Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 908
  • Last Modified:

Help to analyse mini dump created by BSOD of Win 2008 R2

Pls download & unzip the attached which has a minidump
(.dmp file) generated during BSOD of our Win 2008 R2
Enterprise (x64) server.

Can someone analyse & let me know what's the cause of
the BSOD & how can I address it?
122212-120479-01.zip
0
sunhux
Asked:
sunhux
  • 4
  • 4
  • 3
  • +1
7 Solutions
 
djcanterCommented:
download minidump viewer and see for yourself what the issue is
0
 
cbmmCommented:
Looks like you have netio installed, start by removing it.
0
 
DarinTCHSenior CyberSecurity EngineerCommented:
there is a rather long process expliained in various sites and technet articles
about how to load symbols so you can read the dump
if you have any support with MS they can do it rather well
regardless
what is the main line of the dump
are we talking a memeory issue
what kind
sometimes you can get enough info by just googling the basics of the error returned to point you in the right direction
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
cbmmCommented:
Results from debugger:

SYMBOL_STACK_INDEX:  3

SYMBOL_NAME:  NETIO!FreeMatchBufEntry+2e

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: NETIO

IMAGE_NAME:  NETIO.SYS

DEBUG_FLR_IMAGE_TIMESTAMP:  4ce79381

FAILURE_BUCKET_ID:  X64_0xD1_NETIO!FreeMatchBufEntry+2e

BUCKET_ID:  X64_0xD1_NETIO!FreeMatchBufEntry+2e

Followup: MachineOwner
0
 
DarinTCHSenior CyberSecurity EngineerCommented:
often AV and torrent apps will crash netio.sys
do you have netio installed - to analyze socket info?
0
 
sunhuxAuthor Commented:
Yes, I do have netio.sys installed on this server as well as 5 other
servers of the same hardware specs & the same Windows 2008
R2 Enterprise x64:
C:\Windows>attrib/s netio.sys
A            C:\Windows\System32\drivers\netio.sys
A            C:\Windows\winsxs\amd64_microsoft-windows-netio-infrastructure_31bf
3856ad364e35_6.1.7600.16385_none_b2905e7ccefe8e06\netio.sys
A            C:\Windows\winsxs\amd64_microsoft-windows-netio-infrastructure_31bf
3856ad364e35_6.1.7601.17514_none_b4c17244cbed11a0\netio.sys
C:\Windows>

However, the other 5 servers (all 6 are IBM x3850, just that with
different amounts of RAM) did not face BSOD.  

>often AV and torrent apps will crash netio.sys
Yes, Symantec Endpoint Security / AV is installed on all the servers
but it did not crash the other 5 servers.  We don't have torrent apps.

I went into WIndows "Uninstall Programs" but don't find anything
that list out netio.  Which software uses netio ?  If there's one,
likely this software is also on the other 5 servers.  I can't possibly
just delete away netio.sys from the c:\windows\... subdirectories,
can I ?
0
 
sunhuxAuthor Commented:
Attached the screens from Event Viewer.

Based on the Event Ids shown on the screens, anyone
has any clue?  Or is there an MS site that list the possible
error conditions that trigger the Event Ids listed?

What error does bugcheckcode 209 mean?

Heard there's an eventid.com website but I don't have
access to it
SDB1-uptimeEvtVw.jpg
SDB1-CrashKernelPowerEvtVw.jpg
SDB1-CrashKernelPowerDetailEvtVw.jpg
SDB1-Crash1137oEvtVw.jpg
SDB1-Crash1137CPUoEvtVw.jpg
0
 
DarinTCHSenior CyberSecurity EngineerCommented:
netio is not the problem
the AV causes netio to crash...probably  uses something that netio uses

I've heard that updating the network drivers and maybe even the chipset drivers
has solved the issue
either way it relates back to networking
and AV often causes the conflict
0
 
cbmmCommented:
darintch is correct, netio.sys is a windows driver for the network i/o subsystem. follow his advice and try updating the network card/chipset drivers
0
 
sunhuxAuthor Commented:
Thanks chaps.  Give me till next week Wed, when we have implemented
the firmware/chipset upgrades, will close this thread.

In the meantime, if anyone has the url to download the network &
chipset drivers for IBM x3850 (there's Broadcom & Intel NICs on
this server), do let me know the full url.

Thanks again
0
 
sunhuxAuthor Commented:
Thanks chaps.  Give me till next week Wed, when we have implemented
the firmware/chipset upgrades, will close this thread.

In the meantime, if anyone has the url to download the network &
chipset drivers for IBM x3850 (there's Broadcom & Intel NICs on
this server), do let me know the full url.

Thanks again
0
 
cbmmCommented:
On that server there is a # after the x3850. You will need that in order to download the correct drivers.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 4
  • 4
  • 3
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now