Windows Memory Dump Analysis - Software Diagnostics Services
The Old New Crash: Cloud Memory Dump Analysis
-
Upload
dmitry-vostokov -
Category
Software
-
view
170 -
download
4
Transcript of The Old New Crash: Cloud Memory Dump Analysis
![Page 1: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/1.jpg)
The Old New Crash
Presenter: Dmitry Vostokov Memory Dump Analysis Services
![Page 2: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/2.jpg)
MDA Services Memory Dump Analysis Audit Software Trace Analysis Audit Software Error Reporting Audit Remote Training Debugging Bureau Tool Objects and EasyDbg iMemoryDump (New)
Powered by DA+TA DumpAnalysis.org + TraceAnaysis.org
© 2011 Memory Dump Analysis Services
![Page 3: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/3.jpg)
Prerequisites
Experience in software troubleshooting, memory dump analysis or live debugging on non-cloud platforms
© 2011 Memory Dump Analysis Services
![Page 4: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/4.jpg)
Agenda (Summary) Cloud for Memory Dump Analysis Memory Dump Analysis for Cloud What’s Old / What’s New Live Memory Dump Analysis
© 2011 Memory Dump Analysis Services
![Page 5: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/5.jpg)
What’s a Cloud Deployment Architecture IaaS (Infrastructure as a Service) PaaS (Platform as a Service) PaaS example: Windows Azure
© 2011 Memory Dump Analysis Services
![Page 6: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/6.jpg)
Cloud for MDA Elastic storage (BLOBS, Tables) Centralized security Worker roles to generate textual logs Tables for checklists (extensibility) RESTful dump analysis iMemoryDump on Windows Azure
© 2011 Memory Dump Analysis Services
![Page 7: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/7.jpg)
What’s Old IaaS – memory dumps Pattern-driven analysis Virtualized System Wait Chains (ALPC / RPC) Stack Trace Collection Azure PaaS – .NET / CLR / Managed
Space patterns
© 2011 Memory Dump Analysis Services
![Page 8: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/8.jpg)
A.C.P. Root Cause Analysis
Artifacts
Checklists
Patterns
Checklists and patterns as best practices
Iterative and Incremental
© 2011 Memory Dump Analysis Services
![Page 9: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/9.jpg)
What’s New PaaS – IaaS might be hidden (currently
Azure has a beta-program for using customer’s W2K8 R2 VMs)
Reduced variability of hardware (identical hardware, everything is virtualized)
Cloud Environment pattern Possible private modifications
© 2011 Memory Dump Analysis Services
![Page 10: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/10.jpg)
Orbifold Memory Space
The space name comes from a mathematical orbifold (a generalization of manifold). Note: in WinDbg you can load multiple dumps and switch between them (.opendump and || commands) Might be affected by ASLR
© 2011 Memory Dump Analysis Services
![Page 11: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/11.jpg)
Example: Development
Now I switch to a WinDbg session...
© 2011 Memory Dump Analysis Services
![Page 12: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/12.jpg)
Example: Deployment
Now I switch to a WinDbg session...
© 2011 Memory Dump Analysis Services
![Page 13: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/13.jpg)
Resources (Cloud) The Cloud at Your Service by J. Rosenberg* and A. Mateos
(ISBN: 978-1935182528) Platform independent general cloud overview with examples from Amazon
and Google
Azure in Action by C. Hay and B. Prince (ISBN: 978-1935182481) Excellent general Windows Azure platform overview to prepare you for
further hands-on exploration
* The author of a book “How Debuggers Work: Algorithms, Data Structures, and Architecture” (ISBN: 978-0471149668)
© 2011 Memory Dump Analysis Services
![Page 14: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/14.jpg)
Resources (MDA) DumpAnalysis.org Pattern-Driven Memory Dump Analysis Memory Dump and Trace Analysis: A Unified Pattern Approach Introduction to Pattern-Driven Software Problem Solving Software Trace and Memory Dump Analysis Advanced Software Debugging Reference:
OpenTask publishes this presentation transcript with case studies (ISBN: 978-1908043283)
© 2011 Memory Dump Analysis Services
![Page 15: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/15.jpg)
Resources (Training) August remote training season: Accelerated Windows Memory Dump Analysis Visit Memory Dump Analysis Services for registration details:
www.DumpAnalysis.com
© 2011 Memory Dump Analysis Services
![Page 16: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/16.jpg)
Resources (Free Webinars) Cloud Software Trace Analysis (August) Visit Memory Dump Analysis Services for registration details:
www.DumpAnalysis.com
© 2011 Memory Dump Analysis Services
![Page 17: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/17.jpg)
Q&A
Please send your feedback using the contact form on DumpAnalysis.com
© 2011 Memory Dump Analysis Services
![Page 18: The Old New Crash: Cloud Memory Dump Analysis](https://reader030.fdocuments.net/reader030/viewer/2022013123/58a152001a28abbe3c8b5461/html5/thumbnails/18.jpg)
Thank you for attendance!
Join DA+TA Facebook Group
Memory Dump Analysis Service on Facebook
© 2011 Memory Dump Analysis Services