Edit

!ndiskd.nbl

  • Article

The !ndiskd.nbl extension displays information about a NET_BUFFER_LIST (NBL) structure.

    !ndiskd.nbl [-handle <x>] [-basic] [-chain] [-info] [-data] 
    [-netmon] [-capfile <str>] [-launch] [-overwrite] [-log]
    [-stacks] [-NblCurrentOwner]

Parameters

-handle
Required. Address of a NET_BUFFER_LIST structure.

-basic
Displays basic information about an NBL.

-chain
Displays all the NBLs and NET_BUFFERs in an NBL chain.

-info
Displays all the out-of-band information that is associated with an NBL.

-data
Displays the actual data payload of an NBL.

-netmon
Views the NBL chain in Microsoft Network Monitor.

-capfile
Specifies the path to which a netmon capture is saved.

-launch
Automatically launches netmon.exe after saving the capture file.

-overwrite
Allows overwriting the capture file if it already exists.

-log
Shows NBL log if NBL history logging is enabled.

-stacks
Includes callstacks with NBL log (use with -log).

-NblCurrentOwner
Shows the current owner of the NBL.

DLL

Ndiskd.dll

Examples

In the following example, NBL tracking has been enabled to extract a handle for an NBL from the NBL log. For more information about NBL tracking and the NBL log, see !ndiskd.nbllog.

At the time of log collection, the NBL in this example was returned by the TCPIP6 protocol to the WFP Native Mac Layer LightWeight Filter.

2: kd> !ndiskd.nbl ffffdf80149524a0
    NBL                ffffdf80149524a0    Next NBL           NULL
    First NB           ffffdf8014952610    Source             ffffdf80140c71a0 - Microsoft Kernel Debug Network Adapter
    Flags              INDICATED, RETURNED, NBL_ALLOCATED, PROTOCOL_020_0,
                       PROTOCOL_200_0

    Walk the NBL chain                     Dump data payload
    Show out-of-band information
    Review NBL history

By clicking on the "Dump data payload" link from the previous example or by entering the !ndiskd.nbl -handle -data command, you can see the data payload of this NBL. In the following example, the NBL contains only one NET_BUFFER structure. To further explore the contents of that NET_BUFFER structure, run the !ndiskd.nb -handle command with its handle.

2: kd> !ndiskd.nbl ffffdf80149524a0 -data
NET_BUFFER ffffdf8014952610

See also

Network Driver Design Guide

Windows Vista and Later Networking Reference

Debugging the Network Stack

NDIS extensions (Ndiskd.dll)

!ndiskd.help

NET_BUFFER_LIST

NET_BUFFER

!ndiskd.nbllog

!ndiskd.nb