WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

RE: [Xen-devel] RE: produce windows compatible dump file from Dom0

To: <admin@xxxxxxxxxxx>
Subject: RE: [Xen-devel] RE: produce windows compatible dump file from Dom0
From: "James Harper" <james.harper@xxxxxxxxxxxxxxxx>
Date: Wed, 25 May 2011 22:16:06 +1000
Cc: Paul Durrant <Paul.Durrant@xxxxxxxxxx>, xen-devel@xxxxxxxxxxxxxxxxxxx
Delivery-date: Wed, 25 May 2011 05:16:51 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <BANLkTin1MKmJXTe53SJBHxvw+TYgrEpdpw@xxxxxxxxxxxxxx>
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
References: <AEC6C66638C05B468B556EA548C1A77D01C558B2@trantor><291EDFCB1E9E224A99088639C47620228D3EDCA57D@xxxxxxxxxxxxxxxxxxxxxxxxx><AEC6C66638C05B468B556EA548C1A77D01C558C1@trantor> <BANLkTin1MKmJXTe53SJBHxvw+TYgrEpdpw@xxxxxxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index: AcwaweJcJHYinBsSSBCrNe87cm5UEQAES/pg
Thread-topic: [Xen-devel] RE: produce windows compatible dump file from Dom0
> 
> Hi all,
> 
> Did anyone make any progress on this?
> 
> I'm interested in getting a Windows memory dump out of a XenServer
suspend
> image.
> 
> Is it even remotely possible?
> 

Yes. In order for it to work I believe the DomU needs to call
KeInitializeCrashDumpHeader to place a crash dump header inside the
memory image (eg in NonPagedPool). KeInitializeCrashDumpHeader is
available in 2003sp1 and newer. You can then find that info in the saved
image and use it to build a windows compatible crash dump. There is more
to it than that obviously and I haven't actually done it myself. Ideally
it would be possible to do 'xl wincrashdump -o memory.dmp domu_name' and
have it all happen.

I've BCC'd the guy who wrote a program to do it to see if he can share
it (hope he doesn't mind :)

James



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel

<Prev in Thread] Current Thread [Next in Thread>