[OT] Process Monitor does not load Symbols from Windows Symbol Server for Windows 2000 Pro

Kerem Gümrükcü

unread,

Mar 17, 2008, 9:48:45 AM3/17/08

to

Hi,

i run the latest procmon from sysinternals on a windows 2000 pro up2date
system. I want to see some callstack information with the procmon on a
appliction i am testing. I could use a debugger for this, but i want to run
it without a debugger. For whatever reason the procmon does not show
symbol information. I use the ms symbol server with this path:
C:\Programme\Debugging Tools for Windows\Symbols*
http://msdl.microsoft.com/download/symbols

It works fine for my Debugging Tools from MS and other Debuggers, but
procmon does neither load nor download any symbols from the server.
The ms WinDbg does on the system but procmon not. What could cause
this situation?

Procmon says "Loading Symbol Module for xyz.dll/sys, etc,.." and then
nothing happens. I still only can see the module and the offset address, but
no function name and address, as said only address,...

System is Windows 2000 Pro Up2Date, procmon is v1.26

Regards

K.

--
-----------------------
Beste Grüsse / Best regards / Votre bien devoue
Kerem Gümrükcü
Microsoft Live Space: http://kerem-g.spaces.live.com/
Latest Open-Source Projects: http://entwicklung.junetz.de
-----------------------
"This reply is provided as is, without warranty express or implied."

Maxim S. Shatskih

unread,

Mar 17, 2008, 11:42:24 AM3/17/08

to

Are you sure Process Monitor supports the Symbol Server at all?

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
ma...@storagecraft.com
http://www.storagecraft.com

"Kerem GЭmrЭkcЭ" <kare...@hotmail.com> wrote in message
news:ucqkvWDi...@TK2MSFTNGP05.phx.gbl...

> Hi,
>
> i run the latest procmon from sysinternals on a windows 2000 pro up2date
> system. I want to see some callstack information with the procmon on a
> appliction i am testing. I could use a debugger for this, but i want to run
> it without a debugger. For whatever reason the procmon does not show
> symbol information. I use the ms symbol server with this path:
> C:\Programme\Debugging Tools for Windows\Symbols*
> http://msdl.microsoft.com/download/symbols
>
> It works fine for my Debugging Tools from MS and other Debuggers, but
> procmon does neither load nor download any symbols from the server.
> The ms WinDbg does on the system but procmon not. What could cause
> this situation?
>
> Procmon says "Loading Symbol Module for xyz.dll/sys, etc,.." and then
> nothing happens. I still only can see the module and the offset address, but
> no function name and address, as said only address,...
>
> System is Windows 2000 Pro Up2Date, procmon is v1.26
>
> Regards
>
> K.
>
> --
> -----------------------

> Beste GrЭsse / Best regards / Votre bien devoue
> Kerem GЭmrЭkcЭ

Kerem Gumrukcu

unread,

Mar 17, 2008, 11:58:08 AM3/17/08

to

Hi Maxim,

>Are you sure Process Monitor supports the Symbol Server at all?

Verified, yes it does! Very Strange is, that Process Monitor does also
not show UserMode Frames and only Kernel Mode Frames. Windows
is a 32 bit windows (Windows 2000 SP4 up2date professional). I will
Monitor the Connection to the Symbol Server with a Network Monitor,
to see, what happens there, sonce there is some sort of connection,...

If you have any ideas, you are welcome to say something,...

Regards

K.

--
-----------------------
Beste Grusse / Best regards / Votre bien devoue
Kerem Gumrukcu

Microsoft Live Space: http://kerem-g.spaces.live.com/
Latest Open-Source Projects: http://entwicklung.junetz.de
-----------------------
"This reply is provided as is, without warranty express or implied."

"Maxim S. Shatskih" <ma...@storagecraft.com> schrieb im Newsbeitrag
news:ufExAWE...@TK2MSFTNGP05.phx.gbl...

