Windows Vista Beta | WinVistaBeta.com - Message | Winternals - A Microsoft Subsidary

January 05, 2009  
Subject: Winternals - A Microsoft Subsidary
Group: microsoft.public.winternals
Date: 5/4/2007 11:10:02 AM
From: =?Utf-8?B?TWljcm9zb2Z0IFN1cHBvcnQ=?= [Email Address Protection]

Microsoft DART (Diagnostics and Recovery Toolset) and Winternals public newsgroup. Place for open discussions and sharing ideas. Getting answers to your support needs as well as product related and general questions

Back
Subject: Re: Winternals - A Microsoft Subsidary
Group: microsoft.public.winternals
Date: 5/7/2007 7:24:52 PM
From: "Vasu" [Email Address Protection]

This is Nice !! having a NG for Winternals. On the MARK !!

Thanks !!

--
Vasudev

"Microsoft Support" <dart@microsoft.com> wrote in message
news:D8C570BB-24A3-4577-9F7D-3765A31BD943@microsoft.com...
> Microsoft DART (Diagnostics and Recovery Toolset) and Winternals public
> newsgroup. Place for open discussions and sharing ideas. Getting answers
> to your support needs as well as product related and general questions


Back
Subject: RE: Service Hangs on Startup
Group: microsoft.public.winternals
Date: 10/16/2007 5:09:01 AM
From: =?Utf-8?B?cGdhcnZhbg==?= [Email Address Protection]

Tom,

This could be any one of a number of things. For example, it could simply be
incorrect startup permissions for the service, or it could be trying to start
before some resources it needs are available.

Have you tried connecting a debugger to the service to see where it is
hanging? The best way way to find out what is happening is to connect a
Kernel debugger from a second system and watch what happens as your service
starts up.

Regards,

Patrick

"Tom W" wrote:

> I am having an issue with an application we built in house. When it starts
> up in Windows Server 2003, it hangs on startup. But if the service is
> launched manually after startup, it launches fine.
>
> It also launches fine on startup on Windows XP.
>
> I have even tried to pop up a message box when the exe is initialized and in
> the OnStart Method. When launched in XP, it works fine, but in Windows
> Server 2003 it hangs...
>
> I have all of the dependencies added as well, so it doesn't appear to be
> that...
>
> Has anyone seen this before, and know what may be causing the issue?
>
>

Back
Subject: RE: rencontre
Group: microsoft.public.winternals
Date: 12/15/2007 6:17:00 AM
From: =?Utf-8?B?c2V4eQ==?= [Email Address Protection]



"moukoukoumi" wrote:

> jaimerai que tu devienne mon correspondant à qui coverser
> oui avec plaisire

>
>

Back
Subject: Re: clear particular files from the file system cache
Group: microsoft.public.winternals
Date: 1/8/2008 1:39:00 PM
From: =?Utf-8?B?RnVybWFuR0c=?= [Email Address Protection]

Thanks for the reply Mathieu.

I'm doing performance testing of another app. Performance varies drastically
based on whether that underlying file is in the windows file system cache or
not. So I want to write a tool to evict it so tests will be more consistent.

I'm not wild about reading a huge file to evict the existing stuff. And I'm
not wild about using SysInternals CacheSet to blindly trim the entire windows
file system cache. I was hoping to be able to just evict certain files or
directories.

Any thoughts on other forums to ask this question or other approaches?

Thanks

"Mathieu CHATEAU" wrote:

> Hello,
>
> this reminds me older software that claimed to release memory by filling
> memory and then releasing it, so users could see a lot of memory ram.
>
> Windows intenal way to manage cache & standbylist is really good, i don't
> think you can purge file in cache manually. You may have to fill the memory
> to obligate Windows to purge the cache.
>
> Why do you want to do so ?
>
> --
> Cordialement,
> Mathieu CHATEAU
> English blog: http://lordoftheping.blogspot.com
> French blog: http://www.lotp.fr
>
>
> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
> news:8FB0EC25-E305-4829-BAA8-93330C386D61@microsoft.com...
> > Let's say there's a zzz.exe that I didn't write. It reads
> > c:\largefile.txt.
> > Thus that file is often in the windows file system cache. How can I write
> > an
> > app that clears just that file or just a directory from the windows file
> > system cache?
> >
> > Any pointers or suggestions for where else to post the question would be
> > appreciated.
>
>

Back
Subject: Re: clear particular files from the file system cache
Group: microsoft.public.winternals
Date: 1/8/2008 1:59:48 PM
From: "Mathieu CHATEAU" [Email Address Protection]

I guess your file is really big ?
What about adding more ram ? (maybe a dumb question for you)

