Memory dump blog recovery

01 November 2006   5 comments   Linux

Powered by Fusion×

My Firefox froze in one of the tabs when in another tab I had a long Fry-IT intranet blog half finished. To avoid having to rewrite the whole text again Jan showed me how to dump the RAM memory onto disk which I could then look through with standard tools. For this to work you have plenty of diskspace since the dump file is about 1Gb big:

$ sudo su -
# df -h
# cat /proc/kcore > /usr/kcore.dump
# strings /usr/kcore.dump > /usr/kcore.strings
# ls -lh | grep kcore
-rw-r--r--   1 root    root    1016M 2006-10-30 10:18 kcore.dump
-rw-r--r--   1 root    root      74M 2006-10-30 10:19 kcore.strings
# less kcore.strings | grep 'Bla bla bla'

Was this the most boring blog item I've written in a long time? Maybe, but it's good to have it noted the next time Firefox crashes.


Jean Jordaan
Heh! This works too, and the first thing it finds is your blog entry that I'm looking at::

klippie net # strings /proc/kcore | grep "Bla bla bla"
# less kcore.strings | grep 'Bla bla bla'

Then it starts finding itself over and over again::

strings /proc/kcore | grep "Bla bla bla"
etc etc etc ..
i have a memory dump will this soultion help because alot of them havent
i have a big problem with a memory dump on my pc will this help because alo of soultions hav not plz get bck to me on
Check this tool out: "msramdmp: McGrew Security RAM Dumper", I'm pretty sure you will get a kick out of it ;)
Information Security Comments
It's much eiaser to understand when you put it that way!

Your email will never ever be published

Related posts

Oxfordtube's website sucks 30 October 2006
Crazy road in China 06 November 2006
Related by keywords:
Button tag in bloody Internet Explorer 09 August 2005
Annoying Safari just ate my blog 20 March 2006
Future of Web Apps (quick summary and thoughts) 04 October 2007
Getting uploadify to work 17 July 2009
Changing the size of a textarea box 18 August 2004
Flash 9 on Ubuntu Edgy Eft 10 January 2007
The importance of checking in Firefox 07 July 2008
Desired Firefox extension 09 July 2006 incompatible to Mozilla 23 July 2004
Merrill Lynch's f**ked up website 28 March 2006
CSSViewer - new promising Firefox Extension 20 February 2006
Jaguar cars website 24 May 2004