O'Reilly logo

Memory Dump Analysis Anthology, Volume 7 by Dmitry Vostokov

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Dominant Event Sequence

Sometimes we have insufficiently detailed problem description and/or there are several similar parallel user activities going on simultaneously, for example, several sessions are launched in a terminal services environment. In such cases when tracing is done for the duration of a specific user activity this pattern may help. Here we select the most full sequence of events or event sequence based on some Basic Facts (Volume 3, page 345). For example, if a session ID was missing in the problem description we can choose the most long and full process launch sequence (Volume 2, page 387) and assume that its session id was the one missing:

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required