2016-06-30

How to Windows Kernel debugging between Virtual marchine with Network

How to Windows Kernel debugging between Virtual marchine with Network .


Test Setting

Debugger and Debugee have same settings.

  1. Windows 2012 R2
  2. Visual Studio 2013
  3. WDK 8.1
  4. 1 - NIC


Basically, Kernel debugging dodel is a diagram that is following <fig .1>.


<fig .1>

Therefore, It needs 2 PCs or 2 VMs for debugging, and it has to be connected by Network  each o other.
And, Network kernel debugging is suppored by WDK 8 and later..
However, Despite of Supprting formally, From the ‘msconfig’ GUI wizard , it does not choose ‘NET’ mode…
ㅜ.,ㅜ….


But, It became more simpler than using a serial port.
hoooray~.

Steps for the Debuggee



  1. Setting up the debug mode with a network address , then Run commands next..
bcdedit /debug on
bcdedit /dbgsettings net hostip:192.168.2.8 port :50000
※  A parameter hostip means address of ‘Debugger’ that is connected with ‘Debugee’.
※ A command returns Key and you should to note or rememeber that key.
And, you are going to see your debug settings with following command.
(bcdedit /dbgsettings)


  1. and Reboot


Steps for The Debugger

  1. Start  a Windbg.
  2. Click on the File > ‘Kernel Debug’
  3. Move on ‘NET’ tab of the popup window.
  4. Enter value of  port and Key you memo. ( ex . sdkjhs8sjhdksjd87sdjhksjdnnjhskd9sdks)
  5. Click ‘OK’
  6. It will printed “Waiting connect..” .

    If it still connecting…
  7. Reboot debuggee , and click on the Debug > break .

    After it is connected, you want to boot debugee continually.
  8. Click on the Debug > go.


No comments:

Post a Comment