Prev: How to obtain device notifications during on hibernate/resume?
Next: how to "gracefully return" from select()
From: Joseph T Corey on 21 Jul 2008 09:42
Hello,

Can anyone tell me how to successfully dump the system cache's working set
(!filecache) on Server 2008 Enterprise x64. I'm having an issue where my
System cache is exhausting the available memory on a moderately busy file
server with 2GB of memory. This is causing performance degradation over
time, and eventually it becomes unusable because it's out of resources.

I've tried booting into Debug Mode and launching the x64 version of the
Debugging Tools, but when I do !filecache, windbg just hangs. I've also
tried to run LiveKD but I get the following error:

"Error loading LiveKd:
Windows cannot verify the digital signature for this file. A recent hardware
or software change might have installed a file that is signed incorrectly or
damaged, or that might be malicious software from an unknown source."

Any help would be appreciated. Thanks!

--
Joseph T. Corey MCSE, Security+
Systems Administrator
http://joecorey.wordpress.com/

From: Uwe Sieber on 22 Jul 2008 03:14

Sinces W2K3 SP1 there is the API call SetSystemFileCacheSize.
I've made a little tool which uses it.
http://www.uwe-sieber.de/ntcacheset_e.html#SetSystemFileCacheSize

It's Win32 but should work on AMD64 too.


Uwe



Joseph T Corey wrote:
> Hello,
>
> Can anyone tell me how to successfully dump the system cache's working
> set (!filecache) on Server 2008 Enterprise x64. I'm having an issue
> where my System cache is exhausting the available memory on a moderately
> busy file server with 2GB of memory. This is causing performance
> degradation over time, and eventually it becomes unusable because it's
> out of resources.
>
> I've tried booting into Debug Mode and launching the x64 version of the
> Debugging Tools, but when I do !filecache, windbg just hangs. I've also
> tried to run LiveKD but I get the following error:
>
> "Error loading LiveKd:
> Windows cannot verify the digital signature for this file. A recent
> hardware or software change might have installed a file that is signed
> incorrectly or damaged, or that might be malicious software from an
> unknown source."
>
> Any help would be appreciated. Thanks!
>
From: Joseph T Corey on 25 Jul 2008 12:56
Actually, that wasn't my question. I'm aware of the API. I'm looking for a
way to dump the system cache's working set with Windbg. Previous to Server
2008, this was easy. The same method now fails in '08 - even in debug mode.

--
Joseph T. Corey MCSE, Security+
Systems Administrator
http://joecorey.wordpress.com/

"Uwe Sieber" <mail(a)uwe-sieber.de> wrote in message
news:6elgbrF7ni9hU1(a)mid.individual.net...
>
> Sinces W2K3 SP1 there is the API call SetSystemFileCacheSize.
> I've made a little tool which uses it.
> http://www.uwe-sieber.de/ntcacheset_e.html#SetSystemFileCacheSize
>
> It's Win32 but should work on AMD64 too.
>
>
> Uwe
>
>
>
> Joseph T Corey wrote:
>> Hello,
>>
>> Can anyone tell me how to successfully dump the system cache's working
>> set (!filecache) on Server 2008 Enterprise x64. I'm having an issue where
>> my System cache is exhausting the available memory on a moderately busy
>> file server with 2GB of memory. This is causing performance degradation
>> over time, and eventually it becomes unusable because it's out of
>> resources.
>>
>> I've tried booting into Debug Mode and launching the x64 version of the
>> Debugging Tools, but when I do !filecache, windbg just hangs. I've also
>> tried to run LiveKD but I get the following error:
>>
>> "Error loading LiveKd:
>> Windows cannot verify the digital signature for this file. A recent
>> hardware or software change might have installed a file that is signed
>> incorrectly or damaged, or that might be malicious software from an
>> unknown source."
>>
>> Any help would be appreciated. Thanks!
>>

 | 
Pages: 1
Prev: How to obtain device notifications during on hibernate/resume?
Next: how to "gracefully return" from select()