--
Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


"FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
news:CEF463FB-94E2-42D1-A8AD-69C66BC68248@microsoft.com...
> Thanks for the reply Mathieu.
>
> I'm doing performance testing of another app. Performance varies
> drastically
> based on whether that underlying file is in the windows file system cache
> or
> not. So I want to write a tool to evict it so tests will be more
> consistent.
>
> I'm not wild about reading a huge file to evict the existing stuff. And
> I'm
> not wild about using SysInternals CacheSet to blindly trim the entire
> windows
> file system cache. I was hoping to be able to just evict certain files or
> directories.
>
> Any thoughts on other forums to ask this question or other approaches?
>
> Thanks
>
> "Mathieu CHATEAU" wrote:
>
>> Hello,
>>
>> this reminds me older software that claimed to release memory by filling
>> memory and then releasing it, so users could see a lot of memory ram.
>>
>> Windows intenal way to manage cache & standbylist is really good, i don't
>> think you can purge file in cache manually. You may have to fill the
>> memory
>> to obligate Windows to purge the cache.
>>
>> Why do you want to do so ?
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> English blog: http://lordoftheping.blogspot.com
>> French blog: http://www.lotp.fr
>>
>>
>> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
>> news:8FB0EC25-E305-4829-BAA8-93330C386D61@microsoft.com...
>> > Let's say there's a zzz.exe that I didn't write. It reads
>> > c:\largefile.txt.
>> > Thus that file is often in the windows file system cache. How can I
>> > write
>> > an
>> > app that clears just that file or just a directory from the windows
>> > file
>> > system cache?
>> >
>> > Any pointers or suggestions for where else to post the question would
>> > be
>> > appreciated.
>>
>>


Back
Subject: Re: clear particular files from the file system cache
Group: microsoft.public.winternals
Date: 1/8/2008 2:28:05 PM
From: =?Utf-8?B?RnVybWFuR0c=?= [Email Address Protection]

I have plenty of RAM. Performance with it in the file system cache is great.
I'm trying test on a cold cache. I need to ensure the cache is cold.

"Mathieu CHATEAU" wrote:

> I guess your file is really big ?
> What about adding more ram ? (maybe a dumb question for you)
>
> --
> Cordialement,
> Mathieu CHATEAU
> English blog: http://lordoftheping.blogspot.com
> French blog: http://www.lotp.fr
>
>
> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
> news:CEF463FB-94E2-42D1-A8AD-69C66BC68248@microsoft.com...
> > Thanks for the reply Mathieu.
> >
> > I'm doing performance testing of another app. Performance varies
> > drastically
> > based on whether that underlying file is in the windows file system cache
> > or
> > not. So I want to write a tool to evict it so tests will be more
> > consistent.
> >
> > I'm not wild about reading a huge file to evict the existing stuff. And
> > I'm
> > not wild about using SysInternals CacheSet to blindly trim the entire
> > windows
> > file system cache. I was hoping to be able to just evict certain files or
> > directories.
> >
> > Any thoughts on other forums to ask this question or other approaches?
> >
> > Thanks
> >
> > "Mathieu CHATEAU" wrote:
> >
> >> Hello,
> >>
> >> this reminds me older software that claimed to release memory by filling
> >> memory and then releasing it, so users could see a lot of memory ram.
> >>
> >> Windows intenal way to manage cache & standbylist is really good, i don't
> >> think you can purge file in cache manually. You may have to fill the
> >> memory
> >> to obligate Windows to purge the cache.
> >>
> >> Why do you want to do so ?
> >>
> >> --
> >> Cordialement,
> >> Mathieu CHATEAU
> >> English blog: http://lordoftheping.blogspot.com
> >> French blog: http://www.lotp.fr
> >>
> >>
> >> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
> >> news:8FB0EC25-E305-4829-BAA8-93330C386D61@microsoft.com...
> >> > Let's say there's a zzz.exe that I didn't write. It reads
> >> > c:\largefile.txt.
> >> > Thus that file is often in the windows file system cache. How can I
> >> > write
> >> > an
> >> > app that clears just that file or just a directory from the windows
> >> > file
> >> > system cache?
> >> >
> >> > Any pointers or suggestions for where else to post the question would
> >> > be
> >> > appreciated.
> >>
> >>
>
>

Back
Subject: Re: clear particular files from the file system cache
Group: microsoft.public.winternals
Date: 1/8/2008 3:23:32 PM
From: "David Craig" [Email Address Protection]

Rebooting is the ONLY possible solution that will ensure a uniform
environment. If you have OS source code it is possible to do this but the
implementation could vary with each OS and SP. All in all not a good idea
to do it programatically. Even if you stress memory so that your files are
discarded, it is possible for one or more blocks to remain as well as the
directory blocks. Then a repeat would not be the same as a reboot or even
consistent.

"FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
news:F646CD7C-90C5-4A28-99B3-47EDDB39962E@microsoft.com...
>I have plenty of RAM. Performance with it in the file system cache is
>great.
> I'm trying test on a cold cache. I need to ensure the cache is cold.
>
> "Mathieu CHATEAU" wrote:
>
>> I guess your file is really big ?
>> What about adding more ram ? (maybe a dumb question for you)
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> English blog: http://lordoftheping.blogspot.com
>> French blog: http://www.lotp.fr
>>
>>
>> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
>> news:CEF463FB-94E2-42D1-A8AD-69C66BC68248@microsoft.com...
>> > Thanks for the reply Mathieu.
>> >
>> > I'm doing performance testing of another app. Performance varies
>> > drastically
>> > based on whether that underlying file is in the windows file system
>> > cache
>> > or
>> > not. So I want to write a tool to evict it so tests will be more
>> > consistent.
>> >
>> > I'm not wild about reading a huge file to evict the existing stuff. And
>> > I'm
>> > not wild about using SysInternals CacheSet to blindly trim the entire
>> > windows
>> > file system cache. I was hoping to be able to just evict certain files
>> > or
>> > directories.
>> >
>> > Any thoughts on other forums to ask this question or other approaches?
>> >
>> > Thanks
>> >
>> > "Mathieu CHATEAU" wrote:
>> >
>> >> Hello,
>> >>
>> >> this reminds me older software that claimed to release memory by
>> >> filling
>> >> memory and then releasing it, so users could see a lot of memory ram.
>> >>
>> >> Windows intenal way to manage cache & standbylist is really good, i
>> >> don't
>> >> think you can purge file in cache manually. You may have to fill the
>> >> memory
>> >> to obligate Windows to purge the cache.
>> >>
>> >> Why do you want to do so ?
>> >>
>> >> --
>> >> Cordialement,
>> >> Mathieu CHATEAU
>> >> English blog: http://lordoftheping.blogspot.com
>> >> French blog: http://www.lotp.fr
>> >>
>> >>
>> >> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
>> >> news:8FB0EC25-E305-4829-BAA8-93330C386D61@microsoft.com...
>> >> > Let's say there's a zzz.exe that I didn't write. It reads
>> >> > c:\largefile.txt.
>> >> > Thus that file is often in the windows file system cache. How can I
>> >> > write
>> >> > an
>> >> > app that clears just that file or just a directory from the windows
>> >> > file
>> >> > system cache?
>> >> >
>> >> > Any pointers or suggestions for where else to post the question
>> >> > would
>> >> > be
>> >> > appreciated.
>> >>
>> >>
>>
>>



Back
Subject: Re: clear particular files from the file system cache
Group: microsoft.public.winternals
Date: 1/8/2008 3:34:45 PM
From: =?Utf-8?B?RnVybWFuR0c=?= [Email Address Protection]

I would be interested in hearing more about what you specifically mean by "OS
source code". Are there particular API functions in kernal32 or something
that you could point me to. Mainly targeting Win2003.

Thanks David.

"David Craig" wrote:

> Rebooting is the ONLY possible solution that will ensure a uniform
> environment. If you have OS source code it is possible to do this but the
> implementation could vary with each OS and SP. All in all not a good idea
> to do it programatically. Even if you stress memory so that your files are
> discarded, it is possible for one or more blocks to remain as well as the
> directory blocks. Then a repeat would not be the same as a reboot or even
> consistent.
>
> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
> news:F646CD7C-90C5-4A28-99B3-47EDDB39962E@microsoft.com...
> >I have plenty of RAM. Performance with it in the file system cache is
> >great.
> > I'm trying test on a cold cache. I need to ensure the cache is cold.
> >
> > "Mathieu CHATEAU" wrote:
> >
> >> I guess your file is really big ?
> >> What about adding more ram ? (maybe a dumb question for you)
> >>
> >> --
> >> Cordialement,
> >> Mathieu CHATEAU
> >> English blog: http://lordoftheping.blogspot.com
> >> French blog: http://www.lotp.fr
> >>
> >>
> >> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
> >> news:CEF463FB-94E2-42D1-A8AD-69C66BC68248@microsoft.com...
> >> > Thanks for the reply Mathieu.
> >> >
> >> > I'm doing performance testing of another app. Performance varies
> >> > drastically
> >> > based on whether that underlying file is in the windows file system
> >> > cache
> >> > or
> >> > not. So I want to write a tool to evict it so tests will be more
> >> > consistent.
> >> >
> >> > I'm not wild about reading a huge file to evict the existing stuff. And
> >> > I'm
> >> > not wild about using SysInternals CacheSet to blindly trim the entire
> >> > windows
> >> > file system cache. I was hoping to be able to just evict certain files
> >> > or
> >> > directories.
> >> >
> >> > Any thoughts on other forums to ask this question or other approaches?
> >> >
> >> > Thanks
> >> >
> >> > "Mathieu CHATEAU" wrote:
> >> >
> >> >> Hello,
> >> >>
> >> >> this reminds me older software that claimed to release memory by
> >> >> filling
> >> >> memory and then releasing it, so users could see a lot of memory ram.
> >> >>
> >> >> Windows intenal way to manage cache & standbylist is really good, i
> >> >> don't
> >> >> think you can purge file in cache manually. You may have to fill the
> >> >> memory
> >> >> to obligate Windows to purge the cache.
> >> >>
> >> >> Why do you want to do so ?
> >> >>
> >> >> --
> >> >> Cordialement,
> >> >> Mathieu CHATEAU
> >> >> English blog: http://lordoftheping.blogspot.com
> >> >> French blog: http://www.lotp.fr
> >> >>
> >> >>
> >> >> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
> >> >> news:8FB0EC25-E305-4829-BAA8-93330C386D61@microsoft.com...
> >> >> > Let's say there's a zzz.exe that I didn't write. It reads
> >> >> > c:\largefile.txt.
> >> >> > Thus that file is often in the windows file system cache. How can I
> >> >> > write
> >> >> > an
> >> >> > app that clears just that file or just a directory from the windows
> >> >> > file
> >> >> > system cache?
> >> >> >
> >> >> > Any pointers or suggestions for where else to post the question
> >> >> > would
> >> >> > be
> >> >> > appreciated.
> >> >>
> >> >>
> >>
> >>
>
>
>

