Windbg Extension NetExt 使用指南 【2】 ---- NetExt 的基本命令介绍
摘要 : 本章节介绍NetExt常用的命令. 并且对SOS进行一些对比.
NetExt的帮助
要想玩好NetExt, 入门就得看帮助. 看NetExt的帮助可以调用!whelp 命令. 这样hi列举出NetExt所支持的所有命令.
0:000> !netext.whelp
netext version 2.0.0.5000 Feb 9 2015
License and usage can be seen here: !whelp license
Check Latest version: !wupdate
For help, type !whelp (or in WinDBG run: '.browse !whelp')
Questions and Feedback: http://netext.codeplex.com/discussions
Copyright (c) 2014-2015 Rodney Viana (http://blogs.msdn.com/b/rodneyviana)
Type: !windex -tree or ~*e!wstack to get started Show Object Detail Commands
---------------------------
!wdo - Display ad-hoc objects or arrays from GAC or Stack
!wselect - Display ad-hoc fields (and level fields) for an object or for all item in an array
!wfrom - Perform SQL-like analysis of Heap objects enabling comparison, expression evaluation and indexed filtering.
*(new)* !wpe - Dump Exception Object Enumerate objects
------------------
!windex - index and display objects based in different filters like object with of type HttpContext
!wstack - dump unique stack objects
!wheap - list objects without indexing and show thottled heap sampling
!wgchandle - Dump GC root handles
*(new)* !wdae - Dump All Exceptions Process commands
----------------
!wclrstack - Dump current stack trace (only managed thread)
*(new)* !wthreads
*(new)* !wver - Show CLR version and extension version
*(new)* !wupdate - Check for update Special
------- !wdict - Display dictionary objects
!whash - Display HashTable objects
!whttp - List HttpContext Objects
!wconfig - Show all .config file lines in memory
!wservice - List WCF service Objects
!weval - Evaluate expression list
!wkeyvalue - Display pair key/value for NameObjectCollection type objects
!wcookie - Display HTTP cookies
!wruntime - Display HTTP Runtime Info including Active Requests
!wtoken - Display WIF tokens and cookies Misc
---- expression syntax
functions list *new functions*
license see all licenses applied to this product
如果想要知道具体更为具体的内容, 需要在!whelp 后面加上这个命令. 例如, NetExt中用得非常多的一个命令!wdo. 这个命令相当于!sos.do. 如果想要知道它更为详细的说明, 可以执行命令 !whelp wdo
0:000> !netext.whelp wdo
Display ad-hoc objects or arrays from GAC or Stack Usage: !wdo [-forcearray] [-shownull] [-noheader] [-noindex] [-tokens] [-mt <expr>]
[-start <expr>] [-end <expr>] <expr>
Where:
-mt <expr> is the method table address of the object (for value objects). Optional
-start lt;expr> is the starting index of an array. Optional. Default is starting array at item 0
-end <expr> is the end index of an array. Optional. Default is ending array at max items
-forcearray if not used Byte[] and Char[] arrays will show as string instead of array items. Optional
-shownull if not used will show only non-empty array items. Optional
-noheader if present will hide headers and show only object address, fields and values. Optional
-noindex if present will not show array index (useful for .foreach). Optional
-tokens if present will show class token and field token
<expr> is the object or array address (you can use an expression). Required Improvements over !DumpObj:
---------------------------
- Object, struct and nested class fields show address value with link to detail the field. Click link to follow
- Numeric type fields show both hex and decimal values
- For Enum type fields it shows the type name (or type names for [Flag]Enum) along with the numeric value
- For TimeSpan and DateTime fields it shows the string equivalent
