Hi All,
I am analyzing a crash dump and the windbg is failed
to load the symbols for ntoskrnl.exe. The error I am
getting is
SYMSRV:http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/40BC4E411a5540/ntoskrnl.exe
not found
DBGHELP: F:\Program Files\Debugging Tools for
Windows\ntoskrnl.exe - file not found
Some other symbols are downloaded to my local machine
from the website.So I think there is no problem with
the connection to the server. Only this particualar
time stamp of ntoskrnl is missing. How I can fix this
problem…
From where I can download this symbol…
Thanks in advance
Suja.
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
http://promotions.yahoo.com/new_mail
Perhaps you have a beta build. What does the version (or .version, I
can’t remember right now) say?
d
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of SUJA JAMES
Sent: Thursday, July 22, 2004 10:35 PM
To: Windows System Software Devs Interest List
Subject: [ntdev] ntoskrnl.exe symbol TIMESTAMP 40bc4e41
Hi All,
I am analyzing a crash dump and the windbg is failed
to load the symbols for ntoskrnl.exe. The error I am
getting is
SYMSRV:http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/40BC4E411
a5540/ntoskrnl.exe
not found
DBGHELP: F:\Program Files\Debugging Tools for
Windows\ntoskrnl.exe - file not found
Some other symbols are downloaded to my local machine
from the website.So I think there is no problem with
the connection to the server. Only this particualar
time stamp of ntoskrnl is missing. How I can fix this
problem…
From where I can download this symbol…
Thanks in advance
Suja.
Do you Yahoo!?
New and Improved Yahoo! Mail - Send 10MB messages!
http://promotions.yahoo.com/new_mail
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
You are currently subscribed to ntdev as: xxxxx@windows.microsoft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com
Hi Doron
Thanks for this quick response…
I am not cleat abt which version you are poiting…
Anyway my versions are
- Windbg version is WinDbg 6.3.0017.0
2)Then when I did a .formats 40bc4e41 in Windbg, I got
the information like
kd> .formats 40bc4e41
Evaluate expression:
Hex: 40bc4e41
Decimal: 1086082625
Octal: 10057047101
Binary: 01000000 10111100 01001110 01000001
Chars: @.NA
Time: Tue Jun 01 15:07:05 2004
Float: low 5.88455 high 0
Double: 5.36596e-315
3)Windows version I am getting from WinDbg is
Windows 2000 Kernel Version 2195 (Service Pack 4) UP
Free x86 compatible
The bluescreen occured at customer site and I will for
the file version of ntoskrnl.exe soon, if needed…
Please let me know whether this helps…
Regards
Suja
— Doron Holan wrote:
> Perhaps you have a beta build. What does the
> version (or .version, I
> can’t remember right now) say?
>
> d
>
> -----Original Message-----
> From: xxxxx@lists.osr.com
> [mailto:xxxxx@lists.osr.com] On Behalf
> Of SUJA JAMES
> Sent: Thursday, July 22, 2004 10:35 PM
> To: Windows System Software Devs Interest List
> Subject: [ntdev] ntoskrnl.exe symbol TIMESTAMP
> 40bc4e41
>
> Hi All,
>
> I am analyzing a crash dump and the windbg is failed
> to load the symbols for ntoskrnl.exe. The error I am
> getting is
>
>
SYMSRV:http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/40BC4E411
> a5540/ntoskrnl.exe
> not found
> DBGHELP: F:\Program Files\Debugging Tools for
> Windows\ntoskrnl.exe - file not found
>
> Some other symbols are downloaded to my local
> machine
> from the website.So I think there is no problem with
> the connection to the server. Only this particualar
> time stamp of ntoskrnl is missing. How I can fix
> this
> problem…
>
> From where I can download this symbol…
>
> Thanks in advance
> Suja.
>
>
>
>
>
>
> Do you Yahoo!?
> New and Improved Yahoo! Mail - Send 10MB messages!
> http://promotions.yahoo.com/new_mail
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as:
> xxxxx@windows.microsoft.com
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as:
> xxxxx@yahoo.com
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail
Hi Doron,
I am attaching the version information of
ntoskrnl.exe.
FileVersion : 5.0.2195.6902
Created: Tuesday, June 01, 2004, 6:37:06 PM
Regards
Suja.
