Method and expert system for analysis of crash dumps

摘要

An automated method for analyzing crashes of a computer operating system begins with writing a dump file with the operating system state at the time of the crash. The dump file is processed to collect footprint information from the dump file into a footprint file, and a matching underlying cause is found by searching a footprint rule database for a match against the footprint information. Cause and repair information corresponding to the matching underlying cause is then extracted from a knowledgebase and merged with the footprint information for presentation to a technician.