Back
Subject: Re: clear particular files from the file system cache
Group: microsoft.public.winternals
Date: 1/8/2008 5:02:23 PM
From: "David Craig" [Email Address Protection]

What do you think kernel32 does? If you think it has anything at all to do
with files, I would suggest you spend a week or so reading Russinovich &
Solomon's Windows Internals book. This is definitely the wrong newsgroup
for your questions. If you are referring to user mode only, then the
win32.programmer.kernel may be the correct one. If you are referring to
developing file systems and/or their filters, then ntfsd is the only
newsgroup that deals with these items. I will say if you are referring to
the Windows Internals book itself this newsgroup is for things one of the
authors was doing before the sale of Winternals to Microsoft. He may still
work on some of those products as well as the sysinternals utilities.



"FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
news:F2C14FAC-BA92-45B7-8085-259582EC51A5@microsoft.com...
>I would be interested in hearing more about what you specifically mean by
>"OS
> source code". Are there particular API functions in kernal32 or something
> that you could point me to. Mainly targeting Win2003.
>
> Thanks David.
>
> "David Craig" wrote:
>
>> Rebooting is the ONLY possible solution that will ensure a uniform
>> environment. If you have OS source code it is possible to do this but
>> the
>> implementation could vary with each OS and SP. All in all not a good
>> idea
>> to do it programatically. Even if you stress memory so that your files
>> are
>> discarded, it is possible for one or more blocks to remain as well as the
>> directory blocks. Then a repeat would not be the same as a reboot or
>> even
>> consistent.
>>
>> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
>> news:F646CD7C-90C5-4A28-99B3-47EDDB39962E@microsoft.com...
>> >I have plenty of RAM. Performance with it in the file system cache is
>> >great.
>> > I'm trying test on a cold cache. I need to ensure the cache is cold.
>> >
>> > "Mathieu CHATEAU" wrote:
>> >
>> >> I guess your file is really big ?
>> >> What about adding more ram ? (maybe a dumb question for you)
>> >>
>> >> --
>> >> Cordialement,
>> >> Mathieu CHATEAU
>> >> English blog: http://lordoftheping.blogspot.com
>> >> French blog: http://www.lotp.fr
>> >>
>> >>
>> >> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
>> >> news:CEF463FB-94E2-42D1-A8AD-69C66BC68248@microsoft.com...
>> >> > Thanks for the reply Mathieu.
>> >> >
>> >> > I'm doing performance testing of another app. Performance varies
>> >> > drastically
>> >> > based on whether that underlying file is in the windows file system
>> >> > cache
>> >> > or
>> >> > not. So I want to write a tool to evict it so tests will be more
>> >> > consistent.
>> >> >
>> >> > I'm not wild about reading a huge file to evict the existing stuff.
>> >> > And
>> >> > I'm
>> >> > not wild about using SysInternals CacheSet to blindly trim the
>> >> > entire
>> >> > windows
>> >> > file system cache. I was hoping to be able to just evict certain
>> >> > files
>> >> > or
>> >> > directories.
>> >> >
>> >> > Any thoughts on other forums to ask this question or other
>> >> > approaches?
>> >> >
>> >> > Thanks
>> >> >
>> >> > "Mathieu CHATEAU" wrote:
>> >> >
>> >> >> Hello,
>> >> >>
>> >> >> this reminds me older software that claimed to release memory by
>> >> >> filling
>> >> >> memory and then releasing it, so users could see a lot of memory
>> >> >> ram.
>> >> >>
>> >> >> Windows intenal way to manage cache & standbylist is really good, i
>> >> >> don't
>> >> >> think you can purge file in cache manually. You may have to fill
>> >> >> the
>> >> >> memory
>> >> >> to obligate Windows to purge the cache.
>> >> >>
>> >> >> Why do you want to do so ?
>> >> >>
>> >> >> --
>> >> >> Cordialement,
>> >> >> Mathieu CHATEAU
>> >> >> English blog: http://lordoftheping.blogspot.com
>> >> >> French blog: http://www.lotp.fr
>> >> >>
>> >> >>
>> >> >> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
>> >> >> news:8FB0EC25-E305-4829-BAA8-93330C386D61@microsoft.com...
>> >> >> > Let's say there's a zzz.exe that I didn't write. It reads
>> >> >> > c:\largefile.txt.
>> >> >> > Thus that file is often in the windows file system cache. How can
>> >> >> > I
>> >> >> > write
>> >> >> > an
>> >> >> > app that clears just that file or just a directory from the
>> >> >> > windows
>> >> >> > file
>> >> >> > system cache?
>> >> >> >
>> >> >> > Any pointers or suggestions for where else to post the question
>> >> >> > would
>> >> >> > be
>> >> >> > appreciated.
>> >> >>
>> >> >>
>> >>
>> >>
>>
>>
>>



Back
Subject: Re: clear particular files from the file system cache
Group: microsoft.public.winternals
Date: 1/8/2008 5:27:02 PM
From: =?Utf-8?B?RnVybWFuR0c=?= [Email Address Protection]

The Sysinternals CacheSet program was the closest I've come to what I'm
looking for, that's the reason for posting here. Still interested to hear
other thoughts if people have them, but I'll move my question to ntfsd.
Thanks for your help.

