Does Microsoft Symbol Server have symbols for all Windows fixes?
It seems to me that it doesn’t.
How am I supposed to do debugging of customer kernel crash having
only kernel minidump and no correct symbols?
From WinDbg output:
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for
ntoskrnl.exe
Windows 2000 Kernel Version 2195 (Service Pack 4) MP (4 procs) Free x86
compatible
1: kd> !sym +noisy
noisy mode - symbol prompts on
1: kd> .reload /f
SYMSRV: c:\mss_symbols\ntoskrnl.exe\403D35F91a3f00\ntoskrnl.exe not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/403D35F91a3f00/ntoskr
nl.exe not found
SYMSRV: c:\mss_symbols\ntkrnlpa.exe\403D35F91a3f00\ntkrnlpa.exe not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntkrnlpa.exe/403D35F91a3f00/ntkrnl
pa.exe not found
SYMSRV: c:\mss_symbols\ntkrnlmp.exe\403D35F91a3f00\ntkrnlmp.exe not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntkrnlmp.exe/403D35F91a3f00/ntkrnl
mp.exe not found
SYMSRV: c:\mss_symbols\ntkrpamp.exe\403D35F91a3f00\ntkrpamp.exe not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntkrpamp.exe/403D35F91a3f00/ntkrpa
mp.exe not found
DBGHELP: C:\Program Files\Debugging Tools for Windows\ntoskrnl.exe - file not
found
DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlpa.exe - file not
found
DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlmp.exe - file not
found
DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrpamp.exe - file not
found
DBGENG: ntoskrnl.exe - Image mapping disallowed by non-local path.
Unable to load image ntoskrnl.exe, Win32 error 2
DBGENG: ntoskrnl.exe - Partial symbol image load missing image info
DBGHELP: No header for ntoskrnl.exe. Searching for dbg file
DBGHELP: .\ntoskrnl.dbg - file not found
DBGHELP: .\symbols\exe\ntoskrnl.dbg - path not found
DBGHELP: .\exe\ntoskrnl.dbg - path not found
DBGHELP: ntoskrnl.exe missing debug info. Searching for pdb anyway
DBGHELP: Can’t use symbol server for ntoskrnl.pdb - no header information
available
DBGHELP: ntoskrnl.pdb - file not found
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for
ntoskrnl.exe
DBGHELP: nt - no symbols loaded
1: kd> lm v
start end module name
80400000 805a3f00 nt T (no symbols)
Loaded symbol image file: ntoskrnl.exe
Image path: ntoskrnl.exe
Image name: ntoskrnl.exe
Timestamp: Wed Feb 25 15:55:37 2004 (403D35F9)
CheckSum: 001A7900
ImageSize: 001A3F00
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
The SP4 kernel is much older:
dumpbin.exe /HEADERS ntkrnlmp.exe
3EE650B3 time date stamp Tue Jun 10 14:42:11 2003
Dmitriy Budko, VMware
I am trying to follow up on this w/the IT folks which own the external
symbol. I will let you know what happens.
Thx
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Dmitriy Budko
Sent: Wednesday, July 28, 2004 5:10 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] Does Microsoft Symbol Server have symbols for all
Windows fixes?
Does Microsoft Symbol Server have symbols for all Windows fixes?
It seems to me that it doesn’t.
How am I supposed to do debugging of customer kernel crash having
only kernel minidump and no correct symbols?
