Miscellaneous Utilities : Nonpaged pool in RAMMap and in PE are different

 

0: kd> !vm

*** Virtual Memory Usage ***
 Physical Memory:     4187937 (  16751748 Kb)
 Page File: \??\C:\pagefile.sys
   Current:  16751748 Kb  Free Space:  16671896 Kb
   Minimum:  16751748 Kb  Maximum:     50255244 Kb
unable to get nt!MmSystemLockPagesCount
 Available Pages:     2981559 (  11926236 Kb)
 ResAvail Pages:      3469232 (  13876928 Kb)
 Locked IO Pages:           0 (         0 Kb)
 Free System PTEs:   33503292 ( 134013168 Kb)
 Modified Pages:       482366 (   1929464 Kb)
 Modified PF Pages:    481582 (   1926328 Kb)
 NonPagedPool Usage:   486639 (   1946556 Kb)
 NonPagedPool Max:    3123220 (  12492880 Kb)
 PagedPool 0 Usage:    152158 (    608632 Kb)
 PagedPool 1 Usage:     10768 (     43072 Kb)
 PagedPool 2 Usage:      4100 (     16400 Kb)
 PagedPool 3 Usage:      4097 (     16388 Kb)
 PagedPool 4 Usage:      4083 (     16332 Kb)
 PagedPool Usage:      175206 (    700824 Kb)
 PagedPool Maximum:  33554432 ( 134217728 Kb)
 Session Commit:        11907 (     47628 Kb)
 Shared Commit:        225391 (    901564 Kb)
 Special Pool:              0 (         0 Kb)
 Shared Process:         7973 (     31892 Kb)
 PagedPool Commit:     175268 (    701072 Kb)
 Driver Commit:          7849 (     31396 Kb)
 Committed pages:     1512068 (   6048272 Kb)
 Commit limit:        8375410 (  33501640 Kb)

 

So 6.11 "NonPagedPool Usage" is the same as "NonPagedPool Usage Nx" given by version 6.12

 

Anyway I think this is Virtual memory (and not  the Physical Memory shown by RAMMap)

 

Let's go back to the original question: Why RAMMap and Process Explorer show different results?

 

PS

Is there any Poolmon.exe available for Windows 7?