"David Craig" wrote:

> What do you think kernel32 does? If you think it has anything at all to do
> with files, I would suggest you spend a week or so reading Russinovich &
> Solomon's Windows Internals book. This is definitely the wrong newsgroup
> for your questions. If you are referring to user mode only, then the
> win32.programmer.kernel may be the correct one. If you are referring to
> developing file systems and/or their filters, then ntfsd is the only
> newsgroup that deals with these items. I will say if you are referring to
> the Windows Internals book itself this newsgroup is for things one of the
> authors was doing before the sale of Winternals to Microsoft. He may still
> work on some of those products as well as the sysinternals utilities.
>
>
>
> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
> news:F2C14FAC-BA92-45B7-8085-259582EC51A5@microsoft.com...
> >I would be interested in hearing more about what you specifically mean by
> >"OS
> > source code". Are there particular API functions in kernal32 or something
> > that you could point me to. Mainly targeting Win2003.
> >
> > Thanks David.
> >
> > "David Craig" wrote:
> >
> >> Rebooting is the ONLY possible solution that will ensure a uniform
> >> environment. If you have OS source code it is possible to do this but
> >> the
> >> implementation could vary with each OS and SP. All in all not a good
> >> idea
> >> to do it programatically. Even if you stress memory so that your files
> >> are
> >> discarded, it is possible for one or more blocks to remain as well as the
> >> directory blocks. Then a repeat would not be the same as a reboot or
> >> even
> >> consistent.
> >>
> >> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
> >> news:F646CD7C-90C5-4A28-99B3-47EDDB39962E@microsoft.com...
> >> >I have plenty of RAM. Performance with it in the file system cache is
> >> >great.
> >> > I'm trying test on a cold cache. I need to ensure the cache is cold.
> >> >
> >> > "Mathieu CHATEAU" wrote:
> >> >
> >> >> I guess your file is really big ?
> >> >> What about adding more ram ? (maybe a dumb question for you)
> >> >>
> >> >> --
> >> >> Cordialement,
> >> >> Mathieu CHATEAU
> >> >> English blog: http://lordoftheping.blogspot.com
> >> >> French blog: http://www.lotp.fr
> >> >>
> >> >>
> >> >> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
> >> >> news:CEF463FB-94E2-42D1-A8AD-69C66BC68248@microsoft.com...
> >> >> > Thanks for the reply Mathieu.
> >> >> >
> >> >> > I'm doing performance testing of another app. Performance varies
> >> >> > drastically
> >> >> > based on whether that underlying file is in the windows file system
> >> >> > cache
> >> >> > or
> >> >> > not. So I want to write a tool to evict it so tests will be more
> >> >> > consistent.
> >> >> >
> >> >> > I'm not wild about reading a huge file to evict the existing stuff.
> >> >> > And
> >> >> > I'm
> >> >> > not wild about using SysInternals CacheSet to blindly trim the
> >> >> > entire
> >> >> > windows
> >> >> > file system cache. I was hoping to be able to just evict certain
> >> >> > files
> >> >> > or
> >> >> > directories.
> >> >> >
> >> >> > Any thoughts on other forums to ask this question or other
> >> >> > approaches?
> >> >> >
> >> >> > Thanks
> >> >> >
> >> >> > "Mathieu CHATEAU" wrote:
> >> >> >
> >> >> >> Hello,
> >> >> >>
> >> >> >> this reminds me older software that claimed to release memory by
> >> >> >> filling
> >> >> >> memory and then releasing it, so users could see a lot of memory
> >> >> >> ram.
> >> >> >>
> >> >> >> Windows intenal way to manage cache & standbylist is really good, i
> >> >> >> don't
> >> >> >> think you can purge file in cache manually. You may have to fill
> >> >> >> the
> >> >> >> memory
> >> >> >> to obligate Windows to purge the cache.
> >> >> >>
> >> >> >> Why do you want to do so ?
> >> >> >>
> >> >> >> --
> >> >> >> Cordialement,
> >> >> >> Mathieu CHATEAU
> >> >> >> English blog: http://lordoftheping.blogspot.com
> >> >> >> French blog: http://www.lotp.fr
> >> >> >>
> >> >> >>
> >> >> >> "FurmanGG" <FurmanGG@discussions.microsoft.com> wrote in message
> >> >> >> news:8FB0EC25-E305-4829-BAA8-93330C386D61@microsoft.com...
> >> >> >> > Let's say there's a zzz.exe that I didn't write. It reads
> >> >> >> > c:\largefile.txt.
> >> >> >> > Thus that file is often in the windows file system cache. How can
> >> >> >> > I
> >> >> >> > write
> >> >> >> > an
> >> >> >> > app that clears just that file or just a directory from the
> >> >> >> > windows
> >> >> >> > file
> >> >> >> > system cache?
> >> >> >> >
> >> >> >> > Any pointers or suggestions for where else to post the question
> >> >> >> > would
> >> >> >> > be
> >> >> >> > appreciated.
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

