MS Symbol Server is missing symbols for ntoskrnl.exe 5.0.2195.7133
gavery
Can MS add the missing symbols?
sample output from windbg:
kd> lmvm nt ; vertarget
start end module name
80400000 8059cd00 nt T (no symbols)
Loaded symbol image file: ntoskrnl.exe
Image path: ntoskrnl.exe
Image name: ntoskrnl.exe
Timestamp: Mon Mar 05 15:51:43 2007 (45EC3C8F)
CheckSum: 001A2A64
ImageSize: 0019CD00
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Kernel base = 0x80400000 PsLoadedModuleList = 0x80481580
Debug session time: Wed Aug 26 01:25:22.812 2009 (GMT+1)
System Uptime: not available
pat styles [microsoft]
Windows 2000 symbols are not officially supported and the inventory of
available pdbs is pretty barren. That said, run "!sym noisy" and let me see
the path that the debugger is using to grab ntoskrnl.pdb from. Maybe I can
help you. No promises.
.pat styles [microsoft]
"gavery" <gav...@discussions.microsoft.com> wrote in message
news:B08F79E0-F7F2-43E5...@microsoft.com...
gavery
Hope it helps.
kd> !sym noisy
noisy mode - symbol prompts on
kd> .reload
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\ntoskrnl.exe\45EC3C8F19cd00\ntoskrnl.exe not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntoskrnl.exe/45EC3C8F19cd00/ntoskrnl.exe not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\ntkrnlup.exe\45EC3C8F19cd00\ntkrnlup.exe not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntkrnlup.exe/45EC3C8F19cd00/ntkrnlup.exe not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\ntkrnlpa.exe\45EC3C8F19cd00\ntkrnlpa.exe not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntkrnlpa.exe/45EC3C8F19cd00/ntkrnlpa.exe not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\ntkrnlmp.exe\45EC3C8F19cd00\ntkrnlmp.exe not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntkrnlmp.exe/45EC3C8F19cd00/ntkrnlmp.exe not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\ntkrpamp.exe\45EC3C8F19cd00\ntkrpamp.exe not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/ntkrpamp.exe/45EC3C8F19cd00/ntkrpamp.exe not found
DBGENG: ntoskrnl.exe - Image mapping disallowed by non-local path.
Unable to load image ntoskrnl.exe, Win32 error 0n2
DBGENG: ntoskrnl.exe - Partial symbol image load missing image info
DBGHELP: No header for ntoskrnl.exe. Searching for dbg file
DBGHELP: .\ntoskrnl.dbg - file not found
DBGHELP: .\exe\ntoskrnl.dbg - path not found
DBGHELP: .\symbols\exe\ntoskrnl.dbg - path not found
DBGHELP: ntoskrnl.exe missing debug info. Searching for pdb anyway
DBGHELP: Can't use symbol server for ntoskrnl.pdb - no header information
available
DBGHELP: ntoskrnl.pdb - file not found
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for
ntoskrnl.exe
DBGHELP: nt - no symbols loaded
Loading Kernel Symbols
.
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\halaacpi.dll\3E7A733814100\halaacpi.dll not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/halaacpi.dll/3E7A733814100/halaacpi.dll not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\halacpi.dll\3E7A733814100\halacpi.dll not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/halacpi.dll/3E7A733814100/halacpi.dll not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\halapic.dll\3E7A733814100\halapic.dll not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/halapic.dll/3E7A733814100/halapic.dll not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\halmacpi.dll\3E7A733814100\halmacpi.dll not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/halmacpi.dll/3E7A733814100/halmacpi.dll not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\halmps.dll\3E7A733814100\halmps.dll not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/halmps.dll/3E7A733814100/halmps.dll not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\hal.dll\3E7A733814100\hal.dll not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/hal.dll/3E7A733814100/hal.dll not
found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\hal486c.dll\3E7A733814100\hal486c.dll not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/hal486c.dll/3E7A733814100/hal486c.dll not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\halborg.dll\3E7A733814100\halborg.dll not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/halborg.dll/3E7A733814100/halborg.dll not found
SYMSRV: C:\Program Files\Debugging Tools for
Windows\sym\halsp.dll\3E7A733814100\halsp.dll not found
SYMSRV:
http://msdl.microsoft.com/download/symbols/halsp.dll/3E7A733814100/halsp.dll
not found
DBGENG: hal.dll - Image mapping disallowed by non-local path.
..............................................................................................................
Loading User Symbols
Loading unloaded module list
........................
pat styles [microsoft]
I am asking around. It is a long weekend and it will take a while to get
back to you.
