A brief overview of the Windows debuggers

最新推荐文章于 2020-11-26 18:29:16 发布

转载最新推荐文章于 2020-11-26 18:29:16 发布 · 424 阅读

文章标签：

3 篇文章

订阅专栏

本文介绍了几种Windows下的调试工具，包括内核模式调试器KD、命令行调试器CDB、用户模式调试器NTSD以及结合了良好用户界面的Windbg等。此外还对比了这些调试器的功能特性，如内核模式调试、用户模式调试、远程调试等。

KD – Kernel debugger. You want to use this to remote debug OS problems like blue screens. You want it if you develop device drivers.
CDB – Command-line debugger. This is a console application.
NTSD – NT debugger. This is a user-mode debugger that you can use to debug your user-mode applications. Effectively, this is Windows-style UI added to CDB.
Windbg – wraps KD and NTSD with a decent UI. WinDbg can function both as a kernel-mode and user-mode debugger.
Visual Studio, Visual Studio .NET – use the same debugging engine as KD and NTSD and offer richer UI than WinDbg for debugging purposes.

_NT_SYMBOL_PATH
srv*c:/symbols*http://msdl.microsoft.com/download/symbols

Feature	KD	NTSD	WinDbg	Visual Studio .NET

Kernel-mode debugging	Y	N	Y	N
User-mode debugging		Y	Y	Y
Unmanaged debugging	Y	Y	Y	Y
Managed debugging		Y	Y	Y
Remote debugging	Y	Y	Y	Y
Attach to process	Y	Y	Y	Y
Detach from process in Win2K and XP	Y	Y	Y	Y
SQL debugging	N	N	N	Y