From WinDbg output:
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for
ntoskrnl.exe
Windows 2000 Kernel Version 2195 (Service Pack 4) MP (4 procs) Free x86
compatible
1: kd> !sym +noisy
noisy mode - symbol prompts on
1: kd> .reload /f
SYMSRV: c:\mss_symbols\ntoskrnl.exe\403D35F91a3f00\ntoskrnl.exe not
found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/403D35F91a3f00/n
toskr
nl.exe not found
SYMSRV: c:\mss_symbols\ntkrnlpa.exe\403D35F91a3f00\ntkrnlpa.exe not
found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntkrnlpa.exe/403D35F91a3f00/n
tkrnl
pa.exe not found
SYMSRV: c:\mss_symbols\ntkrnlmp.exe\403D35F91a3f00\ntkrnlmp.exe not
found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntkrnlmp.exe/403D35F91a3f00/n
tkrnl
mp.exe not found
SYMSRV: c:\mss_symbols\ntkrpamp.exe\403D35F91a3f00\ntkrpamp.exe not
found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntkrpamp.exe/403D35F91a3f00/n
tkrpa
mp.exe not found
DBGHELP: C:\Program Files\Debugging Tools for Windows\ntoskrnl.exe -
file not
found
DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlpa.exe -
file not
found
DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlmp.exe -
file not
found
DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrpamp.exe -
file not
found
DBGENG: ntoskrnl.exe - Image mapping disallowed by non-local path.
Unable to load image ntoskrnl.exe, Win32 error 2
DBGENG: ntoskrnl.exe - Partial symbol image load missing image info
DBGHELP: No header for ntoskrnl.exe. Searching for dbg file
DBGHELP: .\ntoskrnl.dbg - file not found
DBGHELP: .\symbols\exe\ntoskrnl.dbg - path not found
DBGHELP: .\exe\ntoskrnl.dbg - path not found
DBGHELP: ntoskrnl.exe missing debug info. Searching for pdb anyway
DBGHELP: Can’t use symbol server for ntoskrnl.pdb - no header
information
available
DBGHELP: ntoskrnl.pdb - file not found
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for
ntoskrnl.exe
DBGHELP: nt - no symbols loaded
1: kd> lm v
start end module name
80400000 805a3f00 nt T (no symbols)
Loaded symbol image file: ntoskrnl.exe
Image path: ntoskrnl.exe
Image name: ntoskrnl.exe
Timestamp: Wed Feb 25 15:55:37 2004 (403D35F9)
CheckSum: 001A7900
ImageSize: 001A3F00
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
The SP4 kernel is much older:
dumpbin.exe /HEADERS ntkrnlmp.exe
3EE650B3 time date stamp Tue Jun 10 14:42:11 2003
Dmitriy Budko, VMware
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@windows.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
I’ve hit this same problem with customer minidumps (and some of my own!)
with MS components up at the user DLL level too. It isn’t restricted to a
problem with the kernel components.
Loren
----- Original Message -----
From: “Doron Holan”
To: “Windows System Software Devs Interest List”
Sent: Wednesday, July 28, 2004 5:34 PM
Subject: RE: [ntdev] Does Microsoft Symbol Server have symbols for all
Windows fixes?
> I am trying to follow up on this w/the IT folks which own the external
> symbol. I will let you know what happens.
>
> Thx
> d
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf Of Dmitriy Budko
> Sent: Wednesday, July 28, 2004 5:10 PM
> To: Windows System Software Devs Interest List
> Subject: [ntdev] Does Microsoft Symbol Server have symbols for all
> Windows fixes?
>
> Does Microsoft Symbol Server have symbols for all Windows fixes?
> It seems to me that it doesn’t.
> How am I supposed to do debugging of customer kernel crash having
> only kernel minidump and no correct symbols?
