How to use poolmon?

Lumia925

Reputable
Oct 16, 2014
403
1
4,860
My "Paged Pool" is about 800MB after 20 hours- isn't this too high?
Anyway, I have downloaded the Windows Driver Kit, and when I run PoolMon, this is what I get:
Captureg.jpg

This makes no sense. I mean I need the name of the driver that's using the most "paged pool", how do I find that?
Thanks.
 
Someone please suggest a solution.
I have read almost a whole book worth of information on the Microsoft Technet website, and pretty much learned to use WDK, PoolMon and RamMap.
The culprit looks like Windows Cache Manager itself.
MmSt is the pool tag for Windows Cache Manager, as I keep the computer on, and use it, Windows caches all my files to the RAM, superfetch Proactively caches files that I'm not using as well, and I'm okay with caching, it speeds up the computer.
The problem is, with every mapped file, MmSt consumes some Paged Pool. Over a period of 24 hours, the cache manager will populate and release cache as and when required, but MmSt will NOT release the associated Paged Pool, it keeps growing and growing and hits almost 1GB after a day if I don't restart.
How can I solve this? It's not a 3rd party kernel driver, it's Windows Memory Manager itself, and looks like it's leaking kernel memory in paged pool! Please help... Or shall I start a new thread? I'm not sure as this isn't about using PoolMon, I have now learned how to use it.
It's more about solving the MmSt memory leak..