- For strings it show the content after the address
- It shows the inheritance chain in the header (not interface implementations though)
- Byte[] and Char[] objects shows as string if you do not use -forcearraty
- By default, array objects only show non-null items
- Static fields show the value for the first valid application domain where it is defined
- For arrays it lists all components Examples:
------------- Listing an object ad-hoc
------------------------
!wdo -tokens 00000001556e24e8
Address: 00000001556e24e8
EEClass: 000007feef8c2d50
Method Table: 000007feefc40268
Class Name: System.Runtime.Remoting.Lifetime.Lease
Size : 96
Instance Fields: 12
Static Fields: 1
Total Fields: 13
Heap: 0
Generation: 0
Module: 000007feef7d1000
Assembly: 0000000001373e00
Domain: 000007fef2767880
Dynamic: false
Assembly name: C:\Windows\assembly\GAC_64\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
Inherits: System.Runtime.Remoting.Lifetime.Lease System.Object System.MarshalByRefObject (000007FEEFC40268 000007FEEFC07370 000007FEEFC0AD70)
400018a 000007feefc07370 2000052 System.Object +0000 __identity 0000000000000000
400201e 000007feefc0ecf0 2000702 System.Int32 +0020 id 0 (0n0)
400201f 000007feefc47fb8 2000702 System.DateTime +0030 leaseTime -mt 000007FEEFC47FB8 00000001556E2520 10/26/2011 9:21:08 PM
4002020 000007feefc47eb8 2000702 System.TimeSpan +0038 initialLeaseTime -mt 000007FEEFC47EB8 00000001556E2528 00:05:00
4002021 000007feefc47eb8 2000702 System.TimeSpan +0040 renewOnCallTime -mt 000007FEEFC47EB8 00000001556E2530 00:02:00
4002022 000007feefc47eb8 2000702 System.TimeSpan +0048 sponsorshipTimeout -mt 000007FEEFC47EB8 00000001556E2538 00:02:00
4002023 000007feefc06c50 2000702 System.Boolean +002c isInfinite 0 (False)
4002024 000007feefc0f3d8 2000702 System.Collections.Hashtable +0008 sponsorTable 00000001556E2548
4002025 000007feefc0ecf0 2000702 System.Int32 +0024 sponsorCallThread 0 (0n0)
4002026 000007feefc41568 2000702 System.Runtime.Remoting.Lifetime.LeaseMa +0010 leaseManager 00000001556E1FD0
4002027 000007feefc0ad70 2000702 System.MarshalByRefObject +0018 managedObject 0000000155663A40
4002028 000007fef03aefc0 2000702 System.Runtime.Remoting.Lifetime.LeaseSt +0028 state 2 (0n2) Active
4002029 000007feefc0ecf0 Static 2000702 System.Int32 +0c78 nextId NoInit Listing only items 5 to 10 (oxa) from an array
----------------------------------------------
!wdo -start 5 -end a 000000016d29cb50
Address: 000000016d29cb50
EEClass: 00000642780e0cf8
Method Table: 000006427843e2a8
Class Name: System.Collections.Hashtable+bucket[]
Size : 576
Rank: 1
Components: 23
[5]: 000000016d29cbd8
[6]: 000000016d29cbf0
[7]: 000000016d29cc08
[8]: 000000016d29cc20
[9]: 000000016d29cc38
[10]: 000000016d29cc50
* Note: for HashTables you can use !whash Compare to:
-----------
!wselect - also shows add-hoc objects and arrays, however wselect enables the selection of fields (and field levels) and does not show extensive header
!wfrom - enable complex query mechanism with categories, conditions and functions but it is not as simple to use as wselect and wdo How do I get object addresses?
------------------------------
- Type !windex -enumtypes or !windex -tree to enumerate heap objects
- Type ~*e!wstack to list all objects in the stack for all threads
- Type !wheap to show a quick heap sampling without indexing. It will yield a throttled but quick output
玩转DUMP OBJECT
SOS中可以用!do里面把Object的信息DUMP出来. NetExt中, 则是使用!wdo. 从表面看, 他们显示的结果并没有多大区别.
