Icons for Memory Dump Analysis Patterns (Part 69)
Friday, September 10th, 2010Today we introduce an icon for Wait Chain (critical sections) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Archive for the ‘Visual Dump Analysis’ Category
Icons for Memory Dump Analysis Patterns (Part 68)
Thursday, September 9th, 2010Today we introduce an icon for Wait Chain (general) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 67)
Friday, September 3rd, 2010Today we introduce an icon for Manual Dump (process) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 66)
Thursday, September 2nd, 2010Today we introduce an icon for Manual Dump (kernel) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 65)
Friday, August 27th, 2010Today we introduce an icon for Special Stack Trace pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 64)
Thursday, August 19th, 2010Today we introduce an icon for Custom Exception Handler (user space) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 63)
Monday, August 9th, 2010Today we introduce an icon for Coupled Processes (semantics) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
User/Kernel Diagramming Styles
Tuesday, July 27th, 2010Similar to different C/C++ styles like where to put the right brace we have User/Kernel Space/Mode architecture diagramming styles. Some prefer to put User part on top (Windows Internals team) and some prefer to put Kernel on top (like me). Marc Sherman in the comment here explains the former style as “calling down into the kernel”. Originally I thought about a psychological explanation where you put on top what you value the most or use the most. However, the reason I put Kernel on top is because I value Space over Mode in depicting memory and dependencies. In stack traces from complete memory dumps you have kernel portions on top as well. Also Google and Bing favour “stack grows down” slightly over “stack grows up” and I prefer “down” as well. Additionally, if you value User on top you would be forced to put Managed on top as well. If you put Kernel on top than Managed is at the bottom like on this flag that became a logo of Memory Dump Analysis Services. So here are two diagrams where I prefer the first (Kernel on top) with any stack growing down (in address decrement sense) and any stack trace from WinDbg having Kernel on top too:
The second diagram has any stack growing up:
I also suggest this variant (but people who write and read from right to left may prefer its reflection):
Another diagram style that is consistent with the traditional depiction of Privilege Mode rings (here Kernel is also on top but can be put in any direction):
What style do you favour? Please let me know.
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 62)
Sunday, July 25th, 2010Today we introduce an icon for Hooked Functions (kernel space) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 61)
Saturday, July 24th, 2010Today we introduce an icon for Hooked Functions (user space) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 60)
Thursday, July 22nd, 2010Today we introduce an icon for High Contention (processors) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 59)
Wednesday, July 21st, 2010Today we introduce an icon for Early Crash Dump pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 58)
Friday, July 16th, 2010Today we introduce an icon for Local Buffer Overflow pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 57)
Tuesday, July 13th, 2010Today we introduce an icon for IRP Distribution Anomaly pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 56)
Friday, July 9th, 2010Today we introduce an icon for Historical Information pattern:
B/W
Color
The icon motivated the following debugging slang: BCE
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 55)
Thursday, July 8th, 2010Today we introduce an icon for Busy System pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 54)
Monday, July 5th, 2010Today we introduce an icon for Main Thread pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 53)
Saturday, July 3rd, 2010Today we introduce an icon for Passive System Thread (kernel space) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 52)
Wednesday, June 23rd, 2010Today we introduce an icon for Passive Thread (user space) pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -
Icons for Memory Dump Analysis Patterns (Part 51)
Tuesday, June 22nd, 2010Today we introduce an icon for Accidental Lock pattern:
B/W
Color
- Dmitry Vostokov @ DumpAnalysis.org + TraceAnalysis.org -