CN107480033A - Virtual machine blue screen detection method and equipment - Google Patents
Virtual machine blue screen detection method and equipment Download PDFInfo
- Publication number
- CN107480033A CN107480033A CN201610403851.XA CN201610403851A CN107480033A CN 107480033 A CN107480033 A CN 107480033A CN 201610403851 A CN201610403851 A CN 201610403851A CN 107480033 A CN107480033 A CN 107480033A
- Authority
- CN
- China
- Prior art keywords
- virtual machine
- blue screen
- flag bit
- space address
- monitoring
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/3003—Monitoring arrangements specially adapted to the computing system or computing system component being monitored
- G06F11/301—Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system is a virtual computing platform, e.g. logically partitioned systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/30—Monitoring
- G06F11/32—Monitoring with visual or acoustical indication of the functioning of the machine
- G06F11/321—Display for diagnostics, e.g. diagnostic result display, self-test user interface
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- Quality & Reliability (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Human Computer Interaction (AREA)
- Mathematical Physics (AREA)
- Debugging And Monitoring (AREA)
Abstract
It is an object of the invention to provide a kind of virtual machine blue screen detection method and equipment, by when monitoring to occur blue screen, corresponding flag bit in public space address is rewritten, when monitoring that the flag bit changes, send the notice for detecting blue screen, the generation of blue screen can be detected in the very first time, and actively report in time, shorten the time of virtual machine service disconnection, the efficiency of O＆M can be lifted, the loss of service disconnection is reduced to minimum, lifting user service experience, ensure the stability of service, the cost of cloud computing service can be greatlyd save.
Description
Technical field
The present invention relates to computer realm, more particularly to a kind of virtual machine blue screen detection method and equipment.
Background technology
Blue screen be Windows operating system when that can not recover from a system mistake, for protect computer data
File is not destroyed and forces the screen phenomenon of display.Under virtual machine scene, the equipment of virtual machine is simulated by software mostly,
The equipment that the driving of equipment is all based on simulation, it is easier to trigger blue screen mechanism.
Under the scene of virtual machine large scale deployment, the blue screen of virtual machine not only causes service disconnection, and O＆M inspection
An and thing taken time and effort.At present in cloud computing, it is many to monitor the mode of the state of virtual machine, can substantially be divided into two
Kind, one kind is detected in virtual machine internal, is sent to monitoring software by data channel, second is by host, is utilized
Hypervisor (virtual management program) instrument, obtain the running status of virtual machine.Both approaches are all the sides of active
Formula is gone to inquire about, and the performance of virtual machine or hosted service can be affected.This two class is only able to detect exception, it is impossible to
Virtual machine is accurately positioned whether there occurs blue screen, subsequently confirm the exception whether be blue screen need it is artificial carry out detection and check, take
When it is laborious, cause failure to exclude blue screen failure in time, cause business interruption time to grow.
The content of the invention
It is an object of the present invention to provide a kind of virtual machine blue screen detection method and equipment, currently existing scheme can solve the problem that
It is only able to detect exception, it is impossible to which being accurately positioned virtual machine, whether there occurs the problem of blue screen.
According to an aspect of the invention, there is provided a kind of virtual machine blue screen detection method, this method include：
When monitoring to occur blue screen, corresponding flag bit in public space address is rewritten；
When monitoring that the flag bit changes, the notice for detecting blue screen is sent.
Further, in the above method, when monitoring to occur blue screen, corresponding flag bit in public space address is entered
Row is rewritten, including：
When MICROSOFT VIRTUAL machine monitors to occur blue screen, corresponding flag bit in public space address is rewritten；
When monitoring that the flag bit changes, the notice for detecting blue screen is sent, including：
When privileged virtual machine monitors that the flag bit changes, the notice for detecting blue screen is sent.
Further, in the above method, the public space address is the configuration space of the bus apparatus of MICROSOFT VIRTUAL machine
Address.
Further, in the above method, when MICROSOFT VIRTUAL machine monitors to occur blue screen, to corresponding in public space address
Flag bit rewritten, including：
When MICROSOFT VIRTUAL machine monitors memory information file generated, configuration of the blue screen call back function to bus apparatus is called
Corresponding flag bit is rewritten in space address, wherein, the memory information file generates when monitoring to occur blue screen.
Further, in the above method, when MICROSOFT VIRTUAL machine monitors memory information file generated, blue screen readjustment is called
Corresponding flag bit is rewritten in the configuration space address of function pair bus apparatus, including：
Open the function of the generation memory information file of MICROSOFT VIRTUAL machine；
In the driving initialization of MICROSOFT VIRTUAL machine, to Microsoft's driving framework registration blue screen call back function, wherein, the drive
The driving initialization of the dynamic bus apparatus for being initialized as half virtualization driving；
When monitoring memory information file generated, blue screen call back function is called to corresponding mark in public space address
Rewritten position.
