WinDBG, doesn't support kernel debugging?

You should use a second computer to debug a remote machine via a COM port or
1394 . The abilities of the local debugging are very limited anyway.

Post by Harry Potter
Hi guys,
I'm trying to debug the sample IM drivers Passthru from Microsoft
samples.... I assume this is a kernel mode driver and therefore trying to
use the kernel mode debugging of the windbg on same local machine... but I
get the following error... what am I doing wrong???? Please note that I'm
running on windows 2000....
Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.
The system does not support local kernel debugging.
Local kernel debugging requires Windows XP, Administrative
privileges, and is not supported by WOW64.
Debuggee initialization failed, HRESULT 0x80004001
"Not implemented"
doesn't this feature supported on win 2000 pro??? what should I do then???
I have the administrative privilege on my own pc.
thank you...

Pat [MSFT]

2004-09-27 05:00:52 UTC

The error message is stating that WinXP is the minimum for doing 'live'
local kernel debugging, not that WinDBG can't do it. I doubt that 'live' is
what you want to do anyway since it is fairly limited (e.g. you can't set a
break point). You would get a much better learning experince debugging
across 2 machines (so you can set break points, follow program flow, etc.).

pat

Hans De Smaele

2004-09-27 09:35:09 UTC

You can download from the SysInternals website (http://www.sysinternals.com)
a tool, called LiveKd. This tool allows you to do local debugging on a W2K
computer. However, note that you're actually working on a local dump at that
moment, but it's a good solution to learn debugging with.
As the others said already, you need 2 computers to do live kernel
debugging. See the outstanding WinDbg doc for more information on this.

H.

Post by Pat [MSFT]
The error message is stating that WinXP is the minimum for doing 'live'
local kernel debugging, not that WinDBG can't do it. I doubt that 'live' is
what you want to do anyway since it is fairly limited (e.g. you can't set a
break point). You would get a much better learning experince debugging
across 2 machines (so you can set break points, follow program flow, etc.).
pat

Harry Potter

2004-09-27 16:03:02 UTC

thank you all for your feedbacks

Post by Hans De Smaele
You can download from the SysInternals website

(http://www.sysinternals.com)

Post by Hans De Smaele
a tool, called LiveKd. This tool allows you to do local debugging on a W2K
computer. However, note that you're actually working on a local dump at that
moment, but it's a good solution to learn debugging with.
As the others said already, you need 2 computers to do live kernel
debugging. See the outstanding WinDbg doc for more information on this.
H.

n???

Post by Harry Potter
I have the administrative privilege on my own pc.
thank you...

Sivaller

2004-09-29 07:37:17 UTC

Try program Dbgview in the site sysinternal

Post by Harry Potter
thank you all for your feedbacks

Post by Hans De Smaele
You can download from the SysInternals website

(http://www.sysinternals.com)

Post by Hans De Smaele
a tool, called LiveKd. This tool allows you to do local debugging on a W2K
computer. However, note that you're actually working on a local dump at

that

Post by Hans De Smaele
moment, but it's a good solution to learn debugging with.
As the others said already, you need 2 computers to do live kernel
debugging. See the outstanding WinDbg doc for more information on this.
H.

Post by Pat [MSFT]
The error message is stating that WinXP is the minimum for doing 'live'
local kernel debugging, not that WinDBG can't do it. I doubt that

'live' is

Post by Pat [MSFT]
what you want to do anyway since it is fairly limited (e.g. you can't

set a

Post by Pat [MSFT]
break point). You would get a much better learning experince debugging
across 2 machines (so you can set break points, follow program flow,

etc.).

Post by Harry Potter
Hi guys,
I'm trying to debug the sample IM drivers Passthru from Microsoft
samples.... I assume this is a kernel mode driver and therefore

trying

Post by Harry Potter
to

Post by Harry Potter
use the kernel mode debugging of the windbg on same local machine...

but I

Post by Harry Potter
get the following error... what am I doing wrong???? Please note

that

Post by Harry Potter
I'm

Post by Harry Potter
running on windows 2000....
Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.
The system does not support local kernel debugging.
Local kernel debugging requires Windows XP, Administrative
privileges, and is not supported by WOW64.
Debuggee initialization failed, HRESULT 0x80004001
"Not implemented"
doesn't this feature supported on win 2000 pro??? what should I do the

n???

