Hello Michael,
Thursday, January 8, 2004, 6:04:06 PM, you wrote:
Peters, Michael D.> Could someone please explain to me how to dump the contents of
memory to
Peters, Michael D.> disk for forensic analysis?
Peters, Michael D.> Best regards,
Peters, Michael D.> Michael
>From Solaris 9 12/03 System Administrator Collection
>> System Administration Guide: Advanced Administration
>> 28. Managing System Crash Information (Tasks)
The savecore -L command is a new feature which enables you to get a crash dump
of the
live running Solaris operating environment. This command is intended for
troubleshooting a
running system by taking a snapshot of memory during some bad state, such as a
transient
performance problem or service outage. If the system is up and you can still run
some commands,
you can execute the savecore -L command to save a snapshot of the system to the
dump device, and
then immediately write out the crash dump files to your savecore directory.
Because the system is
still running, you can only use the savecore -L command if you have configured a
dedicated dump
device.
These docs are available for free from docs.sun.com
HTH,
Peter
--
Peter Kirkov
Support Engineer
________________________________________________
ACT Sofia
Tzarigradsko shosse blvd. 7km
BIC-IZOT, Office 710-714 Tel: +359-2-9718354
1113 Sofia - Bulgaria Fax: +359-2-9718343
mobile: +359-889-919638
mailto:[EMAIL PROTECTED]
_______________________________________________
Solaris-Users mailing list
[EMAIL PROTECTED]
http://www.filibeto.org/mailman/listinfo/solaris-users