0:014> !do 00000001957775e0
Name: System.RuntimeFieldInfoStub
MethodTable: 000007fef0b9c950
EEClass: 000007fef07d1dc0
Size: 72(0x48) bytes
File: C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
Fields:
MT Field Offset Type VT Attr Value Name
000007fef0b95a48 40005c6 8 System.Object 0 instance 0000000000000000 m_keepalive
000007fef0b95a48 40005c7 10 System.Object 0 instance 0000000000000000 m_c
000007fef0b95a48 40005c8 18 System.Object 0 instance 0000000000000000 m_d
000007fef0b9c7d8 40005c9 30 System.Int32 1 instance 0 m_b
000007fef0b95a48 40005ca 20 System.Object 0 instance 0000000000000000 m_e
000007fef0b95a48 40005cb 28 System.Object 0 instance 0000000000000000 m_f
000007fef0ba6d98 40005cc 38 ...eldHandleInternal 1 instance 0000000195777618 m_fieldHandle 0:014> !netext.wdo 00000001957775e0
Address: 00000001957775e0
Method Table/Token: 000007fef0b9c950/200014a04
Class Name: System.RuntimeFieldInfoStub
Size : 72
EEClass: 000007fef07d1dc0
Instance Fields: 7
Static Fields: 0
Total Fields: 14
Heap/Generation: 1/0
Module: 00000000f06d0000
Assembly: 0000000000da0870
Domain: 00000000f3f75580
Assembly Name: C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
Inherits: System.Object (000007FEF0B95A48)
000007fef0b95a48 System.Object +0000 m_keepalive 0000000000000000
000007fef0b95a48 System.Object +0008 m_c 0000000000000000
000007fef0b95a48 System.Object +0010 m_d 0000000000000000
000007fef0b95a48 System.Object +0018 m_e 0000000000000000
000007fef0b95a48 System.Object +0020 m_f 0000000000000000
000007fef0b9c7d8 System.Int32 +0028 m_b 0 (0n0)
000007fef0ba6d98 System.RuntimeFieldHandleInternal +0030 m_fieldHandle -mt 000007FEF0BA6D98 0000000195777618
!wdo在细节上则做的更加体贴. 例如dump的对象中包含了一个string类型, !wdo会将string的地址显示出来. 对于枚举类型, 则会将枚举对应的含义显示出来. !do命令显示出来的结果还必须手工的再对string的地址进行操作. 对枚举的类型的翻译也相当的贴心, 减少了机械枯燥的工作也节省了时间.
0:014> !do 000000019588b000
Name: System.Uri
MethodTable: 000007feeec9b358
EEClass: 000007feee995d30
Size: 72(0x48) bytes
File: C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
Fields:
MT Field Offset Type VT Attr Value Name
000007fef0b968f0 400161c 8 System.String 0 instance 000000019571ede0 m_String
000007fef0b968f0 400161d 10 System.String 0 instance 0000000000000000 m_originalUnicodeString
000007feeec9f698 400161e 18 System.UriParser 0 instance 000000019568c020 m_Syntax
000007fef0b968f0 400161f 20 System.String 0 instance 0000000000000000 m_DnsSafeHost
000007feeecf2778 4001620 30 System.UInt64 1 instance 37624152064 m_Flags
(...) 0:014> !wdo 000000019588b000
Address: 000000019588b000
Method Table/Token: 000007feeec9b358/200037704
Class Name: System.Uri
Size : 72
EEClass: 000007feee995d30
Instance Fields: 7
Static Fields: 21
Total Fields: 14
Heap/Generation: 1/0
Module: 00000000ee980000
Assembly: 0000000003ec58a0
Domain: 00000000f3f75580
Assembly Name: C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
Inherits: System.Object (000007FEF0B95A48)
000007fef0b968f0 System.String +0000 m_String 000000019571ede0 http://rviana-serv.northamerica.corp.microsoft.com:2000/Service.svc
000007fef0b968f0 System.String +0008 m_originalUnicodeString 0000000000000000 (null)
000007feeec9f698 System.UriParser +0010 m_Syntax 000000019568c020
000007fef0b968f0 System.String +0018 m_DnsSafeHost 0000000000000000 (null)
000007feeec9fbb8 System.Uri+UriInfo +0020 m_Info 000000015572ea20
000007feeecf2778 System.Uri+Flags +0028 m_Flags 8c2930000 (0n37624152064) IPv6HostType|IPv4HostType|DnsHostType|AuthorityFound|NotDefaultPort|CanonicalDnsHost|MinimalUriInfoSet|AllUriInfoSet|RestUnicodeNormalized
(...)