Back
Subject: Re: clear particular files from the file system cache
Group: microsoft.public.winternals
Date: 1/9/2008 5:01:28 AM
From: "Edwin vMierlo [MVP]" [Email Address Protection]


> I have plenty of RAM. Performance with it in the file system cache is
great.

leave it in cache then ! ;-)


> I'm trying test on a cold cache. I need to ensure the cache is cold.
>

You did not specify what OS you are using, there is a prefetch folder in XP
and 2003 which I would empty, althoug used for executables, it will read
them into memory, you might want to prevent this as well.

empty %SYSTEMROOT%\Prefetch
reboot




Back
Subject: Re: clear particular files from the file system cache
Group: microsoft.public.winternals
Date: 1/9/2008 5:15:19 PM
From: =?Utf-8?B?RnVybWFuR0c=?= [Email Address Protection]

I'm mainly targeting Win2003. It's some internal application data files for
some other application. I'm trying to tune performance so that it's as good
as possible on a cold cache.

That Prefetch tip was interesting. I see only one .pf file in that
directory, but inside it, it references many of the application's data files
I'm worried about. So do I understand correctly that the Prefetch thing loads
those files into the windows file system cache on boot? That's interesting to
be aware of. Good tip.

Regardless, that doesn't solve my problem. I'm wanting to run a performance
test, clear those files out of the windows file system cache via a script or
utility app, then run a slightly different performance test... all automated.

Thanks for the input.

"Edwin vMierlo [MVP]" wrote:

>
> > I have plenty of RAM. Performance with it in the file system cache is
> great.
>
> leave it in cache then ! ;-)
>
>
> > I'm trying test on a cold cache. I need to ensure the cache is cold.
> >
>
> You did not specify what OS you are using, there is a prefetch folder in XP
> and 2003 which I would empty, althoug used for executables, it will read
> them into memory, you might want to prevent this as well.
>
> empty %SYSTEMROOT%\Prefetch
> reboot
>
>
>
>

Back
Subject: Re: clear particular files from the file system cache
Group: microsoft.public.winternals
Date: 1/10/2008 12:49:32 AM
From: "Edwin vMierlo [MVP]" [Email Address Protection]


>
> That Prefetch tip was interesting. I see only one .pf file in that
> directory, but inside it, it references many of the application's data
files
> I'm worried about. So do I understand correctly that the Prefetch thing
loads
> those files into the windows file system cache on boot? That's interesting
to
> be aware of. Good tip.

If your target is only W2003 then you can leave that one .pf file in there,
2003 works differently then XP in regards to the prefetching.




Back
Subject: RE: 32bit Apps in 64bit OS
Group: microsoft.public.winternals
Date: 2/6/2008 4:20:02 AM
From: =?Utf-8?B?Y29tcG9zaXRvcg==?= [Email Address Protection]

32bit applications can only use 4GB of memory in windows, so therefore under
32bit vista (longhorn) although 4GB can be used, as opposed to the client OS
variety, applications on the former system can only use half of that memory.

Where of course this changes is when a 64bit address space is used and
hopefully someone else can take it from there.

Best regards

"Megan Kielman" wrote:

> I am not sure if this is the right forum but I'll ask anyway. I
> understand that 64bit Windows uses WOW64 to emulate a 32bit environment
> for 32bit apps on 64bit OS. The following are my questions.
>
> What are the disadvantages to doing this?
>
> Does this degrade overall performance on the system?
>
> Is the 32bit application still limited to the 32bit memory address space
> or does the emulation somehow change this?
>
> Can you point me to some additional documentation regarding this
> emulation environment?
>
> Thank you.
>
> Megan
>

Back
Subject: Re: Process Explorer Working Set Total
Group: microsoft.public.winternals
Date: 5/3/2008 11:51:00 AM
From: =?Utf-8?B?UGluZ2FsYQ==?= [Email Address Protection]

I am asking a simple question: IT SA's are often asked to report on "Actual
Physical RAM" usage at PEAK by applications. Is there a tool that reports max
RAM used for each process? Task Manager numbers are misleading. And SAs have
no time to dig deep to justify physical RAM usage.

I would appreciate if you could point to any tool that could account for
Physical RAM, though Windows manages internally via virtual memory management.

Thanks,
SP

"Pavel Lebedinsky [MSFT]" wrote:

