Investigation program, information processing apparatus, and information processing method

1. A non-transitory computer readable storage medium that stores therein an investigation program for causing an information processing apparatus to execute processing comprising:

creating, in a storage medium, a first dump file for writing out data in a memory in the information processing apparatus when an operating system detects a first abnormality;

rebooting the information processing apparatus without erasing the data stored in the memory after the detection of the first abnormality and after the creation of the first dump file;

creating, during the reboot, a first table that associates a plurality of page areas in the memory and a plurality of dump file areas in the first dump file that correspond to the page areas; and

writing out, when a page area in the memory is released, data stored in the page area being released to the first dump file.

2. A non-transitory computer readable storage medium according to claim 1 , wherein the processing further comprises accessing, in response to access to the first dump file from the information processing apparatus or another information processing apparatus different from the information processing apparatus, the memory or the first dump file by referring to the first table.

3. A non-transitory computer readable storage medium according to claim 1 , wherein the processing further comprises

writing out, before the rebooting, data stored in the page area having a size equivalent to an area for the reboot of the operating system to the first dump file, and

in the processing for creating the first table, the first table is created concerning a page area whose data is not written out to the first dump file.

4. A non-transitory computer readable storage medium according to claim 1 , wherein the processing further comprises:

creating, in the storage medium, a second dump file for writing out the data in the memory, when detecting a second abnormality different from the first abnormality during the writing out of the data to the first dump file;

rebooting the information processing apparatus without erasing the data stored in the memory after creating the second dump file;

creating, during the reboot, a second table that associates a plurality of page areas in the memory and a plurality of dump file areas in the second dump file that correspond to the page areas;

accessing, in response to access to the first dump file from the information processing apparatus or another information processing apparatus different from the information processing apparatus, the memory or the second dump file referring to the second table; and

writing out, when a page area in the memory is released, data stored in the page area being released to the second dump file.

5. A non-transitory computer readable storage medium according to claim 1 , wherein

in the processing for creating the first dump file, a first dump file management structure for managing address information of the first dump file is created when the first dump file is created, and

in the processing for creating the first table, a plurality of first memory management structures respectively including address information of the page areas and the dump file areas are created as the first table.

6. A non-transitory computer readable storage medium according to claim 5 , wherein

the first memory management structures each include a first flag indicating whether the data stored in the page area is not written out to the first dump file, and

in the processing for creating the first table, when the first memory management structure is created, the first flag is set to indicate that the data stored in the page area is not written out to the dump file area.

7. A non-transitory computer readable storage medium according to claim 6 , wherein, in the processing for writing out the data to the first dump file, when the page area managed by the first memory management structure is released and in the case where the first flag indicates that the data is not written out to the dump file area, data stored in the page area to be released is written out to the dump file area.

8. A non-transitory computer readable storage medium according to claim 6 , wherein the processing further comprises:

creating, in the storage medium, a second dump file for writing out the data in the memory, when detecting a second abnormality different from the first abnormality during the writing out of the data to the first dump file;

rebooting the information processing apparatus without erasing the data stored in the memory after creating the second dump file;

creating, during the reboot, a second table that associates a plurality of page areas in the memory and a plurality of dump file areas in the second dump file that correspond to the page areas;

accessing, in response to access to the first dump file from the information processing apparatus or another information processing apparatus different from the information processing apparatus, the memory or the first dump file referring to the second table;

writing out, when a page area in the memory is released, data stored in the page area being released to the second dump file; and

resuming the write-out, to the first dump file, of data stored in a page area indicated by the first flag as not being written out to the first dump file among the page areas associated by the first memory management structure.

9. A non-transitory computer readable storage medium according to claim 8 , wherein

the first dump file includes a second flag indicating whether the write-out to the first dump file is being executed or is already executed, and

in the processing for resuming the write-out to the first dump file, the write-out to the first dump file is executed when the second flag indicates that the write-out is being executed.

10. A non-transitory computer readable storage medium according to claim 9 , wherein

before rebooting the information processing apparatus when the first abnormality is detected, the second flag is set to indicate that the write-out is being executed, and

after writing out of the data to the first dump file, the second flag is set to indicate that the write-out is already executed.

11. An information processing apparatus, comprising:

a processor configured to execute a processing, the processing comprising:

creating, in a storage medium, a first dump file for writing out data in a memory in the information processing apparatus when an operating system detects a first abnormality;

rebooting the information processing apparatus without erasing the data stored in the memory after the detection of the first abnormality and after the creation of the first dump file;

creating, during the reboot, a first table that associates a plurality of page areas in the memory and a plurality of dump file areas in the first dump file that correspond to the page areas; and

writing out, when a page area in the memory is released, data stored in the page area being released to the first dump file.

12. An information processing method, comprising:

creating, in a storage medium, a first dump file for writing out data in a memory in the information processing apparatus when an operating system detects a first abnormality;

rebooting the information processing apparatus without erasing the data stored in the memory after the detection of the first abnormality and after the creation of the first dump file;

creating, during the reboot, a first table that associates a plurality of page areas in the memory and a plurality of dump file areas in the first dump file that correspond to the page areas; and

writing out, when a page area in the memory is released, data stored in the page area being released to the first dump file.