Post by Harry Potter
I have the administrative privilege on my own pc.
thank you...

Harry Potter

2004-09-30 19:17:36 UTC

OOOOK... I see...
thank you both.

Post by Sivaller
Try program Dbgview in the site sysinternal

Post by Harry Potter
thank you all for your feedbacks

Post by Hans De Smaele
You can download from the SysInternals website

(http://www.sysinternals.com)

Post by Hans De Smaele
a tool, called LiveKd. This tool allows you to do local debugging on a

W2K

Post by Harry Potter

Post by Hans De Smaele
computer. However, note that you're actually working on a local dump at

that

Post by Pat [MSFT]
The error message is stating that WinXP is the minimum for doing

'live'

Post by Harry Potter

Post by Pat [MSFT]
local kernel debugging, not that WinDBG can't do it. I doubt that

'live' is

Post by Pat [MSFT]
what you want to do anyway since it is fairly limited (e.g. you can't

set a

Post by Pat [MSFT]
break point). You would get a much better learning experince

debugging

Post by Harry Potter

Post by Pat [MSFT]
across 2 machines (so you can set break points, follow program flow,

etc.).

Post by Harry Potter
Hi guys,
I'm trying to debug the sample IM drivers Passthru from Microsoft
samples.... I assume this is a kernel mode driver and therefore

trying

Post by Harry Potter
to

Post by Harry Potter
use the kernel mode debugging of the windbg on same local machine...

but I

Post by Harry Potter
get the following error... what am I doing wrong???? Please note

that

Post by Harry Potter
I'm

the

Post by Harry Potter
n???

Post by Harry Potter
I have the administrative privilege on my own pc.
thank you...

Vipin

2004-10-01 08:56:52 UTC

what I don't understand is why microsoft can't come up with something like
softice? Softice is damn costly for developers to purchase.And once we are
done with the development at office or on a particular project for which we
have softice license, we can't use for any other purpose.I used to work on
project for which they had softice license,but once I moved out of the
project, I can't use softice. Why doesn't MS come with a free debugger of
the same style?

Gary G. Little

2004-10-01 13:08:35 UTC

They have ... it's called WinDbg.
--
The personal opinion of
Gary G. Little

Post by Vipin
what I don't understand is why microsoft can't come up with something like
softice? Softice is damn costly for developers to purchase.And once we are
done with the development at office or on a particular project for which we
have softice license, we can't use for any other purpose.I used to work on
project for which they had softice license,but once I moved out of the
project, I can't use softice. Why doesn't MS come with a free debugger of
the same style?

Post by Pat [MSFT]
The error message is stating that WinXP is the minimum for doing 'live'
local kernel debugging, not that WinDBG can't do it. I doubt that

'live'

Post by Vipin
is

Post by Pat [MSFT]
what you want to do anyway since it is fairly limited (e.g. you can't

set

Post by Pat [MSFT]
break point). You would get a much better learning experince debugging
across 2 machines (so you can set break points, follow program flow,

etc.).

Post by Harry Potter
Hi guys,
I'm trying to debug the sample IM drivers Passthru from Microsoft
samples.... I assume this is a kernel mode driver and therefore trying

Post by Harry Potter
use the kernel mode debugging of the windbg on same local machine...

but

Post by Harry Potter
get the following error... what am I doing wrong???? Please note that

I'm

then???

Post by Harry Potter
I have the administrative privilege on my own pc.
thank you...

Vipin

2004-10-02 16:42:22 UTC

But with windbg you can do kernel debugging on the same machine. That's what
I meant

Post by Gary G. Little
They have ... it's called WinDbg.
--
The personal opinion of
Gary G. Little

Post by Vipin
have softice license, we can't use for any other purpose.I used to work on
project for which they had softice license,but once I moved out of the
project, I can't use softice. Why doesn't MS come with a free debugger of
the same style?

