![understanding poolmon.exe ram usage understanding poolmon.exe ram usage](https://i.imgur.com/IOROuJc.jpg)
If you have determined that the leak is occurring in non-paged pool, press P once if you have determined that it is occurring in paged pool, press P twice.To find a memory leak with the PoolMon utility, follow this procedure: It takes a few seconds for each command to work. Press the letter associated with each command in order to re-sort the data. PoolMon has command keys that sort the output according to various criteria. The display is updated automatically every few seconds. The columns show pool use for each pool tag. The PoolMon header displays the total paged and non-paged pool bytes. Sorts tags by the difference between allocations and frees. Repeatedly pressing P cycles through each of these options, in that order.Ĭauses the display to include the paged and non-paged totals across the bottom. Limits the tags shown to nonpaged pool, paged pool, or both. For a full description, see PoolMon in the WDK documentation.
UNDERSTANDING POOLMON.EXE RAM USAGE DRIVER
This tool is included in the Windows Driver Kit (WDK). Using PoolMon to Find a Kernel-Mode Memory LeakPoolMon (Poolmon.exe) monitors pool memory usage by pool tag name. Here’s a summary of paged pool limits across operating systems: Paged poolThe paged pool consists of virtual memory that can be paged in and out of the system. Windows can write the data it stores to the paging file, allowing the physical memory it occupies to be repurposed.The largest consumer of paged pool, is typically the Registry, since references to registry keys and other registry data structures are stored in paged pool. Nonpaged pool limits across different version of Windows:
UNDERSTANDING POOLMON.EXE RAM USAGE DRIVERS
NonPaged PoolThe pool manager operates in kernel mode, using regions of the system’s virtual address space (described in the Pushing the Limits post on virtual memory) for the memory it sub-allocates.The nonpaged pool consists of virtual memory addresses that are guaranteed to reside in physical memory as long as the corresponding kernel objects are allocated.The kernel and device drivers use nonpaged pool to store data that might be accessed when the system can’t handle page faults. Paged and nonpaged pools serve as the memory resources that the operating system and device drivers use to store their data structures.