Further, in the above method, the blue screen call back function include KeRegisterBugCheckCallback or
KeRegisterBugCheckReasonCallback。
Further, in the above method, the memory information file is core dump file.
Further, in the above method, when privileged virtual machine monitors that the flag bit changes, send and detect indigo plant
The notice of screen, including：
When the analog processor of privileged virtual machine monitors that the flag bit changes, analog processor, which is sent, to be detected
The notice of blue screen.
According to another aspect of the present invention, a kind of virtual machine blue screen detection device is additionally provided, the equipment includes：
First device, for when monitoring to occur blue screen, being rewritten to corresponding flag bit in public space address；
Second device, for when monitoring that the flag bit changes, sending the notice for detecting blue screen.
Further, in the said equipment, the first device is MICROSOFT VIRTUAL machine；
The second device monitors for privileged virtual machine.
Further, in the said equipment, the public space address is the configuration space of the bus apparatus of MICROSOFT VIRTUAL machine
Address.
Further, in the said equipment, the MICROSOFT VIRTUAL machine, for when monitoring memory information file generated, adjusting
Corresponding flag bit in the configuration space address of bus apparatus is rewritten with blue screen call back function, wherein, the internal memory letter
Breath file generates when monitoring to occur blue screen.
Further, in the said equipment, the MICROSOFT VIRTUAL machine, for opening the generation memory information text of MICROSOFT VIRTUAL machine
The function of part；In the driving initialization of MICROSOFT VIRTUAL machine, to Microsoft's driving framework registration blue screen call back function, wherein, it is described
Driving is initialized as the driving initialization of the bus apparatus of half virtualization driving；And when monitoring memory information file generated,
Blue screen call back function is called to rewrite corresponding flag bit in public space address.
Further, in the said equipment, the blue screen call back function include KeRegisterBugCheckCallback or
KeRegisterBugCheckReasonCallback。
Further, in the said equipment, the memory information file is core dump file.
Further, in the said equipment, the second device is the analog processor of privileged virtual machine.
Compared with prior art, the application by when monitor occur blue screen when, to corresponding mark in public space address
Rewritten will position；When monitoring that the flag bit changes, the notice for detecting blue screen is sent, can be examined in the very first time
The generation of blue screen is measured, and is actively reported in time, shortens the time of virtual machine service disconnection, the efficiency of O＆M can be lifted, by industry
The loss that business is interrupted is reduced to minimum, lifting user service experience, ensures the stability of service, can greatly save cloud computing service
Cost.
Brief description of the drawings
By reading the detailed description made to non-limiting example made with reference to the following drawings, of the invention is other
Feature, objects and advantages will become more apparent upon：
Fig. 1 shows a kind of flow chart of virtual machine blue screen detection method according to one aspect of the invention；
Fig. 2 shows the schematic diagram of virtual machine blue screen detection method in the present invention；
Fig. 3 shows the flow chart of the preferred embodiment of virtual machine blue screen detection method one of the present invention；
Fig. 4 shows a kind of module map of virtual machine blue screen detection device according to a further aspect of the present invention.
Same or analogous reference represents same or analogous part in accompanying drawing.
Embodiment
The present invention is described in further detail below in conjunction with the accompanying drawings.
In one typical configuration of the application, terminal, the equipment of service network and trusted party include one or more
Processor (CPU), input/output interface, network interface and internal memory.
Internal memory may include computer-readable medium in volatile memory, random access memory (RAM) and/or
The forms such as Nonvolatile memory, such as read-only storage (ROM) or flash memory (flash RAM).Internal memory is computer-readable medium
Example.
Computer-readable medium includes permanent and non-permanent, removable and non-removable media can be by any method
Or technology come realize information store.Information can be computer-readable instruction, data structure, the module of program or other data.
The example of the storage medium of computer includes, but are not limited to phase transition internal memory (PRAM), static RAM (SRAM), moved
State random access memory (DRAM), other kinds of random access memory (RAM), read-only storage (ROM), electric erasable
Programmable read only memory (EEPROM), fast flash memory bank or other memory techniques, read-only optical disc read-only storage (CD-ROM),
Digital versatile disc (DVD) or other optical storages, magnetic cassette tape, magnetic disk storage or other magnetic storage apparatus or
Any other non-transmission medium, the information that can be accessed by a computing device available for storage.Defined according to herein, computer
Computer-readable recording medium does not include non-temporary computer readable media (transitory media), such as the data-signal and carrier wave of modulation.
