This article discusses how to retrieve memory dump files for diagnostic use in cases where protected machines crash shortly after a Datto Windows Agent install.
Types Of Memory Dump
1. Complete Memory Dump
The complete contents of physical memory at the time of the crash. This is the most useful and informative, and the ideal option for troubleshooting these crashes.
2. Automatic/Kernel Memory Dump:
Does not contain user-mode process information, but still populates useful information in a system crash. Smaller than the complete dump.
3. Small Memory Dump (Minidump)
64 KB in size for x86 systems; 128 KB on x64 systems. Contains stop code, parameters.
It also contains loaded device driver list, current process and thread info, and kernel stack info for the thread that caused the system crash.
These can provide some helpful information as to the cause of crashes, but may not be as useful as larger options.
DIRECTIONS
For Windows 2003 and XP, the page file needs to be on the boot volume of the system to create a memory dump.
1. Click Start, right-click My Computer, and select Properties (If this is a Windows 8/10 based OS,
from the directory panel on the left, select the File Explorer.Right-click the This PC icon, then click Properties).
2. In System Properties, click Advanced.
3. In startup and recovery click settings
4. The dump files options are in the Write debugging information section.
5. The memory dump files is typically located in %SystemRoot%MEMORY.DMP The system root is typically C:WindowsSystem32.
If the system is configured for minidump, the default location folder is %SystemRoot%Minidump.
These files can be several gigabytes in size, too large to attach to a ticket. You can use Datto Drive to upload the memory dump to a shareable folder.
Opening Memory Dump Files:
Standard text editors will not open .dmp files properly. Download and install the Windows Driver Kit for Windows 10. After installing WDK For Windows 10:
- Open the Start menu
- type windbg.exe.
- Click File and select Open Crash Dump.
- Browse to the .dmp file you wish to analyze
- Click Open.
Join Us On Telegram For More Exciting Updates