TimeStamp unavailable for some of the system modules?

WINDBG
1

While debugging a full kernel memory dump, we are coming accross an situation where timestamps are not available for most of the modules.

foe e.g:

0: kd> lm tm s*
start end module name
b9965000 b99cd000 srv unavailable (FFFFFFFE)
ba51e000 ba533000 serial unavailable (FFFFFFFE)
baea6000 baec5000 SCSIPORT Fri Mar 25 06:10:26 2005 (42435DFA)
baec5000 baedf000 storport Fri Mar 25 05:58:57 2005 (42435B49)
f74c7000 f74d5000 symmpi Fri May 23 19:45:25 2003 (3ECE2CFD)
f7567000 f7571000 serenum unavailable (FFFFFFFE)
f7995000 f7997000 swenum unavailable (FFFFFFFE)

Unloaded modules:
f77a7000 f77af000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000

What could be possible reason for this?

Thanks & Regards,
Pratima

2

Drivers are paged against the paging file; if the page in question (the
one that contains the header) was not resident in memory, then you won’t
see it when analyzing a memory dump. Further, the very location where
the header was located (the paging file) has now been overwritten by the
dump itself.

Tony

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of
xxxxx@hotmail.com
Sent: Tuesday, October 03, 2006 1:53 AM
To: Kernel Debugging Interest List
Subject: [windbg] TimeStamp unavailable for some of the system modules?

While debugging a full kernel memory dump, we are coming accross an
situation where timestamps are not available for most of the modules.

foe e.g:

0: kd> lm tm s*
start end module name
b9965000 b99cd000 srv unavailable (FFFFFFFE)
ba51e000 ba533000 serial unavailable (FFFFFFFE)
baea6000 baec5000 SCSIPORT Fri Mar 25 06:10:26 2005 (42435DFA)
baec5000 baedf000 storport Fri Mar 25 05:58:57 2005 (42435B49)
f74c7000 f74d5000 symmpi Fri May 23 19:45:25 2003 (3ECE2CFD)
f7567000 f7571000 serenum unavailable (FFFFFFFE)
f7995000 f7997000 swenum unavailable (FFFFFFFE)

Unloaded modules:
f77a7000 f77af000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000

What could be possible reason for this?

Thanks & Regards,
Pratima

You are currently subscribed to windbg as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com