[Tfug] dumping physical memory
Adrian
choprboy at dakotacom.net
Thu May 4 15:27:15 MST 2006
Anyone dump their physical (volatile) memory to disk for review/diagnostics
lately??? I use to due it from time to time to retrieve data when an
application crashed or when I diagnosed a single bit memory error that was
crashing my laptop... But something in the kernel appears to have changed!
I can no longer due a dd if=/dev/mem of=/tmp/mem_dump.raw. Instead, it dies at
1M (of my 1G of memory) with a read error. Likewise, /proc/kcore refuses to
allow me to read the core at all (yes, I have chanegd permissions). Any ideas
when/what changed this???
Adrian
More information about the tfug
mailing list