« UML and Device drivers
Quiz: 32/64 = ? »

Crash Dumps for Dummies (Part 1)

There is much confusion among MS and therefore Citrix customers about different dump types - Windows has 3 major dump types (not including various mini-dumps): complete, kernel and user. Long time ago I created a hand-crafted picture showing how various parts of computer memory are saved in a dump and I want to share it with a wider part of Citrix community and perhaps with the rest of the world:

- Dmitry Vostokov  @ DumpAnalysis.org -

This entry was posted on Monday, October 9th, 2006 at 1:15 pm and is filed under Crash Dump Analysis, Crash Dumps for Dummies. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

3 Responses to “Crash Dumps for Dummies (Part 1)”

  1. Crash Dump Analysis » Blog Archive » Crash Dumps for Dummies (Part 2) Says:
    July 12th, 2008 at 12:03 am

    […] Part 2 follows the discussion of various dump types depicted here: Dumps for Dummies (Part 1)  […]

  2. Crash Dump Analysis » Blog Archive » Reflecting on 2008 (Part 1) Says:
    June 17th, 2010 at 2:07 pm

    […] analysis crash dump ntdll!kifastsystemcallret vista crash dump time travel debugging dump analysis crash dumps windbg commands memory dump analysis anthology memory intelligence analysis crashdump your debugger is not using […]

  3. Question about memory dump Says:
    August 1st, 2012 at 12:41 pm

    […] about memory dump, which memory are we talking about? Virtual Memory or Physical Memory? From this picture, I think it should be Physical […]

Leave a Reply

You must be logged in to post a comment.