Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Frequent tcpip.sys\netio bsod - help

21 Apr 2011   #11

Windows 10 Pro x64

Hmmm... well, that does only leave network drivers. Can you configure your computer for a kernel memory dump, and get one of those on the next occurrence?
  1. Open sysdm.cpl
  2. Click the "Advanced" tab, and click the "Settings" button in the Performance section
  3. Click the "Advanced" tab, and click the "Change" button
  4. Make sure that "let windows manage..." is checked, and then click "OK"
  5. Open regedit
  6. Browse to HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
  7. Change the value of the DWORD "CrashDumpEnabled" to 2
  8. Reboot
Once this is done, you should be able to get a decent memory dump the next time the crash happens - it's unfortunate, but getting any further info from a minidump just isn't possible, unfortunately.

My System SpecsSystem Spec
21 Apr 2011   #12

Windows 7 Enterprise 64bit

Its already on "2" as in 0x000000002(2)
all the other settings are set to the settings u suggested.
And windows controls my system page file.
I've uploaded my memory dump to my ftp.
U'll find it at
but beware, its approx 450mb
My System SpecsSystem Spec
21 Apr 2011   #13

Windows 10 Pro x64

You could have zipped it before uploading, but that's OK. Downloading now.
My System SpecsSystem Spec

21 Apr 2011   #14

Windows 10 Pro x64

Looks like your network driver or network card itself really is at fault here:
// The thread at fault, showing the page fault that caused the bugcheck:
0: kd> k
Child-SP          RetAddr           Call Site
fffff800`00b9b3b8 fffff800`0308bbe9 nt!KeBugCheckEx
fffff800`00b9b3c0 fffff800`0308a860 nt!KiBugCheckDispatch+0x69
fffff800`00b9b500 fffff880`016f7dc2 nt!KiPageFault+0x260
fffff800`00b9b690 fffff880`01706014 tcpip!TcpTcbHeaderSend+0x1f2
fffff800`00b9b840 fffff880`016f3d54 tcpip!TcpTcbCarefulDatagram+0xbf4
fffff800`00b9b9f0 fffff880`016f25ea tcpip!TcpTcbReceive+0x724
fffff800`00b9bbe0 fffff880`016f42ab tcpip!TcpMatchReceive+0x1fa
fffff800`00b9bd30 fffff880`016eb137 tcpip!TcpPreValidatedReceive+0x36b
fffff800`00b9be00 fffff880`016eacaa tcpip!IppDeliverListToProtocol+0x97
fffff800`00b9bec0 fffff880`016ea2a9 tcpip!IppProcessDeliverList+0x5a
fffff800`00b9bf60 fffff880`016e7fff tcpip!IppReceiveHeaderBatch+0x23a
fffff800`00b9c040 fffff880`016e75f2 tcpip!IpFlcReceivePackets+0x64f
fffff800`00b9c240 fffff880`016e6a8a tcpip!FlpReceiveNonPreValidatedNetBufferListChain+0x2b2
fffff800`00b9c320 fffff800`03099078 tcpip!FlReceiveNetBufferListChainCalloutRoutine+0xda
fffff800`00b9c370 fffff880`016e7152 nt!KeExpandKernelStackAndCalloutEx+0xd8
fffff800`00b9c450 fffff880`014e50eb tcpip!FlReceiveNetBufferListChain+0xb2
fffff800`00b9c4c0 fffff880`014aead6 ndis!ndisMIndicateNetBufferListsToOpen+0xdb
fffff800`00b9c530 fffff880`01427cc1 ndis!ndisMDispatchReceiveNetBufferLists+0x1d6
fffff800`00b9c9b0 fffff880`07165a2f ndis!NdisMIndicateReceiveNetBufferLists+0xc1
fffff800`00b9ca00 fffff880`07155171 Rt64win7+0x15a2f
fffff800`00b9cbe0 fffff880`01427bb6 Rt64win7+0x5171
fffff800`00b9cc40 fffff800`03097b1c ndis!ndisInterruptDpc+0x1b6
fffff800`00b9ccd0 fffff800`0308436a nt!KiRetireDpcList+0x1bc
fffff800`00b9cd80 00000000`00000000 nt!KiIdleLoop+0x5a
// Looking at the third parameter on the stack to TcpTcbHeaderSend,
// which contains the buffer list at it's second block (I know this from
// experience), and we can see that parameter was passed in as NULL:
0: kd> dc 0xfffffa80`0759a501 L2
fffffa80`0759a501  00000000 00000000                    ........
This particular value is rarely (but possible to be) populated by NDIS.sys, otherwise this address is going to be populated by the miniport driver before being passed upwards to ndis and then tcpip.sys. The most likely scenario in this case is actually the latter situation, because a network driver can actually preallocate a lot of buffers (so they can be NULL without causing a crash) when it is initializing, and then use those buffers for data as the data shows up. Given that if this was an actual allocated address by NDIS, it would not possibly have been NULL without crashing in NDIS during the allocation, this is why it looks very much like this is a driver issue and specifically the Realtek driver on this stack:
// The Realtek driver being used:
0: kd> lmvm Rt64win7
start             end                 module name
fffff880`07150000 fffff880`071ba000   Rt64win7   (no symbols)           
    Loaded symbol image file: Rt64win7.sys
    Image path: \SystemRoot\system32\DRIVERS\Rt64win7.sys
    Image name: Rt64win7.sys
    Timestamp:        Wed Feb 16 04:03:57 2011 (4D5B92FD)
    CheckSum:         000754A7
    ImageSize:        0006A000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
I've run into this exact stack and crash before (hence why I knew where to look to see what's happening), and every single time it's been a driver issue, or an actual problem with the network card hardware itself. Good luck.
My System SpecsSystem Spec