> > Thank you for the book suggestion. I have read the parts of that chapter
> > but still find myself having lots of questions. I guess what I am looking
> > for is a good way to determine how much physical memory each process was
> > using. All this time I thought working set was a good counter, but then I
> > realized that the working set column in ProcessExplorer did not add up to
> > total Physical memory. I realize that the kernel uses some of the memory
> > as well. I just really want to be able to look at what each process is
> > using and consider all other components that use memory, add them all
> > together and get a sum equal to total physical memory. Is this possible?
>
> Only approximately. Windows Internals has a section that talks about this,
> called "EXPERIMENT: Accounting for Physical Memory Use":
>
> http://book.itzero.com/read/microsoft/0507/Microsoft.Press.Microsoft.Windows.Internals.Fourth.Edition.Dec.2004.internal.Fixed.eBook-DDU_html/0735619174/ch07lev1sec1.html#ch07table15
>
> > My problem right now is that I have a server that hovers around having
> > 100MB of Available Memory, but I can't figure out which process is using
> > it all because Working Set shows that the highest memory user is 120MB.
> > The system has 4GB.
>
> Typically, most of the remaining memory would be in the system working set.
> The size of the system working set is represented by the Memory\Cache Bytes
> counter in perfmon, and it should be equal to the sum of these 4 counters:
>
> Memory\Pool Paged Resident Bytes
> Memory\System Code Resident Bytes
> Memory\System Driver Resident Bytes
> Memory\System Cache Resident Bytes
>
> System Cache Resident Bytes is typically the largest part.
>
> > Additionally I don't understand what the VM column in Process Explorer
> > means. I have found several places on the internet that talk about it, but
> > they are all saying something different!
>
> VM Size in task manager is the process commit charge, also known as
> "private bytes" or "pagefile bytes", event though these last two names
> are not quite accurate.
>
> Process commit charge is basically the amount of system virtual memory
> that is reserved for use by the process. The total (system-wide) commit
> charge cannot exceed the sum of the RAM and all pagefiles.
>
> Commit is typically charged when applications allocate memory by
> calling VirtualAlloc(MEM_COMMIT). Some of this committed
> memory may contain actual data (either in RAM or in the pagefile).
> The rest is purely "virtual", meaning it doesn't consume any physical
> storage.
>
>
>

Back
Subject: RE: FileSystemCache
Group: microsoft.public.winternals
Date: 8/4/2008 3:14:00 PM
From: =?Utf-8?B?aGlkZGVu?= [Email Address Protection]



"Megan Kielman" wrote:

> I did some reading in the Winternals Book and online but have some
> questions about the FileSystemCache.
>
> 1. Pg. 664 of the Winterals Book has a table showing size and location
> of the system cache. It says that on x64, it can range from 64MB-1024MB
> depending on RAM and physical memory, but I read somewhere
> (http://technet2.microsoft.com/windowsserver/en/library/efa621bd-a031-4461-9e72-59197a7507b61033.mspx?mfr=true),
> that is can grow to physical memory. If I specify LargeSystemCache in
> the registry, how can I determine the size of the cache?
>
> 2. Is SystemCache memory in a different pool of memory then NonPagedPool?
>
> 3. Is System Cache determined at boot or does it grow?
>

Back
Subject: Re: Windows Update Fails - 0x80070005
Group: microsoft.public.windowsupdate,microsoft.public.winternals
Date: 9/19/2008 12:20:01 AM
From: =?Utf-8?B?U2FpbmF0aCAsIFNNQiBLSUQ=?= [Email Address Protection]

Hi All,

I would go for process explorer which gives more than file monitor and reg
monitor and another way of comparing registry is using

a) winmerge tool / utility which will compare 2 registry

b) Regsnap tool / utility.

Regards
Sainath

"David F." wrote:

> It was the latest version - I never had a problem with the older versions
> I've used. I did end up using regmon. thanks.
>
> "Robert Aldwinckle" <robald@techemail.com> wrote in message
> news:efdcN8YwHHA.3508@TK2MSFTNGP03.phx.gbl...
> > "David F." <df2705@community.nospam> wrote in message
> > news:eKgirOsvHHA.3356@TK2MSFTNGP03.phx.gbl...
> >> What do I need to do to fix it? Looks like some registry key, but which
> >> one? Process Monitor just seems to crash the computer so I can't review
> >> it
> >> (the thing fill up so fast it's unbelievable).
> >
> >
> > If you're only using ProcMon to try to capture registry accesses and don't
> > have
> > a controlled scenario to monitor, RegMon might be a better tool.
> > E.g. with RegMon when you set a filter it actually excludes records from
> > being
> > captured, instead of just excluding records from being seen.
> >
> > Also, if ProcMon is crashing the computer it may be useful to know
> > the version of it. FWIW I think that the latest version does that more
> > frequently than an earlier version.
> >
> > BTW there is a newsgroup which discusses those tools:
> > news:microsoft.public.winternals
> >
> >
> >>
> >> Here's part of the windowsupdate.log file where it fails:
> >>
> >> 2007-07-04 20:41:35 3112 df4 Setup Starting registry operations for
> >> section
> >> wuaucpl
> >> 2007-07-04 20:41:35 3112 df4 Setup Completed registration operations for
> >> section wuaucpl: status 0
> >> 2007-07-04 20:41:35 3112 df4 Setup Starting registry operations for
> >> section
> >> wuaueng_WebSetup
> >> 2007-07-04 20:41:35 3112 df4 Setup Completed registration operations for
> >> section wuaueng_WebSetup: status 0x80070005
> >
> >
> > RegMon would show you the key to which write access is inhibited.
> >
> >
> > FYI
> >
> > Robert Aldwinckle
> > ---
> >
> >
> >
>
>
>

Back
Subject: RE: Desktops Failure
Group: microsoft.public.winternals
Date: 9/19/2008 12:23:01 AM
From: =?Utf-8?B?U2FpbmF0aCAsIFNNQiBLSUQ=?= [Email Address Protection]

Hi John,

Good day.

i would like to know if this is caused by the application and not the
behavior of windows OS .

Can you navigate to registry and check if appropriate registries are been
added after installation of the software.

Did you tried uninstalling and re-installing it .

