unable to load symbols for windows dlls

Chaitanya

unread,

Dec 5, 2003, 6:26:10 PM12/5/03

to

Hi,
I am trying to do some post mortem debugging on a Windows 2003 server dump(with full address space available).
When I try to see the call stack, I am getting an error
*** ERROR: Symbol file could not be found. Defaulted to export symbols for kernel32.dll -
I am getting the same error even for ntdll.dll. I am pointing to the microsoft symbol server at SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols.
I am able to get symbols for other binaries like ntkrnlmp.exe...
I tried to ping the server msdl.microsoft.com and i dont get a response. Is it possible that the server is down or am i doing something wrong?

thanks,
Chaitanya

Pat [MSFT]

unread,

Dec 5, 2003, 11:41:03 PM12/5/03

to

If that is a hotfixed version of kernel32.dll (and it probably is), the
symbols for it may not be posted yet. There can be a bit of a delay
sometimes. If it continues to not be there, post back.

Pat

"Chaitanya" <anon...@discussions.microsoft.com> wrote in message
news:4F99E242-8B9D-447A...@microsoft.com...

Andre Vachon [MS]

unread,

Dec 6, 2003, 1:15:16 AM12/6/03

to

In the debugger do
!sym noisy
.reload
That will give detailed information about what files and PDBs are being
searched for. If you post the output of that command, we can figure out
which version of the file is missing.

Also, make sure you are using debugger version 6.2.13 or later. Previous
version can not download images from symbol server.

-Andre

"Chaitanya" <anon...@discussions.microsoft.com> wrote in message
news:4F99E242-8B9D-447A...@microsoft.com...

Eric Fleischman [MSFT]

unread,

Dec 7, 2003, 2:51:58 PM12/7/03

to

Also many hotfixes from support.microsoft.com come with symbols in them, so
I'd check the hotfix package you grabbed to see if there is a pdb install
file in there with the package itself.

~Eric

--
Eric Fleischman [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

"Pat [MSFT]" <patf...@online.microsoft.com> wrote in message
news:O53fpM7u...@TK2MSFTNGP12.phx.gbl...

Chaitanya

unread,

Dec 8, 2003, 10:46:29 AM12/8/03

to

Below is the output. I tried the latest version of the debugger. I even tried the beta one, with the same results. Also, I am connected to the Internet.
I checked all the patches installed on my system and they have not updated kernel32.dll and from the timestamp it looks like it is the one from the shipped image.

2: kd> !sym noisy
Noisy mode on.
2: kd> .reload /f kernel32.dll

Force unload of C:\WINDOWS\system32\kernel32.dll
Loading symbols for 77e40000 kernel32.dll -> kernel32.dll

*** ERROR: Symbol file could not be found. Defaulted to export symbols for kernel32.dll -

ModLoad: 77e40000 77f34000 C:\WINDOWS\system32\kernel32.dll
2: kd> lmv mkernel32
start end module name
77e40000 77f34000 kernel32 (export symbols) kernel32.dll
Loaded symbol image file: kernel32.dll
Image path: C:\WINDOWS\system32\kernel32.dll
Timestamp: Tue Mar 25 04:42:44 2003 (3E802494) Checksum: 000F488C
ImageSize : 000F4000
Translations: 0000.04b0 0000.04e0 0409.04b0 0409.04e0

Andre Vachon [MS]

unread,

Dec 10, 2003, 10:12:21 AM12/10/03

to

Did you set your symbol path to point to the internet symbol server ?
From the below output it looks like you are loading kernel32.dll from your
system32 directory, and are not connecting to the symbol server to lookup
any data.

-Andre

"Chaitanya" <anon...@discussions.microsoft.com> wrote in message

news:A189CD9A-1D21-4395...@microsoft.com...