> Are you sure Process Monitor supports the Symbol Server at all?
>
> --
> Maxim Shatskih, Windows DDK MVP
> StorageCraft Corporation
> ma...@storagecraft.com
> http://www.storagecraft.com
>

> "Kerem Gümrükcü" <kare...@hotmail.com> wrote in message

> news:ucqkvWDi...@TK2MSFTNGP05.phx.gbl...
>> Hi,
>>
>> i run the latest procmon from sysinternals on a windows 2000 pro up2date
>> system. I want to see some callstack information with the procmon on a
>> appliction i am testing. I could use a debugger for this, but i want to
>> run
>> it without a debugger. For whatever reason the procmon does not show
>> symbol information. I use the ms symbol server with this path:
>> C:\Programme\Debugging Tools for Windows\Symbols*
>> http://msdl.microsoft.com/download/symbols
>>
>> It works fine for my Debugging Tools from MS and other Debuggers, but
>> procmon does neither load nor download any symbols from the server.
>> The ms WinDbg does on the system but procmon not. What could cause
>> this situation?
>>
>> Procmon says "Loading Symbol Module for xyz.dll/sys, etc,.." and then
>> nothing happens. I still only can see the module and the offset address,
>> but
>> no function name and address, as said only address,...
>>
>> System is Windows 2000 Pro Up2Date, procmon is v1.26
>>
>> Regards
>>
>> K.
>>
>> --
>> -----------------------

>> Beste Grüsse / Best regards / Votre bien devoue
>> Kerem Gümrükcü

Kerem Gumrukcu

unread,

Mar 17, 2008, 12:35:34 PM3/17/08

to

This is what i get when analyzing the data stream
from my NIC and the procmon executable:

----------------------------------------------------------------------------
--
GET /download/symbols/fltmgr.sys/44EAAFCE215c0/fltmgr.sys HTTP/1.1

User-Agent: Microsoft-Symbol-Server/6.6.0007.5

Host: msdl.microsoft.com

Connection: Keep-Alive

Cache-Control: no-cache

HTTP/1.1 404 Not Found

Content-Length: 1635

Content-Type: text/html

Server: Microsoft-IIS/6.0

X-Powered-By: ASP.NET

Date: Mon, 17 Mar 2008 16:38:54 GMT

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
"http://www.w3.org/TR/html4/strict.dtd">

<HTML><HEAD><TITLE>The page cannot be found</TITLE>

BODY { font: 8pt/12pt verdana }

H1 { font: 13pt/15pt verdana }

H2 { font: 8pt/12pt verdana }

A:link { color: red }

A:visited { color: maroon }

</STYLE>

</HEAD><BODY><TABLE width=500 border=0 cellspacing=10><TR><TD>

<h1>The page cannot be found</h1>

The page you are looking for might have been removed, had its name changed,
or is temporarily unavailable.

<hr>

<p>Please try the following:</p>

<ul>

<li>Make sure that the Web site address displayed in the address bar of your
browser is spelled and formatted correctly.</li>

<li>If you reached this page by clicking a link, contact

the Web site administrator to alert them that the link is incorrectly
formatted.

</li>

<li>Click the <a href="javascript:history.back(1)">Back</a> button to try
another link.</li>

</ul>

<h2>HTTP Error 404 - File or directory not found.<br>Internet Information
Services (IIS)</h2>

<hr>

<p>Technical Information (for support personnel)</p>

<ul>

<li>Go to <a href="http://go.microsoft.com/fwlink/?linkid=8180">Microsoft
Product Support Services</a> and perform a title search for the words
<b>HTTP</b> and <b>404</b>.</li>

<li>Open <b>IIS Help</b>, which is accessible in IIS Manager (inetmgr),

and search for topics titled <b>Web Site Setup</b>, <b>Common
Administrative Tasks</b>, and <b>About Custom Error Messages</b>.</li>

</ul>

</TD></TR></TABLE></BODY></HTML>

----------------------------------------------------------------------------
--

Maybe the Symbols for Windows 2000 are no longer available over symbol
server. If this is the case, why they are still available for download? Only
if
this is the case,...

I mean it is not that important, but i wanted to try my app on
windows 2000 and backtrack its functionality with procmon.

Regards

K.

-----------------------
Beste Grusse / Best regards / Votre bien devoue
Kerem Gumrukcu

David Craig

unread,

Mar 17, 2008, 2:38:13 PM3/17/08

to

Try microsoft.public.winternals since that is the newsgroup for Process
Monitor. This does not relate to the win32 subsystem portion of Windows.
If no response there, try the windbg newsgroups at Microsoft and OSR.

"Kerem Gumrukcu" <kare...@hotmail.com> wrote in message
news:%23glQz7E...@TK2MSFTNGP02.phx.gbl...