Solved

Kernel Usage at 50% yet system idle process shows 100% idle.

Posted on 2009-07-15
4
713 Views
Last Modified: 2012-06-27
My media server running XP Pro SP3 has been sluggish and every time I look in my task manager all processes across all users show 0% CPU usage, however the total CPU Usage is always 50% or so (split evenly across 2 cores, it's not just one core locked up)

I've tried procmon and system explorer but they all show the same thing, 50% overall CPU usage and everything in the process list shows 0%.

When I enabled "Show Kernel Times" in windows task manager and look at CPU usage graphs almost the entire graph is red so apparently 99% of this is happening inside the kernel.

Is there anyway to find out what threads it's running or get some kind of breakdown of the kernel's activity in terms of what is keeping it busy?
0
Comment
Question by:DailyDilemma
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 66

Accepted Solution

by:
johnb6767 earned 500 total points
ID: 24860527
Process Explorer for Windows
http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/ProcessExplorer.mspx

Double click the offending file. If it is a svchost.exe, then Select the Services Tab. Please list what services are in that svchost.exe.

Then Select the Threads tab, and see what .exe or .dll is using the CPU, and then select it by double clicking it....and copying/pasting the call stack here.....

What I would be curious to see is the Interupts, and the DPC's in Process Explorer. If thats what is using the CPU (not seeen in the Task manager), then you have either a HW problem, or a Driver problem.
I would disable devices until you see the CPU behave normally after a reboot. Alternatively, you can remove devices from the device manager, and allow them to reinstall on boot with freshly DL'ed drivers, including the Chipset, Sound, Display, Printers etc...

And unplug any USB/Firewire devices while you are at it...
0
 

Author Comment

by:DailyDilemma
ID: 24860762
Okay I opened process explorer and the 50% is coming from DPC's (never heard of a DPC). Nothing on interrupts. I tried to view the threads on DPC's and it gave me a "you need a file to view these properly message" which I hastily clicked and now it won't show me the threads and I can't remember the file I need.

I'll restart it and see how that goes, this server runs TVersity, FTP, IIS, SQL Server, File Sharing etc. so I hope restarting it isn't how I'll always have to fix it.
0
 

Author Closing Comment

by:DailyDilemma
ID: 31603798
Restarting it fixed things, so I'll have to wait for it to show up again and figure out how to get Process Explorer to break down the DPC's for me. Thanks for pointing me to process explorer, tried everything like that and it looks like the best utility of the bunch.
0
 
LVL 66

Expert Comment

by:johnb6767
ID: 24866716
Normally, you dont need the windbg file, as you can *usually* get what you need....
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disclosure: Use this tutorial only when no other options helps to get Windows XP running without any problems and you don't want to format the drive. The back up of the data is the responsible of the user, however there is a description of how t…
There are 2 things you must have in order to connect to the internet behind a router, The "Gateway IP" of the router, which is usually something like 192.168.xxx.1, I've seen routers with default values of: 192.168.0.1, 192.168.1.1, 192.168.11.1, …
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question