>
>
> >From WinDbg output:
>
> Unable to load image ntoskrnl.exe, Win32 error 2
> WARNING: Unable to verify timestamp for ntoskrnl.exe
> ERROR: Module load completed but symbols could not be loaded for
> ntoskrnl.exe
> Windows 2000 Kernel Version 2195 (Service Pack 4) MP (4 procs) Free x86
> compatible
>
> 1: kd> !sym +noisy
> noisy mode - symbol prompts on
> 1: kd> .reload /f
> SYMSRV: c:\mss_symbols\ntoskrnl.exe\403D35F91a3f00\ntoskrnl.exe not
> found
> SYMSRV:
> http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/403D35F91a3f00/n
> toskr
> nl.exe not found
> SYMSRV: c:\mss_symbols\ntkrnlpa.exe\403D35F91a3f00\ntkrnlpa.exe not
> found
> SYMSRV:
> http://msdl.microsoft.com/download/symbols/ntkrnlpa.exe/403D35F91a3f00/n
> tkrnl
> pa.exe not found
> SYMSRV: c:\mss_symbols\ntkrnlmp.exe\403D35F91a3f00\ntkrnlmp.exe not
> found
> SYMSRV:
> http://msdl.microsoft.com/download/symbols/ntkrnlmp.exe/403D35F91a3f00/n
> tkrnl
> mp.exe not found
> SYMSRV: c:\mss_symbols\ntkrpamp.exe\403D35F91a3f00\ntkrpamp.exe not
> found
> SYMSRV:
> http://msdl.microsoft.com/download/symbols/ntkrpamp.exe/403D35F91a3f00/n
> tkrpa
> mp.exe not found
> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntoskrnl.exe -
> file not
> found
> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlpa.exe -
> file not
> found
> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlmp.exe -
> file not
> found
> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrpamp.exe -
> file not
> found
> DBGENG: ntoskrnl.exe - Image mapping disallowed by non-local path.
> Unable to load image ntoskrnl.exe, Win32 error 2
> DBGENG: ntoskrnl.exe - Partial symbol image load missing image info
> DBGHELP: No header for ntoskrnl.exe. Searching for dbg file
> DBGHELP: .\ntoskrnl.dbg - file not found
> DBGHELP: .\symbols\exe\ntoskrnl.dbg - path not found
> DBGHELP: .\exe\ntoskrnl.dbg - path not found
> DBGHELP: ntoskrnl.exe missing debug info. Searching for pdb anyway
> DBGHELP: Can’t use symbol server for ntoskrnl.pdb - no header
> information
> available
> DBGHELP: ntoskrnl.pdb - file not found
> WARNING: Unable to verify timestamp for ntoskrnl.exe
> ERROR: Module load completed but symbols could not be loaded for
> ntoskrnl.exe
> DBGHELP: nt - no symbols loaded
>
>
> 1: kd> lm v
> start end module name
> 80400000 805a3f00 nt T (no symbols)
> Loaded symbol image file: ntoskrnl.exe
> Image path: ntoskrnl.exe
> Image name: ntoskrnl.exe
> Timestamp: Wed Feb 25 15:55:37 2004 (403D35F9)
> CheckSum: 001A7900
> ImageSize: 001A3F00
> Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
>
> The SP4 kernel is much older:
> dumpbin.exe /HEADERS ntkrnlmp.exe
> 3EE650B3 time date stamp Tue Jun 10 14:42:11 2003
>
>
> Dmitriy Budko, VMware
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@windows.microsoft.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
> —
> Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@earthlink.net
> To unsubscribe send a blank email to xxxxx@lists.osr.com
This problem is long standing. I know it has been reported since about the
same time as the public and private symbol servers were made available
outside microsoft. Maybe Doron will have more luck getting some actual
results.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Loren Wilton
Sent: Wednesday, July 28, 2004 9:49 PM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] Does Microsoft Symbol Server have
symbols for all Windows fixes?
I’ve hit this same problem with customer minidumps (and some
of my own!) with MS components up at the user DLL level too.
It isn’t restricted to a problem with the kernel components.
Loren
----- Original Message -----
From: “Doron Holan”
> To: “Windows System Software Devs Interest List”
> Sent: Wednesday, July 28, 2004 5:34 PM
> Subject: RE: [ntdev] Does Microsoft Symbol Server have
> symbols for all Windows fixes?
>
>
> > I am trying to follow up on this w/the IT folks which own
> the external
> > symbol. I will let you know what happens.