.pat styles [microsoft]
"gavery" <gav...@discussions.microsoft.com> wrote in message
news:AC4C6814-4C37-4B9C...@microsoft.com...
gavery
I've now installed all symbols for the Win2k RTM + Win2K SP4 + Win2k SP 4
Rollup 1 as mentioned on some MS page -
http://www.microsoft.com/whdc/devtools/debugging/symbolpkg.mspx
Now when I run windbg, it says that the timestamp for ntoskrnl doesnt match,
but after unassembling various functions, it looks like most of the functions
do have the right address, so I now seem to be able to get reasonable
callstack, although the callstack is showing a problem somewhere in
win2k.sys, which is from Fri Apr 17, 2009 for which there are no symbols in
MS Symbol server, and it's much later than the SP4 rollup 1.
I'm not surprised that some versions are missing from the symbol server, but
I'm very surprised that the SP4 rollup 1 symbols aren't included (or maybe
there's no point if the timestamps are wrong). It's almost like the real ones
got lost somehow and the ones I've downloaded may have been created from near
enough the same source code, but because the timestamps are not exactly
right, they don't match the released code and therefore there's no point
adding them as they would never get referenced. [Although if that were the
case, then I'd have thought that a bit of copying and renaming of files would
coerce the server into returning a reasonable equivalent]
yuhong
> kd> .reload
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\ntoskrnl.exe\45EC3C8F19cd00\ntoskrnl.exe not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\ntkrnlup.exe\45EC3C8F19cd00\ntkrnlup.exe not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\ntkrnlpa.exe\45EC3C8F19cd00\ntkrnlpa.exe not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\ntkrnlmp.exe\45EC3C8F19cd00\ntkrnlmp.exe not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\ntkrpamp.exe\45EC3C8F19cd00\ntkrpamp.exe not found
> DBGENG: ntoskrnl.exe - Image mapping disallowed by non-local path.
> Unable to load image ntoskrnl.exe, Win32 error 0n2
> DBGENG: ntoskrnl.exe - Partial symbol image load missing image info
where the dump came from.
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\halaacpi.dll\3E7A733814100\halaacpi.dll not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\halacpi.dll\3E7A733814100\halacpi.dll not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\halapic.dll\3E7A733814100\halapic.dll not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\halmacpi.dll\3E7A733814100\halmacpi.dll not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\halmps.dll\3E7A733814100\halmps.dll not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\hal.dll\3E7A733814100\hal.dll not found
> SYMSRV: http://msdl.microsoft.com/download/symbols/hal.dll/3E7A733814100/hal.dllnot
> found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\hal486c.dll\3E7A733814100\hal486c.dll not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\halborg.dll\3E7A733814100\halborg.dll not found
> SYMSRV: C:\Program Files\Debugging Tools for
> Windows\sym\halsp.dll\3E7A733814100\halsp.dll not found
> not found
> DBGENG: hal.dll - Image mapping disallowed by non-local path.
yuhong
> > kd> .reload
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\ntoskrnl.exe\45EC3C8F19cd00\ntoskrnl.exe not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\ntkrnlup.exe\45EC3C8F19cd00\ntkrnlup.exe not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\ntkrnlpa.exe\45EC3C8F19cd00\ntkrnlpa.exe not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\ntkrnlmp.exe\45EC3C8F19cd00\ntkrnlmp.exe not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\ntkrpamp.exe\45EC3C8F19cd00\ntkrpamp.exe not found
> > DBGENG: ntoskrnl.exe - Image mapping disallowed by non-local path.
> > Unable to load image ntoskrnl.exe, Win32 error 0n2
> > DBGENG: ntoskrnl.exe - Partial symbol image load missing image info
>
> That is your problem, go get the copy of ntoskrnl.exe from the system
> where the dump came from.
>
>
>
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\halaacpi.dll\3E7A733814100\halaacpi.dll not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\halacpi.dll\3E7A733814100\halacpi.dll not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\halapic.dll\3E7A733814100\halapic.dll not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\halmacpi.dll\3E7A733814100\halmacpi.dll not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\halmps.dll\3E7A733814100\halmps.dll not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\hal.dll\3E7A733814100\hal.dll not found
> > found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\hal486c.dll\3E7A733814100\hal486c.dll not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\halborg.dll\3E7A733814100\halborg.dll not found
> > SYMSRV: C:\Program Files\Debugging Tools for
> > Windows\sym\halsp.dll\3E7A733814100\halsp.dll not found
> > SYMSRV: http://msdl.microsoft.com/download/symbols/halsp.dll/3E7A733814100/ha...
> > not found
> > DBGENG: hal.dll - Image mapping disallowed by non-local path.
>
> Same for the HAL.
If you can't find it, look up the name and version number by searching
on microsoft.com. Once you find the update or hotfix, run the
installer with the /extract option to extract the binaries.
Once you found the binaries, set image file path to where they are.
Then the symbols should be able to be downloaded and loaded.
The problem is NOT that the symbols are missing, but you are missing
the binaries that has the data needed to find the symbols.