What is dump file?


What is dump file?

Whenever system is crashed it create dump file, and this dump file has all the answer. It contains data, (Memory Map) that was in the memory when system crashed, you can use it as a point in time to see what was in memory when system crashed.

There are 3 types of dump files which are used for analyses:

  • Complete memory dump saved in %SystemRoot%\MEMORY.DMP,
  • Kernel memory dump saved in %SystemRoot%\MEMORY.DMP
  • Small memory dump (64 KB) saved  %SystemRoot%\Minidump

* %systemroot% is path equal to “C:\windows” for windows 2003 and later operating system.

Read Microsoft KB on for detailed information about memory dump files http://support.microsoft.com/kb/254649

You can configure windows settings which dump file you want to generate

Simply Go to start, right click computer, choose properties

Click “Advance system settings”

Click on setting  under Startup and Recovery.

Create a “Dump” folder under C drive, Here I am changing the path of each memory dump file path to C:\Dump, for better management and easy portability of dump files Rather than keeping default.

If you have more than 2 GB of ram you will not able to see complete memory dump in drop down list. By default system will create Kernel memory dump file, you can use drop down list and select which dump file you want to create.

Select small memory dump (256 KB) and set dump file location to c:\dump\minidump.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: