Re: AW: Freezing Windows 2008 x64bit guest

Vadim Rozenfeld
2010-12-15T10:49:07Z

On Wed, 2010-12-15 at 00:57 +0100, Manfred Heubach wrote:
> Vadim Rozenfeld <vrozenfe <at> redhat.com> writes:
>
> >
> > On Mon, 2010-12-13 at 22:12 +0200, Dor Laor wrote:
> > > On 12/13/2010 09:42 PM, Manfred Heubach wrote:
> > > >
> > > > I was running the host with Ubuntu 10.04 but upgraded to 10.10 - mainly
> because
> > > > of performance problems which were solved by the upgrade.
> > > >
> > > > After the upgrade the system became extremly unstable. It was crashing as soon
> > > > as disk io and network io load was growing. 100% reproduceable with windows
> > > > server backup to an iscsi volume.
> > > >
> > > > i had virtio drivers for storage and network installed (redhat/fedora 1.1.11).
> > >
> > > Which fedora/rhel release is that?
>
>
> The host is Ubuntu 10.10 x64
>
> The drivers are from
> http://alt.fedoraproject.org/pub/alt/virtio-win/latest/images/ 1.1.11-0
> released on 17-Aug-2010 - are there any newer drivers?
Yes, they are the most recent drivers at fedoraproject. Our rhel6
drivers are almost the same, except for a few non-critical, WHQL related
bug fixes.
However, there is one fix related to Large Send Offload (LSO) problem
which was fixed in rhel6, but I don't see the relevant changes in fedora
kvmnet driver sources
http://alt.fedoraproject.org/pub/alt/virtio-win/latest/images/src/

>
>
> > > What's the windows virtio driver version?
>
> The virtio storage version shown in Windows is 6.0.0.10
>
> > >
> > > Have you tried using virt-manager/virhs instead of raw cmdline?
>
> I'm starting it with libvirt/virsh
>
> cmd-line copied from the log (and some log entries):
>
> LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin
> QEMU_AUDIO_DRV=none /usr/bin/kvm -S -M pc-0.12 -enable-kvm -m 8192 -smp
> 4,sockets=4,cores=1,threads=1 -name sbs2008 -uuid
> 933c2ef2-e5b0-0b39-db60-016b5d226534 -nodefaults -chardev
> socket,id=monitor,path=/var/lib/libvirt/qemu/sbs2008.monitor,server,nowait -mon
> chardev=monitor,mode=readline -rtc base=localtime -boot c -drive
> file=/var/lib/libvirt/images/olscanner/virtio-win-1.1.11-0.iso,if=none,media=cdrom,
> id=drive-ide0-1-0,readonly=on,format=raw
> -device ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive
> file=/var/lib/libvirt/images/sbs2008/sbs2008.img,if=none,id=drive-virtio-disk0,
> boot=on,format=qcow2 -device
> virtio-blk-pci,bus=pci.0,addr=0x4,drive=drive-virtio-disk0,id=virtio-disk0
> -drive
> file=/dev/volg1/sbsdata,if=none,id=drive-virtio-disk1,format=raw,cache=none
> -device
> virtio-blk-pci,bus=pci.0,addr=0x5,drive=drive-virtio-disk1,id=virtio-disk1
> -drive file=/dev/volg1/wsus,if=none,id=drive-virtio-disk2,format=raw,cache=none
> -device
> virtio-blk-pci,bus=pci.0,addr=0x7,drive=drive-virtio-disk2,id=virtio-disk2
> -device e1000,vlan=0,id=net0,mac=52:54:00:8a:bc:c9,bus=pci.0,addr=0x6 -net
> tap,fd=107,vlan=0,name=hostnet0 -chardev pty,id=serial0 -device
> isa-serial,chardev=serial0 -usb -device usb-tablet,id=input0 -vnc 0.0.0.0:0 -k
> de -vga std -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x3
> 07:12:02.715: debug : qemudInitCpuAffinity:2423 : Setting CPU affinity
> 07:12:02.717: debug : qemuSecurityDACSetProcessLabel:547 : Dropping privileges
> of VM to 105:114
> char device redirected to /dev/pts/0
> pci_add_option_rom: failed to find romfile "pxe-e1000.bin"
>
>
> > > About e1000, some windows comes with buggy driver and an update e1000
> > > from Intel fixes some issues.
