Comments on: Memory dumps from VMware images https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Wed, 06 May 2026 19:11:51 +0000 http://wordpress.org/?v=2.3.3 By: Marc Sherman https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-424681 Marc Sherman Fri, 17 Feb 2012 14:10:25 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-424681 And there's also Hyper-V saved state to a dump: http://archive.msdn.microsoft.com/vm2dmp And there’s also Hyper-V saved state to a dump:

http://archive.msdn.microsoft.com/vm2dmp

]]> By: Dmitry Vostokov https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-424645 Dmitry Vostokov Fri, 17 Feb 2012 12:42:17 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-424645 Snapshot to a dump: http://www.vmware.com/pdf/snapshot2core_technote.pdf Snapshot to a dump:

http://www.vmware.com/pdf/snapshot2core_technote.pdf

]]> By: Crash Dump Analysis » Blog Archive » Memory Dumps from Hyper-V-virtualized Windows https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-86360 Crash Dump Analysis » Blog Archive » Memory Dumps from Hyper-V-virtualized Windows Tue, 28 Jul 2009 21:33:26 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-86360 [...] is another addition to memory dumps coming VMWare, VirtualPC and Xen Server virtualized systems. Now I had a look at Hyper-V and found that this information [...] […] is another addition to memory dumps coming VMWare, VirtualPC and Xen Server virtualized systems. Now I had a look at Hyper-V and found that this information […]

]]> By: Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 87) https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-83962 Crash Dump Analysis » Blog Archive » Crash Dump Analysis Patterns (Part 87) Fri, 10 Jul 2009 19:24:56 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-83962 [...] Memory dumps from VMware images (Virtual PC diagnostics in post comments) [...] […] Memory dumps from VMware images (Virtual PC diagnostics in post comments) […]

]]> By: Crash Dump Analysis » Blog Archive » Memory Dumps from Xen-virtualized Windows https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-20625 Crash Dump Analysis » Blog Archive » Memory Dumps from Xen-virtualized Windows Thu, 13 Mar 2008 17:18:30 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-20625 [...] Note: similar information can be checked for VMWare and Virtual PC. [...] […] Note: similar information can be checked for VMWare and Virtual PC. […]

]]> By: heejune https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-10040 heejune Tue, 06 Nov 2007 03:47:07 +0000 https://www.dumpanalysis.org/blog/index.php/2007/10/31/memory-dumps-from-vmware-images/#comment-10040 after Microsoft has been released VirtualPC for free, it seems like more and more people start changing their vm tools. anyway, VirtualPC has also very similar processes and drivers. kd> lmt m vm* start end module name f7f43000 f7f57000 vmsrvc Sat May 05 20:37:40 2007 (463C6C84) kd> lmt m vpc* start end module name bf9d5000 bf9ee000 vpc_s3_bf9d5000 Wed Apr 25 05:18:48 2007 (462E6628) f829d000 f82b4000 vpc_s3 Wed Apr 25 05:18:51 2007 (462E662B) BTW, when I tried to make a crash dump sample for kernel stack overflow 0x7F-8 while preparing kernel debugging speech, I coudn't get it from VirtualPC. I gueess VirtualPC treat it as an internal error, contrary to VMWare's behavior. after Microsoft has been released VirtualPC for free, it seems like more and more people start changing their vm tools. anyway, VirtualPC has also very similar processes and drivers.
kd> lmt m vm*
start end module name
f7f43000 f7f57000 vmsrvc Sat May 05 20:37:40 2007 (463C6C84)
kd> lmt m vpc*
start end module name
bf9d5000 bf9ee000 vpc_s3_bf9d5000 Wed Apr 25 05:18:48 2007 (462E6628)
f829d000 f82b4000 vpc_s3 Wed Apr 25 05:18:51 2007 (462E662B)

BTW, when I tried to make a crash dump sample for kernel stack overflow 0×7F-8 while preparing kernel debugging speech, I coudn’t get it from VirtualPC. I gueess VirtualPC treat it as an internal error, contrary to VMWare’s behavior.

]]>