Such as showing for Fig. 1, the application provides a kind of virtual machine blue screen detection method, and this method includes：
Step S1, when monitoring to occur blue screen, corresponding flag bit in public space address is rewritten；
Step S2, when monitoring that the flag bit changes, send the notice for detecting blue screen.The present embodiment is by changing
The flag bit in public space address, and the change of the monitoring flag bit are write, the hair of blue screen can be detected in the very first time
It is raw, and actively report in time, shorten the time of virtual machine service disconnection, the efficiency of O＆M can be lifted, by the loss of service disconnection
Be reduced to minimum, lifting user service experience, ensure the stability of service, can greatly save on long terms cloud computing service into
This.
In a kind of preferred embodiment of virtual machine blue screen detection method one of the application, step S1, when monitor occur blue screen
When, corresponding flag bit in public space address is rewritten, including：
When Microsoft (windows) virtual machine monitors to occur blue screen, corresponding flag bit in public space address is entered
Row is rewritten；
Step S2, when monitoring that the flag bit changes, the notice for detecting blue screen is sent, including：
When privileged virtual machine monitors that the flag bit changes, the notice for detecting blue screen is sent.Specifically, as schemed
Shown in 2, specifically, blue screen occurs on windows virtual machines, it is right when windows virtual machines monitor blue screen
Corresponding flag bit is rewritten in the public space address of windows virtual machines and the monitoring of privileged virtual machine, such as by flag bit
1 is revised as by 0, corresponding flag bit is visible to privileged virtual machine in public space address, therefore monitors institute by privileged virtual machine
The change of flag bit is stated, when monitoring to change, it is believed that blue screen has occurred for windows virtual machines, and this information is entered
Row is reported as reported monitoring system, and indigo plant is carried out so as to realize efficiently to coordinate between windows virtual machines and privileged virtual machine
Screen monitoring.
In a kind of preferred embodiment of virtual machine blue screen detection method one of the application, when privileged virtual machine monitors the mark
When will position changes, the notice for detecting blue screen is sent, including：
When the analog processor of privileged virtual machine monitors that the flag bit changes, analog processor, which is sent, to be detected
The notice of blue screen.Specifically, in the virtualization scene of XEN (open source code virtual machine monitor), MICROSOFT VIRTUAL machine is set
Standby is all simulated by the Qemu (analog processor) on privileged virtual machine (dom0), mainly the equipment such as disk and network interface card.It is micro-
On soft virtual machine often installation PV Driver (Para-Virtualization Driver, half virtualization driving) come before optimizing
Input and output (IO) transmission of rear end, wherein, the front end is MICROSOFT VIRTUAL machine, and the rear end is privileged virtual machine.PV is installed
After Driver, PV Driver can hide the equipment such as disk, network interface card of Qemu simulations first, and utilize the bus of Qemu simulations
Equipment (PCI), simulate new virtual disk and network card equipment, and provided driving.As shown in Fig. 2 windows virtual machines
After installing PV Driver (Para-Virtualization Driver, half virtualization driving), bus apparatus (PCI) is by spy
The analog processor (Qemu simulations) on virtual machine (dom0) is weighed, but the driver of bus apparatus is connect by PV Driver
Pipe, now for windows virtual machines, the configuration space address of its device PCI, on privileged virtual machine (dom0)
It is visible for Qemu, therefore is set when windows virtual machine blue screens using the PCI of call back function to windows virtual machines
Flag bit is write in standby configuration space address, then goes to detect the change of this configuration space address intermediate value in Qemu, as Qemu, PV
When the flag bit of Driver both sides' agreement changes, Qemu can consider that blue screen has occurred for windows virtual machines, and this is believed
Breath reports monitoring system.
In a kind of preferred embodiment of virtual machine blue screen detection method one of the application, the public space address is that Microsoft is empty
The configuration space address of the bus apparatus of plan machine.Specifically, as shown in Fig. 2 after windows virtual machines installation PV Driver, always
Line equipment be by the analog processor (Qemu simulations) on privileged virtual machine (dom0), but the driver of bus apparatus by
PV Driver take over, now for windows virtual machines, the configuration space address of its device PCI, to privileged virtual machine
(dom0) it is visible for the Qemu on, therefore when windows virtual machine blue screens, to the device PCI of windows virtual machines
Configuration space address write flag bit, then go to detect the change of this configuration space address intermediate value in Qemu, as Qemu, PV
When the flag bit of Driver both sides' agreement changes, Qemu can consider that blue screen has occurred for windows virtual machines, and this is believed
Breath reports monitoring system, here, the configuration space address of the bus apparatus using MICROSOFT VIRTUAL machine, it is empty to can be achieved windows
Efficiently coordinate between plan machine and privileged virtual machine and carry out blue screen monitoring.
In a kind of preferred embodiment of virtual machine blue screen detection method one of the application, when MICROSOFT VIRTUAL machine monitors that indigo plant occurs
During screen, corresponding flag bit in public space address is rewritten, including：
When MICROSOFT VIRTUAL machine monitors memory information file generated, configuration of the blue screen call back function to bus apparatus is called
Corresponding flag bit is rewritten in space address, wherein, the memory information file generates when blue screen occurs.Specifically,
As shown in Fig. 2 when windows virtual machine blue screens, corresponding memory information file generated is had, now, utilizes call back function
Flag bit is write to the configuration space address of the device PCI of windows virtual machines, is then gone in Qemu with detecting this configuration space
The change of location intermediate value, when the flag bit that Qemu, PV Driver both sides arrange changes, Qemu can consider windows void
Blue screen has occurred for plan machine, and by this information reporting to monitoring system, here, matching somebody with somebody by memory information file and call back function
Close, can be achieved efficiently to coordinate progress blue screen monitoring between windows virtual machines and privileged virtual machine.
As shown in figure 3, in a kind of preferred embodiment of virtual machine blue screen detection method one of the application, when MICROSOFT VIRTUAL machine is supervised
When measuring memory information file generated, blue screen call back function is called to corresponding flag bit in the configuration space address of bus apparatus
Rewritten, including：
Step S11, the function of the generation memory information file of MICROSOFT VIRTUAL machine is opened, wherein, the memory information file
Generated when monitoring to occur blue screen, so as to realize enabling for the function of the generation memory information file of follow-up MICROSOFT VIRTUAL machine；
Step S12, at the beginning of the driving of the bus apparatus (PCI) of half virtualization driving (PV Driver) of MICROSOFT VIRTUAL machine
In beginningization, to Microsoft's driving framework registration blue screen call back function, so as to realize that follow-up blue screen call back function can be to public space
The function that address is rewritten in corresponding flag bit；
Step S13, when monitoring memory information file generated, blue screen call back function is called to right in public space address
The flag bit answered is rewritten.Specifically, blue screen detection realizes that details is as follows：
1. open the dump file generated functions of windows virtual machines；
2. drive framework registered callbacks function to Microsoft in PV Driver PCI driving initialization.
3. monitor that blue screen occurs, call back function can be called to device PCI during dump file generateds configuration space
Address writes flag bit and is such as rewritten into the change that 1, Qemu detects this configuration space address intermediate value by 0, is reported to monitoring programme.
In a kind of preferred embodiment of virtual machine blue screen detection method one of the application, the blue screen call back function includes：
KeRegisterBugCheckCallback or KeRegisterBugCheckReasonCallback.Specifically,
Windows driving frameworks provide some blue screen (crash) call back functions, wherein KeRegisterBugCheckCallback and
Two functions of KeRegisterBugCheckReasonCallback can be adjusted when dump files (core dump file) preserve
With the function of two functions is the same, is registered using in the driving initialization of the PCI in PV Driver to Microsoft's driving framework；
KeRegisterBugCheckCallback or KeRegisterBugCheckReasonCallback call back functions.
In a kind of preferred embodiment of virtual machine blue screen detection method one of the application, the memory information file turns for internal memory
Store up file.Specifically, the driving framework of windows virtual machines provides some blue screen (crash) call back functions, call back function can be
Core dump file (dump files) is called when preserving, and this mechanism can be utilized, when blue screen occurs, although windows is empty
Do not reruned inside plan machine application program, notify Qemu using call back function, one is done on privileged virtual machine (dom0) by Qemu
A little notices, so as to by the information reporting monitoring system of blue screen.
As shown in figure 4, according to the another side of the application, a kind of virtual machine blue screen detection device is also provided, the equipment includes：
First device 1, for when monitoring to occur blue screen, changing to corresponding flag bit in public space address
Write；
Second device 2, for when monitoring that the flag bit changes, sending the notice for detecting blue screen.This implementation
Example can be detected by rewriting the flag bit in public space address, and the change of the monitoring flag bit in the very first time
The generation of blue screen, and actively report in time, shorten the time of virtual machine service disconnection, the efficiency of O＆M can be lifted, by business
Disconnected loss is reduced to minimum, lifting user service experience, ensures the stability of service, can greatly save cloud computing on long terms
The cost of service.