Post by Pat [MSFT]
The error message is stating that WinXP is the minimum for doing 'live'
local kernel debugging, not that WinDBG can't do it. I doubt that

'live'

Post by Vipin
is

Post by Pat [MSFT]
what you want to do anyway since it is fairly limited (e.g. you can't

set

Post by Pat [MSFT]
break point). You would get a much better learning experince debugging
across 2 machines (so you can set break points, follow program flow,

etc.).

Post by Harry Potter
Hi guys,
I'm trying to debug the sample IM drivers Passthru from Microsoft
samples.... I assume this is a kernel mode driver and therefore trying

Post by Harry Potter
use the kernel mode debugging of the windbg on same local machine...

but

Post by Harry Potter
get the following error... what am I doing wrong???? Please note that

I'm

then???

Post by Harry Potter
I have the administrative privilege on my own pc.
thank you...

Vipin

2004-10-02 16:56:10 UTC

Gary,

I meant you can't do KM debugging on a single machine.

Post by Vipin
But with windbg you can do kernel debugging on the same machine. That's what
I meant

Post by Gary G. Little
They have ... it's called WinDbg.
--
The personal opinion of
Gary G. Little

Post by Vipin
what I don't understand is why microsoft can't come up with something

Post by Vipin
softice? Softice is damn costly for developers to purchase.And once we

are

Post by Vipin
done with the development at office or on a particular project for which

Post by Vipin
have softice license, we can't use for any other purpose.I used to

work

Post by Vipin
on

Post by Vipin
project for which they had softice license,but once I moved out of the
project, I can't use softice. Why doesn't MS come with a free debugger

Post by Vipin
the same style?

Post by Pat [MSFT]
The error message is stating that WinXP is the minimum for doing

'live'

Post by Pat [MSFT]
local kernel debugging, not that WinDBG can't do it. I doubt that

'live'

Post by Vipin
is

Post by Pat [MSFT]
what you want to do anyway since it is fairly limited (e.g. you can't

set

Post by Pat [MSFT]
break point). You would get a much better learning experince

debugging

Post by Pat [MSFT]
across 2 machines (so you can set break points, follow program flow,

etc.).

Post by Harry Potter
Hi guys,
I'm trying to debug the sample IM drivers Passthru from Microsoft
samples.... I assume this is a kernel mode driver and therefore

trying

Post by Vipin
to

Post by Harry Potter
use the kernel mode debugging of the windbg on same local machine...

but

Post by Harry Potter
get the following error... what am I doing wrong???? Please note

that

Post by Vipin
I'm

then???

Post by Harry Potter
I have the administrative privilege on my own pc.
thank you...

Gary G. Little

2004-10-03 17:13:31 UTC

Personally, I would not want to debug my drivers on the same machine I use
to develope them. I have always debugged using a target and host set up, and
find it a MUCH safer environment than a single environment. To many times
have I had a bad crash that hosed the targets OS leading to a complete
reformat and install. Not to mention that installing and uninstalling
drivers can proliferate trash throughout the registry, eventually leading to
a crash and possible format and install. I prefer debugging my drivers using
serial or 1394 to a target to protect my development environment. Also, my
target has an 80gig FAT32 disc that has several pre-canned OS environments
such as 2K, XP, and Server 2003 allowing me to refresh a corrupted boot disc
or switch to another environment quickly for testing. Those precanned
environments are vanilla with only the minimum drivers added for runtime.
This allows a relatively quick restore capability to allow testing an
install on a clean system.

For what I have to pay for softice, I can purchase a cheap dual processor
system for a target.
--
Gary G. Little

Post by Vipin
Gary,
I meant you can't do KM debugging on a single machine.

Post by Vipin
But with windbg you can do kernel debugging on the same machine. That's

what

Post by Vipin
I meant

Post by Gary G. Little
They have ... it's called WinDbg.
--
The personal opinion of
Gary G. Little

Post by Vipin
what I don't understand is why microsoft can't come up with something

Post by Vipin
softice? Softice is damn costly for developers to purchase.And once we

are

Post by Vipin
done with the development at office or on a particular project for

which

Post by Gary G. Little
we

Post by Vipin
have softice license, we can't use for any other purpose.I used to

work

Post by Vipin
on

Post by Vipin
project for which they had softice license,but once I moved out of the
project, I can't use softice. Why doesn't MS come with a free debugger

Post by Vipin
the same style?

Post by Pat [MSFT]
The error message is stating that WinXP is the minimum for doing

'live'

Post by Pat [MSFT]
local kernel debugging, not that WinDBG can't do it. I doubt that

'live'

Post by Vipin
is

Post by Pat [MSFT]
what you want to do anyway since it is fairly limited (e.g. you

can't

Post by Gary G. Little
set

Post by Pat [MSFT]
break point). You would get a much better learning experince

debugging

Post by Pat [MSFT]
across 2 machines (so you can set break points, follow program flow,

etc.).

Post by Harry Potter
Hi guys,
I'm trying to debug the sample IM drivers Passthru from Microsoft
samples.... I assume this is a kernel mode driver and therefore

trying

Post by Vipin
to

Post by Harry Potter
use the kernel mode debugging of the windbg on same local

machine...

Post by Gary G. Little
but

Post by Harry Potter
get the following error... what am I doing wrong???? Please note

that

Post by Vipin
I'm

then???

Post by Harry Potter
I have the administrative privilege on my own pc.
thank you...

Arkady Frenkel

2004-10-02 16:44:19 UTC

But that on XP machines only
Arkady

Post by Vipin
But with windbg you can do kernel debugging on the same machine. That's what
I meant

Post by Gary G. Little
They have ... it's called WinDbg.
--
The personal opinion of
Gary G. Little

Post by Vipin
what I don't understand is why microsoft can't come up with something

Post by Vipin
softice? Softice is damn costly for developers to purchase.And once we

are

Post by Vipin
done with the development at office or on a particular project for which

Post by Vipin
have softice license, we can't use for any other purpose.I used to

work

Post by Vipin
on

Post by Vipin
project for which they had softice license,but once I moved out of the
project, I can't use softice. Why doesn't MS come with a free debugger

Post by Vipin
the same style?

Post by Pat [MSFT]
The error message is stating that WinXP is the minimum for doing

'live'

Post by Pat [MSFT]
local kernel debugging, not that WinDBG can't do it. I doubt that

'live'

Post by Vipin
is

Post by Pat [MSFT]
what you want to do anyway since it is fairly limited (e.g. you can't

set

Post by Pat [MSFT]
break point). You would get a much better learning experince

debugging

Post by Pat [MSFT]
across 2 machines (so you can set break points, follow program flow,

etc.).

Post by Harry Potter
Hi guys,
I'm trying to debug the sample IM drivers Passthru from Microsoft
samples.... I assume this is a kernel mode driver and therefore

trying

Post by Vipin
to

Post by Harry Potter
use the kernel mode debugging of the windbg on same local machine...

but

Post by Harry Potter
get the following error... what am I doing wrong???? Please note

that

Post by Vipin
I'm

then???

Post by Harry Potter
I have the administrative privilege on my own pc.
thank you...

Pavel A.

2004-10-02 01:22:30 UTC

Post by Vipin
And once we are
done with the development at office or on a particular project for which we
have softice license, we can't use for any other purpose.I used to work on
project for which they had softice license,but once I moved out of the
project, I can't use softice.

Is Softice really licensed per project? Haven't heard of this.

--PA

Harry Potter

2004-10-02 01:56:26 UTC

reading and working more with windbg... it does seems to be a powerful
tools... the problem though is its help file.... its help file is useful
when you know what you're looking for but if you just want to start with
it...aaaahhhh.... and you have to rely on internet search and asking for
help through news groups... as I've been doing...

cheers

Post by Pavel A.

Is Softice really licensed per project? Haven't heard of this.
--PA

Pavel A.

2004-10-02 22:34:58 UTC

Post by Harry Potter
reading and working more with windbg... it does seems to be a powerful
tools... the problem though is its help file.... its help file is useful
when you know what you're looking for but if you just want to start with
it...aaaahhhh.... and you have to rely on internet search and asking for
help through news groups... as I've been doing...

