.reload 命令后与目标的连接丢失

Question

在 WinDbg 中：文件 -> 符号文件路径？我将路径设置为： Srv*c:\symbols*https://msdl.microsoft.com/download/symbols 在此路径文件设置之后，我正在尝试制作此示例： https://msdn.microsoft.com/en-us/library/windows/hardware/mt269367 在第 5 步的第 2 步中，当我键入 .reload /f 时，调试器失去了与目标。如果我不设置符号文件路径，WinDbg 也会在同一点中断。

对我来说，似乎 windbg 失去了与目标的连接并且没有得到它再次成立。即使我在 VM 上重新启动目标系统。

谁能告诉我这是怎么回事，我做错了什么或者为什么会这样？？

我正在使用 VMWare Player。我的主机和 Target OS 是 Windows 10 Pro。 VMWare 配置为使用 NAT 中的网络。 Echo驱动安装成功

在下面你可以看到WinDbg日志：

<Microsoft (R) Windows Debugger Version 10.0.10586.567 AMD64
 Copyright (c) Microsoft Corporation. All rights reserved.>

<Using NET for debugging>
<Opened WinSock 2.0>
<Waiting to reconnect...
<Connected to target 192.168.2.107 on port 50000 on local IP 192.168.2.107.>
<Connected to Windows 10 10586 x64 target at (Sat May 14 22:41:26.873 2016(UTC + 2:00)), ptr64 TRUE>
<Kernel Debugger connection established.>

<************* Symbol Path validation summary **************>
<Response                         Time (ms)     Location>
<Deferred                                       >
<Srv*c:\symbols*https://msdl.microsoft.com/download/symbols>
<Symbol search path is: >
<Srv*c:\symbols*https://msdl.microsoft.com/download/symbols>
<Executable search path is: >
<Windows 10 Kernel Version 10586 MP (1 procs) Free x64>
<Product: WinNt, suite: TerminalServer SingleUserTS>
<Built by: 10586.306.amd64fre.th2_release_sec.160422-1850>
<Machine Name:>
<Kernel base = 0xfffff801`68a78000 PsLoadedModuleList = 0xfffff801`68d56cd0>
<Debug session time: Sat May 14 22:41:25.623 2016 (UTC + 2:00)>
<System Uptime: 0 days 0:06:44.196>
<Break instruction exception - code 80000003 (first chance)>
<*******************************************************************************>
<*                                                                             *>
<*   You are seeing this message because you pressed either                    *>
<*       CTRL+C (if you run console kernel debugger) or,                       *>
<*       CTRL+BREAK (if you run GUI kernel debugger),                          *>
<*   on your debugger machine's keyboard.                                      *>
<*                                                                             *>
<*                   THIS IS NOT A BUG OR A SYSTEM CRASH                       *>
<*                                                                             *>
<* If you did not intend to break into the debugger, press the "g" key, then   *>
<* press the "Enter" key now.  This message might immediately reappear.  If it *>
<* does, press "g" and "Enter" again.                                          *>
<*                                                                             *>
<*******************************************************************************>
<nt!DbgBreakPointWithStatus:>
<fffff801`68bbfed0 cc              int     3>
<kd> !sym noisy>
<noisy mode - symbol prompts on>
<kd> .symfix>
<DBGHELP: Symbol Search Path: srv*c:\symbols*https://msdl.microsoft.com/download/symbols>
<DBGHELP: Symbol Search Path: cache*;SRV*https://msdl.microsoft.com/download/symbols>
<DBGHELP: Symbol Search Path: cache*;SRV*https://msdl.microsoft.com/download/symbols>
<kd> .sympath+ C:\echo\kmdf\driver\AutoSync>
<DBGHELP: Symbol Search Path:cache*;SRV*https://msdl.microsoft.com/download/symbols;c:\echo\kmdf\driver\autosync>
<DBGHELP: Symbol Search Path:cache*;SRV*https://msdl.microsoft.com/download/symbols;c:\echo\kmdf\driver\autosync>
<Symbol search path is: srv*;C:\echo\kmdf\driver\AutoSync>
<Expanded Symbol search path is:cache*;SRV*https://msdl.microsoft.com/download/symbols;c:\echo\kmdf\driver\autosync>

<************* Symbol Path validation summary **************>
<Response                         Time (ms)     Location>
<Deferred                                       srv*>
<OK                                             C:\echo\kmdf\driver\AutoSync>
<kd> .sympath>
<Symbol search path is: srv*;C:\echo\kmdf\driver\AutoSync>
<Expanded Symbol search path is: >
cache*;SRV*https://msdl.microsoft.com/download/symbols;c:\echo\kmdf\driver\autosync>
<>
<************* Symbol Path validation summary **************>
<Response                         Time (ms)     Location>
<Deferred                                       srv*>
<OK                                             C:\echo\kmdf\driver\AutoSync>
<kd> .reload /f>
<? Retry sending the same data packet for 64 times.>
<The transport connection between host and kernel debugger and target Windows seems lost.>
<please try resync with target, recycle the host debugger, or reboot the target Windows.>
<...Retry sending the same data packet for 128 times.>
<...Retry sending the same data packet for 192 times.>
<...Retry sending the same data packet for 256 times.>

此致。

Answer 1

问题已解决。将 VM 设置从以太网更改为 COM。我还通过使用 this 网站设置将 bcdedit 调试设置更改为 COM 端口。现在我可以调试并重新加载符号或驱动程序了。

.reload 命令后与目标的连接丢失

Connection lost to target after .reload command

windbg

driver

wdk

kmdf

wdm