In a kind of preferred embodiment of virtual machine blue screen detection device one of the application, the first device 1 is MICROSOFT VIRTUAL
Machine；
The second device 2 monitors for privileged virtual machine.Specifically, as shown in Fig. 2 specifically, blue screen occurs
On windows virtual machines, when windows virtual machines monitor blue screen, windows virtual machines and privileged virtual machine are monitored
Public space address in corresponding flag bit rewritten, flag bit is such as revised as 1 by 0, it is corresponding in public space address
Flag bit it is visible to privileged virtual machine, therefore the change of the flag bit is monitored by privileged virtual machine, when monitoring to change
When, it is believed that blue screen has occurred for windows virtual machines, and this information is reported as reported monitoring system, so as to real
It is existing efficiently to coordinate progress blue screen monitoring between windows virtual machines and privileged virtual machine.
In a kind of preferred embodiment of virtual machine blue screen detection device one of the application, the second device 2 is privileged virtual
The analog processor of machine.Specifically, in the virtualization scene of XEN (open source code virtual machine monitor), MICROSOFT VIRTUAL machine
Equipment be all to be simulated by the Qemu (analog processor) on privileged virtual machine (dom0), mainly disk and network interface card etc. are set
It is standby.Frequent installation PV Driver (Para-Virtualization Driver, half virtualization driving) are next excellent on MICROSOFT VIRTUAL machine
Change input and output (IO) transmission of front and back end, wherein, the front end is MICROSOFT VIRTUAL machine, and the rear end is privileged virtual machine.Peace
After filling PV Driver, PV Driver can hide the equipment such as disk, network interface card of Qemu simulations first, and utilize Qemu simulations
Bus apparatus (PCI), simulate new virtual disk and network card equipment, and provided driving.As shown in Fig. 2 windows is empty
After plan machine installation PV Driver (Para-Virtualization Driver, half virtualization driving), bus apparatus (PCI) is
By the analog processor (Qemu simulations) on privileged virtual machine (dom0), but the driver of bus apparatus is by PV
Driver takes over, now for windows virtual machines, the configuration space address of its device PCI, to privileged virtual machine
(dom0) it is visible for the Qemu on, thus it is virtual to windows using call back function when windows virtual machine blue screens
Flag bit is write in the configuration space address of the device PCI of machine, then goes to detect the change of this configuration space address intermediate value in Qemu,
When the flag bit that Qemu, PV Driver both sides arrange changes, Qemu can consider that indigo plant has occurred for windows virtual machines
Screen, and by this information reporting to monitoring system.
In a kind of preferred embodiment of virtual machine blue screen detection device one of the application, the public space address is that Microsoft is empty
The configuration space address of the bus apparatus of plan machine.Specifically, as shown in Fig. 2 after windows virtual machines installation PV Driver, always
Line equipment be by the analog processor (Qemu simulations) on privileged virtual machine (dom0), but the driver of bus apparatus by
PV Driver take over, now for windows virtual machines, the configuration space address of its device PCI, to privileged virtual machine
(dom0) it is visible for the Qemu on, therefore when windows virtual machine blue screens, to the device PCI of windows virtual machines
Configuration space address write flag bit, then go to detect the change of this configuration space address intermediate value in Qemu, as Qemu, PV
When the flag bit of Driver both sides' agreement changes, Qemu can consider that blue screen has occurred for windows virtual machines, and this is believed
Breath reports monitoring system, here, the configuration space address of the bus apparatus using MICROSOFT VIRTUAL machine, it is empty to can be achieved windows
Efficiently coordinate between plan machine and privileged virtual machine and carry out blue screen monitoring.
In a kind of preferred embodiment of virtual machine blue screen detection device one of the application, the MICROSOFT VIRTUAL machine, for when prison
When measuring memory information file generated, blue screen call back function is called to corresponding flag bit in the configuration space address of bus apparatus
Rewritten, wherein, the memory information file generates when monitoring to occur blue screen.Specifically, as shown in Fig. 2 work as
During windows virtual machine blue screens, corresponding memory information file generated is had, it is now, virtual to windows using call back function
Flag bit is write in the configuration space address of the device PCI of machine, then goes to detect the change of this configuration space address intermediate value in Qemu,
When the flag bit that Qemu, PV Driver both sides arrange changes, Qemu can consider that indigo plant has occurred for windows virtual machines
Screen, and by this information reporting to monitoring system, here, by the cooperation of memory information file and call back function, can be achieved
Efficiently coordinate between windows virtual machines and privileged virtual machine and carry out blue screen monitoring.
