Kung Fu Kung Fu

Fujian White Crane Kung Fu

Zope Zope

What I have and am doing with Zope

Photos Photos

Photoalbum, both old and new.

Receptsamlingen Receptsamlingen

In Swedish only. About my "Collection of Recipes" website.

Contact me Contact me

My contact details and how to contact me.

  Mobile version of this page Mobile version of this page


 

Memory dump blog recovery

firefox, ram memory, memory, dump, recovery, /proc/kcore, kcore

1st of November 2006

My Firefox froze in one of the tabs when in another tab I had a long Fry-IT intranet blog half finished. To avoid having to rewrite the whole text again Jan showed me how to dump the RAM memory onto disk which I could then look through with standard tools. For this to work you have plenty of diskspace since the dump file is about 1Gb big:

 $ sudo su -
 # df -h
 # cat /proc/kcore > /usr/kcore.dump
 # strings /usr/kcore.dump > /usr/kcore.strings
 # ls -lh | grep kcore
 -rw-r--r--   1 root    root    1016M 2006-10-30 10:18 kcore.dump
 -rw-r--r--   1 root    root      74M 2006-10-30 10:19 kcore.strings
 # less kcore.strings | grep 'Bla bla bla'

Was this the most boring blog item I've written in a long time? Maybe, but it's good to have it noted the next time Firefox crashes.


Comment

Jean Jordaan - 3rd November 2006  [«« Reply to this]
Heh! This works too, and the first thing it finds is your blog entry that I'm looking at::

klippie net # strings /proc/kcore | grep "Bla bla bla"
# less kcore.strings | grep 'Bla bla bla'


Then it starts finding itself over and over again::

strings /proc/kcore | grep "Bla bla bla"
etc etc etc ..
Anonymous - 2nd March 2007  [«« Reply to this]
i have a memory dump will this soultion help because alot of them havent
Anonymous - 2nd March 2007  [«« Reply to this]
i have a big problem with a memory dump on my pc will this help because alo of soultions hav not plz get bck to me on snoop_bredin@hotmail.co.uk
nemo - 20th July 2008  [«« Reply to this]
Check this tool out: "msramdmp: McGrew Security RAM Dumper", I'm pretty sure you will get a kick out of it ;)
//-------------------------------------
Information Security Comments
http://cryptoexperts.blogspot.com
//-------------------------------------
 
Name:
Email:
hide my email address.

Your email address will be encoded to prevent email-extraction spiders from reading it so you won't get spammed if you decide to show your email address.