Jason Yu
asked on
windows file server get reboot randomly
Hi, All:
I have a windows 2008 server got rebooted during nights or daytime randomly. We changed the disk controller but the issue still exists. There is a "bugCheck" error from the event log file. The eventID is 1001.
I also saw the memory.dmp dump file saved under c:\windows\memory.dmp , do I need analyze the dump file?
Please advise how to find the root cause of this random reboot. thanks.
bugcheck-error.png
I have a windows 2008 server got rebooted during nights or daytime randomly. We changed the disk controller but the issue still exists. There is a "bugCheck" error from the event log file. The eventID is 1001.
I also saw the memory.dmp dump file saved under c:\windows\memory.dmp , do I need analyze the dump file?
Please advise how to find the root cause of this random reboot. thanks.
bugcheck-error.png
normally you need to analyse the crashdump file to get to the bottom of this problem. Follow this web link for further information
http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/help-bsod-bugcheck-1001-d1/5151967a-9683-477b-82f5-cbeb71f8ea45
http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/help-bsod-bugcheck-1001-d1/5151967a-9683-477b-82f5-cbeb71f8ea45
ASKER
I would not open the dump file (memory.dmp). The size of this file is about 9.3 GB.
Please see the copy screen for detail.
Bluescreenview.png
Please see the copy screen for detail.
Bluescreenview.png
Do you have it set to complete memory dump? I would switch it to kernel memory dump and analyze after the next crash.
ASKER
Yes, I did set it up as complete memory dump, that is why the dump file is so big. I already changed it to minidump, Is it possible to get valueble information from this big dump file?
thanks.
thanks.
ASKER
It got reboot again this afternoon, here is the result I got from bluescreenview.
Please help me on how to avoid it happen again.
It looks like the failure was caused by a window file system filter manager "fltmgr.sys", how could I identify this process?
blue-screen-error.png
Please help me on how to avoid it happen again.
It looks like the failure was caused by a window file system filter manager "fltmgr.sys", how could I identify this process?
blue-screen-error.png
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
It's an old up g5 320 server which is 5 years old.
http://www.nirsoft.net/utils/blue_screen_view.html
Then I see what file is causing the crash and sometimes a quick Google search of the error and the files can get you the information you need to possibly fix. Personally I am not one to be able to read the dump file myself, so I use that tool to do it for me.