The !vm extension displays summary information about virtual memory use statistics on the target system.
Specifies what information will be displayed in the output from this command. This can be any sum of the following bits. The default is 0, which causes the display to include system-wide virtual memory statistics as well as memory statistics for each process.
Bit 0 (0x1)
Causes the display to omit process-specific statistics.
Bit 1 (0x2)
Causes the display to include memory management thread stacks.
Bit 2 (0x4)
Causes the display to include terminal server memory usage.
Bit 3 (0x8)
Causes the display to include the page file write log.
Bit 4 (0x10)
Causes the display to include working set owner thread stacks.
Bit 5 (0x20)
(Windows Vista and later) Causes the display to include kernel virtual address usage.
Modes: kernel mode only
The !memusage extension command can be used to analyze physical memory usage. For more information about memory management, see Microsoft Windows Internals, by Mark Russinovich and David Solomon.
Here is an example of the short output produced when Flags is 1:
kd> !vm 1 *** Virtual Memory Usage *** Physical Memory: 16270 ( 65080 Kb) Page File: \??\E:\pagefile.sys Current: 98304Kb Free Space: 61044Kb Minimum: 98304Kb Maximum: 196608Kb Available Pages: 5543 ( 22172 Kb) ResAvail Pages: 6759 ( 27036 Kb) Locked IO Pages: 112 ( 448 Kb) Free System PTEs: 45089 ( 180356 Kb) Free NP PTEs: 5145 ( 20580 Kb) Free Special NP: 336 ( 1344 Kb) Modified Pages: 714 ( 2856 Kb) NonPagedPool Usage: 877 ( 3508 Kb) NonPagedPool Max: 6252 ( 25008 Kb) PagedPool 0 Usage: 729 ( 2916 Kb) PagedPool 1 Usage: 432 ( 1728 Kb) PagedPool 2 Usage: 436 ( 1744 Kb) PagedPool Usage: 1597 ( 6388 Kb) PagedPool Maximum: 13312 ( 53248 Kb) Shared Commit: 1097 ( 4388 Kb) Special Pool: 229 ( 916 Kb) Shared Process: 1956 ( 7824 Kb) PagedPool Commit: 1597 ( 6388 Kb) Driver Commit: 828 ( 3312 Kb) Committed pages: 21949 ( 87796 Kb) Commit limit: 36256 ( 145024 Kb)
All memory use is listed in pages and in kilobytes. The most useful information in this display is the following:
Total physical memory in the system.
Number of pages of memory available on the system, both virtual and physical.
nonpaged pool usage
The amount of pages allocated to the nonpaged pool. The nonpaged pool is memory that cannot be swapped out to the paging file, so it must always occupy physical memory. If this number is too large, this is usually an indication that there is a memory leak somewhere in the system.