In a kind of preferred embodiment of virtual machine blue screen detection device one of the application, the MICROSOFT VIRTUAL machine 1, for opening
The function of the generation memory information file of MICROSOFT VIRTUAL machine, wherein, the memory information file is given birth to when monitoring to occur blue screen
Into so as to realize enabling for the function of the generation memory information file of follow-up MICROSOFT VIRTUAL machine；At the beginning of the driving of MICROSOFT VIRTUAL machine
In beginningization, to Microsoft's driving framework registration blue screen call back function, wherein, the driving is initialized as the bus of half virtualization driving
The driving initialization of equipment, so as to realize that follow-up blue screen call back function can be carried out to public space address in corresponding flag bit
The function of rewriting；And when monitoring memory information file generated, blue screen call back function is called to corresponding in public space address
Flag bit rewritten.Specifically, blue screen detection realizes that details is as follows：
1. open the dump file generated functions of windows virtual machines；
2. drive framework registered callbacks function to Microsoft in PV Driver PCI driving initialization.
3. monitor that blue screen occurs, call back function can be called to device PCI during dump file generateds configuration space
Address writes flag bit and is such as rewritten into the change that 1, Qemu detects this configuration space address intermediate value by 0, is reported to monitoring programme.
In a kind of preferred embodiment of virtual machine blue screen detection device one of the application, the blue screen call back function includes：
KeRegisterBugCheckCallback or KeRegisterBugCheckReasonCallback.Specifically,
Windows driving frameworks provide some blue screen (crash) call back functions, wherein KeRegisterBugCheckCallback and
Two functions of KeRegisterBugCheckReasonCallback can be adjusted when dump files (core dump file) preserve
With the function of two functions is the same, is registered using in the driving initialization of the PCI in PV Driver to Microsoft's driving framework；
KeRegisterBugCheckCallback or KeRegisterBugCheckReasonCallback call back functions.
In a kind of preferred embodiment of virtual machine blue screen detection device one of the application, the memory information file turns for internal memory
Store up file.Specifically, the driving framework of windows virtual machines provides some blue screen (crash) call back functions, call back function can be
Core dump file (dump files) is called when preserving, and this mechanism can be utilized, when blue screen occurs, although windows is empty
Do not reruned inside plan machine application program, notify Qemu using call back function, one is done on privileged virtual machine (dom0) by Qemu
A little notices, so as to by the information reporting monitoring system of blue screen.
In summary, the application to corresponding flag bit in public space address by when monitoring to occur blue screen, entering
Row is rewritten；When monitoring that the flag bit changes, the notice for detecting blue screen is sent, indigo plant can be detected in the very first time
The generation of screen, and actively report in time, shorten the time of virtual machine service disconnection, the efficiency of O＆M can be lifted, by service disconnection
Loss be reduced to minimum, lifting user service experience, ensure the stability of service, can greatly save cloud computing service into
This.
Obviously, those skilled in the art can carry out the essence of various changes and modification without departing from the application to the application
God and scope.So, if these modifications and variations of the application belong to the scope of the application claim and its equivalent technologies
Within, then the application is also intended to comprising including these changes and modification.
It should be noted that the present invention can be carried out in the assembly of software and/or software and hardware, for example, can adopt
With application specific integrated circuit (ASIC), general purpose computer or any other realized similar to hardware device.In one embodiment
In, software program of the invention can realize steps described above or function by computing device.Similarly, it is of the invention
Software program (including related data structure) can be stored in computer readable recording medium storing program for performing, for example, RAM memory,
Magnetically or optically driver or floppy disc and similar devices.In addition, some steps or function of the present invention can employ hardware to realize, example
Such as, coordinate as with processor so as to perform the circuit of each step or function.
In addition, the part of the present invention can be applied to computer program product, such as computer program instructions, when its quilt
When computer performs, by the operation of the computer, the method according to the invention and/or technical scheme can be called or provided.
And the programmed instruction of the method for the present invention is called, it is possibly stored in fixed or moveable recording medium, and/or pass through
Broadcast or the data flow in other signal bearing medias and be transmitted, and/or be stored according to described program instruction operation
In the working storage of computer equipment.Here, including a device according to one embodiment of present invention, the device includes using
Memory in storage computer program instructions and processor for execute program instructions, wherein, when the computer program refers to
When order is by the computing device, method and/or skill of the plant running based on foregoing multiple embodiments according to the present invention are triggered
Art scheme.
It is obvious to a person skilled in the art that the invention is not restricted to the details of above-mentioned one exemplary embodiment, Er Qie
In the case of without departing substantially from spirit or essential attributes of the invention, the present invention can be realized in other specific forms.Therefore, no matter
From the point of view of which point, embodiment all should be regarded as exemplary, and be nonrestrictive, the scope of the present invention is by appended power
Profit requires rather than described above limits, it is intended that all in the implication and scope of the equivalency of claim by falling
Change is included in the present invention.Any reference in claim should not be considered as to the involved claim of limitation.This
Outside, it is clear that the word of " comprising " one is not excluded for other units or step, and odd number is not excluded for plural number.That is stated in device claim is multiple
Unit or device can also be realized by a unit or device by software or hardware.The first, the second grade word is used for table
Show title, and be not offered as any specific order.