另外一个优势在于对数组的处理. SOS的!do并不能显示数组里面的内容, 需要使用!dumparray命令.
0:014> !do 00000001957ab4a8
Name: System.Byte[]
MethodTable: 000007fef0ba0b40
EEClass: 000007fef0722310
Size: 4120(0x1018) bytes
Array: Rank 1, Number of elements 4096, Type Byte (Print Array)
Element Type:System.Byte
Content: <HTML><HEAD><link rel="alternate" type="text/xml" href="http://rviana-serv.northamerica.corp.microsoft.com:2000/Service.svc?disc
Fields:
None 0:014> !dumparray -details 00000001957ab4a8
Name: System.Byte[]
MethodTable: 000007fef0ba0b40
EEClass: 000007fef0722310
Size: 4120(0x1018) bytes
Array: Rank 1, Number of elements 4096, Type Byte
Element Methodtable: 000007fef0b9c158
[0] 00000001957ab4b8
Name: System.Byte
MethodTable: 000007fef0b9c158
EEClass: 000007fef0720398
Size: 24(0x18) bytes
File: C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
Fields:
MT Field Offset Type VT Attr Value Name
000007fef0b9c158 4000276 0 System.Byte 1 instance 60 m_value
[1] 00000001957ab4b9
Name: System.Byte
MethodTable: 000007fef0b9c158
EEClass: 000007fef0720398
Size: 24(0x18) bytes
File: C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
Fields:
MT Field Offset Type VT Attr Value Name
000007fef0b9c158 4000276 0 System.Byte 1 instance 72 m_value (…)
使用!wdo时候, 他会尝试将这些数组翻译成一些有意义的内容. 例如上面的byte[]数组, 其实可以拼成一组字符串.
0:014> !wdo 00000001957ab4a8
Address: 00000001957ab4a8
Method Table/Token: 000007fef0ba0b40/200000004
Class Name: System.Byte[]
Size : 4120
EEClass: 000007fef0722310
Rank: 1
Components: 4096
Data Start: 00000001957ab4b8
<HTML><HEAD><link rel="alternate" type="text/xml" href="http://rviana-serv.northamerica.corp.microsoft.com:2000/Service.svc?disco"/><STYLE type="text/css">#content{ FONT-SIZE: 0.7em; PADDING-BOTTOM: 2em; MARGIN-LEFT: 30px}BODY{MARGIN-TOP: 0px; MARGIN-LEFT: 0px; COLOR: #000000; FONT-FAMILY: Verdana; BACKGROUND-COLOR: white}P{MARGIN-TOP: 0px; MARGIN-BOTTOM: 12px; COLOR: #000000; FONT-FAMILY: Verdana}PRE{BORDER-RIGHT: #f0f0e0 1px solid; PADDING-RIGHT: 5px; BORDER-TOP: #f0f0e0 1px solid; MARGIN-TOP: -5px; PADDING-LEFT: 5px; FONT-SIZE: 1.2em; PADDING-BOTTOM: 5px; BORDER-LEFT: #f0f0e0 1px solid; PADDING-TOP: 5px; BORDER-BOTTOM: #f0f0e0 1px solid; FONT-FAMILY: Courier New; BACKGROUND-COLOR: #e5e5cc}.heading1{MARGIN-TOP: 0px; PADDING-LEFT: 15px; FONT-WEIGHT: normal; FONT-SIZE: 26px; MARGIN-BOTTOM: 0px; PADDING-BOTTOM: 3px; MARGIN-LEFT: -30px; WIDTH: 100%; COLOR: #ffffff; PADDING-TOP: 10px; FONT-FAMILY: Tahoma; BACKGROUND-COLOR: #003366}.intro{MARGIN-LEFT: -15px}</STYLE><TITLE>Service Service</TITLE></HEAD><BODY><DIV id="content"><P class="heading1">Service Service</P><BR/><P class="intro">You have created a service.<P class='intro'>To test this service, you will need to create a client and use it to call the service. You can do this using the svcutil.exe tool from the command line with the following syntax:</P> <BR/><PRE>svcutil.exe <A HREF="http://rviana-serv.northamerica.corp.microsoft.com:2000/Service.svc?wsdl">http://rviana-serv.northamerica.corp.microsoft.com:2000/Service.svc?wsdl</A></PRE></P><P class="intro"/>This will generate a configuration file and a code file that contains the client class. Add the two files to your client application and use the generated client class to call the Service. For example:<BR/><P class='intro'><B>C#</B></P><PRE><font color="blue">class </font><font color="teal">Test
</font>{
<font color="blue"> static void </font>Main()
{
<font color="teal">ServiceClient</font> client = <font color="blue">new </font><font color="teal">ServiceClient</font>(); <font color="green"> // Use the 'client' variable to call operations on the service. </font><font color="green"> // Always close the client.
