search

Sysinternals / ProcDump-for-Linux

A Linux version of the ProcDump Sysinternals tool
MIT License
2.91k stars 302 forks source link

What is the default dump type and how to get a full dump file? #253

Closed satvu closed 2 weeks ago

satvu commented 2 weeks ago

Is there an equivalent for specifying dump type like the windows version? If not, what is the default and is it possible to get a full dump file?

MarioHewardt commented 2 weeks ago

Hi - by default ProcDump uses coredump_filter which specifies what should be included in the dump that is generated. You can change that by using the -mc switch. Please see man core for the available bit params. 

       bit 0  Dump anonymous private mappings.
       bit 1  Dump anonymous shared mappings.
       bit 2  Dump file-backed private mappings.
       bit 3  Dump file-backed shared mappings.
       bit 4 (since Linux 2.6.24)
              Dump ELF headers.
       bit 5 (since Linux 2.6.28)
              Dump private huge pages.
       bit 6 (since Linux 2.6.28)
              Dump shared huge pages.
       bit 7 (since Linux 4.4)
              Dump private DAX pages.
       bit 8 (since Linux 4.4)
              Dump shared DAX pages.
satvu commented 2 weeks ago

Thanks - closing as answered.