njtlxm
驱动牛犊
驱动牛犊
  • 注册日期2002-02-04
  • 最后登录2018-05-29
  • 粉丝0
  • 关注0
  • 积分57分
  • 威望28点
  • 贡献值0点
  • 好评度3点
  • 原创分0分
  • 专家分0分
  • 社区居民
阅读:1392回复:0

windbg不会用,请大家指点

楼主#
更多 发布于:2003-08-26 16:37
我修改了passthru,运行后dump,获得了dump文件后,用windbg分析,具体操作如下:
windbg是最新版本,下载的。symbol是service pack 2,从MSDN的光盘上来安装的。

打开windbg,设置symbol路径为C:\\WINNT\\Symbols;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386\\PASSTHRU.pdb
其中第一个是系统symbol的安装路径,其余两个是我的passthru的路径。
source file路径设置如下:D:\\work\\sourcecode\\firewall\\0825\\passthru
image file路径设置如下:D:\\work\\sourcecode\\firewall\\0825\\passthru,

然后打开dump文件,却无法显示出错的源码,为什么?windbg的提示信息如下:

Symbol search path is: C:\\WINNT\\Symbols;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386\\PASSTHRU.pdb
WARNING: D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386\\PASSTHRU.pdb is not accessible
WARNING: D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386\\PASSTHRU.pdb is not accessible

Microsoft (R) Windows Debugger  Version 6.2.0013.1
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [E:\\temp\\MEMORY.DMP]
Kernel Dump File: Full address space is available

Symbol search path is: C:\\WINNT\\Symbols;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386;D:\\work\\sourcecode\\firewall\\0825\\passthru\\objchk\\i386\\PASSTHRU.pdb
Executable search path is: D:\\work\\sourcecode\\firewall\\0825\\passthru
*** WARNING: symbols timestamp is wrong 0x3d366b8b 0x384d9b17 for ntoskrnl.exe
Windows 2000 Kernel Version 2195 (Service Pack 3) UP Free x86 compatible
Product: Server, suite: Enterprise
Kernel base = 0x804d1000 PsLoadedModuleList = 0x8053e9f0
Debug session time: Tue Aug 26 09:47:43 2003
System Uptime: 0 days 0:37:42.953
*** WARNING: symbols timestamp is wrong 0x3d366b8b 0x384d9b17 for ntoskrnl.exe
Loading Kernel Symbols
.............................................................................................................
Loading unloaded module list
.............
Loading User Symbols
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck D3, {ed2b4000, 2, 0, 804d2b78}

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for NTice.SYS -
*** WARNING: symbols timestamp is wrong 0x3cdaee06 0x38437eba for NDIS.sys
*** ERROR: Module load completed but symbols could not be loaded for dlkfet.sys
*** ERROR: Module load completed but symbols could not be loaded for ousbehci.sys
*** WARNING: symbols timestamp is wrong 0x3c989e09 0x381f8c6e for halaacpi.dll
*** ERROR: Module load completed but symbols could not be loaded for ousb2hub.sys
Probably caused by : NTice.SYS ( NTice+23c10 )

Followup: MachineOwner
---------

游客

返回顶部