</font> client.Close();
}
}
</PRE><BR/><P class='intro'><B>Visual Basic</B></P><PRE><font color="blue">Class </font><font color="teal">Test
</font><font color="blue"> Shared Sub </font>Main()
<font color="blue"> Dim </font>client As <font color="teal">ServiceClient</font> = <font color="blue">New </font><font color="teal">ServiceClient</font>()
<font color="green"> ' Use the 'client' variable to call operations on the service. </font><font color="green"> ' Always close the client.
</font> client.Close()
<font color="blue"> End Sub
</font><font color="blue">End Class</font></PRE></DIV></BODY></HTML> 当然也可以选择以数组的形式进行检查, 同时也可以指定一定的范围. 例如可以用!wdo并且带上参数 -forcearray -start 以及 -end 进行约束. 0:014> !wdo -forcearray -start 0n10 -end 0n15 00000001957ab4a8
Address: 00000001957ab4a8
Method Table/Token: 000007fef0ba0b40/200000004
Class Name: System.Byte[]
Size : 4120
EEClass: 000007fef0722310
Rank: 1
Components: 4096
Data Start: 00000001957ab4b8
[10]: 0x44 (0n68)
[11]: 0x3e (0n62)
[12]: 0x3c (0n60)
[13]: 0x6c (0n108)
[14]: 0x69 (0n105)
[15]: 0x6e (0n110)
还能用-noheader的参数减少输出的内容, 可以关注具体字段里面的数据. 通常是配合一些脚本一起使用.
每一列的意义如下 :
| Column | 意义 |
| 0 | 当前field的类型的Method Definition Table的地址 |
| 1 | 如果显示Static, 则说明这个field是个Static类型, 否则是个instance |
| 2 | 类型的名称 |
| 3 | field的偏移量. |
| 4 | field name |
| 5 | 这个field的具体内容, 如果是个值类型, 则是它的值, 如果是引用类型则显示它的地址. |
| 6 | 如果是一个常用类型, 则显示他的具体内容, 常用类型包括datetime, string, guid等等 |
!wselect初体验
另外一个非常强大的功能是!wselect命令. 这个命令与!wdo很类似, 也是用dump object.
0:014> !wselect * from 000000019588b000
[System.Uri]
Known Type Value: http://rviana-serv.northamerica.corp.microsoft.com:2000/Service.svc
(string)System.String m_String = http://rviana-serv.northamerica.corp.microsoft.com:2000/Service.svc
(string)System.String m_originalUnicodeString = NULL
System.UriParser m_Syntax = 000000019568C020
(string)System.String m_DnsSafeHost = NULL
System.Uri+UriInfo m_Info = 000000015572EA20
(…)
如果你认为他只能做到这些就图样图森破了. 它还可以只显示个别特定的field, 当然你必须指定field的名称.