Claims (16)
1. a kind of virtual machine blue screen detection method, wherein, this method includes：
When monitoring to occur blue screen, corresponding flag bit in public space address is rewritten；
When monitoring that the flag bit changes, the notice for detecting blue screen is sent.
2. the method according to claim 11, wherein, when monitoring to occur blue screen, corresponding in public space address
Flag bit is rewritten, including：
When MICROSOFT VIRTUAL machine monitors to occur blue screen, corresponding flag bit in public space address is rewritten；
When monitoring that the flag bit changes, the notice for detecting blue screen is sent, including：
When privileged virtual machine monitors that the flag bit changes, the notice for detecting blue screen is sent.
3. according to the method for claim 2, wherein, the public space address is matched somebody with somebody for the bus apparatus of MICROSOFT VIRTUAL machine
Put space address.
4. the method according to claim 11, wherein, when MICROSOFT VIRTUAL machine monitors to occur blue screen, to public space
Corresponding flag bit is rewritten in location, including：
When MICROSOFT VIRTUAL machine monitors memory information file generated, configuration space of the blue screen call back function to bus apparatus is called
Corresponding flag bit is rewritten in address, wherein, the memory information file generates when monitoring to occur blue screen.
5. according to the method for claim 4, wherein, when MICROSOFT VIRTUAL machine monitors memory information file generated, call
Blue screen call back function is rewritten to corresponding flag bit in the configuration space address of bus apparatus, including：
Open the function of the generation memory information file of MICROSOFT VIRTUAL machine；
In the driving initialization of MICROSOFT VIRTUAL machine, to Microsoft's driving framework registration blue screen call back function, wherein, at the beginning of the driving
The driving for beginning to turn to the bus apparatus of half virtualization driving initializes；
When monitoring memory information file generated, blue screen call back function is called to enter corresponding flag bit in public space address
Row is rewritten.
6. according to the method for claim 4, wherein, the blue screen call back function includes
KeRegisterBugCheckCallback or KeRegisterBugCheckReasonCallback.
7. according to the method for claim 4, wherein, the memory information file is core dump file.
8. according to the method for claim 2, wherein, when privileged virtual machine monitors that the flag bit changes, send
The notice of blue screen is detected, including：
When the analog processor of privileged virtual machine monitors that the flag bit changes, analog processor, which is sent, detects blue screen
Notice.
9. a kind of virtual machine blue screen detection device, wherein, the equipment includes：
First device, for when monitoring to occur blue screen, being rewritten to corresponding flag bit in public space address；
Second device, for when monitoring that the flag bit changes, sending the notice for detecting blue screen.
10. equipment according to claim 9, wherein, the first device is MICROSOFT VIRTUAL machine；
The second device monitors for privileged virtual machine.
11. equipment according to claim 10, wherein, the public space address is the bus apparatus of MICROSOFT VIRTUAL machine
Configuration space address.
12. equipment according to claim 11, wherein, the MICROSOFT VIRTUAL machine, memory information file is monitored for working as
During generation, blue screen call back function is called to rewrite corresponding flag bit in the configuration space address of bus apparatus, wherein, institute
Memory information file is stated to generate when monitoring to occur blue screen.
13. equipment according to claim 12, wherein, the MICROSOFT VIRTUAL machine, for opening the generation of MICROSOFT VIRTUAL machine
The function of memory information file；In the driving initialization of MICROSOFT VIRTUAL machine, blue screen call back function is registered to Microsoft's driving framework,
Wherein, the driving is initialized as the driving initialization of the bus apparatus of half virtualization driving；And work as and monitor memory information text
When part generates, blue screen call back function is called to rewrite corresponding flag bit in public space address.
14. equipment according to claim 12, wherein, the blue screen call back function includes
KeRegisterBugCheckCallback or KeRegisterBugCheckReasonCallback.
15. equipment according to claim 12, wherein, the memory information file is core dump file.