— SUJA JAMES wrote:
> Hi Doron
> Thanks for this quick response…
> I am not cleat abt which version you are poiting…
> Anyway my versions are
> 1) Windbg version is WinDbg 6.3.0017.0
> 2)Then when I did a .formats 40bc4e41 in Windbg, I
> got
> the information like
>
> kd> .formats 40bc4e41
> Evaluate expression:
> Hex: 40bc4e41
> Decimal: 1086082625
> Octal: 10057047101
> Binary: 01000000 10111100 01001110 01000001
> Chars: @.NA
> Time: Tue Jun 01 15:07:05 2004
> Float: low 5.88455 high 0
> Double: 5.36596e-315
>
> 3)Windows version I am getting from WinDbg is
> Windows 2000 Kernel Version 2195 (Service Pack 4) UP
> Free x86 compatible
>
> The bluescreen occured at customer site and I will
> for
> the file version of ntoskrnl.exe soon, if needed…
>
> Please let me know whether this helps…
>
>
> Regards
> Suja
>
>
> — Doron Holan
> wrote:
> > Perhaps you have a beta build. What does the
> > version (or .version, I
> > can’t remember right now) say?
> >
> > d
> >
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On
> Behalf
> > Of SUJA JAMES
> > Sent: Thursday, July 22, 2004 10:35 PM
> > To: Windows System Software Devs Interest List
> > Subject: [ntdev] ntoskrnl.exe symbol TIMESTAMP
> > 40bc4e41
> >
> > Hi All,
> >
> > I am analyzing a crash dump and the windbg is
> failed
> > to load the symbols for ntoskrnl.exe. The error I
> am
> > getting is
> >
> >
>
SYMSRV:http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/40BC4E411
> > a5540/ntoskrnl.exe
> > not found
> > DBGHELP: F:\Program Files\Debugging Tools for
> > Windows\ntoskrnl.exe - file not found
> >
> > Some other symbols are downloaded to my local
> > machine
> > from the website.So I think there is no problem
> with
> > the connection to the server. Only this
> particualar
> > time stamp of ntoskrnl is missing. How I can fix
> > this
> > problem…
> >
> > From where I can download this symbol…
> >
> > Thanks in advance
> > Suja.
> >
> >
> >
> >
> >
> >
> > Do you Yahoo!?
> > New and Improved Yahoo! Mail - Send 10MB messages!
> > http://promotions.yahoo.com/new_mail
> >
> > —
> > Questions? First check the Kernel Driver FAQ at
> > http://www.osronline.com/article.cfm?id=256
> >
> > You are currently subscribed to ntdev as:
> > xxxxx@windows.microsoft.com
> > To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
> > —
> > Questions? First check the Kernel Driver FAQ at
> > http://www.osronline.com/article.cfm?id=256
> >
> > You are currently subscribed to ntdev as:
> > xxxxx@yahoo.com
> > To unsubscribe send a blank email to
> > xxxxx@lists.osr.com
> >
>
>
>
>
>
> Do you Yahoo!?
> Yahoo! Mail - 50x more storage than other providers!
> http://promotions.yahoo.com/new_mail
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as:
> xxxxx@yahoo.com
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail
SUJA JAMES wrote:
Hi Doron,
I am attaching the version information of
ntoskrnl.exe.
FileVersion : 5.0.2195.6902
Created: Tuesday, June 01, 2004, 6:37:06 PM
Regards
Suja.
As you probably noticed from the email reply you received… no
attachments are allowed to postings on this list.
Just too many viruses… sorry for the inconvenience,
Peter
OSR
I Googled (“5.0.2195.6902” “ntoskrnl.exe”), and came up with a few hits.
First, your NTOSKRNL seems to come from Security Bulletin MS04-011
(Q835732), so it seems odd that it wouldn’t be on the symbol server. But I
did noticed that Q324446 does have an even newer version (5.0.2195.6942), so
you could try that one since maybe it will be on the symbol server if the
customer can reproduce the issue with that hotfix.
Hi
I havn’t attached any file with my mail…
> I am attaching the version information of
I just meant I am copy/pasting the version
information…
Thanks
Suja.
— PeterGV wrote:
> SUJA JAMES wrote:
>
> > Hi Doron,
> > I am attaching the version information of
> > ntoskrnl.exe.
> >
> > FileVersion : 5.0.2195.6902
> > Created: Tuesday, June 01, 2004, 6:37:06 PM
> >
> > Regards
> > Suja.
> >
>
> As you probably noticed from the email reply you
> received… no
> attachments are allowed to postings on this list.
>
> Just too many viruses… sorry for the
> inconvenience,
>
> Peter
> OSR
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as:
> xxxxx@yahoo.com
> To unsubscribe send a blank email to
> xxxxx@lists.osr.com
>
__________________________________
Do you Yahoo!?
Y! Messenger - Communicate in real time. Download now.
http://messenger.yahoo.com