0:014> !wselect m_String, m_Flags from 000000019588b000
[System.Uri]
Known Type Value: http://rviana-serv.northamerica.corp.microsoft.com:2000/Service.svc
(string)System.String m_String = http://rviana-serv.northamerica.corp.microsoft.com:2000/Service.svc
(uint64)System.Uri+Flags m_Flags = 8c2930000 (0n37624152064) IPv6HostType|IPv4HostType|DnsHostType|AuthorityFound|NotDefaultPort|CanonicalDnsHost|MinimalUriInfoSet|AllUriInfoSet|RestUnicodeNormalized
不仅如此, 它还可以将field所对应的Object下面的field也dump出来. 这个功能非常的实用. 当我需要重复性的检查一些固定模式的对象值的时候, 可以用他做成一个脚本, 然后一劳永逸的一直执行下去.
例如, 如果我现在知道HttpContext的地址. 然后我需要知道它对应的请求的UTC Time Stamp, http Method, URL, Response status code等等内容时, 应该怎么办? 这些数据并不全都直接显示在HttpContext上面. UTC Time Stamp在HttpContext上面可以找到. HttpMethod则在HttpContext下面的HttpRequest下面this._request._httpMethod. URI则离得更远, _request._url.m_String. Response Status Code又在另外一个对象上this._response._statusCode. 下面举例我如何通过SOS去DUMP一个Http的请求地址.
0:014> !do 00000001956f77a8
Name: System.Web.HttpContext
MethodTable: 000007fed5396100
EEClass: 000007fed505b938
Size: 344(0x158) bytes
File: C:\Windows\Microsoft.Net\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
Fields:
MT Field Offset Type VT Attr Value Name
000007fed5395598 4000cab 8 ...IHttpAsyncHandler 0 instance 0000000000000000 _asyncAppHandler
000007fed53950c0 4000cac 10 ...b.HttpApplication 0 instance 0000000000000000 _appInstance
000007fed5395610 4000cad 18 ....Web.IHttpHandler 0 instance 0000000000000000 _handler
000007fed5396558 4000cae 20 ...m.Web.HttpRequest 0 instance 00000001956f7900 _request (...) 0:014> !do 00000001956f7900
Name: System.Web.HttpRequest
MethodTable: 000007fed5396558
EEClass: 000007fed505b9a0
Size: 360(0x168) bytes
File: C:\Windows\Microsoft.Net\assembly\GAC_64\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll
Fields:
MT Field Offset Type VT Attr Value Name
000007fed5399f48 4000d40 8 ...HttpWorkerRequest 0 instance 00000001956f7570 _wr
000007fed5396100 4000d41 10 ...m.Web.HttpContext 0 instance 00000001956f77a8 _context
000007fef0b968f0 4000d42 18 System.String 0 instance 00000001956fa860 _httpMethod
000007fed53cb4c0 4000d43 148 System.Int32 1 instance 2 _httpVerb
000007fef0b968f0 4000d44 20 System.String 0 instance 0000000000000000 _requestType
000007fed538ac98 4000d45 28 ...m.Web.VirtualPath 0 instance 00000001956ff140 _path
000007fef0b968f0 4000d46 30 System.String 0 instance 0000000000000000 _rewrittenUrl
000007fef0b9d608 4000d47 150 System.Boolean 1 instance 0 _computePathInfo
000007fed538ac98 4000d48 38 ...m.Web.VirtualPath 0 instance 00000001956fe068 _filePath
000007fed538ac98 4000d49 40 ...m.Web.VirtualPath 0 instance 0000000000000000 _currentExecutionFilePath
000007fed538ac98 4000d4a 48 ...m.Web.VirtualPath 0 instance 0000000000000000 _pathInfo
000007fef0b968f0 4000d4b 50 System.String 0 instance 0000000155660488 _queryStringText
000007fef0b9d608 4000d4c 151 System.Boolean 1 instance 0 _queryStringOverriden
000007fef0ba0b40 4000d4d 58 System.Byte[] 0 instance 0000000000000000 _queryStringBytes
