1.查看托管线程
0:023> !threads -live
ThreadCount: 177
UnstartedThread: 0
BackgroundThread: 34
PendingThread: 0
DeadThread: 139
Hosted Runtime: no
PreEmptive GC Alloc Lock
ID OSID ThreadOBJ State GC Context Domain Count APT Exception
6 1 d20 0136ea08 8220 Enabled 00000000:00000000 012e30f8 0 Ukn
20 2 133c 01374b90 b220 Enabled 00000000:00000000 013a9638 0 MTA (Finalizer)
21 4 17d0 013a48e8 80a220 Enabled 00000000:00000000 012e30f8 0 MTA (Threadpool Completion Port)
22 5 5cc 013a4f90 1220 Enabled 00000000:00000000 012e30f8 0 Ukn
23 6 1430 1b00b890 200b020 Enabled 00000000:00000000 013a9638 0 MTA
24 7 146c 1b0140e0 200b020 Enabled 00000000:00000000 013a9638 0 MTA
25 8 11cc 1b00aef8 200b020 Enabled 00000000:00000000 013a9638 0 MTA
26 9 1240 1b0157a8 200b020 Enabled 00000000:00000000 013a9638 0 MTA
28 d db4 013beaa8 200b220 Enabled 00000000:00000000 013a9638 1 MTA
38 3d 1570 1e449e48 180b220 Enabled 00000000:00000000 013a9638 1 MTA (Threadpool Worker)
40 5a 14c 479218b0 180b220 Enabled 00000000:00000000 012e30f8 0 MTA (Threadpool Worker)
41 68 618 38456b88 180b220 Enabled bb7c422c:bb7c60f0 013a9638 1 MTA (Threadpool Worker)
42 72 1538 296f2ec8 180b220 Enabled b3761ad4:b37625e4 012e30f8 0 MTA (Threadpool Worker)
43 7a c18 521c3710 180b220 Enabled 00000000:00000000 012e30f8 0 MTA (Threadpool Worker)
44 7e dfc 3fd6c308 180b220 Enabled 00000000:00000000 012e30f8 0 MTA (Threadpool Worker)
45 a0 784 34aafa50 220 Enabled 00000000:00000000 012e30f8 0 Ukn
46 a6 15dc 47ed9400 180b220 Enabled bb7da8a0:bb7dc0f0 013a9638 1 MTA (Threadpool Worker)
47 a2 177c 38e667a8 180b220 Enabled b70ce6b4:b70d00d0 013a9638 1 MTA (Threadpool Worker)
48 a8 b9c 1ef29140 880b220 Enabled 00000000:00000000 012e30f8 0 MTA (Threadpool Completion Port)
49 a5 11e8 47ed9018 180b220 Enabled c18d985c:c18dae24 012e30f8 0 MTA (Threadpool Worker)
50 ab 4b8 47edab70 880b220 Enabled 00000000:00000000 012e30f8 0 MTA (Threadpool Completion Port)
51 ac 840 47edb728 180b220 Enabled b70d8e50:b70da0d0 012e30f8 0 MTA (Threadpool Worker)
52 b0 1500 35841e10 220 Enabled 00000000:00000000 012e30f8 0 Ukn
53 b1 11b4 377df690 180b220 Enabled bb7ce934:bb7d00f0 012e30f8 0 MTA (Threadpool Worker)
2.查看线程运行时间
0:053> !runaway
User Mode Time
Thread Time
31:4bc 0 days 0:02:06.421
16:1390 0 days 0:01:50.531
17:1678 0 days 0:01:47.078
43:c18 0 days 0:01:36.796
19:ccc 0 days 0:01:36.031
41:618 0 days 0:01:34.875
18:35c 0 days 0:01:34.609
42:1538 0 days 0:01:33.984
40:14c 0 days 0:01:29.593
44:dfc 0 days 0:01:25.281
38:1570 0 days 0:01:24.390
46:15dc 0 days 0:00:47.812
47:177c 0 days 0:00:42.234
49:11e8 0 days 0:00:36.265
51:840 0 days 0:00:26.046
4:129c 0 days 0:00:10.093
34:1774 0 days 0:00:08.343
5:10fc 0 days 0:00:08.031
6:d20 0 days 0:00:07.906
3:65c 0 days 0:00:07.437
39:16c4 0 days 0:00:04.609
35:d58 0 days 0:00:04.546
53:11b4 0 days 0:00:03.640
21:17d0 0 days 0:00:03.468
20:133c 0 days 0:00:02.000
14:b98 0 days 0:00:01.250
28:db4 0 days 0:00:01.078
45:784 0 days 0:00:00.140
23:1430 0 days 0:00:00.093
0:858 0 days 0:00:00.031
25:11cc 0 days 0:00:00.015
24:146c 0 days 0:00:00.015
1:e00 0 days 0:00:00.015
54:15f4 0 days 0:00:00.000
52:1500 0 days 0:00:00.000
50:4b8 0 days 0:00:00.000
48:b9c 0 days 0:00:00.000
37:12e8 0 days 0:00:00.000
36:bfc 0 days 0:00:00.000
33:1048 0 days 0:00:00.000
32:a78 0 days 0:00:00.000
30:278 0 days 0:00:00.000
29:da8 0 days 0:00:00.000
27:308 0 days 0:00:00.000
26:1240 0 days 0:00:00.000
22:5cc 0 days 0:00:00.000
15:d30 0 days 0:00:00.000
13:1720 0 days 0:00:00.000
12:aac 0 days 0:00:00.000
11:c50 0 days 0:00:00.000
10:a98 0 days 0:00:00.000
9:ca4 0 days 0:00:00.000
8:cd0 0 days 0:00:00.000
7:149c 0 days 0:00:00.000
2:17c4 0 days 0:00:00.000
结果里面有很多不是托管线程,可以对比托管线程列表
3.查看43号线程的调用堆栈
0:031> ~43s
eax=00000000 ebx=00000000 ecx=00000000 edx=00000000 esi=000002f0 edi=7eb5eb1c
eip=778ef971 esp=7eb5ead4 ebp=7eb5eb40 iopl=0 nv up ei pl zr na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000246
ntdll!NtWaitForSingleObject+0x15:
778ef971 83c404 add esp,4
0:043> !clrstack
OS Thread Id: 0xc18 (43)
Failed to start stack walk: 80004005
结果表示无法获取堆栈。是因为没有符合文件吗?
有的线程是可以查看堆栈的。