Crash Dumps for Dummies (Part 1)

There is much confusion among MS and therefore Citrix customers about different dump types - Windows has 3 major dump types (not including various mini-dumps): complete, kernel and user. Long time ago I created a hand-crafted picture showing how various parts of computer memory are saved in a dump and I want to share it with a wider part of Citrix community and perhaps with the rest of the world:

- Dmitry Vostokov  @ DumpAnalysis.org -

3 Responses to “Crash Dumps for Dummies (Part 1)”

  1. Crash Dump Analysis » Blog Archive » Crash Dumps for Dummies (Part 2) Says:

    […] Part 2 follows the discussion of various dump types depicted here: Dumps for Dummies (Part 1)  […]

  2. Crash Dump Analysis » Blog Archive » Reflecting on 2008 (Part 1) Says:

    […] analysis crash dump ntdll!kifastsystemcallret vista crash dump time travel debugging dump analysis crash dumps windbg commands memory dump analysis anthology memory intelligence analysis crashdump your debugger is not using […]

  3. Question about memory dump Says:

    […] about memory dump, which memory are we talking about? Virtual Memory or Physical Memory? From this picture, I think it should be Physical […]

Leave a Reply

You must be logged in to post a comment.