Edit

How to Read Dump Files

Edited byChris B(Byankno1) and 2 others

Article
Edit
Discuss History

When a Windows system crashes or stops unexpectedly, it is programmed to automatically save information that is present right before the malfunction. This information, called crash dump files, is stored in System Properties under the Control Panel. There are three kinds of dump files: complete memory, kernel memory and small memory. Reading small memory dump files, which contain about 2MB of vital data, can help you determine the cause of the crash. But these dump files are impossible to comprehend without first configuring them into a readable format.

Edit Steps

  1. 1
    Understand the available information and its potential usefulness.
    • Realize that small dump files contain a very limited amount of data. This data includes the stop message, a record of loaded drivers, the processor context for the malfunctioning processor, the kernel context for the malfunctioning processor, the processing information and kernel context for the thread, and kernel-mode information relating to the malfunctioning thread.
    • Use small memory dump files when you have limited hard disk space. These small dump files contain vital information, but they do not provide a complete picture of the stoppage. The particular small memory dump file you read might not include the information that explains the cause of the breakdown.
  2. 2
    Configure the dump file type.
    • Select "Start" > "Settings" > "Control Panel" > "System."
    • Choose the "Advanced" tab within your system properties and then "Settings" within the "Startup and Recovery" options.
    • Find the list titled "Write debugging information" and choose the small memory option.
  3. 3
    Use the Dump Check Utility (Dumpchk.exe) to read the dump file.
    • Insert the Windows XP CD-ROM (or the CD-ROM that corresponds with your version of Windows).
    • Choose the Support/Tools folder from the disk and run Setup.exe to install it.
    • Open Dumpchk.exe from the downloaded Support Tools folder.
    • Scan the options that Dumpchk.exe provides for reading and scanning the file. This includes dump validation, extra file validation, dump exam, symbol search for the dump exam, image search for the dump exam, etc.
    • Run the scan and read the output. Dumpchk.exe will report any errors found within the dump file information. The program will not repair the damage, but it will display where the problem lies.
  4. 4
    Debug the dump file.
    • Download the Windows debugging tools from their website and install the program onto your system.
    • Open the dump file by selecting "Start" > "Run" > typing "cmd" > "OK."
    • Type "cd c:\program files\debugging tools for windows" and press "Enter" to obtain the folder and type "kd-y Symbol Path �i ImagePath �z DumpFilePath" to load the dump file.
    • Enter "kd �y srv*c:\symbols*http://msdl.microsoft.com/download/symbols -i c:\windows\i386 -z c:\windows\minidump\minidump.dmp" to open the dump file within the debugger.

Edit Tips

  • The steps for configuring and reading your small dump files might vary depending on your particular version of Microsoft Windows, but they are similar and replicable using this guide.
  • Consult the documentation about debugging tool commands on the Microsoft website.


Edit Related wikiHows

Edit Sources and Citations

Articles for You to Write

Here is a list of suggested articles that have not yet been written. You can help by researching and writing one of these articles. To get started writing one of these articles, click on the red link of a title below.

Article Info

Last edited:
January 29, 2012 by Cheeser

Categories:
Computers and Electronics

Recent edits by: Roxane, Chris B(Byankno1) (see all)

Article Tools

Share this Article:

Thanks to all authors for creating a page that has been read 2,891 times.

Was this article accurate?

YesNo


x

Thank Our Volunteer Authors.

Give this article a +1.