Bsod - where is my crash dump?

Ex_Brit · Sep 26, 2009

In my test rig on D: I have Vista x64 and was testing some software which caused some BSOD's.
In order for the maker to sort out why it's happening I wanted to send them the crash dump but can I find it? No!!
I have hidden and system files set to viewable and there simply is no crash dump anywhere that I can find on C:Windows or D:Windows, although the BSOD did say it was writing it and got to 100% before I rebooted.
Anyone experienced this "lost crash dump" syndrome?

(I've since had to uninstall the software in order to use that partition, so can't repro this without going to a lot of trouble).

zigzag3143 · Sep 26, 2009

Ex_brit

the dump should be in D:\windows, but you can search for it *.dmp. the other place it may be hiding is D:\windows\minidump

let me know if you need help

Ken

Ex_Brit · Sep 26, 2009

Thanks Ken. It simply is not there or anywhere. Fortunately someone else using that software in their x86 system got the same BSOD and did forward their crash dump so hopefully the maker of the software will get it sorted out. Glad it wasn't just me.

(It's McAfee Beta Labs by the way).

I have it set to give me a kernel dump rather than a small memory dump, that would normally give the full dump right?

Maybe I didn't wait long enough before rebooting. It did say it had saved the dump.

zigzag3143 · Sep 26, 2009

Ex_Brit

Kernel is larger. Problem with kernel is that its the size of your ram plus 1 mb for the dump header so if you have 4 gigs ram the dump is gonna be BIG. It gives a little more info about the problem and anyone with a debugger can analyze it.

Sometimes there is n ot dump. If the crash happens early enough in memory and causes a double fault the computer cant store the dump file.

Should you want to cuase the blue screen on command there is something called driver verifier. it will cuase it to happen so you can get a dump file

Let me know if you need help

ken

Ex_Brit · Sep 26, 2009

That might explain it...I have 12gb of RAM so I'd better set the dump back to its default small size.

zigzag3143 · Sep 26, 2009

Ex_brit

what exactly are you trying to analyze? btw a 12 gig dump would give us a little more info but not much.

ken

Ex_Brit · Sep 26, 2009

I am not trying to analyse anything. McAfee wanted the dump. Anyway, it's moot now as there is no dump.

Thanks for your help.

lil domii · Sep 26, 2009

wow, some rig you have got there ex_brit!
as in performance...

Ex_Brit · Sep 26, 2009

Thanks. In Win 7 it gives me 7.8 on everything except disk read speed and that is 5.9...probably because I chose the non-RAID route after a few problems wrestling with RAID 0. Although I'm not sure if it also includes in that such things as external USB drives, in which case that would probably drag that score down too.

In Vista everything is 5.9.

Flavius · Sep 26, 2009

Presence dump files depends also from page file settings aprioprate match to RAM and other paramaters -rule is sophisticated.Try DumpConfigurator Windows Platforms Tools

see also How to generate a kernel or a complete memory dump file in Windows Server 2008

Ex_Brit · Sep 26, 2009

OK thanks. My page file settings are automatic.

archie123 · Sep 26, 2009

you wanna uncheck "overwrite existing file" if your collecting crash dumps for someone

Ex_Brit · Sep 26, 2009

OK, thanks.

Ex_Brit · Oct 28, 2009

Sorry to rehash this, but I'm still mystified as to why I'm not getting dump files. Testing beta products means the makers require dump files to help them redesign the product...in this case McAfee 2010 home security products which consistently BSOD in Vista Ultimate SP2 x64 (but NOT in Windows 7...weird).

I have made sure that each drive has its own paging file and a big one too because my memory is 12gb.

The only comment I've got from McAfee is that Microsoft is to blame and they are working together with them on the problem. That's of no help to me.

Fortunately this on my D: Test drive so doesn't effect my day-to-day work.

usasma · Oct 29, 2009

There is a long discussion in Windows Internals 5th Edition about the problems that can cause you to not get a crash dump (on pages 1130 and 1150)

Ex_Brit · Oct 29, 2009

Well, I'm not about to spend $69.99 to find out what it says.

usasma · Oct 29, 2009

Well, as an MVP, you have access to the Microsoft Press Books 24x7 library located here: http://microsofteref.books24x7.com/bookshelf.asp.
In that library is the 4th Edition of Windows Internals by Russinovich and Solomon
And you can find the information on pages 849 and 869

And it won't cost you a cent!

Ex_Brit · Oct 29, 2009

Oh - thanks foir that. I looked on Technet and couldn't find what I was seeking, obviously I didn't look hard enough.

One problem though, I don't seem to be a member of that and I see no link to Join.

usasma · Oct 29, 2009

It's an MVP benefit - I got it in an email a while back.
I'd check the MVP member's site - or your Lead.
The program is being done away with in 2010, so get what you can now!

Ex_Brit · Oct 29, 2009

I can't find it in any of my emails. I'll ask Sasha my lead. It's probably too technical for me anyway.

Bsod - where is my crash dump?

If you're going through hell, keep going

Attachments

My Computer

Banned

My Computer

If you're going through hell, keep going

My Computer

Banned

My Computer

If you're going through hell, keep going

My Computer

Banned

My Computer

If you're going through hell, keep going

My Computer

Seven Guru + GFX

My Computer

If you're going through hell, keep going

My Computer

Expelled

My Computer

If you're going through hell, keep going

My Computer

I Tunes hates Me

My Computer

If you're going through hell, keep going

My Computer

If you're going through hell, keep going

My Computer

Old and cranky

My Computer

If you're going through hell, keep going

My Computer

Old and cranky

My Computer

If you're going through hell, keep going

My Computer

Old and cranky

My Computer

If you're going through hell, keep going

My Computer