You're right. Some of Softice documentation comes in printed form,
including the getting started guide. Just look in your Softice box.

--PA

Maxim S. Shatskih

2004-10-02 07:27:51 UTC

Post by Vipin
project, I can't use softice. Why doesn't MS come with a free debugger of
the same style?

The only advantage of SoftICE is being single-machine, and the second machine
is cheaper then SoftICE.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
***@storagecraft.com
http://www.storagecraft.com

Arkady Frenkel

2004-10-02 15:30:29 UTC

That true , but being single-machine ( Visual-SoftIce is exactly the same as
WinDbg - two machines debugger with gui on the master machine ), it gives
great opportunity to debug in places where difficult to set two computers
( plane , train , bus ... :) )
Arkady

Post by Maxim S. Shatskih

Post by Vipin
project, I can't use softice. Why doesn't MS come with a free debugger of
the same style?

The only advantage of SoftICE is being single-machine, and the second machine
is cheaper then SoftICE.
--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
http://www.storagecraft.com

Jochen Kalmbach

2004-10-02 15:59:42 UTC

Hi Arkady,

Post by Arkady Frenkel
That true , but being single-machine ( Visual-SoftIce is exactly the
same as WinDbg - two machines debugger with gui on the master machine
), it gives great opportunity to debug in places where difficult to
set two computers ( plane , train , bus ... :) )

Why not use VMWare or VirtualPC and WinDbg?

--
Greetings
Jochen

My blog about Win32 and .NET
http://blog.kalmbachnet.de/

Arkady Frenkel

2004-10-02 16:26:04 UTC

That variant too , unless some cases , like debugging display drivers (
SoftIse use dos box style window with it's own fonts making such debugging
less problematic ) or debugging some latency problems
Arkady

Post by Jochen Kalmbach
Hi Arkady,

Why not use VMWare or VirtualPC and WinDbg?
--
Greetings
Jochen
My blog about Win32 and .NET
http://blog.kalmbachnet.de/

Vipin

2004-10-02 16:54:42 UTC

Also I beleive softice is good at debugging windows applications because it
basically freezes, I guess at the CPU level, so debugger application window
overlaps are not an issue.

Post by Arkady Frenkel
That variant too , unless some cases , like debugging display drivers (
SoftIse use dos box style window with it's own fonts making such debugging
less problematic ) or debugging some latency problems
Arkady

Post by Jochen Kalmbach
Hi Arkady,

Why not use VMWare or VirtualPC and WinDbg?
--
Greetings
Jochen
My blog about Win32 and .NET
http://blog.kalmbachnet.de/

Arkady Frenkel

2004-10-02 17:26:32 UTC

If you mean that with resized/moved SI debug window you can see app window
and in Studio debug that blocked , I agree with that
Arkady

Post by Vipin
Also I beleive softice is good at debugging windows applications because it
basically freezes, I guess at the CPU level, so debugger application window
overlaps are not an issue.

Post by Jochen Kalmbach
Hi Arkady,

Why not use VMWare or VirtualPC and WinDbg?
--
Greetings
Jochen
My blog about Win32 and .NET
http://blog.kalmbachnet.de/

Vipin

2004-10-04 07:10:05 UTC

I meant since the blocking happens something down the OS level, window
overlaps with the debugger and hence the
window messages getting pumped into the window message queue as a result of
application window coming upfront the debugger
are not at all an issue with softice,but with vc++ or windbg, for usermode
debugging, I have to make the screen work at higher resolution
and ensure the app windows and the debugger don't overlap to get around this
awful problem.

Softice rules in the usermode world also but for the price.

Post by Arkady Frenkel
If you mean that with resized/moved SI debug window you can see app window
and in Studio debug that blocked , I agree with that
Arkady

Post by Vipin
Also I beleive softice is good at debugging windows applications because

Post by Vipin
basically freezes, I guess at the CPU level, so debugger application

window

Post by Vipin
overlaps are not an issue.

Post by Arkady Frenkel
That variant too , unless some cases , like debugging display drivers (
SoftIse use dos box style window with it's own fonts making such

debugging