<div dir="ltr">Hi Patrick, The following links may also be helpful to understand gdb and it's usage for application core analysis. <a href="http://web.eecs.umich.edu/~sugih/pointers/gdb_core.html">http://web.eecs.umich.edu/~sugih/pointers/gdb_core.html</a> <a href="https://sourceware.org/gdb/onlinedocs/gdb/">https://sourceware.org/gdb/onlinedocs/gdb/</a> -- BKS </div><div class="gmail_extra"> <div class="gmail_quote">On 17 December 2013 21:36, Patrick Agrain <<a href="mailto:patrick.agrain@alcatel-lucent.com" target="_blank">patrick.agrain@alcatel-lucent.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> Hello all, Now that we have dumped the kernel stack, I'm intesresting in the user process from which we came just before the 'panic'. Googling around, I found mention of the 'gcore' extension. I compiled version 1.22 and installed it. Using it on crash 6.1.0-1.el6, I get a file core.845.bash on process 'bash' (in which I trigger a kernel panic) : <blockquote><tt>crash> gcore -v 1 845</tt> <tt>gcore: Opening file core.845.bash ...</tt> <tt>gcore: done.</tt> <tt>gcore: Writing ELF header ...</tt> <tt>gcore: done.</tt> <tt>gcore: Retrieving and writing note information ...</tt> <tt>gcore: done.</tt> <tt>gcore: Writing PT_NOTE program header ...</tt> <tt>gcore: done.</tt> <tt>gcore: Writing PT_LOAD program headers ...</tt> <tt>gcore: done.</tt> <tt>gcore: Writing PT_LOAD segment ...</tt> <tt>gcore: PT_LOAD[0]: 8048000 - 8048000</tt> <tt>gcore: PT_LOAD[1]: 80e2000 - 80e9000</tt> <tt>gcore: PT_LOAD[2]: 80e9000 - 80ed000</tt> <tt>gcore: PT_LOAD[3]: 94a2000 - 94d1000</tt> <tt>gcore: PT_LOAD[4]: b7374000 - b7374000</tt> <tt>gcore: PT_LOAD[5]: b7375000 - b7376000</tt> <tt>gcore: PT_LOAD[6]: b7376000 - b7377000</tt> <tt>gcore: PT_LOAD[7]: b7377000 - b7377000</tt> <tt>gcore: PT_LOAD[8]: b737e000 - b737e000</tt> <tt>gcore: PT_LOAD[9]: b737f000 - b737f000</tt> <tt>gcore: PT_LOAD[10]: b73bb000 - b73bb000</tt> <tt>gcore: PT_LOAD[11]: b75bb000 - b75bb000</tt> <tt>gcore: PT_LOAD[12]: b75c7000 - b75c8000</tt> <tt>gcore: PT_LOAD[13]: b75c8000 - b75c9000</tt> <tt>gcore: PT_LOAD[14]: b75c9000 - b75ca000</tt> <tt>gcore: PT_LOAD[15]: b75ca000 - b75ca000</tt> <tt>gcore: PT_LOAD[16]: b7756000 - b7758000</tt> <tt>gcore: PT_LOAD[17]: b7758000 - b7759000</tt> <tt>gcore: PT_LOAD[18]: b7759000 - b775c000</tt> <tt>gcore: PT_LOAD[19]: b775c000 - b775c000</tt> <tt>gcore: PT_LOAD[20]: b775f000 - b7760000</tt> <tt>gcore: PT_LOAD[21]: b7760000 - b7761000</tt> <tt>gcore: PT_LOAD[22]: b7761000 - b7761000</tt> <tt>gcore: PT_LOAD[23]: b7764000 - b7765000</tt> <tt>gcore: PT_LOAD[24]: b7769000 - b776a000</tt> <tt>gcore: PT_LOAD[25]: b776a000 - b776b000</tt> <tt>gcore: PT_LOAD[26]: b776b000 - b776b000</tt> <tt>gcore: PT_LOAD[27]: b7789000 - b778a000</tt> <tt>gcore: PT_LOAD[28]: b778a000 - b778b000</tt> <tt>gcore: PT_LOAD[29]: bfd07000 - bfd1d000</tt> <tt>gcore: done.</tt> <tt>Saved core.845.bash</tt> <tt>crash></tt> </blockquote> So far, so good... But Question: Are there anywhere some hints about how to use this core.<pid> file ? Thanks in advance. Regards, Patrick Agrain </div> -- Crash-utility mailing list <a href="mailto:Crash-utility@redhat.com">Crash-utility@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/crash-utility" target="_blank">https://www.redhat.com/mailman/listinfo/crash-utility</a> </blockquote></div> -- <div dir="ltr">BKS </div> </div>