dump utility

[SandeepKsinha]

On Tue, May 28, 2013 at 10:17 AM, jack rule <jackrule.1985 at gmail.com> wrote:

> Hi,
>         I have to implement a dump utility which can dump the physical
> memory just before the crash.
>
>
> Jack --

Here you can find some basic of dumping physical memory - do's and dont's.
http://wiki-errors.com/physical-memory-dump-and-what-to-do-about-it/


Linux provides /dev/mem for this purpose. You can look into the fmem kernel
module which provides similar information as /dev/mem and then use the
internal implementation of DD to dump this information.

Since, these mechanism are used often in the forensics world... Copying
Greg who can shed more lights on this.



> _______________________________________________
> Kernelnewbies mailing list
> Kernelnewbies at kernelnewbies.org
> http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
>
>


-- 
Regards,
Sandeep.






“To learn is to change. Education is a process that changes the learner.”
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20130528/630dcefc/attachment.html