11 results about "Core dump" patented technology

The embodiment of the invention provides a core dump file generation method and device, electronic equipment and a medium, and relates to the technical field of data processing.The method comprises the steps that in response to abnormity of a target process, a thread causing the abnormity of the target process is determined as a target thread from threads of the target process; retrieving a virtual memory address from a register occupied by the target thread and a stack memory area of the target thread; determining a target address of a data page which belongs to a heap memory area and has mapping from the retrieved virtual memory address; and generating a core dump file containing the data page mapped by the target address. By applying the scheme provided by the embodiment of the invention, the validity of the core dump file can be improved while the size of the core dump file is reduced.

The invention relates to the technical field of computers, and discloses an application program monitoring method, domain control equipment and a crash monitoring system.The application program monitoring method comprises the steps that when an application program is abnormal in the running period, a core dump file is generated and stored in a specified directory, and the core dump file is stored in the specified directory; under the condition that the new core dump file is generated by the specified directory, the stack information is obtained according to the core dump file and the symbol file to generate the stack information file, and the alarm information is generated according to the stack information file, so that the stack information can be stored in time, the fault processing efficiency is improved, and the stability of the system is improved.

The embodiment of the invention provides a memory repeated release detection method and device, electronic equipment and a storage medium, and the method comprises the steps: extracting abnormal features related to memory repeated release from a target file, and updating an abnormal feature template based on the extracted abnormal features; the target file is a core dump file generated by system kernel crash; the abnormal feature template comprises abnormal entries, and each abnormal entry comprises an abnormal feature tag used for describing related information of the abnormal features; based on the abnormal feature template, risk scanning is conducted on the kernel source code, a risk calling list is generated, the risk calling list comprises risk calling points in the kernel source code, and the risk calling points comprise memory allocation function calling points and / or memory release function calling points; the risk calling point hits the abnormal feature tag; and according to the risk calling list, carrying out instrumentation on the risk calling points, and carrying out verification in the target environment. According to the method, the memory repeated release vulnerability of the system kernel can be automatically detected, and the quick response requirement can be met.

This disclosure provides an anomaly detection method, apparatus, electronic device, and storage medium. The method includes: when a target core dump file is detected to be stored, querying first process information of the target process in the target agent based on the target core dump file; when the first process information is not found, querying second process information of the target process from the server based on the target core dump file, wherein the second process information is collected by other agents and uploaded to the server; querying the process file of the target process in the target agent based on the second process information, generating a core event based on the target core dump file and the process file; and sending the core event to the server so that the server can analyze the target core dump file based on the process file to obtain target stack data of the target process, wherein the target stack data is used to determine the cause of the anomaly in the target process. This disclosure improves the reliability of anomaly detection.

This application provides a method and apparatus for transferring core dump files, addressing the problem of complex file transfer processes between lower-level network servers in multi-level sub-internal networks in existing technologies. The method is applied to a server located in a multi-level sub-internal network and includes: when a core dump file exists, obtaining the destination IP address of the target server for storing the core dump file from a storage configuration file; if it is determined based on the destination IP address that the server cannot communicate with the target server, broadcasting a request message to the server in the upper-level network and determining the IP address of the next-hop server from the response message corresponding to the received request message; sending the core dump file and storage configuration file to the next-hop server based on the IP address of the next-hop server; if it is determined based on the destination IP address that the server can communicate with the target server, sending the core dump file to the target server based on the destination IP address.

The invention relates to a process abnormity diagnosis method and device, a storage medium and electronic equipment. The method comprises the steps of calling a target script when a plurality of processes in a system crashes; transmitting a target parameter to the target script, wherein the target parameter is used for indicating whether to start a core dump function of the target script; when the core dump function is used, first crash data of a first process in the multiple processes is stored as a first dump file under a storage directory, a temporary lock is used for locking the storage directory, the first process is the first process in the multiple processes, and the temporary lock is used for forbidding other processes to store the crash data under the storage directory; and a diagnosis report is generated for each of the other processes, and data recorded in the diagnosis report is less than the first dump file. The technical problem that the system stability is reduced due to resource competition among multiple scripts is solved.

The invention provides a core dump file generation method and device, equipment and a storage medium, the method is applied to first network equipment in an equipment cluster system, and the same disk state table and core dump file table are maintained in each network equipment in the equipment cluster system. The disk state table records the residual capacity of a local disk of each network device, and the core dump file table is used for recording file information of each core dump file; and if the target process of the first network equipment fails and the residual capacity of the disk is smaller than the preset capacity, sending a file generation notification to second network equipment of which the residual capacity of the disk is not smaller than the preset capacity, so that the second network equipment generates a core dump file according to fault information in the file generation notification. According to the embodiment of the invention, cross-device generation of the core dump file can be realized, and the defect that the core dump file cannot be generated due to insufficient residual capacity of a local disk is avoided.

The application provides a core dump file generation method and device and electronic equipment. In response to a core dump event of a target process, a memory snapshot and basic core dump information of the target process are obtained. Based on a plurality of preset core dump parameter templates and the basic core dump information, a target core dump parameter template corresponding to the target process is determined. Based on the target core dump parameter template and the basic core dump information, storage parameters of a core dump file of the target process are determined. Based on the storage parameters and the memory snapshot, the core dump file of the target process is generated. In this way, the parameters in the target core dump parameter template can represent the basic characteristics and the instant scene characteristics of the target process. Therefore, the storage parameters generated based on the template can quickly identify the process execution scene corresponding to the core dump file, provide related services, and improve the efficiency of identifying and analyzing the core dump file of the target process.

Providing issue resolution in a cluster system by monitoring system operation to detect occurrence of a system error, and automatically generating, upon detection of the error condition, a core file for a user node. The core file captures a current memory state of a respective node, where the current memory state comprises system statistics, system information, and logs. An intelligent core debugger extracts information from a core file to generate a core file report that is sent to a vendor for a quick determination of whether sufficient information is in the report to allow the vendor to recommend a fix, or whether further information from is required, including the core file itself, if necessary. This prevents the need to send an entire core file to a vendor in every instance of a system fault.

The application provides a kind of debugging log information management method, device and equipment and storage medium, the method monitors the process running state of each functional module in target operating system, if the process running state of functional module is abnormal state, the running identifier of functional module is modified as fault identifier, whether target core dump file is monitored and added, if there is new, the running identifier of target functional module to which target core dump file belongs is modified as fault identifier, based on the module identifier information of each functional module and the running identifier of functional module, generate global configuration table;If the occupied space of debugging log is greater than preset space threshold, according to global configuration table, determine the first target debugging log corresponding to the target functional module of which running identifier is fault identifier from the stored debugging log, and delete other debugging logs except the first target debugging log.This embodiment of the application can realize intelligent management of log, and preferentially retain high-value log.

Techniques can include: executing a first process that performs processing including: creating a first socket associated with a first file descriptor; and binding the first socket, as referenced using the first file descriptor, to a port having a port number; the first process crashing including abnormally terminating execution; and in response to the first process crashing, performing second processing including: core dump processing of memory used by the first process; and starting execution of a second process prior to completing the core dump processing for the first process, wherein the second process performs third processing including: creating a second file descriptor of the second process, wherein the second file descriptor is associated with the first socket that is i) referenced using the first file descriptor, and ii) bound to the port; and the second process taking over communications to the port using the second file descriptor and the first socket.