debuggers

WINDBG
1

i was going through windows internals 4th ed.

I am surprised t find that some of the commands of kd and dont work on my
system.

eg. dt nt!_* returns nothing, upon doing a x nt!* i found that it doesnt
export ant symbols by the name of _*

I am using the MS serve to dwnld the symbols, and the test machine is a
win2k pro. arnt these symbols exported ?

also commands like dt_object_header xxxxx dont yield output.

Same is with !idt, !irql and many others.

i am using windbg 6.3

can some one please explain…

2

Yes, these symbols are exported. Make sure WINDBG is downloading the
symbols. Verify that the symbols are being downloaded into the local
directory that you specified for the cache. Also, read the docs on .symopt,
which you can use to turn on debug information for symbol resolution. If it
still doesn’t work, type “.sympath” and post the symbol path that you’re
using.

– arlie

From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Bedanto
Sent: Monday, February 13, 2006 8:25 AM
To: Kernel Debugging Interest List
Subject: [windbg] debuggers

i was going through windows internals 4th ed.

I am surprised t find that some of the commands of kd and dont work on my
system.

eg. dt nt!_* returns nothing, upon doing a x nt!* i found that it doesnt
export ant symbols by the name of _*

I am using the MS serve to dwnld the symbols, and the test machine is a
win2k pro. arnt these symbols exported ?

also commands like dt_object_header xxxxx dont yield output.

Same is with !idt, !irql and many others.

i am using windbg 6.3

can some one please explain…

— You are currently subscribed to windbg as: unknown lmsubst tag argument:
‘’ To unsubscribe send a blank email to xxxxx@lists.osr.com

3

arlie,

sympath is proper, i set it to be dwnloaded at c:\symbols and it does
so!!!

kd> .sympath

Symbol search path is: SRV*c:\symbols*
http://msdl.microsoft.com/download/symbols

I dont know why this problem is happening

4

bedanto,

i might be wrong, but have you got sp4 installed on the debugee?? the
symbols available are for that version of the os.

amitr0

5

amitr0

thanks for the valuable tip. that was teh problem, i hadn’t installed
sp4!!!

bedanto