So it looks like: [16]> 8400000,3d500000\M 300000400000 ffffffffffff worked as expected, dumping out 0x518bbc80
This took about 2 hours. I also found the description of what the \M command does at: http://docs.sun.com/app/docs/doc/816-5041/6mb7ae3ja?a=view "If a value V and mask M are specified, MDB reads integers of the appropriate size and stops at the address containing a value X where (X & M) == V. At the completion of the dcmd, dot is updated to the address containing the match. If no match is found, dot is left at the last address that was read." Another suggestion I got was hacking the dump_conflags to dump all of memory, first checking to make sure dumpvp_size is large enough to hold it. Hopefully this will work faster via mdb than kmdb. This message posted from opensolaris.org