Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

can't get kd to load Windows symbols

640 views
Skip to first unread message

Wei Wang

unread,
May 3, 2005, 1:19:19 AM5/3/05
to
I have a target machine that's running windows XP SP2. I downloaded the SP2
symbols and installed them in c:\symbols. I also set my symobl path to point
to the microsoft's symbol server. However I still can't get the symbols to
load. Below is my kd session:

kd> .sympath
Symbol search path is:
srv*c:\symbols\symserv*http://msdl.microsoft.com/download
/symbols;C:\Symbols
kd> vertarget
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Mon May 02 18:17:48 2005
System Uptime: 0 days 0:00:52.843

kd> .reload /n
Connected to Windows XP 2600 x86 compatible target, ptr64 FALSE
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ntkr
nlpa.exe -
Loading Kernel Symbols
............................................................................
....
......................................
Loading unloaded module list
......
kd> vertarget
Windows XP Kernel Version 2600 (Service Pack 2) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 2600.xpsp_sp2_gdr.050301-1519
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805531a0
Debug session time: Mon May 02 18:17:48 2005
System Uptime: 0 days 0:00:52.843
kd> !process 0 0
**** NT ACTIVE PROCESS DUMP ****
NT symbols are incorrect, please fix symbols


what am I doing wrong? One thing special about the setup is that the target
machine has an AMD 64bit processor. However, I thougth the vertarget output
shows the symbols I need? And the symbol server should give me the right
symbols anyway?


Jason Shay [MSFT]

unread,
May 3, 2005, 2:22:32 PM5/3/05
to
I'll need the output of this to check if its something on our end:
!sym noisy
.reload /f nt
lmvmnt

--
Jason Shay [MSFT]
js...@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Wei Wang" <weiw...@gmail.com> wrote in message
news:e$U3h%235TFH...@TK2MSFTNGP12.phx.gbl...

Wei Wang

unread,
May 3, 2005, 3:05:50 PM5/3/05
to
Thanks for the reply. This is the output:

kd> !sym noisy
noisy mode - symbol prompts off
kd> .reload /f nt
DBGHELP:
c:\MyNTSymbols\symserv\ntkrnlpa.pdb\89C2A9EB56A74E2D8269AFD1D835BA331\n
tkrnlpa.pdb - file system or network error reading pdb
DBGHELP: C:\MyNTSymbols\xpsp1free\ntkrnlpa.pdb - file not found
DBGHELP: C:\MyNTSymbols\xpsp1free\symbols\exe\ntkrnlpa.pdb - file not found
DBGHELP: C:\MyNTSymbols\xpsp1free\exe\ntkrnlpa.pdb - mismatched pdb
DBGHELP: C:\MyNTSymbols\xpsp2free\ntkrnlpa.pdb - file not found
DBGHELP: C:\MyNTSymbols\xpsp2free\symbols\exe\ntkrnlpa.pdb - file not found
DBGHELP: C:\MyNTSymbols\xpsp2free\exe\ntkrnlpa.pdb - mismatched pdb
DBGHELP: C:\MyNTSymbols\xpsp2onlyFree\ntkrnlpa.pdb - file not found
DBGHELP: C:\MyNTSymbols\xpsp2onlyFree\symbols\exe\ntkrnlpa.pdb - file not
found
DBGHELP: C:\MyNTSymbols\xpsp2onlyFree\exe\ntkrnlpa.pdb - mismatched pdb
DBGHELP: C:\MyNTSymbols\xpsp2chk\ntkrnlpa.pdb - file not found
DBGHELP: C:\MyNTSymbols\xpsp2chk\symbols\exe\ntkrnlpa.pdb - file not found
DBGHELP: C:\MyNTSymbols\xpsp2chk\exe\ntkrnlpa.pdb - file not found
DBGHELP: C:\tempdata\debugSymbol\ntkrnlpa.pdb - file not found
DBGHELP: C:\tempdata\debugSymbol\symbols\exe\ntkrnlpa.pdb - file not found
DBGHELP: C:\tempdata\debugSymbol\exe\ntkrnlpa.pdb - file not found
DBGHELP: ntkrnlpa.pdb - file not found
DBGHELP: Couldn't load mismatched pdb for ntkrnlpa.exe


