Poolmon and Windbg don't match

Discussion in 'Windows Vista Drivers' started by Eric H, Oct 24, 2008.

  1. Eric H

    Eric H Guest

    While in a local kernel debug session my output is not the same as in
    poolmon. I have done .reload /f and confirmed my symbols are correct. What
    am I missing?

    poolmon -p –b

    Memory: 3145160K Avail: 1616392K PageFlts:14640919 InRam Krnl: 3376K
    P:89892
    Commit:1273424K Limit:6058124K Peak:1274204K Pool N:22840K
    P:90772K
    System pool information
    Tag Type Allocs Frees Diff Bytes Per Alloc

    AfdB Nonp 15014 ( 0) 6088 ( 0) 8926 4440656 ( 0) 497
    LSwi Nonp 1 ( 0) 0 ( 0) 1 2576384 ( 0)
    2576384
    File Nonp 1587456 ( 0) 1575618 ( 0) 11838 1820544 ( 0) 153
    TCPt Nonp 82336 ( 0) 82306 ( 0) 30 1458080 ( 0) 48602
    TPLA Nonp 256 ( 0) 0 ( 0) 256 1048576 ( 0) 4096
    MmCm Nonp 14 ( 0) 9 ( 0) 5 1007888 ( 0) 201577
    Thre Nonp 9324 ( 0) 7844 ( 0) 1480 923520 ( 0) 624
    Even Nonp 2229459 ( 0) 2210948 ( 0) 18511 891904 ( 0) 48


    lkd> !poolused /t15 2
    Sorting by NonPaged Pool Consumed

    Pool Used:
    NonPaged Paged
    Tag Allocs Used Allocs Used
    GetGlobalValue: unable to get nt!KeNumberProcessors type size
    CcPw 0 4294967288 0 0 Prefetcher boot worker ,
    Binary: nt!ccpf
    MmZw -1 4294967272 0 0 UNKNOWN pooltag 'MmZw', please
    update pooltag.txt
    NDrd -1 4294967264 0 0 UNKNOWN pooltag 'NDrd', please
    update pooltag.txt
    MmSe -1 4294967264 0 0 Mm secured VAD allocation ,
    Binary: nt!mm
    NbtZ -2 4294967264 0 0 NetBT allocations
    Nbtn -2 4294967232 0 0 NetBT allocations
    Nbtk -2 4294967216 0 0 NetBT allocations
    ScLF -2 4294967216 0 0 File Object Extension , Binary:
    classpnp.sys
    I2Of -2 4294967200 0 0 UNKNOWN pooltag 'I2Of', please
    update pooltag.txt
    Rxbw -1 4294967200 0 0 Rdr2 rdbss.sys stuff
    PsEx -2 4294967184 0 0 Process exit APC , Binary: nt!ps
    Nbtj -2 4294967168 0 0 NetBT allocations
    Nbt8 -9 4294967152 0 0 NetBT allocations
    TCi4 -6 4294967152 0 0 TCP/IP network protocol ,
    Binary: TCP
    Nb16 -1 4294967136 0 0 NetBT allocations
    VoSs -4 4294967120 0 0 Short term allocations ,
    Binary: volsnap.sys
    Ppen -5 4294967096 35 3168 routines to perform device
    enumeration , Binary: nt!pnp
    RxSC -3 4294967064 0 0 Rdr2 rdbss.sys stuff
    TCIs -17 4294967024 0 0 TCP/IP network protocol ,
    Binary: TCP
    SAFS -8 4294967024 0 0 UNKNOWN pooltag 'SAFS', please
    update pooltag.txt
    NbtL -1 4294967016 0 0 NetBT allocations
    TOTAL -329736 412265647720 21784 244965619672
     
    Eric H, Oct 24, 2008
    #1
    1. Advertisements

  2. Pavel Lebedinsky [MSFT], Oct 27, 2008
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.