> >
> > Thx
> > d
> >
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of Dmitriy Budko
> > Sent: Wednesday, July 28, 2004 5:10 PM
> > To: Windows System Software Devs Interest List
> > Subject: [ntdev] Does Microsoft Symbol Server have symbols for all
> > Windows fixes?
> >
> > Does Microsoft Symbol Server have symbols for all Windows fixes?
> > It seems to me that it doesn’t.
> > How am I supposed to do debugging of customer kernel crash having
> > only kernel minidump and no correct symbols?
> >
> >
> > >From WinDbg output:
> >
> > Unable to load image ntoskrnl.exe, Win32 error 2
> > WARNING: Unable to verify timestamp for ntoskrnl.exe
> > ERROR: Module load completed but symbols could not be loaded for
> > ntoskrnl.exe
> > Windows 2000 Kernel Version 2195 (Service Pack 4) MP (4
> procs) Free x86
> > compatible
> >
> > 1: kd> !sym +noisy
> > noisy mode - symbol prompts on
> > 1: kd> .reload /f
> > SYMSRV: c:\mss_symbols\ntoskrnl.exe\403D35F91a3f00\ntoskrnl.exe not
> > found
> > SYMSRV:
> >
> http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/403D35
> F91a3f00/n
> > toskr
> > nl.exe not found
> > SYMSRV: c:\mss_symbols\ntkrnlpa.exe\403D35F91a3f00\ntkrnlpa.exe not
> > found
> > SYMSRV:
> >
> http://msdl.microsoft.com/download/symbols/ntkrnlpa.exe/403D35
> F91a3f00/n
> > tkrnl
> > pa.exe not found
> > SYMSRV: c:\mss_symbols\ntkrnlmp.exe\403D35F91a3f00\ntkrnlmp.exe not
> > found
> > SYMSRV:
> >
> http://msdl.microsoft.com/download/symbols/ntkrnlmp.exe/403D35
> F91a3f00/n
> > tkrnl
> > mp.exe not found
> > SYMSRV: c:\mss_symbols\ntkrpamp.exe\403D35F91a3f00\ntkrpamp.exe not
> > found
> > SYMSRV:
> >
> http://msdl.microsoft.com/download/symbols/ntkrpamp.exe/403D35
> F91a3f00/n
> > tkrpa
> > mp.exe not found
> > DBGHELP: C:\Program Files\Debugging Tools for Windows\ntoskrnl.exe -
> > file not
> > found
> > DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlpa.exe -
> > file not
> > found
> > DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlmp.exe -
> > file not
> > found
> > DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrpamp.exe -
> > file not
> > found
> > DBGENG: ntoskrnl.exe - Image mapping disallowed by non-local path.
> > Unable to load image ntoskrnl.exe, Win32 error 2
> > DBGENG: ntoskrnl.exe - Partial symbol image load missing image info
> > DBGHELP: No header for ntoskrnl.exe. Searching for dbg file
> > DBGHELP: .\ntoskrnl.dbg - file not found
> > DBGHELP: .\symbols\exe\ntoskrnl.dbg - path not found
> > DBGHELP: .\exe\ntoskrnl.dbg - path not found
> > DBGHELP: ntoskrnl.exe missing debug info. Searching for pdb anyway
> > DBGHELP: Can’t use symbol server for ntoskrnl.pdb - no header
> > information
> > available
> > DBGHELP: ntoskrnl.pdb - file not found
> > WARNING: Unable to verify timestamp for ntoskrnl.exe
> > ERROR: Module load completed but symbols could not be loaded for
> > ntoskrnl.exe
> > DBGHELP: nt - no symbols loaded
> >
> >
> > 1: kd> lm v
> > start end module name
> > 80400000 805a3f00 nt T (no symbols)
> > Loaded symbol image file: ntoskrnl.exe
> > Image path: ntoskrnl.exe
> > Image name: ntoskrnl.exe
> > Timestamp: Wed Feb 25 15:55:37 2004 (403D35F9)
> > CheckSum: 001A7900
> > ImageSize: 001A3F00
> > Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
> >
> > The SP4 kernel is much older:
> > dumpbin.exe /HEADERS ntkrnlmp.exe
> > 3EE650B3 time date stamp Tue Jun 10 14:42:11 2003
> >
> >
> > Dmitriy Budko, VMware
> >
> >
> >
> > —
> > Questions? First check the Kernel Driver FAQ at
> > http://www.osronline.com/article.cfm?id=256
> >
> > You are currently subscribed to ntdev as:
> xxxxx@windows.microsoft.com
> > To unsubscribe send a blank email to xxxxx@lists.osr.com
> >
> > —
> > Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
> >
> > You are currently subscribed to ntdev as: xxxxx@earthlink.net
> > To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@hollistech.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
I’ve hit this with user mode components as well. I got it to work, by
getting the actual DLL from the client and then using the symstore
program to store the DLL in my symbols tree. Windbg was then happy.
