Minidump Analyze
Hi Freddy,
I checked this out on my own. I became interested in analyzing dump files after I experienced my own crashes. The crash points to a wanarp.sys. In red, I've highlited the probable cause, which faults around a driver for this device. The possible fix might be to upgrade the drivers for this device, which is probably a network device such as a NIC card (from what I can see here). I would almost pinpoint this to a NIC card because the description of wanarp reads: "MS Remote Access and Routing ARP Driver." ARP stands for address resolution protocol. So when you encounter something like a "Routing ARP Driver," you can almost guarantee this is related to a network/NIC card problem. The information for the wanarp is also below. You might also get some others to analyze this and elaborate/add to what I've found.
All the best,
Shawn
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 00000134, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: f8678d9b, address which referenced memory
Debugging Details:
------------------
WRITE_ADDRESS: 00000134
CURRENT_IRQL: 2
FAULTING_IP:
wanarp!FreeBufferToPoolEx+31
f8678d9b ff4610 inc dword ptr [esi+0x10]
CUSTOMER_CRASH_COUNT: 3
DEFAULT_BUCKET_ID: DRIVER_FAULTBUGCHECK_STR: 0xD1
LAST_CONTROL_TRANSFER: from f867c824 to f8678d9b
STACK_TEXT:
80548af8 f867c824 f867cf80 02cb8124 00000001 wanarp!FreeBufferToPoolEx+0x31
80548b20 b81763e5 00000000 81d33b38 00000000 wanarp!WanNdisSendComplete+0x3e
WARNING: Stack unwind information not available. Following frames may be wrong.
80548b40 b8176418 00000000 00000000 0000002f tm_cfw+0x193e5
80548b54 b8194e51 828c8528 b81882a0 825ae188 tm_cfw+0x19418
80548c20 b8196194 8263c128 825ae008 b81961f2 tm_cfw+0x37e51
80548c38 b818c4e1 825ae008 2e323232 2e313131 tm_cfw+0x39194
80548cc8 b818c772 827766f8 80548ce4 b81882b7 tm_cfw+0x2f4e1
80548cd4 b81882b7 825ae008 80548d0c 80548e00 tm_cfw+0x2f772
80548ce4 804ff234 82776720 827766f8 01957988 tm_cfw+0x2b2b7
80548e00 804ff34b 80551b80 80551920 ffdff000 nt!KiTimerListExpire+0x122
80548e2c 80540d5d 80551f80 00000000 0004cbb7 nt!KiTimerExpiration+0xaf
80548e50 80540cd6 00000000 0000000e 00000000 nt!KiRetireDpcList+0x46
80548e54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x26
STACK_COMMAND: .bugcheck ; kb
FOLLOWUP_IP:
wanarp!FreeBufferToPoolEx+31
f8678d9b ff4610 inc dword ptr [esi+0x10]
FAULTING_SOURCE_CODE:
SYMBOL_STACK_INDEX: 0
FOLLOWUP_NAME: MachineOwner
SYMBOL_NAME: wanarp!FreeBufferToPoolEx+31
MODULE_NAME: wanarp
IMAGE_NAME: wanarp.sys
DEBUG_FLR_IMAGE_TIMESTAMP: 41107c89
FAILURE_BUCKET_ID: 0xD1_W_wanarp!FreeBufferToPoolEx+31
BUCKET_ID: 0xD1_W_wanarp!FreeBufferToPoolEx+31
Followup: MachineOwner
---------
f8677000 f867f700 wanarp (pdb symbols) c:\symbols\wanarp.pdb\FDB397B5509448699BDFDF4E2214A5D61\wanarp.pdb
Loaded symbol image file: wanarp.sys
Mapped memory image file: c:\symbols\wanarp.sys\41107C898700\wanarp.sys
Image path: wanarp.sys
Image name: wanarp.sys
Timestamp: Tue Aug 03 23:04:57 2004 (41107C89)
CheckSum: 0000EFA7
ImageSize: 00008700
File version: 5.1.2600.2180
Product version: 5.1.2600.2180
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 3.6 Driver
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: WANARP.SYS
OriginalFilename: WANARP.SYS
ProductVersion: 5.1.2600.2180
FileVersion: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
FileDescription: MS Remote Access and Routing ARP Driver
LegalCopyright: © Microsoft Corporation. All rights reserved.