Solved

Windbg - how to set up

Posted on 2003-10-22
8
1,980 Views
Last Modified: 2007-12-19
I have been having many bsods on my computer and in an effort to figure out what is wrong, I downloaded and installed Windbg.  However, I cannot find the symbol table, can anyone help me??
0
Comment
Question by:Cosmo439
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 49

Expert Comment

by:sunray_2003
ID: 9598395
Have you looked at this

http://www.winnetmag.com/Web/Article/ArticleID/21217/Web_21217.html

What kind of errors .. giving the error messages would help us

Sunray
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 9598417
0
 

Author Comment

by:Cosmo439
ID: 9598443
sorry,
I'm having errors in win32k.sys, I think.
When the Blue Screen comes up it says the memory address of the error (do you want to know that as well) and also says it's associated with win32k.sys.
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 

Author Comment

by:Cosmo439
ID: 9598472
this crash is not caused by a program that I have written, so I don't know where windows puts it's symbol file
0
 
LVL 49

Expert Comment

by:sunray_2003
ID: 9598689
0
 
LVL 86

Accepted Solution

by:
jkr earned 500 total points
ID: 9599194
Check out http://www.osronline.com/article.cfm?id=221 ("Resolving Symbol Problems in WinDBG ")
0
 

Author Comment

by:Cosmo439
ID: 9599818
Thanks everyone who responded, those other sites are helpful as well, but I was just trying to get the symbol files.  Thanks again.
0
 

Expert Comment

by:mitucker
ID: 12709785
Kernel Mode Debugging
Generally, Kernel Mode debugging requires two machines, a debugger and the debuggee.  The debugger is the system running the debug tools and is most often a crash cart machine or laptop.  The debuggee is the target system experiencing a particular problem that we place under a software debugger to gain more valuable and direct information.

Requirements:
2 Systems (1 in a few special cases to be covered in a later session)
Windows Debugging Tools – http://www.microsoft.com/whdc/devtools/debugging/default.mspx
Symbols – Private preferred, Public acceptable for most cases
Internet Access for WebSymbols (see the above link for more details)
NULL Modem cable
COM Ports available on both systems

The Setup:
First we will begin with the target system or debuggee.  To enable debugging on this machine, the boot.ini must be modified to enter Debug Mode.  This can be accomplished by adding the /debug switch along with the /debugport= and /baudrate= switches, respectively.  Here is an example of an unmodified boot.ini followed by a debug ready boot.ini:

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINNT
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows 2000 Server" /fastdetect

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINNT
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows 2000 Server" /fastdetect /debug /debugport=COM2 /baudrate=57600

After a reboot, the OS Loader Menu will display the second entry above as [Debugging Enabled] next to the OS option.  Selecting this environment will open the debug listeners and place the machine in a debug ready state.  Connecting the NULL modem cable to COM2 on the debuggee will allow it to communicate serially to the debugger.  Outside of this setup, you can alternatively press F8 from the OS Loader Menu and Select ‘Debug Mode’.  This will automatically set the machine into a debug state using COM1 at a baudrate of 19200 (default).

NOTE:  A NULL Modem cable is nothing more than a 9-pin to 9-pin serial cable with pins 2 and 3 connected directly from end to end.  A standard serial cable crosses pins 2 and 3 from end to end.

While it is not required for Kernel Mode Debugging, it is always a good practice to install the Debug Tools and Symbols on the debuggee.  They are required on the debugger.

Next, we need to setup the debugger running on the crash cart or laptop system.  To start, we need to install the latest debug tools locally.  Internally these tools can be found on \\dbg and are updated regularly.  Symbols are generally not part of the debug package, but can be downloaded from http://www.microsoft.com/whdc/devtools/debugging/default.mspx or by using WebSymbols (requires Internet access) from previous link.

Once the tools and symbols are present, connect the NULL modem cable to COM1 on the debugger.  If COM1 is not available, select the next available serial port.  The only thing remaining is the environment setup.  When using WinDbg, all environment options are in the UI.  KD, CDB, and NTSD are command-line debuggers and must use environment variables.  Details of when and where to set these options can be found under the ‘Step-by-Step Kernel Mode Debug Setup’ below.

Step-by-Step Kernel Mode Setup:

Target Machine (Debuggee)
1.      Install Debug Tools
2.      Install Symbols (not required)
3.      Modify Boot.ini
4.      Connect NULL Modem Cable to the specified COM port
a.      Move to Step 1 under Source Machine
5.      Reboot
6.      Select the Debugger Enabled OS Option

Source Machine (Debugger)
1.      Install Debug Tools
2.      Install Symbols or setup for WebSymbols
3.      Connect NULL Modem Cable to the desired COM port
4.      Open a CMD Window
5.      Set environment variables
a.      WinDbg Users: Use File -> Kernel Debug and Symbol File Path options.  The settings for Kernel Debug are relative to the local machine, not the debuggee.
b.      KD Users:  Set the following environment variables (individually or via a script, e.g., .cmd or .bat file).  Other environment variables exist and will be covered in later sessions as needed.

set _NT_SYMBOL_PATH=[Drive:][Path]
set _NT_DEBUG_PORT=com[1|2|...]
set _NT_DEBUG_BAUD_RATE=baud rate

6.      Connect the debugger by clicking OK in WinDbg when in the Kernel Debug options or by running kd.exe [options] from a command-line
a.      Move to Step 5 under Target Machine
7.      Verify the connection by looking for debug spew to the debugger

Web Symbols

SRV*(local repository)*http://msdl.microsoft.com/download/symbols
Example:
SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Recovering backup .Qic files on Windows 7 6 2,334
Making a spare domain pc 12 329
Locking down a taskpad 1 185
VMware ESXi 6:  Migrate  Windows 2000 Server guest from ESXi 4.1 5 825
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
By reading this blog, MSPs will gain insight into how to improve communications with their clients as well as establish a more profitable business.
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question