What is dump file?
Whenever system is crashed it create dump file, and this dump file has all the answer. It contains data, (Memory Map) that was in the memory when system crashed, you can use it as a point in time to see what was in memory when system crashed.
There are 3 types of dump files which are used for analyses:
- Complete memory dump saved in %SystemRoot%\MEMORY.DMP,
- Kernel memory dump saved in %SystemRoot%\MEMORY.DMP
- Small memory dump (64 KB) saved %SystemRoot%\Minidump
* %systemroot% is path equal to “C:\windows” for windows 2003 and later operating system.
Read Microsoft KB on for detailed information about memory dump files http://support.microsoft.com/kb/254649
You can configure windows settings which dump file you want to generate
Simply Go to start, right click computer, choose properties
Click “Advance system settings”
Click on setting under Startup and Recovery.
Create a “Dump” folder under C drive, Here I am changing the path of each memory dump file path to C:\Dump, for better management and easy portability of dump files Rather than keeping default.
If you have more than 2 GB of ram you will not able to see complete memory dump in drop down list. By default system will create Kernel memory dump file, you can use drop down list and select which dump file you want to create.
Select small memory dump (256 KB) and set dump file location to c:\dump\minidump.