Line 11:
Line 11:
is collected and sorted. Now, if any few processes have a mapping with same ''device'' and ''inode'',
is collected and sorted. Now, if any few processes have a mapping with same ''device'' and ''inode'',
this mapping is a shared one and should be dumped as such.
this mapping is a shared one and should be dumped as such.
+
+
It's important to note that this works for both -- anonymous and file shared mappings, as for the
+
former ones kernel creates an invisible through the VFS tree tmpfs-based file, and it's possible
+
to works with it just like with any other file (except that it cannot be opened via any path but
+
/proc/pid/map_files/address).
== Restore ==
== Restore ==