At 07/19/2012 03:29 PM, Sheldon Wrote: > thank you. > can you tell me what's the difference between memsave and > dump-guest-memory without -p option?
IIRC, memsave only contains memory. The core generated by dump-guest-memory contains registers' value, and you can use crash to deal with it. > and what's the difference between *kernel coredump *and > dump-guest-memory with -p option? kernel coredump? Do you mean kdump? They are almost the same. The core generated by dump-guest-memory contains some registers' value which is not included in the core generated by kdump. The kdump runs in the guest, while dump-guest-memory runs in the host. If you forget to start kdump, you can use dump-guest-memory to get the core. Thanks Wen Congyang > > On 07/19/2012 01:42 PM, Wen Congyang wrote: >> At 07/19/2012 12:47 AM, Sheldon Wrote: >>> I want to dump all guest's memory to file ./guestcore >>> I execute this command as follow: >>> (qemu) dump-guest-memory -p protocol file:./guestcore >>> invalid char in expression >> Please try this command: >> dump-guest-memory -p file:./guestcore >> >> Thanks >> Wen Congyang >> >>> >>> >>> >>> >>> > > >