Analyzing Memory Dumps

NTDEV
1

I’ve already posted th message regarding dumps analyzing and received an
answer to use WinDbg. I got another answer though. My server periodically
falling with bugcheck. I want to find out which driver makes this fault,
but I don’t want to install any DDK and symbols onto my server and run
WinDbg (I got an experience when I’ve entered the kernel into debug state
and WinDbg threw an exception and left the kernel in the debug state).

The question is: can I use the memory dump from server on computer with
win2k pro installed, and should I install win2k symbols to analuze this
savedump?

/regards/

2

Yes, you can. Use a fast internet connection and use the Microsoft symbol
server. The other solution is to attach a host computer running W2K Pro to
the server. Duplicate the line in the boot.ini and on the second one add
/debugport=com2 /baudrate=115200. I am assuming com2, so change as needed.
This will prevent a normal restart of the server from bringing up the kernel
debugger. You will have to reboot and select the debugging session on each
boot, so set the time to 10 seconds or a little longer.

Use Hyper Terminal on both systems to verify that the serial connection is
working. Start up windbg and then reboot the server. As it starts it will
obtain needed symbols from the symbol server and you will be able to see
where any crash occurs.

----- Original Message -----
From: “Andrew Sloven”
To: “NT Developers Interest List”
Sent: Thursday, September 12, 2002 8:59 PM
Subject: [ntdev] Analyzing Memory Dumps

> I’ve already posted th message regarding dumps analyzing and received an
> answer to use WinDbg. I got another answer though. My server periodically
> falling with bugcheck. I want to find out which driver makes this fault,
> but I don’t want to install any DDK and symbols onto my server and run
> WinDbg (I got an experience when I’ve entered the kernel into debug state
> and WinDbg threw an exception and left the kernel in the debug state).
>
> The question is: can I use the memory dump from server on computer with
> win2k pro installed, and should I install win2k symbols to analuze this
> savedump?
>
> /regards/
>
> —
> You are currently subscribed to ntdev as: xxxxx@yoshimuni.com
> To unsubscribe send a blank email to %%email.unsub%%
>