000007fef0b968f0 4000d4e 60 System.String 0 instance 00000001956f76c0 _pathTranslated
000007fef0b968f0 4000d4f 68 System.String 0 instance 0000000155660488 _contentType
000007fef0b9c7d8 4000d50 14c System.Int32 1 instance -1 _contentLength
000007fef0b968f0 4000d51 70 System.String 0 instance 0000000000000000 _clientTarget
000007fef0b9adf8 4000d52 78 System.Object[] 0 instance 0000000000000000 _acceptTypes
000007fef0b9adf8 4000d53 80 System.Object[] 0 instance 0000000000000000 _userLanguages
000007fed53a3f68 4000d54 88 ...owserCapabilities 0 instance 0000000000000000 _browsercaps
000007feeec9b358 4000d55 90 System.Uri 0 instance 00000001957112a0 _url (...) 0:014> !do 00000001957112a0
Name: System.Uri
MethodTable: 000007feeec9b358
EEClass: 000007feee995d30
Size: 72(0x48) bytes
File: C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll
Fields:
MT Field Offset Type VT Attr Value Name
000007fef0b968f0 400161c 8 System.String 0 instance 0000000195711240 m_String (...) 0:014> !do 0000000195711240
Name: System.String
MethodTable: 000007fef0b968f0
EEClass: 000007fef071ed58
Size: 92(0x5c) bytes
File: C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.dll
String: http://localhost:2000/Service.svc
Fields:
MT Field Offset Type VT Attr Value Name
000007fef0b9c7d8 4000103 8 System.Int32 1 instance 33 m_stringLength
从这里看到, 如果要从HttpContext上面dump Http 请求的地址, 需要执行4次!do指令. 同时还要去找到其他的对象, 那么还需要更多的步骤. 如果需要检查多个HttpContext上面相同的这些字段内容, 将是一场噩梦.
如果这个事情交给NetExt来做就相当的轻松, 只要几个命令, 一切搞定.
0:014> !wselect _utcTimestamp, _request._httpMethod, _request._url.m_String, _response._statusCode from 00000001956f77a8
[System.Web.HttpContext]
System.DateTime _utcTimestamp = -mt 000007FEF0BB96C8 00000001956F78D8 10/26/2011 11:29:15 PM
(string)System.String _request._httpMethod = GET
(string)System.String _request._url.m_String = http://localhost:2000/Service.svc
(int32)System.Int32 _response._statusCode = c8 (0n200)
从这个角度上来说, 这绝对是提高debugging效率的利器.
总结
NetExt针对debugging的工作做了非常多的优化工作.
- 相对!sos.do, !wdo优化了显示的内容, 很多常用的类型都将会直接显示出具体的内容. 并且针对一些常用的枚举进行了转义, 可以让我们直接了解到枚举的值所代表的意义.
- !wdo针对数组的显示进行了相当多的优化
- !wselect同样是dump object的利器. 如果我们岙DUMP的object藏在很深的路径下, 它能够帮助我们介绍很多时间和工作量.
Sonic Guo
Windbg Extension NetExt 使用指南 【2】 ---- NetExt 的基本命令介绍的更多相关文章
- Windbg Extension NetExt 使用指南 【1】 ---- NetExt 介绍
摘要 : 在使用WINDBG做debugging的时候,需要一个好的工具帮助进行数据分析. 最常见的extension包括SOS, PSSCOR. NetExt则是另外一种提供了丰富命令功能的deb ...
- Windbg Extension NetExt
Windbg Extension NetExt 摘要 : 在使用WINDBG做debugging的时候,需要一个好的工具帮助进行数据分析. 最常见的extension包括SOS, PSSCOR. N ...
- 一起学微软Power BI系列-官方文档-入门指南(1)Power BI初步介绍
我们在前一篇文章微软新神器-Power BI,一个简单易用,还用得起的BI产品中,我们初步介绍了Power BI的基本知识.由于Power BI是去年开始微软新发布的一个产品,虽然已经可以企业级应用, ...
- Windbg Extension NetExt 使用指南 【3】 ---- 挖掘你想要的数据 Managed Heap
摘要 : NetExt中有两个比较常用的命令可以用来分析heap上面的对象. 一个是!wheap, 另外一个是!windex. !wheap 这个命令可以用于打印出heap structure信息. ...
- HarmonyOS三方件开发指南(14)-Glide组件功能介绍
<HarmonyOS三方件开发指南>系列文章合集 引言 在实际应用开发中,会用到大量图片处理,如:网络图片.本地图片.应用资源.二进制流.Uri对象等,虽然官方提供了PixelMap进行图 ...