> > >
>
> I'm running latest drivers from Intel: 8.3.15.0
>
> > >
> > > > At each BSOD I had the following line in the log of the guest:
> > > >
> > > > virtio_ioport_write: unexpected address 0x13 value 0x1
Seems to be the result of calling PapaNdis_OnBugCheck function

> > > >
> > > > I changed the network interface back to e1000. What I experience now (and
> I had
> > > > that a the very beginning before i switched to virtio network) are
> freezes. The
> > > > guest doesn't respond anymore (doesn't answer to pings and doesn't
> interact via
> > > > mouse/keyboard anymore). Host CPU usage of the kvm process is 100% on as many
> > > > cores as there are virtual cpus (in this case 4).
>
> I had a crash today but no logentry on the host - but that could be because I
> had to restart syslog (ran out of diskspace after turning on debug logging ob
> libvirtd - didn't think that it would generate 6 GB of logs per day :-)
>
> > > >
> > Sounds like an interrupt storm to me. Can you try to ping your VM?
>
> No responds to ping.
>
> > Anyway the best way to start debugging a stalled system is just to crash
> > it with BSOD. For doing it you will need:
> > - enable NMICrashDump (please see http://support.microsoft.com/kb/927069
> > for more information
> > - enable Kernel Memory Dump (actually Complete is much better, but it
> > can be too big) http://support.microsoft.com/kb/969028
> > - you only will need to type "nmi 0" in the qemu monitor to crash the
> > system, when the system hangs next time.
>
> I prepared this. When the system crashed today I didn't have the complete
> memory dump ready - so I only have a minidump. The intersting point is that
> the system today crashed with a BSOD and didn't freeze.
>
> The result of dumpchk.exe is as follows:
>
>
> Microsoft (R) Windows Debugger Version 6.12.0002.633 AMD64
> Copyright (c) Microsoft Corporation. All rights reserved.
>
>
> Loading Dump File [c:\Windows\Minidump\Mini121410-01.dmp]
> Mini Kernel Dump File: Only registers and stack trace are available
>
> Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols
> Executable search path is:
> Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (4
> procs) Free x64
> Product: LanManNt, suite: SmallBusiness TerminalServer SmallBusinessRestricted
> SingleUserTS
> Built by: 6002.18267.amd64fre.vistasp2_gdr.100608-0458
> Machine Name:
> Kernel base = 0xfffff800`01e16000 PsLoadedModuleList = 0xfffff800`01fdadd0
> Debug session time: Tue Dec 14 18:41:20.058 2010 (UTC + 1:00)
> System Uptime: 1 days 11:16:05.967
> Loading Kernel Symbols
> ...............................................................
> ............................................................
> Loading User Symbols
> Loading unloaded module list
> .....
> *******************************************************************************
> * *
> * Bugcheck Analysis *
> * *
> *******************************************************************************
>
> Use !analyze -v to get detailed debugging information.
>
> BugCheck 3B, {c0000005, fffff80001e6a842, fffffa6004efcb70, 0}
>
> Probably caused by : Npfs.SYS ( Npfs!NpSetAttributeInList+9a )
It is named pipe file system.
