Computing.Net > Forums > Windows NT > Dr Watson Dump File Analyzer

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Dr Watson Dump File Analyzer

Reply to Message Icon

Name: Roland
Date: October 10, 2000 at 10:18:50 Pacific
Comment:

Does anyone know of any utils that can analyze a user.dmp that is generated by Dr Watson on an NT Server.



Sponsored Link
Ads by Google

Response Number 1
Name: Mike
Date: October 10, 2000 at 14:16:48 Pacific
Reply:

Dumpchk.exe tool


Dumpchk is a command-line utility you can use to verify that a memory dump file
has been created correctly. Dumpchk does not require access to symbols. Dumpchk
is located on the Windows NT compact disc in the following location:

Support\Debug\\Dumpchk.exe

MORE INFORMATION
================

Dumpchk has the following command-line parameters:

DUMPCHK [options]

-? Display the command syntax.

-p Prints the header only (with no validation).

-v Specifies verbose mode.

-q Performs a quick test.

Dumpchk displays some basic information from the memory dump file, then verifies
all the virtual and physical addresses in the file. If any errors are found in
the memory dump file, Dumpchk reports them. The following is an example of the
output of a Dumpchk command:

Filename . . . . . . .memory.dmp
Signature. . . . . . .PAGE
ValidDump. . . . . . .DUMP
MajorVersion . . . . .free system
MinorVersion . . . . .1057
DirectoryTableBase . .0x00030000
PfnDataBase. . . . . .0xffbae000
PsLoadedModuleList . .0x801463d0
PsActiveProcessHead. .0x801462c8
MachineImageType . . .i386
NumberProcessors . . .1
BugCheckCode . . . . .0xc000021a
BugCheckParameter1 . .0xe131d948
BugCheckParameter2 . .0x00000000
BugCheckParameter3 . .0x00000000
BugCheckParameter4 . .0x00000000

ExceptionCode. . . . .0x80000003
ExceptionFlags . . . .0x00000001
ExceptionAddress . . .0x80146e1c

NumberOfRuns . . . . .0x3
NumberOfPages. . . . .0x1f5e
Run #1
BasePage . . . . . .0x1
PageCount. . . . . .0x9e
Run #2
BasePage . . . . . .0x100
PageCount. . . . . .0xec0
Run #3
BasePage . . . . . .0x1000
PageCount. . . . . .0x1000

**************
**************--> Validating the integrity of the PsLoadedModuleList
**************

**************
**************--> Performing a complete check (^C to end)
**************
**************
**************--> Validating all physical addresses
**************
**************
**************--> Validating all virtual addresses
**************
**************
**************--> This dump file is good!
**************

If, during any portion of the output displayed above, there is an error, the dump
file is corrupted and no analysis can be performed.

In this example, the most important information (from a debugging standpoint) is
the following:

MajorVersion . . . . .free system
MinorVersion . . . . .1057
MachineImageType . . .i386
NumberProcessors . . .1
BugCheckCode . . . . .0xc000021a
BugCheckParameter1 . .0xe131d948
BugCheckParameter2 . .0x00000000
BugCheckParameter3 . .0x00000000
BugCheckParameter4 . .0x00000000

This information can be used to determine what Kernel STOP Error occurred and, to
a certain extent, what version of Windows NT was in use.

The information in this article is from the Windows NT Resource Kit. For more
information on Dumpchk.exe and other debugging utilities, see Appendix A in the
Windows NT 3.51 Resource Kit Update and Update 2.



0
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows NT Forum Home


Sponsored links

Ads by Google


Results for: Dr Watson Dump File Analyzer

How can I read a Dr. Watson's File, like www.computing.net/answers/windows-nt/how-can-i-read-a-dr-watsons-file-like/11487.html

Dr Watson Access Violation www.computing.net/answers/windows-nt/dr-watson-access-violation/6860.html

Dr.Watson Error- www.computing.net/answers/windows-nt/drwatson-error/18007.html