Shulou(Shulou.com)11/24 Report--

CTOnews.com, Sept. 9, earlier today, Microsoft released a preview of Windows 11 Build 25197 for Dev channels, bringing a tablet-optimized taskbar, although Microsoft admits it may now be a Bug-like experience.

In earlier Build 25188, there was a hidden "real-time kernel dump" option in the task manager. Kernel dump files create kernel memory snapshots for analysis when troubleshooting application crashes, driver errors, Windows BSOD blue screens, and so on. Real-time kernel dump files are similar, except that they do not need to restart the system to create dumps. Therefore, this is very useful. It does not interrupt the system in the event of a non-fatal error.

CTOnews.com has learned that the option to create a real-time kernel dump now appears in Windows 11 Build 25197 and is active. As shown in the following figure, selecting the real-time kernel dump option opens a dialog box indicating the location of the created dump file.

If a user attempts to use the real-time kernel dump option in a previous version of Build, such as in Build 25193, the following error message pops up indicating that the operation cannot be completed:

The kernel memory dump contains all the memory used by the kernel in the event of a crash.

Such dump files are significantly smaller than full memory dumps. Typically, the size of the dump file is about 1/3 of the system's physical memory. This number will vary greatly, depending on your situation.

This dump file does not include unallocated memory or any memory allocated to user-mode applications. It includes only memory allocated to the WINDOWS kernel and hardware abstraction layer (HAL), as well as memory allocated to kernel-mode drivers and other kernel-mode programs.

In most cases, this fault dump is the most useful. It is significantly smaller than a full memory dump, but it omits only those parts of memory that are unlikely to participate in the crash.

Because such dumps do not contain images of any user-mode executables that reside in memory at the time of the crash, you may also need to set the executable image path if these executables are important.

By default, the kernel memory dump file is written to% SystemRoot%\ Memory.dmp.

If a second bug check occurs and another (or full memory dump) is created, the previous file will be overwritten.

To suppress the display of missing page error messages when debugging kernel memory dumps, use the. Ignore _ missing_pages command.

Windows 11 Dev Build 25197 also has other changes, including new animation icons in settings and media player updates.

"Microsoft Win11's new task manager will make troubleshooting easier: support for kernel dumps, etc."

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.