>
> Followup: MachineOwner
> ---------
>
> ----- 64 bit Kernel Mini Dump Analysis
>
> DUMP_HEADER64:
> MajorVersion 0000000f
> MinorVersion 00001772
> KdSecondaryVersion 00000000
> DirectoryTableBase 00000001`e5b51000
> PfnDataBase fffff800`0203d250
> PsLoadedModuleList fffff800`01fdadd0
> PsActiveProcessHead fffff800`01fba440
> MachineImageType 00008664
> NumberProcessors 00000004
> BugCheckCode 0000003b
> BugCheckParameter1 00000000`c0000005
> BugCheckParameter2 fffff800`01e6a842
> BugCheckParameter3 fffffa60`04efcb70
> BugCheckParameter4 00000000`00000000
> KdDebuggerDataBlock fffff800`01f87f20
> ProductType 00000002
> SuiteMask 00000131
> WriterStatus 00000000
> MiniDumpFields 00000cff
>
> TRIAGE_DUMP64:
> ServicePackBuild 00000200
> SizeOfDump 00040000
> ValidOffset 0003fffc
> ContextOffset 00000348
> ExceptionOffset 00000f00
> MmOffset 00002080
> UnloadedDriversOffset 000020d0
> PrcbOffset 000021f0
> ProcessOffset 00005d10
> ThreadOffset 000060f8
> CallStackOffset 00006548
> SizeOfCallStack 00001bf8
> DriverListOffset 00008470
> DriverCount 0000007c
> StringPoolOffset 0000ca30
> StringPoolSize 00002950
> BrokenDriverOffset 00000000
> TriageOptions ffffffff
> TopOfStack fffffa60`04efc1b8
> BStoreOffset 00000000
> SizeOfBStore 00000000
> LimitOfBStore 00000000`00000000
> DebuggerDataOffset 00008140
> DebuggerDataSize 00000330
> DataBlocksOffset 0000f380
> DataBlocksCount 00000008
> fffff800`01fdb720 - fffff800`01fdb79f at offset 0000f400
> fffff800`01fbf898 - fffff800`01fbf89b at offset 0000f480
> fffff800`01fbf894 - fffff800`01fbf897 at offset 0000f484
> fffff800`0203d078 - fffff800`0203d07b at offset 0000f488
> fffff800`0203d09c - fffff800`0203d09f at offset 0000f48c
> fffff800`01e6f000 - fffff800`01e6ffff at offset 0000f490
> fffff800`02019000 - fffff800`02019fff at offset 00010490
> fffff800`01e70000 - fffff800`01e70fff at offset 00011490
> Max offset 12490, 2e2f8 from end of file
>
>
> Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (4
> procs) Free x64
> Product: LanManNt, suite: SmallBusiness TerminalServer SmallBusinessRestricted
> SingleUserTS
> Built by: 6002.18267.amd64fre.vistasp2_gdr.100608-0458
> Machine Name:
> Kernel base = 0xfffff800`01e16000 PsLoadedModuleList = 0xfffff800`01fdadd0
> Debug session time: Tue Dec 14 18:41:20.058 2010 (UTC + 1:00)
> System Uptime: 1 days 11:16:05.967
> start end module name
> fffff800`01e16000 fffff800`0232d000 nt Tue Jun 08 16:59:47 2010 (4C0E5AE3)
> fffff800`0232d000 fffff800`02373000 hal Sat Apr 11 09:04:56 2009 (49E04118)
> fffff960`000b0000 fffff960`00364000 win32k Tue Aug 31 16:57:22 2010 (4C7D1852)
> fffff960`004d0000 fffff960`004ee000 dxg Sat Apr 11 07:09:45 2009 (49E02619)