- Angular开发者指南（一）入门介绍
什么是Angular AngularJS是动态Web应用程序的结构框架. 它允许您使用HTML作为模板语言,并允许您扩展HTML的语法以清晰,简洁地表达应用程序的组件.AngularJS的数据绑定和依 ...
- 第二章排错的工具：调试器Windbg（上）
感谢博主 http://book.51cto.com/art/200711/59731.htm <Windows用户态程序高效排错>第二章主要介绍用户态调试相关的知识和工具.本文主要讲了排 ...
- 揭秘 iOS App Extension 开发 —— Today 篇
转自:http://www.cocoachina.com/ios/20160619/16760.html 本文授权转载,作者:Cyandev(简书) 从 iOS 8 开始,苹果引入了全新的 App E ...
- 一起学微软Power BI系列-官方文档-入门指南(2)获取源数据
我们在文章: 一起学微软Power BI系列-官方文档-入门指南(1)Power BI初步介绍中,我们介绍了官方入门文档的第一章.今天继续给大家介绍官方文档中,如何获取数据源的相关内容.虽然是英文,但 ...
随机推荐
- 先说IEnumerable，我们每天用的foreach你真的懂它吗？
我们先思考几个问题: 为什么在foreach中不能修改item的值? 要实现foreach需要满足什么条件? 为什么Linq to Object中要返回IEnumerable? 接下来,先开始我们的正 ...
- TODO：Golang指针使用注意事项
TODO:Golang指针使用注意事项 先来看简单的例子1: 输出: 1 1 例子2: 输出: 1 3 例子1是使用值传递,Add方法不会做任何改变:例子2是使用指针传递,会改变地址,从而改变地址. ...
- HTML中上传与读取图片或文件（input file）----在路上（25）
input file相关知识简例 在此介绍的input file相关知识为: 上传照片及文件,其中包括单次上传.批量上传.删除照片.增加照片.读取图片.对上传的图片或文件的判断,比如限制图片的张数.限 ...
- 02.SQLServer性能优化之---牛逼的OSQL----大数据导入
汇总篇:http://www.cnblogs.com/dunitian/p/4822808.html#tsql 上一篇:01.SQLServer性能优化之----强大的文件组----分盘存储 http ...
- 参考bootstrap中的popover.js的css画消息弹框
前段时间小颖的大学同学给小颖发了一张截图,图片类似下面这张图: 小颖当时大概的给她说了下,其实小颖也不知道上面那个三角形怎么画嘻嘻,给她说了DOM结构,具体的css让她自己百度,今天小颖自己参考boo ...
- C#数组,List,Dictionary的相互转换
本篇文章会向大家实例讲述以下内容: 将数组转换为List 将List转换为数组 将数组转换为Dictionary 将Dictionary 转换为数组 将List转换为Dictionary 将Dicti ...
- iOS之延时执行（睡眠）的几种方法
1. 最直接的方法: [self performSelector:@selector(deleyMethod) withObject:nil afterDelay:1.0]; 此方式要求必须在主线程中 ...
- 全网独家MongoDB Certified DBA Associate考试认证视频
该视频意在让所有学员一次通过考试,避免重复考试而承担的巨额考试费用! 目前MongDB发展迅猛,有赶超mysql,和oracle看齐的苗头.在这个时候MongoDB也适时的推出了官方的认证考试&quo ...
- (转载) RESTful API 设计指南
作者: 阮一峰 日期: 2014年5月22日 网络应用程序,分为前端和后端两个部分.当前的发展趋势,就是前端设备层出不穷(手机.平板.桌面电脑.其他专用设备......). 因此,必须有一种统一的机制 ...
- [转] 从知名外企到创业公司做CTO是一种怎样的体验？
这是我近期接受51CTO记者李玲玲采访的一篇文章,分享给大家. 作者:李玲玲来源:51cto.com|2016-12-30 15:47 http://cio.51cto.com/art/201612/ ...