SUMMARY: Any command to dump the memory content of a system?

Date: Wed Apr 16 1997 - 08:38:24 CDT

Hi all,

My original question is:

>Is there any simple command to dump the whole memory content of a system
>to a file similar to core dump of the system?

Many thanks to following replies, we have the following solutions

Law Hon Man <>
"K.Ravi" <>
Charles Gagnon <charles@Grafnetix.COM>
Glenn Satchell - Uniq Professional Services <>

Solution A:
1) enable the savecore uncomment the following lines in

#if [ ! -d /var/crash/`uname -n` ]
#then mkdir -m 0700 -p /var/crash/`uname -n`
# echo 'checking for crash dump...\c '
#savecore /var/crash/`uname -n`
# echo ''

2) use adb to crash the system

# adb -k -w /dev/ksyms /dev/mem
physmem 1e05
rootdir: fc109408
rootdir/W 0 <--------------- set the vnode to be zero
rootdir: 0xfc109408 = 0x0

The above example is from "Panic! Unix System Crash Dump Analysis" by Drake
and Brown.

Solution B:
just dd if=/dev/mem of=<file_name>
just view the memory content by crash -d /dev/mem

Solution C:
gcore of each process e.g.
# ps -ef | awk '{print $2}' | xargs -I {} -t gcore -o <path>/core {}



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:11:50 CDT