> fffff960`00680000 fffff960`0068a000 TSDDD Sat Jan 19 07:42:04 2008 (47919BBC)
> fffff960`008c0000 fffff960`008c9000 framebuf unavailable (00000000)
> fffff960`00a80000 fffff960`00ab0000 RDPDD unavailable (00000000)
> fffffa60`00604000 fffffa60`0060e000 kdcom Sat Apr 11 09:07:57 2009 (49E041CD)
> fffffa60`0060e000 fffffa60`00649000 mcupdate_GenuineIntel Sat Apr 11
> 09:05:41 2009 (49E04145)
> fffffa60`00649000 fffffa60`0065d000 PSHED Sat Apr 11 09:08:17 2009 (49E041E1)
> fffffa60`0065d000 fffffa60`006ba000 CLFS Sat Apr 11 06:54:21 2009 (49E0227D)
> fffffa60`006ba000 fffffa60`0076c000 CI Sat Apr 11 09:08:09 2009 (49E041D9)
> fffffa60`0076c000 fffffa60`0077e000 HIDCLASS Sat Apr 11 07:39:32 2009 (49E02D14)
> fffffa60`0077e000 fffffa60`00785b80 HIDPARSE Sat Jan 19 07:33:51 2008 (479199CF)
> fffffa60`00788000 fffffa60`007d8000 msrpc Sat Apr 11 07:32:13 2009 (49E02B5D)
> fffffa60`007d8000 fffffa60`007f5000 tdx Sat Apr 11 07:43:00 2009 (49E02DE4)
> fffffa60`007f5000 fffffa60`00800000 mouhid Sat Jan 19 07:28:10 2008 (4791987A)
> fffffa60`00800000 fffffa60`00809000 hidusb Sat Apr 11 07:39:32 2009 (49E02D14)
> fffffa60`0080a000 fffffa60`009cd000 NDIS Sat Apr 11 07:43:15 2009 (49E02DF3)
> fffffa60`009cd000 fffffa60`009e1000 volmgr Sat Apr 11 07:34:49 2009 (49E02BF9)
> fffffa60`009e1000 fffffa60`009f2000 Npfs Sat Apr 11 06:54:22 2009 (49E0227E)
> fffffa60`009f2000 fffffa60`009fb000 rasacd Sat Jan 19 07:37:30 2008 (47919AAA)
> fffffa60`00a02000 fffffa60`00a5b000 NETIO Sat Apr 11 07:43:34 2009 (49E02E06)
> fffffa60`00a5b000 fffffa60`00b35000 Wdf01000 Sat Jan 19 07:33:27 2008 (479199B7)
> fffffa60`00b35000 fffffa60`00b43000 WDFLDR Sat Jan 19 07:32:33 2008 (47919981)
> fffffa60`00b43000 fffffa60`00b99000 acpi Sat Apr 11 07:03:26 2009 (49E0249E)
> fffffa60`00b99000 fffffa60`00ba2000 WMILIB Sat Jan 19 07:33:45 2008 (479199C9)
> fffffa60`00ba2000 fffffa60`00bac000 msisadrv Sat Jan 19 07:02:50 2008 (4791928A)
> fffffa60`00bac000 fffffa60`00bdc000 pci Sat Apr 11 07:03:33 2009 (49E024A5)
> fffffa60`00bdc000 fffffa60`00bf1000 partmgr Sat Apr 11 07:34:51 2009 (49E02BFB)
> fffffa60`00bf1000 fffffa60`00bfc000 Msfs Sat Jan 19 06:53:55 2008 (47919073)
> fffffa60`00c00000 fffffa60`00c09000 rdpencdd Sat Jan 19 07:42:03 2008 (47919BBB)
> fffffa60`00c0d000 fffffa60`00c73000 volmgrx Sat Apr 11 07:35:14 2009 (49E02C12)
> fffffa60`00c73000 fffffa60`00c7b000 intelide Sat Jan 19 07:28:56 2008 (479198A8)
> fffffa60`00c7b000 fffffa60`00c8b000 PCIIDEX Sat Apr 11 07:34:22 2009 (49E02BDE)
> fffffa60`00c8b000 fffffa60`00c9e000 mountmgr Sat Jan 19 07:28:01 2008 (47919871)
> fffffa60`00c9e000 fffffa60`00ca6000 atapi Sat Apr 11 07:34:19 2009 (49E02BDB)
> fffffa60`00ca6000 fffffa60`00cca000 ataport Sat Apr 11 07:34:25 2009 (49E02BE1)
