Understanding Crash Dumps

A crash dump is also a core dump, but with a few important differences. One, it is a snapshot of the kernel program, the code that is the heart of your operating system. As a result, it will contain not just information about user processes, but also the components that make up the operating system: devices, drivers, file systems, process management. The operating system is not only code that’s completely unfamiliar to most users, it’s also services many of us rely on without ever knowing what they are or what they do.

Two, when the kernel has to dump core to protect data, it means everything comes to a halt, ergo the name crash dump. As a result, a crash dump can’t be written directly to a file—which file system is ...

Get OCA Oracle Solaris 11 System Administration Exam Guide (Exam 1Z0-821) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.