SoftEtherVPN / Win10Pcap

Win10Pcap: WinPcap for Windows 10 (NDIS 6.x driver model)
Other
337 stars 122 forks source link

Blue Screen Of Death blamed on Win10PCap.sys #11

Open FlyingDutchman1965 opened 7 years ago

FlyingDutchman1965 commented 7 years ago

Hi there,

Since installing Win10PCap back in February, I have had the BSOD on several occasions with an error message "DRIVER_IRQL_NOT_LESS_OR_EQUAL at Win10PCap.sys". A MEMORY.DMP file was generated in the C:\Windows directory, and I've managed to get as far as using the WINDBG debugging utility to generate the attached file. The one thing I did notice in the file are the following few lines:

DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If kernel debugger is available get stack backtrace. Arguments: Arg1: 00196078, memory referenced Arg2: 00000002, IRQL Arg3: 00000002, value 0 = read operation, 1 = write operation Arg4: 8ade1260, address which referenced memory

You will notice that Arg3 has a reported value of 2, but the valid values are only 0 and 1 !!!

I am running Windows 10 Home 32-bit, on a Dell Inspiron 530. I am only using Win10PCap to support the TP-Link PowerLine utility, so don't really need it, and will be uninstalling it the next time a BSOD occurs.

Regards.

John.

MEMORY.txt

FlyingDutchman1965 commented 7 years ago

Issue has occurred again today!

hsluoyz commented 7 years ago

You would like to try Npcap: https://github.com/nmap/npcap