JimA
“Loren Wilton” wrote in news:xxxxx@ntdev:
> I’ve hit this same problem with customer minidumps (and some of my
> own!) with MS components up at the user DLL level too. It isn’t
> restricted to a problem with the kernel components.
>
> Loren
>
> ----- Original Message -----
> From: “Doron Holan”
> To: “Windows System Software Devs Interest List”
> Sent: Wednesday, July 28, 2004 5:34 PM
> Subject: RE: [ntdev] Does Microsoft Symbol Server have symbols for all
> Windows fixes?
>
>
>> I am trying to follow up on this w/the IT folks which own the
>> external symbol. I will let you know what happens.
>>
>> Thx
>> d
>>
>> -----Original Message-----
>> From: xxxxx@lists.osr.com
>> [mailto:xxxxx@lists.osr.com] On Behalf Of Dmitriy Budko
>> Sent: Wednesday, July 28, 2004 5:10 PM
>> To: Windows System Software Devs Interest List
>> Subject: [ntdev] Does Microsoft Symbol Server have symbols for all
>> Windows fixes?
>>
>> Does Microsoft Symbol Server have symbols for all Windows fixes?
>> It seems to me that it doesn’t.
>> How am I supposed to do debugging of customer kernel crash having
>> only kernel minidump and no correct symbols?
>>
>>
>> >From WinDbg output:
>>
>> Unable to load image ntoskrnl.exe, Win32 error 2
>> WARNING: Unable to verify timestamp for ntoskrnl.exe
>> ERROR: Module load completed but symbols could not be loaded for
>> ntoskrnl.exe
>> Windows 2000 Kernel Version 2195 (Service Pack 4) MP (4 procs) Free
>> x86 compatible
>>
>> 1: kd> !sym +noisy
>> noisy mode - symbol prompts on
>> 1: kd> .reload /f
>> SYMSRV: c:\mss_symbols\ntoskrnl.exe\403D35F91a3f00\ntoskrnl.exe not
>> found
>> SYMSRV:
>> http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/403D35F91a3f00
>> /n toskr
>> nl.exe not found
>> SYMSRV: c:\mss_symbols\ntkrnlpa.exe\403D35F91a3f00\ntkrnlpa.exe not
>> found
>> SYMSRV:
>> http://msdl.microsoft.com/download/symbols/ntkrnlpa.exe/403D35F91a3f00
>> /n tkrnl
>> pa.exe not found
>> SYMSRV: c:\mss_symbols\ntkrnlmp.exe\403D35F91a3f00\ntkrnlmp.exe not
>> found
>> SYMSRV:
>> http://msdl.microsoft.com/download/symbols/ntkrnlmp.exe/403D35F91a3f00
>> /n tkrnl
>> mp.exe not found
>> SYMSRV: c:\mss_symbols\ntkrpamp.exe\403D35F91a3f00\ntkrpamp.exe not
>> found
>> SYMSRV:
>> http://msdl.microsoft.com/download/symbols/ntkrpamp.exe/403D35F91a3f00
>> /n tkrpa
>> mp.exe not found
>> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntoskrnl.exe -
>> file not
>> found
>> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlpa.exe -
>> file not
>> found
>> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlmp.exe -
>> file not
>> found
>> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrpamp.exe -
>> file not
>> found
>> DBGENG: ntoskrnl.exe - Image mapping disallowed by non-local path.
>> Unable to load image ntoskrnl.exe, Win32 error 2
>> DBGENG: ntoskrnl.exe - Partial symbol image load missing image info
>> DBGHELP: No header for ntoskrnl.exe. Searching for dbg file
>> DBGHELP: .\ntoskrnl.dbg - file not found
>> DBGHELP: .\symbols\exe\ntoskrnl.dbg - path not found
>> DBGHELP: .\exe\ntoskrnl.dbg - path not found
>> DBGHELP: ntoskrnl.exe missing debug info. Searching for pdb anyway
>> DBGHELP: Can’t use symbol server for ntoskrnl.pdb - no header
>> information
>> available
>> DBGHELP: ntoskrnl.pdb - file not found
>> WARNING: Unable to verify timestamp for ntoskrnl.exe
>> ERROR: Module load completed but symbols could not be loaded for
>> ntoskrnl.exe
>> DBGHELP: nt - no symbols loaded
>>
>>
>> 1: kd> lm v
>> start end module name
>> 80400000 805a3f00 nt T (no symbols)
>> Loaded symbol image file: ntoskrnl.exe
>> Image path: ntoskrnl.exe
>> Image name: ntoskrnl.exe
>> Timestamp: Wed Feb 25 15:55:37 2004 (403D35F9)
>> CheckSum: 001A7900
>> ImageSize: 001A3F00
>> Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
>>
>> The SP4 kernel is much older:
>> dumpbin.exe /HEADERS ntkrnlmp.exe
>> 3EE650B3 time date stamp Tue Jun 10 14:42:11 2003
>>
>>
>> Dmitriy Budko, VMware
>>
>>
>>
>> —
Talking to the folks who own the server, they want to see exactly what
is failing. If you could do the following and send the output of all
the commands to me (xxxxx@microsoft.com), I will give them the output.
!sym noisy
.sympath
(!symfix if your path isn’t set)
.reload /f
(or .reload nt if ntoskrnl.exe is the only one not resolving)
Thx
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of James
Sent: Friday, July 30, 2004 10:52 AM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] Does Microsoft Symbol Server have symbols for all
Windows fixes?
I’ve hit this with user mode components as well. I got it to work, by
getting the actual DLL from the client and then using the symstore
program to store the DLL in my symbols tree. Windbg was then happy.
JimA
“Loren Wilton” wrote in news:xxxxx@ntdev:
> I’ve hit this same problem with customer minidumps (and some of my
> own!) with MS components up at the user DLL level too. It isn’t
> restricted to a problem with the kernel components.
>
> Loren
>
> ----- Original Message -----
> From: “Doron Holan”
> To: “Windows System Software Devs Interest List”
> Sent: Wednesday, July 28, 2004 5:34 PM
> Subject: RE: [ntdev] Does Microsoft Symbol Server have symbols for all
> Windows fixes?
>
>
>> I am trying to follow up on this w/the IT folks which own the
>> external symbol. I will let you know what happens.
>>
>> Thx
>> d
>>
>> -----Original Message-----
>> From: xxxxx@lists.osr.com
>> [mailto:xxxxx@lists.osr.com] On Behalf Of Dmitriy Budko
>> Sent: Wednesday, July 28, 2004 5:10 PM
>> To: Windows System Software Devs Interest List
>> Subject: [ntdev] Does Microsoft Symbol Server have symbols for all
>> Windows fixes?
>>
>> Does Microsoft Symbol Server have symbols for all Windows fixes?
>> It seems to me that it doesn’t.