*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ntkr
nlpa.exe -

DBGHELP: nt - export symbols
kd> lmvmnt
start end module name
804d7000 806cd280 nt (export symbols) ntkrnlpa.exe
Loaded symbol image file: ntkrnlpa.exe
Image path: ntkrnlpa.exe
Timestamp: Tue Mar 01 16:34:37 2005 (42250A1D) Checksum: 001F632B
File version: 5.1.2600.2622
Product version: 5.1.2600.2622
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
CompanyName: Microsoft Corporation
ProductName: Microsoft« Windows« Operating System
InternalName: ntkrnlpa.exe
OriginalFilename: ntkrnlpa.exe
ProductVersion: 5.1.2600.2622
FileVersion: 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519)
FileDescription: NT Kernel & System
LegalCopyright: ? Microsoft Corporation. All rights reserved.

Unloaded modules:

kd>
"Jason Shay [MSFT]" <js...@online.microsoft.com> wrote in message
news:OSrRL0AU...@TK2MSFTNGP12.phx.gbl...

Jason Shay [MSFT]

unread,
May 3, 2005, 5:01:19 PM5/3/05
to
Very interesting (not yet sure if that's in the good way, or the bad way).
Can you check a couple things for me?

1 - Looks like you have the pdb on your drive. Can you confirm that it is
actually there?


c:\MyNTSymbols\symserv\ntkrnlpa.pdb\89C2A9EB56A74E2D8269AFD1D835BA331\ntkrnlpa.pdb

- file system or network error eading pdb

If it is there, what does it look like? is its data completely zero'd out?

2 - Where did you get this kernel from? Windows Update?

--
Jason Shay [MSFT]
js...@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Wei Wang" <weiw...@gmail.com> wrote in message

news:uS3oTMBU...@TK2MSFTNGP10.phx.gbl...

Jason Shay [MSFT]

unread,
May 3, 2005, 6:14:30 PM5/3/05
to
I dug deeper. This now looks interesting in a good way. I believe your PDB
is corrupt, and that this will fix it:
.reload /f /o nt

Would still be interesting to know if the PDB you currently have on disk is
zero'd out. I've seen the "file system or network error readoning pdb"
error once before when referencing a local drive, and this was the cause.

--
Jason Shay [MSFT]
js...@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"Jason Shay [MSFT]" <js...@online.microsoft.com> wrote in message
news:OSLwDNCU...@TK2MSFTNGP09.phx.gbl...

Wei Wang

unread,
May 4, 2005, 1:10:57 AM5/4/05
to
the pdb file is there. I opened it in note pad and this is the content:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
"http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>The page cannot be found</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=Windows-1252">
<STYLE type="text/css">
BODY { font: 8pt/12pt verdana }
H1 { font: 13pt/15pt verdana }
H2 { font: 8pt/12pt verdana }
A:link { color: red }
A:visited { color: maroon }
</STYLE>
</HEAD><BODY><TABLE width=500 border=0 cellspacing=10><TR><TD>

<h1>The page cannot be found</h1>
The page you are looking for might have been removed, had its name changed,
or is temporarily unavailable.
<hr>
<p>Please try the following:</p>
<ul>
<li>Make sure that the Web site address displayed in the address bar of your
browser is spelled and formatted correctly.</li>
<li>If you reached this page by clicking a link, contact
the Web site administrator to alert them that the link is incorrectly
formatted.
</li>
<li>Click the <a href="javascript:history.back(1)">Back</a> button to try
another link.</li>
</ul>
<h2>HTTP Error 404 - File or directory not found.<br>Internet Information
Services (IIS)</h2>
<hr>
<p>Technical Information (for support personnel)</p>
<ul>
<li>Go to <a href="http://go.microsoft.com/fwlink/?linkid=8180">Microsoft
Product Support Services</a> and perform a title search for the words
<b>HTTP</b> and <b>404</b>.</li>
<li>Open <b>IIS Help</b>, which is accessible in IIS Manager (inetmgr),
and search for topics titled <b>Web Site Setup</b>, <b>Common
Administrative Tasks</b>, and <b>About Custom Error Messages</b>.</li>
</ul>

</TD></TR></TABLE></BODY></HTML>


Looks like the symbol server address is not right. But what should it be?


"Jason Shay [MSFT]" <js...@online.microsoft.com> wrote in message

news:en#ND2CUF...@TK2MSFTNGP12.phx.gbl...


