why windbg offer cannot find kernel symbol.

WINDBG
1

Dear all
I offen found the following things, even if I download the correct symbols from Microsoft connect website. why? thank you very much. Because I cannot find !devobj if kernel symbol isn’t correct.
thank you very much.

*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrpamp.exe -
0: kd> .sympath
Symbol search path is: C:\Windows\Symbols\win7_7201;srv*c:\Windows\Symbols\WebSymbols*http://msdl.microsoft.com/download/symbols
0: kd> !lmi nt
Loaded Module Info: [nt]
Module: ntkrpamp
Base Address: 8284b000
Image Name: ntkrpamp.exe
Machine Type: 332 (I386)
Time Stamp: 4a2480e6 Tue Jun 02 09:31:18 2009
Size: 40f000
CheckSum: 3cc649
Characteristics: 122
Debug Data Dirs: Type Size VA Pointer
CODEVIEW 25, 11c85c, 11c05c RSDS - GUID: {A4827D86-3642-48E0-A03E-93057B146B53}
Age: 2, Pdb: ntkrpamp.pdb
CLSID 4, 11c858, 11c058 [Data not mapped]
Image Type: MEMORY - Image read successfully from loaded memory.
Symbol Type: EXPORT - PDB not found
Load Report: export symbols

2

I found we cannot set Microsoft symbol server if we have downloaded the correct symbols.
maybe sometimes , windbg will use the exported symbols (not the correct symbol)at first.

3

You should post the output of an attempt to load symbols with verbose output enabled. To do that, you can use the following commands:

!sym noisy
…reload /f nt

  • S

-----Original Message-----
From: xxxxx@gmail.com
Sent: Thursday, June 18, 2009 17:59
To: Kernel Debugging Interest List
Subject: [windbg] why windbg offer cannot find kernel symbol.

Dear all
I offen found the following things, even if I download the correct symbols from Microsoft connect website. why? thank you very much. Because I cannot find !devobj if kernel symbol isn’t correct.
thank you very much.

*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntkrpamp.exe -
0: kd> .sympath
Symbol search path is: C:\Windows\Symbols\win7_7201;srvc:\Windows\Symbols\WebSymbolshttp://msdl.microsoft.com/download/symbols
0: kd> !lmi nt
Loaded Module Info: [nt]
Module: ntkrpamp
Base Address: 8284b000
Image Name: ntkrpamp.exe
Machine Type: 332 (I386)
Time Stamp: 4a2480e6 Tue Jun 02 09:31:18 2009
Size: 40f000
CheckSum: 3cc649
Characteristics: 122
Debug Data Dirs: Type Size VA Pointer
CODEVIEW 25, 11c85c, 11c05c RSDS - GUID: {A4827D86-3642-48E0-A03E-93057B146B53}
Age: 2, Pdb: ntkrpamp.pdb
CLSID 4, 11c858, 11c058 [Data not mapped]
Image Type: MEMORY - Image read successfully from loaded memory.
Symbol Type: EXPORT - PDB not found
Load Report: export symbols

—
WINDBG is sponsored by OSR

For our schedule of WDF, WDM, debugging and other seminars visit:
http://www.osr.com/seminars

To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer

4

Dear Ken Johnson
it works. thank you very much.

Denny