On Tue, May 28, 2013 at 10:17 AM, jack rule <jackrule.1985@gmail.com> wrote:

Hi, I have to implement a dump utility which can dump the physical memory just before the crash.

Jack --

Here you can find some basic of dumping physical memory - do's and dont's. http://wiki-errors.com/physical-memory-dump-and-what-to-do-about-it/ Linux provides /dev/mem for this purpose. You can look into the fmem kernel module which provides similar information as /dev/mem and then use the internal implementation of DD to dump this information. Since, these mechanism are used often in the forensics world... Copying Greg who can shed more lights on this.

_______________________________________________ Kernelnewbies mailing list Kernelnewbies@kernelnewbies.org http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies

-- Regards, Sandeep. “To learn is to change. Education is a process that changes the learner.”