>> How am I supposed to do debugging of customer kernel crash having
>> only kernel minidump and no correct symbols?
>>
>>
>> >From WinDbg output:
>>
>> Unable to load image ntoskrnl.exe, Win32 error 2
>> WARNING: Unable to verify timestamp for ntoskrnl.exe
>> ERROR: Module load completed but symbols could not be loaded for
>> ntoskrnl.exe
>> Windows 2000 Kernel Version 2195 (Service Pack 4) MP (4 procs) Free
>> x86 compatible
>>
>> 1: kd> !sym +noisy
>> noisy mode - symbol prompts on
>> 1: kd> .reload /f
>> SYMSRV: c:\mss_symbols\ntoskrnl.exe\403D35F91a3f00\ntoskrnl.exe not
>> found
>> SYMSRV:
>>
http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/403D35F91a3f00
>> /n toskr
>> nl.exe not found
>> SYMSRV: c:\mss_symbols\ntkrnlpa.exe\403D35F91a3f00\ntkrnlpa.exe not
>> found
>> SYMSRV:
>>
http://msdl.microsoft.com/download/symbols/ntkrnlpa.exe/403D35F91a3f00
>> /n tkrnl
>> pa.exe not found
>> SYMSRV: c:\mss_symbols\ntkrnlmp.exe\403D35F91a3f00\ntkrnlmp.exe not
>> found
>> SYMSRV:
>>
http://msdl.microsoft.com/download/symbols/ntkrnlmp.exe/403D35F91a3f00
>> /n tkrnl
>> mp.exe not found
>> SYMSRV: c:\mss_symbols\ntkrpamp.exe\403D35F91a3f00\ntkrpamp.exe not
>> found
>> SYMSRV:
>>
http://msdl.microsoft.com/download/symbols/ntkrpamp.exe/403D35F91a3f00
>> /n tkrpa
>> mp.exe not found
>> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntoskrnl.exe -
>> file not
>> found
>> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlpa.exe -
>> file not
>> found
>> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrnlmp.exe -
>> file not
>> found
>> DBGHELP: C:\Program Files\Debugging Tools for Windows\ntkrpamp.exe -
>> file not
>> found
>> DBGENG: ntoskrnl.exe - Image mapping disallowed by non-local path.
>> Unable to load image ntoskrnl.exe, Win32 error 2
>> DBGENG: ntoskrnl.exe - Partial symbol image load missing image info
>> DBGHELP: No header for ntoskrnl.exe. Searching for dbg file
>> DBGHELP: .\ntoskrnl.dbg - file not found
>> DBGHELP: .\symbols\exe\ntoskrnl.dbg - path not found
>> DBGHELP: .\exe\ntoskrnl.dbg - path not found
>> DBGHELP: ntoskrnl.exe missing debug info. Searching for pdb anyway
>> DBGHELP: Can’t use symbol server for ntoskrnl.pdb - no header
>> information
>> available
>> DBGHELP: ntoskrnl.pdb - file not found
>> WARNING: Unable to verify timestamp for ntoskrnl.exe
>> ERROR: Module load completed but symbols could not be loaded for
>> ntoskrnl.exe
>> DBGHELP: nt - no symbols loaded
>>
>>
>> 1: kd> lm v
>> start end module name
>> 80400000 805a3f00 nt T (no symbols)
>> Loaded symbol image file: ntoskrnl.exe
>> Image path: ntoskrnl.exe
>> Image name: ntoskrnl.exe
>> Timestamp: Wed Feb 25 15:55:37 2004 (403D35F9)
>> CheckSum: 001A7900
>> ImageSize: 001A3F00
>> Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
>>
>> The SP4 kernel is much older:
>> dumpbin.exe /HEADERS ntkrnlmp.exe
>> 3EE650B3 time date stamp Tue Jun 10 14:42:11 2003
>>
>>
>> Dmitriy Budko, VMware
>>
>>
>>
>> —
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@windows.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com