Re: [WinPcap-users] How to debug a windows crash (reboot)?

2005-04-29 Thread Loris Degioanni
Welcome to the enchanted world of kernel level programming and debugging!
First suggestion: it's normally not a good idea to make products based 
on windows drivers (or modified versions of them) if you don't know what 
you are doing more than well. It will very soon be a pain for your users 
(under the form of several blue screens) and for you when you'll have to 
support them.
Said that, if you just want to see the place in the driver where the 
problem happened, the best thing to do is:

- configure windows to emit kernel dumps
- download, install and configure windbg 
(http://www.microsoft.com/whdc/devtools/debugging/default.mspx)
- open the crash dump with windbg
- do a !analyze -v

Other suggestion: download DebugView. It's free and it's able to scan a 
kernel dump to find the Debug Prints of your driver (if you have any), 
very useful for post-mortem analysis.

Loris
Ben Greear wrote:
So...my bridge seems to be working pretty well now, but
when I crank it up to high speed (say, 50Mbps), the Windows-XP
machine reboots shortly after.  When it comes back up, it
complains of a serious error and offers to send a report to MS.
I'm using 3.1-beta4 with slightly modified npf.sys so that it
can send pkts w/out looping them back.
The report has a dump file, and I opened it with notepad, but it
will not let me copy the file because it's 'in use'.  And, as soon
as I finish sending the report to MS, the file goes away.  Lovely!
Any ideas how to go about debugging such a problem?
Thanks,
Ben


==
This is the WinPcap users list. It is archived at
http://www.mail-archive.com/winpcap-users@winpcap.polito.it/
To unsubscribe use 
mailto: [EMAIL PROTECTED]
==


Re: [WinPcap-users] How to debug a windows crash (reboot)?

2005-04-29 Thread Ben Greear
Loris Degioanni wrote:
Welcome to the enchanted world of kernel level programming and debugging!
First suggestion: it's normally not a good idea to make products based 
on windows drivers (or modified versions of them) if you don't know what 
you are doing more than well. It will very soon be a pain for your users 
(under the form of several blue screens) and for you when you'll have to 
support them.
Said that, if you just want to see the place in the driver where the 
problem happened, the best thing to do is:

- configure windows to emit kernel dumps
- download, install and configure windbg 
(http://www.microsoft.com/whdc/devtools/debugging/default.mspx)
- open the crash dump with windbg
- do a !analyze -v

Other suggestion: download DebugView. It's free and it's able to scan a 
kernel dump to find the Debug Prints of your driver (if you have any), 
very useful for post-mortem analysis.
Thanks!  Could you let me know what sort of tool chains I need to
compile winpcap (including the driver)?  I was hoping that I wouldn't
need to, but it is probably the problem here...
Thanks,
Ben
--
Ben Greear [EMAIL PROTECTED]
Candela Technologies Inc  http://www.candelatech.com

==
This is the WinPcap users list. It is archived at
http://www.mail-archive.com/winpcap-users@winpcap.polito.it/
To unsubscribe use 
mailto: [EMAIL PROTECTED]
==


Re: [WinPcap-users] How to debug a windows crash (reboot)?

2005-04-29 Thread Loris Degioanni
Ben,
Ben Greear wrote:

Thanks!  Could you let me know what sort of tool chains I need to
compile winpcap (including the driver)?  I was hoping that I wouldn't
need to, but it is probably the problem here...
I think you can find all the information you need in the WinPcap manual. 
See in particular 
http://winpcap.polito.it/docs/docs31beta4/html/group__compilation.html.
Remember that if you want symbolic information from windbg you need to 
compile a checked version of the driver.

Loris

Thanks,
Ben

==
This is the WinPcap users list. It is archived at
http://www.mail-archive.com/winpcap-users@winpcap.polito.it/
To unsubscribe use 
mailto: [EMAIL PROTECTED]
==