Unable to see logged IRPs

WINDBG
1

Hello,

I have enabled IRP logging from verifier.exe on Windows 7 target. When I try to list the logged IRPs, I get the following output:

0: kd> !verifier 0x100
Unable to find structure nt!_IOV_IRP_TRACE size

My verifier settings:

0: kd> !verifier

Verify Level f3b … enabled options are:
Special pool
Special irql
All pool allocations checked on unload
Io subsystem checking enabled
Deadlock detection enabled
Security checks enabled
Force pending I/O requests
IRP Logging
Miscellaneous checks enabled

I have no idea what is the reason of this and I don’t know how to fix it.
Could you please give me some advice?
Thank you.

Lenka

2

>0: kd> !verifier 0x100

Unable to find structure nt!_IOV_IRP_TRACE size

Looks like there’s a type missing from the public PDBs, I don’t have this
type in the PDB for my workstation either. Here’s the version info for my
nt:

Timestamp: Sat Jun 19 00:16:41 2010 (4C1C44A9)
CheckSum: 005489D7
ImageSize: 005DC000
File version: 6.1.7600.16617
Product version: 6.1.7600.16617
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 6.1.7600.16617
FileVersion: 6.1.7600.16617 (win7_gdr.100618-1621)
FileDescription: NT Kernel & System
LegalCopyright: © Microsoft Corporation. All rights reserved.

-scott

–
Scott Noone
Consulting Associate
OSR Open Systems Resources, Inc.
http://www.osronline.com

Hope to see you at the next OSR kernel debugging class February 14th in
Columbia, MD!

3

Thank you for your quick reply.

My nt version:

Timestamp: Sat Feb 27 08:33:35 2010 (4B88CACF)
CheckSum: 003C7867
ImageSize: 00410000
File version: 6.1.7600.16539
Product version: 6.1.7600.16539
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft? Windows? Operating System
InternalName: ntkrpamp.exe
OriginalFilename: ntkrpamp.exe
ProductVersion: 6.1.7600.16539
FileVersion: 6.1.7600.16539 (win7_gdr.100226-1909)
FileDescription: NT Kernel & System
LegalCopyright: ? Microsoft Corporation. All rights reserved.