Search the VMware Knowledge Base (KB)
View by Article ID

Windows virtual machine installed with vShield Endpoint Thin Agent (vsepflt.sys) and vShield Endpoint TDI Manager (vnetflt.sys) drivers becomes unresponsive or fails with a blue diagnostic screen (2081616)

  • 20 Ratings

Symptoms

When a Windows virtual machine is installed with vShield Endpoint Thin Agent and vShield Endpoint TDI Manager drivers, you experience these symptoms:
  • The virtual machine becomes unresponsive.
  • The virtual machine has a large number of TCP connections.
  • The virtual machine fails with a blue diagnostic screen.
  • A dump analysis and call stack shown in windbg may look like one of these:
    • IRQL_NOT_LESS_OR_EQUAL (a). An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high.
    • DRIVER_CORRUPTED_EXPOOL (c5).  An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high.
  • The ESXi host (running the virtual machine) experiences 100% CPU utilization.

Cause

This issue occurs due to a memory corruption when the TCP connections are not handled properly in the vShield Endpoint TDI Manager driver, vnetflt.sys.  

Note: By default, the vShield filter is not installed with VMware Tools. However, selecting the driver in a Custom install or Complete install installs the driver.

Resolution

This is a known issue affecting VMware Tools 5.1 and can impact ESXi 5.1, 5.5 and 6.0.

This issue is resolved in:

When you are using vShield Endpoint Protection in your virtual environment, uninstall and reinstall VMware Tools with the Custom or Complete setup option.  

Note: By default, the vShield Endpoint driver is not installed with VMware Tools.

Additional Information

To be alerted when this article is updated, click Subscribe to Document in the Actions box.

See Also

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 20 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 20 Ratings
Actions
KB: