locked
Win2008 WFP memory leak RRS feed

  • Question

  • I have got a BSOD from one of our customer.
    I've inspected the BSOD memory dump, found that WFP layer seems used up all memory. Here is part of output of "!poolused". Can anybody help me find the reason?

                NonPaged            Paged
     Tag    Allocs     Used    Allocs     Used
     AleE   896049 458776512         0        0 ALE endpoint context , Binary: tcpip.sys
     Ipng   892745 28569040         0        0 IP Generic buffers (Address, Interface, Packetize, Route allocations) , Binary: tcpip.sys
     Irp    907537 287551568         0        0 Io, IRP packets
     LSbf   909454 505977152       179   113072 buffer descriptor
     StCx   890584 584223104         0        0 WFP stream internal callout context , Binary: netio.sys
     StFc   890584 128244096         0        0 WFP stream filter conditions , Binary: netio.sys
     TcpE   893441 686161088         0        0 TCP Endpoints , Binary: tcpip.sys
     WSKs   892917 185727376         0        0 UNKNOWN pooltag 'WSKs', please update pooltag.txt
     WfpC  1781776 71321648         0        0 WFP callouts , Binary: netio.sys

    The system is win2008

    Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x64
    Product: LanManNt, suite: TerminalServer SingleUserTS
    Built by: 6002.18267.amd64fre.vistasp2_gdr.100608-0458
     

    Thursday, January 27, 2011 6:39 PM