16. equipment according to claim 10, wherein, the second device is the analog processor of privileged virtual machine.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610403851.XA CN107480033B (en) | 2016-06-08 | 2016-06-08 | Virtual machine blue screen detection method and equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610403851.XA CN107480033B (en) | 2016-06-08 | 2016-06-08 | Virtual machine blue screen detection method and equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107480033A true CN107480033A (en) | 2017-12-15 |
| CN107480033B CN107480033B (en) | 2020-12-11 |
Family
ID=60593806
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610403851.XA Active CN107480033B (en) | 2016-06-08 | 2016-06-08 | Virtual machine blue screen detection method and equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107480033B (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109032897A (en) * | 2018-08-01 | 2018-12-18 | 浪潮电子信息产业股份有限公司 | Data dispatching method, host and solid state hard disk |
| CN113778870A (en) * | 2021-09-07 | 2021-12-10 | 杭州雾联科技有限公司 | Blue screen callback method, device, equipment and computer readable storage medium |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101446830A (en) * | 2008-12-25 | 2009-06-03 | 奇瑞汽车股份有限公司 | Vehicle fault diagnosis instrument and fault diagnosis method |
| CN103049343A (en) * | 2011-10-14 | 2013-04-17 | 腾讯科技（深圳）有限公司 | Method and device for restoring operating system blue screen |
| US20140115575A1 (en) * | 2012-10-18 | 2014-04-24 | Vmware, Inc. | Systems and methods for detecting system exceptions in guest operating systems |
| CN105511937A (en) * | 2015-11-23 | 2016-04-20 | 国云科技股份有限公司 | Batch virtual machine blue screen monitoring method suitable for cloud platform |
-
2016
- 2016-06-08 CN CN201610403851.XA patent/CN107480033B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101446830A (en) * | 2008-12-25 | 2009-06-03 | 奇瑞汽车股份有限公司 | Vehicle fault diagnosis instrument and fault diagnosis method |
| CN103049343A (en) * | 2011-10-14 | 2013-04-17 | 腾讯科技（深圳）有限公司 | Method and device for restoring operating system blue screen |
| US20140115575A1 (en) * | 2012-10-18 | 2014-04-24 | Vmware, Inc. | Systems and methods for detecting system exceptions in guest operating systems |
| CN105511937A (en) * | 2015-11-23 | 2016-04-20 | 国云科技股份有限公司 | Batch virtual machine blue screen monitoring method suitable for cloud platform |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN109032897A (en) * | 2018-08-01 | 2018-12-18 | 浪潮电子信息产业股份有限公司 | Data dispatching method, host and solid state hard disk |
| CN113778870A (en) * | 2021-09-07 | 2021-12-10 | 杭州雾联科技有限公司 | Blue screen callback method, device, equipment and computer readable storage medium |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107480033B (en) | 2020-12-11 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10956308B2 (en) | Test case reduction for code regression testing | |
| US9921939B2 (en) | Creating a software performance testing environment on a virtual machine system | |
| US9632914B2 (en) | Error diagnostic in a production environment | |
| US8468522B2 (en) | Virtual machine system, system for forcing policy, method for forcing policy, and virtual machine control program | |
| JP6516730B2 (en) | Method and apparatus for backing up and restoring applications | |
| CN108287775A (en) | A kind of method, apparatus, equipment and the storage medium of server failure detection | |
| US9665465B1 (en) | Automated determination of application permissions | |
| CN107526647A (en) | A kind of fault handling method, system and computer program product | |
| WO2023092942A1 (en) | Data storage method and apparatus, and electronic device and readable storage medium | |
| WO2020096665A2 (en) | System error detection | |
| CH717425B1 (en) | System and method for selectively restoring a computer system to an operational state. | |
| CN114446381B (en) | eMMC fault analysis method, device, readable storage medium and electronic equipment | |
| CN107145399B (en) | Shared memory management method and shared memory management equipment | |
| CN107480033A (en) | Virtual machine blue screen detection method and equipment | |
| US10007583B2 (en) | Generating a data structure to maintain error and connection information on components and use the data structure to determine an error correction operation | |
| WO2015030999A1 (en) | Agentless monitoring of computer systems | |
| US8516311B2 (en) | System and method for testing peripheral component interconnect express switch | |
| US10855535B1 (en) | Method and system for managing virtual datacenters | |
| US10740070B2 (en) | Locating features in a layered software application | |
| US8656066B2 (en) | Monitoring input/output operations to specific storage locations | |
| US20120166885A1 (en) | System and method for testing hard disk drive of computing device | |
| US20160266951A1 (en) | Diagnostic collector for hadoop | |
| CN101751283A (en) | Virtual machine monitor, virtual machine system and client operation system state acquiring method | |
| US11477104B2 (en) | Data rate monitoring to determine channel failure | |
| JP2023532835A (en) | Live migrate virtual machine to target host on fatal memory error |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20230602 Address after: Room 1-2-A06, Yungu Park, No. 1008 Dengcai Street, Sandun Town, Xihu District, Hangzhou City, Zhejiang Province Patentee after: Aliyun Computing Co.,Ltd. Address before: Box 847, four, Grand Cayman capital, Cayman Islands, UK Patentee before: ALIBABA GROUP HOLDING Ltd. |