary: nt!mm

Vga 0 0 1 4096 UNKNOWN pooltag 'Vga ', please update pooltag.txt

VoSb 5 81920 0 0 Buffer allocations , Binary: volsnap.sys

VoSc 6 640 0 0 Snapshot context allocations , Binary: volsnap.sys

VoSs 0 0 1 128 Short term allocations , Binary: volsnap.sys

VoSt 1 120 0 0 Temp table allocations , Binary: volsnap.sys

Vpb 31 2976 0 0 Io, vpb's

Vprt 9 432 2 256 Video port for legacy (pre-Vista) display drivers , Binary: videoprt.sys

Vtfd 0 0 8 2176 Font file/context

Wait 44 13960 0 0 NtWaitForMultipleObjects

WanI 1 112 0 0 IoPacket

WanJ 4 1344 0 0 LineUpInfo

WanM 5 464 0 0 Connection Table

WanN 1 680 0 0 NdisPacketPool Desc

WanO 1 2064 0 0 NdisWan Tags (PPP Framing module for Remote Access)

WanS 2 144 0 0 AfCB/SapCB/VcCB

Wdm 0 0 1 56 WDM

Wind 7 1008 0 0 UNKNOWN pooltag 'Wind', please update pooltag.txt

WmDS 0 0 3 24576 Wmi DataSource chunks

WmGE 0 0 1 49152 Wmi GuidEntry chunks

WmIS 0 0 1 118784 Wmi InstanceSet chunks

WmMR 0 0 1 544 Wmi MofResouce chunks

WmiG 105 23520 0 0 Allocation of WMIGUID

WmiR 164 10496 0 0 Wmi Registration info blocks

Wmip 189 4536 387 34136 Wmi General purpose allocation

Wmit 1 4096 7 393544 Wmi Trace

Wrpa 2 720 0 0 WAN_ADAPTER_TAG

Wrpc 1 72 0 0 WAN_CONN_TAG

Wrpi 1 120 0 0 WAN_INTERFACE_TAG

Wrps 2 128 0 0 WAN_STRING_TAG

aEoP 1 672 0 0 UNKNOWN pooltag 'aEoP', please update pooltag.txt

b06b 84 18152 19 1912 UNKNOWN pooltag 'b06b', please update pooltag.txt

brca 4 192 0 0 UNKNOWN pooltag 'brca', please update pooltag.txt

brcb 42 2688 0 0 UNKNOWN pooltag 'brcb', please update pooltag.txt

brcd 48 5376 0 0 UNKNOWN pooltag 'brcd', please update pooltag.txt

brce 49 52920 0 0 UNKNOWN pooltag 'brce', please update pooltag.txt

brcf 4 1120 0 0 UNKNOWN pooltag 'brcf', please update pooltag.txt

brcg 47 577536 0 0 UNKNOWN pooltag 'brcg', please update pooltag.txt

brcm 13 385008 0 0 UNKNOWN pooltag 'brcm', please update pooltag.txt

cbuf 0 0 3 72 UNKNOWN pooltag 'cbuf', please update pooltag.txt

idle 1 104 0 0 Power Manager idle handler

rx.. 3 1248 0 0 UNKNOWN pooltag ' rx', please update pooltag.txt

sidg 4 96 0 0 GDI spooler events

thdd 0 0 2 40960 DirectDraw/3D handle manager table

usbp 92 218360 6 288 UNKNOWN pooltag 'usbp', please update pooltag.txt

vPrt 3 36920 21 3320 UNKNOWN pooltag 'vPrt', please update pooltag.txt

vkbd 3 1496 0 0 UNKNOWN pooltag 'vkbd', please update pooltag.txt

xSMB 0 0 -1 4294959104 IFSKIT sample SMB mini-redirector , Binary: smbmrx.sys

TOTAL 159231 53133896 121049 4593882056

Back to Top
dleemills View Drop Down
Newbie
Newbie


Joined: 27 July 2009
Location: Des Moines, IA
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote dleemills Quote  Post ReplyReply Direct Link To This Post Posted: 29 July 2009 at 8:59pm

IFSKIT sample SMB mini-redirector.  This is obviously the issue.

Back to Top
dleemills View Drop Down
Newbie
Newbie


Joined: 27 July 2009
Location: Des Moines, IA
Status: Offline
Points: 7
Post Options Post Options   Thanks (0) Thanks(0)   Quote dleemills Quote  Post ReplyReply Direct Link To This Post Posted: 29 July 2009 at 9:38pm

smbmrx.sys this file is no where on the server having issues? What am I missing?

Back to Top
 Post Reply Post Reply Page  12>
  Share Topic   

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 11.06
Copyright ©2001-2016 Web Wiz Ltd.