Fwd: RE: Kernel debug in Windbg using tcp - is it possible?

NTDEV
61

debugger marup language

for a start you can check out dml.doc in windbg folder

if you say in ui
.prefer_dml 1
and do a lm you will see the output with links

i did a uf with dml enabled it shows all referanced block in a html
linked blocks with referances

but there doesnt seem to be a intiutive way to use it
lots of links have exec command with tags fd0 fd1 etc they dont seem
to be documented

i was actually trying to get xreffed disassembly blocks when i tried using it
but its still in its infancy it seems

On 1/22/07, Michal Vodicka wrote:
> > ----------
> > From: xxxxx@lists.osr.com[SMTP:xxxxx@lists.osr.com] on behalf of Martin O’Brien[SMTP:xxxxx@evitechnology.com]
> > Reply To: Windows System Software Devs Interest List
> > Sent: Sunday, January 21, 2007 2:03 PM
> > To: Windows System Software Devs Interest List
> > Subject: Re:[ntdev] Kernel debug in Windbg using tcp - is it possible?
> >
> > I like using the (relatively) new DML feature of DbgEng with traces, as
> > it can be used to massively cut back on default debug output without
> > recompiling, and still provide the same information with only a click or
> > two.
> >
> Never heard about it – can you elaborate? Thanks.
>
> Best regards,
>
> Michal Vodicka
> UPEK, Inc.
> [xxxxx@upek.com, http://www.upek.com]
>
>
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256
>
> To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
>

62

MICHAL:

It is documented in DML.DOC, under the root of a 6.6.7.5 (perhaps
earlier versions; I don’t know) installation. Basically, it is just a
very simplified (totals something like five pages of documentation)
version of HTML that can be used with some of the output methods of
DbgEng to allow embedding “links” that, when clicked, either undergo
simple text replacement, or can be used to run commands. I make fairly
regular use of a very simple form of the later to do things like dump
the embedded members of object only when selected to cut down on spew.
Basically, it produces a link that will run any command or extension
that you wish when the link is clicked. When I first read about DML, I
thought it seemed not too terribly useful, but I have started to use it
quite a bit over time, because it cuts way back on spew, is easy, can be
used from most output methods (including KdPrint), and causes no
problems is one wishes to suppress it. I’m not religious about it, but
I do use it a fair amount, because, like you, I do very close to all of
my non-re work with traces, and the only thing I hate about that is the
spew it can create.

mm

>> xxxxx@upek.com 2007-01-22 13:10 >>>

From:
xxxxx@lists.osr.com[SMTP:xxxxx@lists.osr.com]
on behalf of Martin O’Brien[SMTP:xxxxx@evitechnology.com]
Reply To: Windows System Software Devs Interest List
Sent: Sunday, January 21, 2007 2:03 PM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] Kernel debug in Windbg using tcp - is it
possible?

I like using the (relatively) new DML feature of DbgEng with traces,
as
it can be used to massively cut back on default debug output without
recompiling, and still provide the same information with only a click
or
two.

Never heard about it – can you elaborate? Thanks.

Best regards,

Michal Vodicka
UPEK, Inc.
[xxxxx@upek.com, http://www.upek.com]

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

63

Martin,

thanks, I quickly read the dml.doc but I’m still not quite sure if I understand correctly. Could you provide a simple example which allows you to reduce output and allow supressing?

If you provide a link which’d execute command, it’d work with current state of memory, rigth? So if you print out a command with a link, link won’t display the state in the time which it was printed but the current state when execution was stopped.

BTW, for quick orientation in traces I use DebugView highlight filters (all 20 :). I guess DTM could be used similar way but probably only with colors directly hardcoded in traces.

Best regards,

Michal Vodicka
UPEK, Inc.
[xxxxx@upek.com, http://www.upek.com]

From: xxxxx@lists.osr.com[SMTP:xxxxx@lists.osr.com] on behalf of Martin O’Brien[SMTP:xxxxx@evitechnology.com]
Reply To: Windows System Software Devs Interest List
Sent: Monday, January 22, 2007 7:53 PM
To: Windows System Software Devs Interest List
Subject: RE: [ntdev] Kernel debug in Windbg using tcp - is it possible?

MICHAL:

It is documented in DML.DOC, under the root of a 6.6.7.5 (perhaps
earlier versions; I don’t know) installation. Basically, it is just a
very simplified (totals something like five pages of documentation)
version of HTML that can be used with some of the output methods of
DbgEng to allow embedding “links” that, when clicked, either undergo
simple text replacement, or can be used to run commands. I make fairly
regular use of a very simple form of the later to do things like dump
the embedded members of object only when selected to cut down on spew.
Basically, it produces a link that will run any command or extension
that you wish when the link is clicked. When I first read about DML, I
thought it seemed not too terribly useful, but I have started to use it
quite a bit over time, because it cuts way back on spew, is easy, can be
used from most output methods (including KdPrint), and causes no
problems is one wishes to suppress it. I’m not religious about it, but
I do use it a fair amount, because, like you, I do very close to all of
my non-re work with traces, and the only thing I hate about that is the
spew it can create.

mm

>>> xxxxx@upek.com 2007-01-22 13:10 >>>
> ----------
> From:
xxxxx@lists.osr.com[SMTP:xxxxx@lists.osr.com]
on behalf of Martin O’Brien[SMTP:xxxxx@evitechnology.com]
> Reply To: Windows System Software Devs Interest List
> Sent: Sunday, January 21, 2007 2:03 PM
> To: Windows System Software Devs Interest List
> Subject: Re:[ntdev] Kernel debug in Windbg using tcp - is it
possible?
>
> I like using the (relatively) new DML feature of DbgEng with traces,
as
> it can be used to massively cut back on default debug output without
> recompiling, and still provide the same information with only a click
or
> two.
>
Never heard about it – can you elaborate? Thanks.

Best regards,

Michal Vodicka
UPEK, Inc.
[xxxxx@upek.com, http://www.upek.com]

Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer

Questions? First check the Kernel Driver FAQ at http://www.osronline.com/article.cfm?id=256

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer