Компьютерный форум OSzone.net  

Компьютерный форум OSzone.net (http://forum.oszone.net/index.php)
-   Хочу все знать (http://forum.oszone.net/forumdisplay.php?f=23)
-   -   Windbg не берет символы для дампов (http://forum.oszone.net/showthread.php?t=281796)

__sa__nya 04-05-2014 05:29 2346766

Windbg не берет символы для дампов
 
Доброе время суток. Решил заняться методикой изучения дампов памяти для анализа причин BSOD'ов. Взял файлы минидампов с системы Win 7 Prof SP1 x64 (версия 6.1, сборка 7601:Service Pack 1), коробочная версия. Установил отсюда файлы символов:
1. Windows 7 Service Pack 1 x64 retail symbols, all languages
2. Windows 7 Service Pack 1 x64 checked symbols, all languages
3. Windows 7 RTM x86 checked symbols, all languages
В Windbg в "Symbol File Path" прописал пути к папкам в которые установил символы:
D:\windbg_symbols\Win_7_SP1_x64_checked_symbols_all_languages;D:\windbg_symbols\Win_7_SP1_x64_retail _sym_all_languages;D:\windbg_symbols\Win_7 RTM_x64_checked_symbols_all_languages

Но при открытии дампа windbg все равно пишет что не может подгрузить символы:
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
***** Kernel symbols are WRONG. Please fix symbols to do analysis.

*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************
*************************************************************************
*** ***
*** ***
*** Your debugger is not using the correct symbols ***
*** ***
*** In order for this command to work properly, your symbol path ***
*** must point to .pdb files that have full type information. ***
*** ***
*** Certain .pdb files (such as the public OS symbols) do not ***
*** contain the required information. Contact the group that ***
*** provided you with these symbols if you need this command to ***
*** work. ***
*** ***
*** Type referenced: nt!_KPRCB ***
*** ***
*************************************************************************

- Что я делаю не так?

Petya V4sechkin 04-05-2014 07:31 2346776

__sa__nya, после установки обновлений ОС версии системных файлов меняются, очевидно.
Лучше позволить WinDbg скачивать недостающие символы из интернета.
Цитата:

В Windbg в "Symbol File Path" прописал пути к папкам
Например:
srv*D:\Symbols*http://msdl.microsoft.com/download/symbols

Nik User 11-11-2016 14:58 2686649

Добрый день, картина один в один. У меня тоже перестал брать символы Windbg сразу как обновил свю win 10 1607 (14393.3..) до 1607 (14393.447), пишет - Символы ядра являются неправильными. Исправьте символы, чтобы сделать анализ.
Хотя источник указан SRV*С:\Symbols*http://msdl.microsoft.com/download/symbols.
Но если рассматривать более ранние дампы, которые были созданы еще до этого обновления, то символы загружаются.
Это там у них на сервере не загрузили новые символы или проблема моя?


Время: 08:16.

Время: 08:16.
© OSzone.net 2001-