<!doctype html public "-//w3c//dtd html 4.0 transitional//en">
<html>
Neil Horman wrote:
<blockquote TYPE=CITE>On Thu, Oct 13, 2005 at 01:07:41PM -0400, Dave Anderson
wrote:
<br>> Neil Horman wrote:
<br>>
<br>> > Hey all-
<br>> > If I have a RHEL4
crash dump taken from an AMD x86_64 machine, should I
<br>> > be able to examine that vmcore using crash-4.0.1 on a RHEL4 box
running on EM64T
<br>> > hardware? I would have assumed that I would be able to, but
I keep getting file
<br>> > format errors when trying to read the core.
<br>> > Neil
<br>> >
<br>>
<br>> Yes, it should. What's the output look like?
<br>>
<br>Here it is. About the only things that stand out to is that the
PARTIAL_DUMP
<br>flag is set in the ELF header. I wouldn't think a partial dump
would have
<br>produced this error message however, since the ELF and program headers
are all
<br>still in tact.
<br>Neil
<p>crash 4.0-2.6
<br>Copyright (C) 2002, 2003, 2004, 2005 Red Hat, Inc.
<br>Copyright (C) 2004, 2005 IBM Corporation
<br>Copyright (C) 1999-2005 Hewlett-Packard Co
<br>Copyright (C) 1999, 2002 Silicon Graphics, Inc.
<br>Copyright (C) 1999, 2000, 2001, 2002 Mission Critical Linux,
Inc.
<br>This program is free software, covered by the GNU General Public License,
<br>and you are welcome to change it and/or distribute copies of it under
<br>certain conditions. Enter "help copying" to see the conditions.
<br>This program has absolutely no warranty. Enter "help warranty"
for details.
<p>vmcore_data:
<br>
flags: 19 (NETDUMP_LOCAL|NETDUMP_ELF64|PARTIAL_DUMP)
<br>
ndfd: 3
<br>
ofp: 3a20c2d8c0
<br>
header_size: 4096
<br> num_pt_load_segments: 2
<br> pt_load_segment[0]:
<br>
file_offset: 1000
<br>
phys_start: 0
<br>
phys_end: e0000000
<br> pt_load_segment[1]:
<br>
file_offset: e0001000
<br>
phys_start: 100000000
<br>
phys_end: 120000000
<br>
elf_header: 901c70
<br>
elf32: 0
<br>
notes32: 0
<br>
load32: 0
<br>
elf64: 901c70
<br>
notes64: 901cb0
<br>
load64: 901ce8
<br>
nt_prstatus: 901d58
<br>
nt_prpsinfo: 901eb8
<br> nt_taskstruct:
901f50
<br>
task_struct: 10041f697f0
<br>
page_size: 4096
<br> switch_stack:
0
<br> num_prstatus_notes: 1
<br> nt_prstatus_percpu: 0000000000901d58
<p>Elf64_Ehdr:
<br>
e_ident: \177ELF
<br> e_ident[EI_CLASS]: 2 (ELFCLASS64)
<br> e_ident[EI_DATA]: 1 (ELFDATA2LSB)
<br> e_ident[EI_VERSION]: 1 (EV_CURRENT)
<br> e_ident[EI_OSABI]: 0 (ELFOSABI_SYSV)
<br> e_ident[EI_ABIVERSION]: 0
<br>
e_type: 4 (ET_CORE)
<br>
e_machine: 62 (EM_X86_64)
<br>
e_version: 1 (EV_CURRENT)
<br>
e_entry: 0
<br>
e_phoff: 40
<br>
e_shoff: 0
<br>
e_flags: 0
<br>
e_ehsize: 40
<br>
e_phentsize: 38
<br>
e_phnum: 3
<br>
e_shentsize: 0
<br>
e_shnum: 0
<br>
e_shstrndx: 0
<br>Elf64_Phdr:
<br>
p_type: 4 (PT_NOTE)
<br>
p_offset: 232 (e8)
<br>
p_vaddr: 0
<br>
p_paddr: 0
<br>
p_filesz: 556 (22c)
<br>
p_memsz: 0 (0)
<br>
p_flags: 0 ()
<br>
p_align: 0
<br>Elf64_Phdr:
<br>
p_type: 1 (PT_LOAD)
<br>
p_offset: 4096 (1000)
<br>
p_vaddr: 10000000000
<br>
p_paddr: 0
<br>
p_filesz: 3758096384 (e0000000)
<br>
p_memsz: 3758096384 (e0000000)
<br>
p_flags: 7 (PF_X|PF_W|PF_R)
