> On Mon, 19 Jan 1998, Richard Guy Briggs wrote:
> > How about a kernel panic core memory dump to disk for forensic research?
>
> The current logic behind not doing this in linux is that since its
> impossible to do it perfectly (e.g. 100% foolproof under all situations),
> it shouldnt be done at all. (Still, BSD manages to do it).
If people really care about doing post-mortem analysis, modify the
boot-loader to capture an image of RAM after reboot. Assuming the BIOS is
sane, using the old 0x1234 warm reboot trick should avoid wiping the
memory. IMHO oops reports tend to be enough to get one looking in the
right direction.
-ben