> fffffa60`00cca000 fffffa60`00cd3000 viostor Tue Aug 10 15:58:06 2010 (4C615AEE)
> fffffa60`00cd3000 fffffa60`00d30000 storport Sat Apr 11 07:34:45 2009 (49E02BF5)
> fffffa60`00d30000 fffffa60`00d77000 fltmgr Sat Apr 11 06:54:38 2009 (49E0228E)
> fffffa60`00d77000 fffffa60`00da2000 quota Sat Apr 11 06:59:38 2009 (49E023BA)
> fffffa60`00da2000 fffffa60`00db7000 datascrn Sat Apr 11 06:59:35 2009 (49E023B7)
> fffffa60`00db7000 fffffa60`00df0000 msiscsi Sat Apr 11 07:36:09 2009 (49E02C49)
> fffffa60`00df0000 fffffa60`00dfe000 vga Sat Jan 19 07:32:21 2008 (47919975)
> fffffa60`00e00000 fffffa60`00e0c000 ndistapi Sat Jan 19 07:37:22 2008 (47919AA2)
> fffffa60`00e0d000 fffffa60`00e94000 ksecdd Mon Jun 15 15:15:18 2009 (4A364966)
> fffffa60`00e94000 fffffa60`00eaa000 i8042prt Sat Jan 19 07:28:08 2008 (47919878)
> fffffa60`00eaa000 fffffa60`00eb8000 kbdclass Sat Jan 19 07:28:05 2008 (47919875)
> fffffa60`00eb8000 fffffa60`00ec4000 mouclass Sat Jan 19 07:28:05 2008 (47919875)
> fffffa60`00ec4000 fffffa60`00ed1000 fdc Sat Jan 19 07:28:45 2008 (4791989D)
> fffffa60`00ed1000 fffffa60`00eed000 cdrom Sat Apr 11 07:34:39 2009 (49E02BEF)
> fffffa60`00eed000 fffffa60`00ef9000 usbuhci Sat Jan 19 07:33:56 2008 (479199D4)
> fffffa60`00ef9000 fffffa60`00f3f000 USBPORT Sat Apr 11 07:39:39 2009 (49E02D1B)
> fffffa60`00f3f000 fffffa60`00f4d000 vgapnp Sat Jan 19 07:32:22 2008 (47919976)
> fffffa60`00f4d000 fffffa60`00f72000 VIDEOPRT Sat Jan 19 07:32:25 2008 (47919979)
> fffffa60`00f72000 fffffa60`00f82000 watchdog Sat Apr 11 07:09:16 2009 (49E025FC)
> fffffa60`00f82000 fffffa60`00fa5a00 E1G6032E Wed Sep 24 01:09:49 2008 (48D9773D)
> fffffa60`00fa6000 fffffa60`00fb9000 intelppm Sat Jan 19 06:52:45 2008 (4791902D)
> fffffa60`00fb9000 fffffa60`00fcc000 blbdrive Sat Jan 19 06:58:37 2008 (4791918D)
> fffffa60`00fcc000 fffffa60`00fd9000 TDI Sat Apr 11 07:44:14 2009 (49E02E2E)
> fffffa60`00fd9000 fffffa60`00ffc000 rasl2tp Sat Apr 11 07:43:37 2009 (49E02E09)
> fffffa60`01003000 fffffa60`01179000 tcpip Wed Jun 16 16:51:56 2010 (4C18E50C)
> fffffa60`01179000 fffffa60`011a5000 fwpkclnt Sat Apr 11 07:42:44 2009 (49E02DD4)
> fffffa60`011a5000 fffffa60`011d1000 CLASSPNP Sat Apr 11 07:34:15 2009 (49E02BD7)
> fffffa60`011d1000 fffffa60`011db000 crcdisk Sat Jan 19 07:30:12 2008 (479198F4)
> fffffa60`011f3000 fffffa60`011fc000 tunmp Sat Jan 19 07:36:30 2008 (47919A6E)
> fffffa60`01209000 fffffa60`01389000 Ntfs Sat Apr 11 06:55:38 2009 (49E022CA)
> fffffa60`01389000 fffffa60`013cd000 volsnap Sat Apr 11 07:35:33 2009 (49E02C25)
> fffffa60`013cd000 fffffa60`013d5000 spldr Mon Jan 12 22:51:29 2009 (496BBB61)
> fffffa60`013d5000 fffffa60`013e7000 mup Sat Apr 11 06:54:47 2009 (49E02297)
> fffffa60`013e7000 fffffa60`013fb000 disk Sat Apr 11 07:34:38 2009 (49E02BEE)