Also give me more details about the Event Id , software version. and error
message


Regards,
Sainath.

"John J. Jobst" wrote:

> I was excited to see the Unix style Desktops utility. I downloaded it,
> configured it with the defaults, created Desktop 2, and was permanently
> stuck there. The hotkeys did nothing. There was no Desktops icon in the
> tray to click on. Process Explorer dutifully showed Desktops running, I had
> no way to interact with it. I couldn't even kill the process. I had to
> logoff. Any help?
>
>
>

Back
Subject: RE: Non-Paged Pool Memory Leak caused by Dire (Directory Objects)?
Group: microsoft.public.winternals
Date: 9/19/2008 12:59:01 AM
From: =?Utf-8?B?U2FpbmF0aCAsIFNNQiBLSUQ=?= [Email Address Protection]

Dear Megan ,

good day ...

In order to understand the non-paged pool , you need to understand the
virtual address space (VAS )in depth.

The VAS is divided between user mode and for kernel mode. User applications
has 2GB VAS for each process. In Kernel mode, system code and device drivers
shares same VAS . In simplest forms memory manager creates paged pool and non
paged pool memory .

Paged Pool -- which can be paged in and out

Non paged pool -- which the virtual address space is always resides in
physical memory. and most of the dll and drivers reside in this address space.

=====================================================


Problem analysis

i would say some driver / dll is calling the dire tag which is increasing
the pool memory


poolmon/iDire /c /g" should show you the dll or the drivers which are using
this DIRE tag.

And Dire is specific to paged pool or non paged pool , i have checked in my
OS , it is under my paged pool and in xp its in nonpaged pool

My understanding goes, its a generic data structure which might be called by
drivers or dlls it might be either in paged or non paged pool

i will further investigate and get back to you.

Questions
=======
a) does this behavior occuring after installing any drivers / software

Regards
Sainath
SMB KID





"Megan Kielman" wrote:

> All -
>
> One of our servers has a memory leak and after monitoring poolmon over
> time I am seeing that the pooltag "Dire" significantly increases the use
> of non-paged pool memory. What exactly are Directory Objects and how can
> I prevent the memory leak?
>
> Thanks!
>
> Megan
>

Back
Subject: Re: Desktops Failure
Group: microsoft.public.winternals
Date: 9/19/2008 6:54:10 AM
From: "John J. Jobst" [Email Address Protection]

No, I had to reinstall windows, so further diagnosis is impossible.

"Sainath , SMB KID" <SainathSMBKID@discussions.microsoft.com> wrote in
message news:39B28E96-AB4E-4CCF-943F-4C9D60BE0A48@microsoft.com...
> Hi John,
>
> Good day.
>
> i would like to know if this is caused by the application and not the
> behavior of windows OS .
>
> Can you navigate to registry and check if appropriate registries are been
> added after installation of the software.
>
> Did you tried uninstalling and re-installing it .
>
> Also give me more details about the Event Id , software version. and error
> message
>
>
> Regards,
> Sainath.
>
> "John J. Jobst" wrote:
>
>> I was excited to see the Unix style Desktops utility. I downloaded it,
>> configured it with the defaults, created Desktop 2, and was permanently
>> stuck there. The hotkeys did nothing. There was no Desktops icon in the
>> tray to click on. Process Explorer dutifully showed Desktops running, I
>> had
>> no way to interact with it. I couldn't even kill the process. I had to
>> logoff. Any help?
>>
>>
>>



Back
Subject: Re: Windows Update Fails - 0x80070005
Group: microsoft.public.windowsupdate,microsoft.public.winternals
Date: 9/19/2008 8:03:01 AM
From: "Robert Aldwinckle" [Email Address Protection]

"Sainath , SMB KID" <SainathSMBKID@discussions.microsoft.com> wrote in message
news:16A72132-DC78-41ED-A33F-5EF2DE6EC82B@microsoft.com...
> Hi All,
>

> I would go for process explorer which gives more than file monitor and reg monitor


Typo? ; ) ProcMon has those features not ProcExp.


---



Back
Subject: Re: How to tell which app is connected to a device ?
Group: microsoft.public.winternals
Date: 11/25/2008 10:19:01 AM
From: =?Utf-8?B?Sm9lIEF1ZXJiYWNo?= [Email Address Protection]

Thanx, Francois, that's the type of response I was hoping for, I just wasn't
sure which would be the best Winternals app to use

"Francois PIETTE" wrote:

> > I have an Acer Aspire laptop, with a built-in webcam. It worked fine for a
> > while, but lately whenever I try to start the webcam I get an error
> message
> > indicating that "An application is connected to the device", while nothing
> > that I can see is using it. Both Acer and Logitec have washed their hands,
> > with mutual fingerpointing, Logitec saying that they just sell cameras to
> > Acer, and Acer pointing to Logitec.
> > How can I determine which application might be connected so I can try to
> > free up the device ?
> > Thanx, Joe Auerbach
>
> Just an idea: Use SysInternals Process Explorer to search which process has
> Logitec Webcam API DLL loaded.
>
> --
> francois.piette@overbyte.be
> Author of ICS (Internet Component Suite, freeware)
> Author of MidWare (Multi-tier framework, freeware)
> http://www.overbyte.be
>
>
>

Back