진행상황은 먼저
----------------------------------------------------------------------------------------
1. 마소 홈에서 Debugging Tools for Windows 툴을 받아 설치하였고..
(설치된 경로 C:＼Program Files＼Debugging Tools for Windows)
2. 그리고 심볼파일을 받아 설치하였습니다. 설치된 경로 ( C:＼windows＼symbols)
3. WinDBG에서 File->Open Crash Dump로 덤프 파일을 오픈
(C:＼widows＼Minidump＼Mini113005-02.dmp) <-저장된 덤프파일경로
4. 심볼 경로 설정
SRV*c:＼websymbols*http://msdl.microsoft.com/download/symbols ; c:＼windows＼symbols
6. 소스 파일 경로 설정
WinDBG 에서 File->Source File Path 에서 소스 파일 경로를 설정합니다.
7. 심볼 경로와 소스 파일 경로를 설정했다면, kd>.reload 로 심볼을 로드합니다.
8. kd>!analyze -v 를 치면, 자세한 디버깅 정보를 얻을 수 있습니다
------------------------------------------------------------------------------------------
어느 사이트에서 이렇게 하라고 해서 했는데...
막히는건 6번 소스 파일 경로면..dmp 파일 경로를 입력하라는지 아니면 이부분을 잘 모르겠더군요
7번 명령은 커맨드 창 들어가서 C:＼Program Files＼Debugging Tools for Windows
이 경로로 들어가서 쳐야되는건지...
저렇게 해도 반응이 없더군요
어찌됐든...dump 분석정보는 이렇게 나오는데....어디에 문제가 있는지요..
--------------------------------------------------------------------------------
Microsoft (R) Windows Debugger Version 6.5.0003.7
Copyright (c) Microsoft Corporation. All rights reserved.
Loading Dump File [C:WINDOWSMinidumpMini113005-02.dmp]
Mini Kernel Dump File: Only registers and stack trace are available
Symbol search path is: *** Invalid ***
****************************************************************************
* Symbol loading may be unreliable without a symbol search path. *
* Use .symfix to have the debugger choose a symbol path. *
* After setting your symbol path, use .reload to refresh symbol locations. *
****************************************************************************
Executable search path is:
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 2) MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d7000 PsLoadedModuleList = 0x805624a0
Debug session time: Wed Nov 30 20:43:30.640 2005 (GMT+9)
System Uptime: 0 days 0:07:08.345
*********************************************************************
* Symbols can not be loaded because symbol path is not initialized. *
* *
* The Symbol Path can be set by: *
* using the _NT_SYMBOL_PATH environment variable. *
* using the -y <symbol_path> argument when starting the debugger. *
* using .sympath and .sympath+ *
*********************************************************************
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
......................................................................................................................
Loading unloaded module list
........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************
Use !analyze -v to get detailed debugging information.
BugCheck 100000D1, {e16a94ca, 2, 0, f7ac6a55}
***** Kernel symbols are WRONG. Please fix symbols to do analysis.
Unable to load image SandSys.sys, Win32 error 2
*** ERROR: Module load completed but symbols could not be loaded for SandSys.sys
*** WARNING: Unable to verify timestamp for CLASSPNP.SYS
*** ERROR: Module load completed but symbols could not be loaded for CLASSPNP.SYS
*** WARNING: Unable to verify timestamp for atapi.sys
*** ERROR: Module load completed but symbols could not be loaded for atapi.sys
*** WARNING: Unable to verify timestamp for mssmbios.sys
*** ERROR: Module load completed but symbols could not be loaded for mssmbios.sys
Probably caused by : SandSys.sys ( SandSys+a55 )
Followup: MachineOwner
---------------------------------------------------------------------------------------------
혹시 몰라서 ftp에 dmp 파일을 올려놨는데 분석 좀 부탁드립니다. ^^;
http://2pixel.net/Mini113005-01.dmp
http://2pixel.net/Mini113005-02.dmp
짧은글 일수록 신중하게.