win2012 R2标准版出现蓝屏重启，请查明具体原因，谢谢！
问题
全部回复
-
您好 ，
感谢您的更新。
Dump文件分析如下：
===========================================
Use !analyze -v to get detailed debugging information.
BugCheck D1, {28, 2, 1, fffff80163a8d4ef}
Probably caused by : e1e6032e.sys ( e1e6032e!RxProcessReceiveArray+1de )
Followup: MachineOwner
---------
0: kd> !analyze -v
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is usually
caused by drivers using improper addresses.
If kernel debugger is available get stack backtrace.
Arguments:
Arg1: 0000000000000028, memory referenced
Arg2: 0000000000000002, IRQL
Arg3: 0000000000000001, value 0 = read operation, 1 = write operation
Arg4: fffff80163a8d4ef, address which referenced memory
LAST_CONTROL_TRANSFER: from fffff801ea3794e9 to fffff801ea36d9a0
STACK_TEXT:
fffff801`ebadcf68 fffff801`ea3794e9 : 00000000`0000000a 00000000`00000028 00000000`00000002 00000000`00000001 : nt!KeBugCheckEx
fffff801`ebadcf70 fffff801`ea377d3a : 00000000`00000001 ffffe001`f7d29d30 ffffe001`f4291f00 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff801`ebadd0b0 fffff801`63a8d4ef : fffff801`63a8dd41 ffffe001`f6711202 00000000`00000000 ffffe001`f51cb010 : nt!KiPageFault+0x23a
fffff801`ebadd248 fffff801`63a8dd41 : ffffe001`f6711202 00000000`00000000 ffffe001`f51cb010 ffffe001`f51cbc10 : NDIS!ndisFreeConvertedPacket+0x23
fffff801`ebadd250 fffff801`63aa6fd1 : ffffe001`f47201a0 ffffe001`f41d1958 ffffe001`f41d1950 ffffe001`f47201a0 : NDIS!ndisXlateReturnPacketToNetBufferList+0x61
fffff801`ebadd290 fffff801`63aa170d : 00000000`00000001 ffffe001`f7d29d30 fffff801`ebadd3e0 ffffe001`f67b9f30 : NDIS!ndisReturnPacketToNetBufferList+0x11
fffff801`ebadd2c0 fffff801`63aa5c64 : ffffe001`00000302 fffff801`ebadd3e0 fffff801`00000001 ffffe001`f67b9d00 : NDIS!ethFilterDprIndicateReceivePacket+0x8f5
fffff801`ebadd390 fffff801`63a6dbe4 : 00000000`00000801 ffffe001`f4720100 ffffe001`f3fa5008 ffffe001`f51cbc10 : NDIS!ndisIndicateXlatedPacketsToNdis5Protocols+0x104
fffff801`ebadd510 fffff801`63a45094 : ffffe001`f47201a0 00000000`00000001 00000000`00b5814b fffff801`63ab1ee8 : NDIS!ndisMTopReceiveNetBufferLists+0x28f94
fffff801`ebadd5a0 fffff801`6df98ede : ffffe001`f47be000 fffff801`00000000 fffff801`ebadd7c8 fffff801`ebadd820 : NDIS!NdisMIndicateReceiveNetBufferLists+0x114
fffff801`ebadd790 fffff801`6df931af : ffff0001`00000001 ffff0001`00000000 ffffe001`f47e9000 fffff801`ebadd880 : e1e6032e!RxProcessReceiveArray+0x1de
fffff801`ebadd820 fffff801`6df937ee : 00000000`00000000 ffffe001`f4722100 fffff801`ebadd8e0 00000000`00000000 : e1e6032e!E1000HandleInterrupt+0x19f
fffff801`ebadd880 fffff801`63a46e02 : 00000000`ea355b0c ffffe001`f3d90cb8 00000000`00000000 fffff801`ea2eaa48 : e1e6032e!E1000HandleInterruptEx+0xe
fffff801`ebadd8b0 fffff801`ea2e7cd0 : 00000000`00000000 00000000`0b1404bf 00000000`00000002 fffff801`64cf6b3f : NDIS!ndisInterruptDpc+0x1a3
fffff801`ebadd990 fffff801`ea2e6f87 : 00000000`00000000 fffff801`ebaddbe0 fffff801`ea520180 00000000`00000002 : nt!KiExecuteAllDpcs+0x1b0
fffff801`ebaddae0 fffff801`ea3714ea : fffff801`ea520180 fffff801`ea520180 fffff801`ea579a00 ffffe001`f79c2540 : nt!KiRetireDpcList+0xd7
fffff801`ebaddd60 00000000`00000000 : fffff801`ebade000 fffff801`ebad8000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x5a
从dump中可以看到，很有可能是e1e6032e.sys引起的。
经过查询e1e6032e.sys是Intel(R) PRO/1000 网卡的驱动组件。
建议联系Intel厂商，下载最新的网卡驱动，再观察看问题是否依然存在。
另外HP工程师给出的分析是dump是说XRouter存在问题。我查看了您给的dump却发现是正常的：0: kd> lmvm XRouter
Browse full module list
start end module name
fffff801`64cf2000 fffff801`6deac000 XRouter (deferred) 正常
Image path: \SystemRoot\system32\DRIVERS\XRouter.sys
Image name: XRouter.sys
Browse all global symbols functions data
Timestamp: Mon Sep 11 14:48:00 2017 (59B631A0)
CheckSum: 0005A95B
ImageSize: 091BA000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
用lmvm …查看时只有以下两项是比较可疑的。
fffff801`63a43000 fffff801`63b5a000 NDIS (pdb symbols) d:\symbols\ndis.pdb\35C3275EDCDF40B9A23FB65A41DEB1832\ndis.pdb
Loaded symbol image file: NDIS.SYS
Image path: \SystemRoot\system32\DRIVERS\NDIS.SYS
Image name: NDIS.SYS
Browse all global symbols functions data
Timestamp: Sat Oct 11 08:35:46 2014 (54387B62)
CheckSum: 00110E4F
ImageSize: 00117000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
fffff801`6df92000 fffff801`6dfe0000 e1e6032e (pdb symbols) d:\symbols\e1e6032e.pdb\1E881E65389146B099256A0FD7EA8C5F1\e1e6032e.pdb
Loaded symbol image file: e1e6032e.sys
Image path: \SystemRoot\system32\DRIVERS\e1e6032e.sys
Image name: e1e6032e.sys
Browse all global symbols functions data
Timestamp: Tue Sep 27 06:52:28 2011 (4E81022C)
CheckSum: 00050E31
ImageSize: 0004E000
Translations: 0000.04b0 0000.04e4 0409.04b0 0409.04e4
关于给出信息不一致的情况，您是否可以确认一下是否是分析的同一个dump，如果是的话，需要您联系HP工程师来确认如何得出相关信息的。
如有任何疑问，您都可以随时在贴下进行回复。
此致
Candy
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.- 已建议为答案 Candy LuoMicrosoft contingent staff, Moderator 2017年11月15日 2:43