> I dug deeper. This now looks interesting in a good way. I believe your
PDB
> is corrupt, and that this will fix it:
> .reload /f /o nt
>
> Would still be interesting to know if the PDB you currently have on disk
is
> zero'd out. I've seen the "file system or network error readoning pdb"
> error once before when referencing a local drive, and this was the cause.
>
> --
> Jason Shay [MSFT]
> js...@online.microsoft.com
>
> This posting is provided "AS IS" with no warranties, and confers no rights
> Use of included script samples are subject to the terms specified at
> http://www.microsoft.com/info/cpyright.htm
>
> "Jason Shay [MSFT]" <js...@online.microsoft.com> wrote in message
> news:OSLwDNCU...@TK2MSFTNGP09.phx.gbl...
> > Very interesting (not yet sure if that's in the good way, or the bad
way).
> > Can you check a couple things for me?
> >
> > 1 - Looks like you have the pdb on your drive. Can you confirm that it
is
> > actually there?
> >
> >

Jason Shay [MSFT]

unread,
May 4, 2005, 12:57:33 PM5/4/05
to
And did '.reload /o /f nt' fix the problem?

--
Jason Shay [MSFT]
js...@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Wei Wang" <weiw...@gmail.com> wrote in message

news:%236nbneG...@TK2MSFTNGP15.phx.gbl...

Wei Wang

unread,
May 5, 2005, 2:26:58 PM5/5/05
to
'.reload /o /f nt' did not fix the problem. I looked at another machine that
had XP SP2 loaded and the symbols can be loaded. This is the lmvmnt ouput on
the machine that works:

start end module name
804d7000 80701000 nt (pdb symbols)
C:\MyNTSymbols\xpsp2
free\exe\ntkrnlmp.pdb
Loaded symbol image file: ntkrnlmp.exe
Image path: ntkrnlmp.exe
Timestamp: Tue Aug 03 23:18:18 2004 (41107FAA) Checksum: 0021C534
File version: 5.1.2600.2180
Product version: 5.1.2600.2180


File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 1.0 App
File date: 00000000.00000000
CompanyName: Microsoft Corporation
ProductName: Microsoft« Windows« Operating System

InternalName: ntkrnlmp.exe
OriginalFilename: ntkrnlmp.exe
ProductVersion: 5.1.2600.2180
FileVersion: 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)


FileDescription: NT Kernel & System
LegalCopyright: ? Microsoft Corporation. All rights reserved.

Unloaded modules:

It seems like on the machine that doesn't work there is a different file
version 5.1.2600.2622(xpsp_sp2_gdr.050301-1519)


"Jason Shay [MSFT]" <js...@online.microsoft.com> wrote in message

news:%23ZspjpM...@TK2MSFTNGP15.phx.gbl...

Jason Shay [MSFT]

unread,
May 5, 2005, 9:57:42 PM5/5/05
to
For some reason the debugger is downloading an .html 404 error and saving it
as the pdb. Does it happen with just this pdb file, or with any file which
the debug host tries to download?

--
Jason Shay [MSFT]
js...@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Wei Wang" <weiw...@gmail.com> wrote in message

news:u64YPAa...@TK2MSFTNGP15.phx.gbl...

Wei Wang

unread,
May 6, 2005, 11:10:25 AM5/6/05
to
I have only tried this file.


"Jason Shay [MSFT]" <js...@online.microsoft.com> wrote in message

news:uJaB77dU...@TK2MSFTNGP12.phx.gbl...

Pat Styles

unread,
May 6, 2005, 4:50:07 PM5/6/05
to
The only time I have seen this kind of problem was when an incompatible
firewall product was installed.

Is this the most recent available debugger build?
Could you try setting DBGHELP_SERVICE=1 in the environment and running the
debugger again?
Could you disable HTTP 1.1 in the Properties for Internet Explorer?
Could you try disabling or uninstalling all firewall and proxy software that
might be involved in the HTTP processing?

Whenever you try any of these, please delete the bogus copy of the
downloaded symbols beforehand. Also please try all the suggestions, even if
earlier ones work.

.p

"Wei Wang" <weiw...@gmail.com> wrote in message

news:eizw82kU...@TK2MSFTNGP09.phx.gbl...

0 new messages