 Frequent tcpip.sys\netio bsod - help

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Similar help and support threads
Thread Forum
Frequent BSODs (tcpip.sys and sometimes ntoskrnl.exe)
I am getting repeated BSODs, blaming TCPIP.sys and occasionally ntoskrnl.exe. The first recent one I can remember happened a few weeks ago when I installed ESET as part of a company-wide antivirus standardisation. Then, perhaps 10 days ago now, it started more regularly, a few times per day, to...
BSOD Help and Support
NETIO.SYS TCPIP.SYS and NTOKRNL.EXE bsod when using utorrent or vuze
hello, Recently I get an BSOD when I run vuze or utorrent, I have attached a sample DMP the memtest scan Showed that my memory is ok. I would appreciate your help, Thank you, Ori
BSOD Help and Support
Frequent random BSOD Netio.sys
Hi I have a Thinkpad T410 and have been getting frequent random BSOD for a long time. I finally got it to create a mini dump by editing the registry directly as it would not save the setting under control panel. The bluescreen view utility shows the problem is netio.sys and shows driver...
BSOD Help and Support
Random BSODs [+NETIO.sys, afd.sys, tcpip.sys]
Just after upgrading to Windows 8 x64 I started getting some BSODs while on Windows. I have already tried to update the LAN driver according to Asus's recommendation, but it didn't helped at all. EDIT: It usually happens when I'm doing whatever on Windows, but it's quite common if I'm using...
BSOD Help and Support
So I just installed a SSD on my machine and reinstalled Windows. Now I'm getting BSODs when using my network card to download or upload large amounts of data, both to/from LAN and WAN locations. The BSOD is only when using the wired connection to my router (wireless works fine), and is either...
BSOD Help and Support
BSODs- tcpip.sys and netio.sys the most common culprits
Over the last week or so, I've had 22 BSODs, out of which most signified errors with tcpip.sys and netio.sys. I followed the advice of a user with a similar problem and set up a static IP through the IPv4 properties of my network adapter, which was a potential solution for fixing the netio.sys...
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 22:17.

Twitter Facebook Google+

Windows 7 Forums

Seven Forums Android App Seven Forums IOS App