> fffffa60`03600000 fffffa60`03631000 ndiswan Sat Apr 11 07:43:39 2009 (49E02E0B)
> fffffa60`03631000 fffffa60`03641000 raspppoe Sat Apr 11 07:43:33 2009 (49E02E05)
> fffffa60`03641000 fffffa60`0365f000 raspptp Sat Apr 11 07:43:38 2009 (49E02E0A)
> fffffa60`0365f000 fffffa60`03677000 rassstp Sat Apr 11 07:43:46 2009 (49E02E12)
> fffffa60`03677000 fffffa60`03711000 rdpdr Sat Apr 11 07:49:54 2009 (49E02F82)
> fffffa60`03711000 fffffa60`03724000 termdd Sat Apr 11 07:48:13 2009 (49E02F1D)
> fffffa60`03724000 fffffa60`03725480 swenum Thu Nov 02 10:37:33 2006 (4549BC5D)
> fffffa60`03726000 fffffa60`0375a000 ks Sat Apr 11 07:33:51 2009 (49E02BBF)
> fffffa60`0375a000 fffffa60`03765000 mssmbios Sat Jan 19 07:02:54 2008 (4791928E)
> fffffa60`03765000 fffffa60`03775000 umbus Sat Jan 19 07:34:16 2008 (479199E8)
> fffffa60`03775000 fffffa60`037bd000 usbhub Sat Apr 11 07:39:52 2009 (49E02D28)
> fffffa60`037bd000 fffffa60`037d1000 NDProxy Sat Jan 19 07:37:26 2008 (47919AA6)
> fffffa60`037d1000 fffffa60`037e1000 dfs Sat Jan 19 06:54:14 2008 (47919086)
> fffffa60`037e1000 fffffa60`037eb000 Fs_Rec Sat Jan 19 06:53:41 2008 (47919065)
> fffffa60`037eb000 fffffa60`037f4000 Null Thu Nov 02 10:37:15 2006 (4549BC4B)
> fffffa60`037f4000 fffffa60`037fd000 RDPCDD Sat Jan 19 07:42:04 2008 (47919BBC)
> fffffa60`037fd000 fffffa60`037fee00 USBD Sat Jan 19 07:33:53 2008 (479199D1)
> fffffa60`03c04000 fffffa60`03c1f000 smb Sat Apr 11 07:42:19 2009 (49E02DBB)
> fffffa60`03c1f000 fffffa60`03c8a000 afd Sat Apr 11 07:44:21 2009 (49E02E35)
> fffffa60`03c8a000 fffffa60`03cce000 netbt Sat Apr 11 07:42:31 2009 (49E02DC7)
> fffffa60`03cce000 fffffa60`03cec000 pacer Sat Apr 11 07:42:56 2009 (49E02DE0)
> fffffa60`03cec000 fffffa60`03cfb000 netbios Sat Jan 19 07:36:35 2008 (47919A73)
> fffffa60`03cfb000 fffffa60`03d0e000 monitor Sat Jan 19 07:32:34 2008 (47919982)
> fffffa60`03d18000 fffffa60`03d33000 wanarp Sat Apr 11 07:43:38 2009 (49E02E0A)
> fffffa60`03d33000 fffffa60`03d80000 rdbss Sat Apr 11 06:55:21 2009 (49E022B9)
> fffffa60`03d80000 fffffa60`03d8c000 nsiproxy Sat Jan 19 07:36:45 2008 (47919A7D)
> fffffa60`03d8c000 fffffa60`03da9000 dfsc Sat Apr 11 06:54:44 2009 (49E02294)
> fffffa60`03da9000 fffffa60`03dc5000 cdfs Sat Jan 19 06:53:45 2008 (47919069)
> fffffa60`03dc5000 fffffa60`03dd3000 crashdmp Sat Apr 11 07:34:31 2009 (49E02BE7)
> fffffa60`03dd3000 fffffa60`03ddd000 dump_diskdump Sat Apr 11 07:34:30 2009
> (49E02BE6)
> fffffa60`03ddd000 fffffa60`03de6000 dump_viostor Tue Aug 10 15:58:06 2010
> (4C615AEE)
> fffffa60`03de6000 fffffa60`03df2000 Dxapi Sat Jan 19 07:08:00 2008 (479193C0)
> fffffa60`04204000 fffffa60`04226000 luafv Sat Jan 19 06:59:06 2008 (479191AA)
