Server memory dump debugging

[Fr0dders]

One of our clients servers is BSODing .. regularly, as in 2 or 3 times a day.

We've got the dumps, and they are comming out as the following.

UNEXPECTED_KERNEL_MODE_TRAP
Arg1 EXCEPTION_DOUBLE_FAULT

There is a MS kb article for 2000 server that can cause the server to kernel mode stack overflow, but we've applied this and it dumped twice again last night.

It's exactly as described here

http://blogs.msdn.com/ntdebugging/archive/2008/02/01/kernel-stack-overflows.aspx

But i'm having trouble getting the diagnosis done to pinpoint what driver is causing it.

Under debugging details where it should give more info i'm getting

****
****your debugger is not using the correct symbols.. etc.
****
****Type Referenced nt!_KPRCB
****
Ive set _NT_SYMBOL_PATH to srv*c:\symbols*http://msdl.microsoft.com/download/symbols




But still no having much look getting the symbols into the debugger.

Anybody got any suggestions ?

 

[Engram]

Have you tried contacting Microsoft? They can help you debug that kind of thing. (At my last company they did some great work tracking down an IIS crash).

 

[s0ck]

Symbols are service pack specific, afaik. Have a squint to see if you can find any more.