Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Answer key for trace; SlowBoot4.etl #10

Open
itoleck opened this issue Aug 19, 2023 · 0 comments
Open

Answer key for trace; SlowBoot4.etl #10

itoleck opened this issue Aug 19, 2023 · 0 comments
Assignees
Labels
answer key Answers for practice traces

Comments

@itoleck
Copy link
Owner

itoleck commented Aug 19, 2023

Scenario:

An old Windows 7 machine, not on the domain takes ~60 seconds to boot to the desktop. Is this normal for an old machine and OS, or is there something else mysterious going on here?

Analysis:

The old Windows 7 machine has 2 CPU cores and 4GB RAM and a 64GB SATA SSD! Windows 7 on an SSD should boot very quickly so there may be some improvement that can be made in the 60 second boot/logon time. All of this information can be verified in the Menu->Trace->System Configuration tables.
SlowBoot4

The first information to check in a boot trace is the boot phases time chart.
SlowBoot4-phases
Each phase should be within certain thresholds available to view here

Based on the thresholds, the Pre Session Init phase is too long. Click on the pink graph bar to select the phase and right-click->Zoom. Now the chart and table data should only show the Pre Session Init data. This phase usually does not have much CPU or storage usage. If there was high usage, then the CPU and Disk graph should be checked. In this case the overall usage is low. In the cases of long Pre Session Init phases; I will look to the System Activity->Generic Events graph to see what providers were sending events at this time.

A trick is to add the Time (s) column to the very first column and sort by Time (s) ascending.
SlowBoot4-time

Look for long gaps in the times to find devices or drivers that are taking a long time to start.
SlowBoot4-presessinit

The DriverName column is the hardware Plug and Play ID of the device. In our case, PCI\VEN_8086&DEV_444E&SUBSYS_444E8086&REV_01\4&2d6ce421&0&00E1 is taking 24.56 seconds to start!

We can lookup what device this ID belongs to in the Menu->Trace->System Configuration->PnP table.
SlowBoot4-PnP

Remediation:

The Intel(R) Turbo Memory Controller driver should be updated to the latest version, or possibly some BIOS settings can be changed to alleviate the issue.

@itoleck itoleck self-assigned this Aug 19, 2023
@itoleck itoleck added the answer key Answers for practice traces label Aug 19, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
answer key Answers for practice traces
Projects
None yet
Development

No branches or pull requests

1 participant