> fffffa60`04226000 fffffa60`0423a000 lltdio Sat Jan 19 07:35:48 2008 (47919A44)
> fffffa60`0423a000 fffffa60`04252000 rspndr Sat Jan 19 07:35:48 2008 (47919A44)
> fffffa60`04252000 fffffa60`042ec000 spsys Tue Mar 10 18:16:43 2009 (49B6A07B)
> fffffa60`042ec000 fffffa60`0430a000 bowser Sat Jan 19 06:54:51 2008 (479190AB)
> fffffa60`0430a000 fffffa60`04324000 mpsdrv Sat Jan 19 07:35:28 2008 (47919A30)
> fffffa60`04324000 fffffa60`0434d000 mrxsmb Tue Feb 23 12:32:22 2010 (4B83BCC6)
> fffffa60`0434d000 fffffa60`04396000 mrxsmb10 Tue Feb 23 12:32:21 2010 (4B83BCC5)
> fffffa60`04396000 fffffa60`043b5000 mrxsmb20 Tue Feb 23 12:32:20 2010 (4B83BCC4)
> fffffa60`043b5000 fffffa60`043c0000 asyncmac Sat Jan 19 07:37:27 2008 (47919AA7)
> fffffa60`043c0000 fffffa60`043e9000 srvnet Mon Sep 06 17:33:48 2010 (4C8509DC)
> fffffa60`04806000 fffffa60`04838000 srv2 Mon Sep 06 17:33:50 2010 (4C8509DE)
> fffffa60`04838000 fffffa60`048cc000 srv Mon Sep 06 17:34:12 2010 (4C8509F4)
> fffffa60`048cc000 fffffa60`0496f000 HTTP Sat Feb 20 22:30:05 2010 (4B80545D)
> fffffa60`0500e000 fffffa60`050c4000 peauth Mon Oct 23 13:57:00 2006 (453CAE0C)
> fffffa60`050c4000 fffffa60`050cf000 secdrv Wed Sep 13 15:18:38 2006 (4508052E)
> fffffa60`050cf000 fffffa60`050df000 tcpipreg Tue Dec 08 18:55:32 2009 (4B1E9314)
> fffffa60`050df000 fffffa60`050ec000 tdtcp Sat Jan 19 07:42:03 2008 (47919BBB)
> fffffa60`050ec000 fffffa60`050fa000 tssecsrv Sat Jan 19 07:42:10 2008 (47919BC2)
> fffffa60`050fa000 fffffa60`05136000 RDPWD Sat Apr 11 07:48:33 2009 (49E02F31)
>
> Unloaded modules:
> fffffa60`011db000 fffffa60`011e9000 crashdmp.sys
> Timestamp: unavailable (00000000)
> Checksum: 00000000
> ImageSize: 0000E000
> fffffa60`011e9000 fffffa60`011f3000 dump_storpor
> Timestamp: unavailable (00000000)
> Checksum: 00000000
> ImageSize: 0000A000
> fffffa60`01200000 fffffa60`01209000 dump_viostor
> Timestamp: unavailable (00000000)
> Checksum: 00000000
> ImageSize: 00009000
> fffffa60`03cfb000 fffffa60`03d18000 serial.sys
> Timestamp: unavailable (00000000)
> Checksum: 00000000
> ImageSize: 0001D000
> fffffa60`0076c000 fffffa60`00788000 sacdrv.sys
> Timestamp: unavailable (00000000)
> Checksum: 00000000
> ImageSize: 0001C000
> **************************************************************************
> * *
> * Bugcheck Analysis *
> * *
> **************************************************************************
>
> Use !analyze -v to get detailed debugging information.
>
> BugCheck 3B, {c0000005, fffff80001e6a842, fffffa6004efcb70, 0}
>
> Probably caused by : Npfs.SYS ( Npfs!NpSetAttributeInList+9a )
>
> Followup: MachineOwner
> ---------
>
> Finished dump check
>
>
>
> best regards
> Manfred
> NrybXǧv^)޺{.n+h\x17ܨ}Ơz&j:+v\azZ++zfh~iz\x1ew?&)ߢ^[f