<br>
p_align: 4096
<br>Elf64_Phdr:
<br>
p_type: 1 (PT_LOAD)
<br>
p_offset: 3758100480 (e0001000)
<br>
p_vaddr: 10100000000
<br>
p_paddr: 100000000
<br>
p_filesz: 536870912 (20000000)
<br>
p_memsz: 536870912 (20000000)
<br>
p_flags: 7 (PF_X|PF_W|PF_R)
<br>
p_align: 4096
<br>Elf64_Nhdr:
<br>
n_namesz: 4 ("CORE")
<br>
n_descsz: 336
<br>
n_type: 1 (NT_PRSTATUS)
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000003 0000007fbffffad0
<br>
000001011fada244 0000000000000004
<br>
00000000000001c7 000001011fada240
<br>
0000000000000246 0000007fbffff201
<br>
0000007fbffff760 0000007fbffff508
<br>
000001011fada370 0000007fbffff201
<br>
0000000000000004 0000010111a49ef8
<br>
000001011fada244 ffffffffffffffff
<br>
ffffffff80177cf8 0000000000000010
<br>
0000000000010202 0000010111a49ea0
<br>
0000000000000018 0000002a9589fb00
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>Elf64_Nhdr:
<br>
n_namesz: 4 ("CORE")
<br>
n_descsz: 136
<br>
n_type: 3 (NT_PRPSINFO)
<br>
0000000000005200 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0078756e696c6d76
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000 0000000000000000
<br>
0000000000000000
<br>Elf64_Nhdr:
<br>
n_namesz: 4 ("CORE")
<br>
n_descsz: 16
<br>
n_type: 4 (NT_TASKSTRUCT)
<br>
0000010041f697f0 0000000000000000
<br>Elf64_Nhdr:
<br>
n_namesz: 4 ("CORE")
<br>
n_descsz: 4
<br>
n_type: 70000001 (NT_DISKDUMP)
<br>
00000001
<br>crash: /boot/vmlinuz-2.6.9-22.ELsmp: not a supported file format
<p>Usage:
<br> crash [-h [opt]][-v][-s][-i file][-d num] [-S] [mapfile] [namelist]
[dumpfile]
<p>Enter "crash -h" for details.</blockquote>
<tt>/boot/vmlinuz-2.6.9-22.ELsmp?</tt><tt></tt>
<p><tt>Use the vmlinux file (with an 'x').</tt><tt></tt>
<p><tt>Dave</tt>
<br>
<blockquote TYPE=CITE>
<br>> Dave
<br>>
<br>>
<br>> >
<br>> > --
<br>> > /***************************************************
<br>> > *Neil Horman
<br>> > *Software Engineer
<br>> > *Red Hat, Inc.
<br>> > *nhorman@redhat.com
<br>> > *gpg keyid: 1024D / 0x92A74FA1
<br>> > *<a href="http://pgp.mit.edu">http://pgp.mit.edu</a>
<br>> > ***************************************************/
<br>> >
<br>> > --
<br>> > Crash-utility mailing list
<br>> > Crash-utility@redhat.com
<br>> > <a href="https://www.redhat.com/mailman/listinfo/crash-utility">https://www.redhat.com/mailman/listinfo/crash-utility</a>
<br>>
<br>> --
<br>> Crash-utility mailing list
<br>> Crash-utility@redhat.com
<br>> <a href="https://www.redhat.com/mailman/listinfo/crash-utility">https://www.redhat.com/mailman/listinfo/crash-utility</a>
<p>--
<br>/***************************************************
<br> *Neil Horman
<br> *Software Engineer
<br> *Red Hat, Inc.
<br> *nhorman@redhat.com
<br> *gpg keyid: 1024D / 0x92A74FA1
<br> *<a href="http://pgp.mit.edu">http://pgp.mit.edu</a>
<br> ***************************************************/
<p>--
<br>Crash-utility mailing list
<br>Crash-utility@redhat.com
<br><a href="https://www.redhat.com/mailman/listinfo/crash-utility">https://www.redhat.com/mailman/listinfo/crash-utility</a></blockquote>
</html>