O'Reilly logo

Memory Dump Analysis Anthology, Volume 7 by Dmitry Vostokov

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Piecewise Activity

Activity Regions (Volume 4, page 348) or blocks of messages having the same TID or PID usually follow each other in a typical complex software trace. Such following can be completely random and independent or it may be linear based on IPC or some inter-thread communication mechanism. For example, after filtering out Background Components (Volume 5, page 287) we may find that an RPC client call setup is followed by messages from an RPC server:

images

Using a coordinate approach with message number and PID axes we can reformat this minimal trace diagram:

The name for this pattern was borrowed from the concept of a piecewise linear ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required