Clik here to view.
Part 2: Got Stack? No. We ran out and kv won’t tell me why!
Hello. It’s Ryan again with the second installment of my stack depletion walkthrough. Part 1 of this blog covered the initial analysis of a kernel memory dump captured due to a Stop 0x7f...
View ArticleClik here to view.
Part 3: ETW Methods of Tracing
Introduction and Overview This is Ivan from the Platforms OEM team and this is the final installment of the ETW series. In this article, we are going to continue our exploration of the ETW tracing...
View ArticleClik here to view.
Pool Fragmentation
Hello! My name is Stephen, an escalation engineer on the Microsoft Global Escalation Services Team. Today I'm going to share my experience of a pool fragmentation issue I came across recently. Let’s...
View ArticleClik here to view.
Case Study - Software Restriction Policies and Large EXE Files
Recently I received a debugging request for a customer having problems running large executables. On their systems, they could run most EXEs without any problems, but they had two programs that were...
View ArticleClik here to view.
Ironical Case of a Performance Monitoring Tool causing a Performance Issue!
Hello folks, this is Pushkar and I recently worked an interesting case dealing with high CPU usage. The case was particularly interesting but it was not a business critical application consuming the...
View ArticleClik here to view.
Understanding !PTE , Part 1: Let’s get physical
Hello. It’s Ryan Mangipano again (Ryanman). Today’s blog will be the first in a multi-part post designed to help you understand the output of the !PTE debuger comand along with the basics of hardware...
View ArticleClik here to view.
X64 Deep Dive Presentation from the 2010 Global Engineering Conference
We just hosted our annual Global Engineer Conference for members of the Escalation Team at Microsoft. It’s always great to meet up with our peers from other regions and see folks like Mark...
View ArticleClik here to view.
We Need Your XPERF Feedback
Hi, This is Tate asking for your direct and valuable feedback on XPerf (The Windows Performance Toolkit). We are knee deep in working with the creators of the tool (The Windows Fundamentals Team) to...
View ArticleClik here to view.
Video: Using XPERF to root cause CPU consumption
Hi Debuggers, Here is a short video showing how to root cause CPU consumption issues on Vista/Server 2008 and higher operating systems with Xperf. For this scenario, Xperf is an easy to implement...
View ArticleClik here to view.
Critical Device Database TIP
On a fairly regular basis, Bob Golding, our resident GES storage guru, sends out debugging tips to our group. We thought our blog readers would find value in these tips so we’re posting one here. Let...
View ArticleClik here to view.
How to use the DedicatedDumpFile registry value to overcome space limitations...
Prior to Windows Vista and Windows Server 2008 we had to keep a large page file on the system drive (typically drive C:) in order to properly capture system memory dumps for troubleshooting. This...
View ArticleClik here to view.
Upcoming Blog ARTICLES
Working on the Global Escalation Services Team at Microsoft is really a cool gig. We’re privileged to work on several different Windows components at a very deep level so life is never boring. Here’s a...
View ArticleClik here to view.
Understanding !PTE, Part2: Flags and Large Pages
Hello, it's Ryan Mangipano with part two of my PTE series. Today I'll discuss PDE/PTE flags, the TLB, and show you a manual conversion of x86 PAE Large Page Virtual Addresses to Physical. If you...
View ArticleClik here to view.
Archive of the Debug Ninja’s Twitter debug tips
Every Wednesday I post a debug tip to our twitter page at www.twitter.com/ntdebugging. This blog is an archive of these tips to allow our readers to find this information easily. We will update this...
View ArticleClik here to view.
A Case of Mysterious Memory Corruption
Hi, this is Chad from the OEM team. You may remember me from such posts as “Debugging a bluescreen at home.” Some time ago I debugged a bluescreen on a friend’s home computer, and I thought the results...
View ArticleClik here to view.
Understanding VSS in DPM
Data Protection Manager 2007 utilizes Windows’ Volume Shadow Copy Service to protect Data Sources on Production Servers, and to manage Recovery Points on the DPM server. This presentation provides...
View ArticleClik here to view.
Storport ETW Logging to Measure Requests Made to a Disk Unit
Greetings NTDEBUGGING community, Bob here again, and today I would like to let everyone know about a new feature implemented in the STORPORT.SYS binaries released in the following KB articles: ·...
View ArticleClik here to view.
Uncovering How Workspaces Work in WinDbg
Author - Jason Epperly Workspaces have always been a little confusing to me. I knew how to bend them to do what I needed to get the job done, however they still remained a bit mysterious. Recently I...
View ArticleClik here to view.
x64 Manual Stack Reconstruction and Stack Walking
My name is Trey Nash and I am an Escalation Engineer on the Core OS team. My experience is as a software developer, and therefore my blog posts tend to be slanted in the direction of helping...
View ArticleClik here to view.
‘Hidden’ ETW Stack Trace Feature – Get Stacks All Over the Place!
I’ve heard Mark R. say that “sometimes Microsoft gave me a gift” when coming across an interesting feature not in mainstream documentation. How true that often the odd find can prove ultimately...
View Article