reading dump files

NTDEV
1

Hi,
I m trying to understand the following concepts:
<1>do we have dump files for user mode application crashes as well or is
it just for bugchecks.
<2>what do dump files reveal.
<3> can i read them using softice, windbg. do i need map files for
reading them?

kutty

2

Dr.Watson is one, not sure if (s)he retired or not. Once again, Debugging Application is the book you should hunt for, has all the magics about debugging, specially application debugging and krnl debugging is just a stone’s-throw-away…

Using map files for a reasonably sized app might not be the way :).

-pro

3

> <1>do we have dump files for user mode application crashes as well or is

it just for bugchecks.

IIRC you only have DrWatson logs for user app crashes.

<2>what do dump files reveal.

They keep the exact machine state at the moment of crash.

<3> can i read them using softice, windbg.

With WinDbg, it is trivial:
windbg -z dumpfile

do i need map files for reading them?

You need at least all SYS binaries from that machine - kernel, HAL, your driver
etc. This is a must. Symbols from your driver are also a good idea to make the
output clearer, but binaries are the must.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

4

Prokash, Are you talking about “Debugging Applications” by John Robbins
(Microsoft Press)?

Thanks,
Bandeep

“Programmers Society Prokash Sinha” wrote in message
news:xxxxx@ntdev…
> Dr.Watson is one, not sure if (s)he retired or not. Once again, Debugging
Application is the book you should hunt for, has all the magics about
debugging, specially application debugging and krnl debugging is just a
stone’s-throw-away…
>
> Using map files for a reasonably sized app might not be the way :).
>
> -pro
>

5

Yes that is the one :-).
-pro
----- Original Message -----
From: “Bandeep Singh”
Newsgroups: ntdev
To: “Windows System Software Devs Interest List”
Sent: Wednesday, August 25, 2004 11:00 PM
Subject: Re:[ntdev] reading dump files

> Prokash, Are you talking about “Debugging Applications” by John Robbins
> (Microsoft Press)?
>
> Thanks,
> Bandeep
>
>
>
> “Programmers Society Prokash Sinha” wrote in message
> news:xxxxx@ntdev…
> > Dr.Watson is one, not sure if (s)he retired or not. Once again,
Debugging
> Application is the book you should hunt for, has all the magics about
> debugging, specially application debugging and krnl debugging is just a
> stone’s-throw-away…
> >
> > Using map files for a reasonably sized app might not be the way :).
> >
> > -pro
> >
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@garlic.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>