[Crash-utility] crash tool not working

[Dave Anderson]

----- Original Message -----
> Hi,
> 
> >
> > Well, that's your first mistake...
> >
> 
> Thanks for pointing it out :)
> ..
> [snip]
> ..
> > Like the error message indicates, the vmlinuz-2.6.32.12-crash-crash
> > file is not a supported file format.  Never has been, never will
> > be...
> >
> 
> I tried with vmlinux and it seems ok. But got another error
> hltncra110731:/home/adil # crash linux-2.6.32.12-0.7/vmlinux
> /var/crash/2012-02-08-14\:13/vmcore
> 
> --------------------
> crash 5.0.1
> Copyright (C) 2002-2010  Red Hat, Inc.
> Copyright (C) 2004, 2005, 2006  IBM Corporation
> Copyright (C) 1999-2006  Hewlett-Packard Co
> Copyright (C) 2005, 2006  Fujitsu Limited
> Copyright (C) 2006, 2007  VA Linux Systems Japan K.K.
> Copyright (C) 2005  NEC Corporation
> Copyright (C) 1999, 2002, 2007  Silicon Graphics, Inc.
> Copyright (C) 1999, 2000, 2001, 2002  Mission Critical Linux, Inc.
> This program is free software, covered by the GNU General Public License,
> and you are welcome to change it and/or distribute copies of it under
> certain conditions.  Enter "help copying" to see the conditions.
> This program has absolutely no warranty.  Enter "help warranty" for
> details.
> 
> GNU gdb (GDB) 7.0
> Copyright (C) 2009 Free Software Foundation, Inc.
> License GPLv3+: GNU GPL version 3 or later
> <http://gnu.org/licenses/gpl.html>
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
> and "show warranty" for details.
> This GDB was configured as "x86_64-unknown-linux-gnu"...
> 
> crash: seek error: kernel virtual address: ffffffff81827aa0  type: "kernel_config_data"
> WARNING: cannot read kernel_config_data
> crash: seek error: kernel virtual address: ffffffff8181a660  type: "cpu_possible_mask"
> hltncra110731:/home/adil #
> ----------------------------------
> 
> 
> > Also, do yourself a favor, and upgrade your crash utility version
> > from crash-5.0.1, which is two years old.
> 
> I am using for learning purpose. So i guess this version should be Ok
> to use for learning purpose.

No, that's really not true.  crash-5.0.1 is two years old, which is ancient
by crash standards.  And it's very easy to upgrade:

 $ wget http://people.redhat.com/anderson/crash-6.0.3.tar.gz
 ...
 $ cd crash-6.0.3
 $ make 
 ...
 $ 

As far as the "seek errors" you're seeing, I don't know what's happening,
other than crash can't find the physical address page associated with those 
unity-mapped kernel virtual addresses in the vmcore.  But I'm sorry -- I don't
spend time debugging issues encountered with obsolete crash versions.  If you
can upgrade, and then post the output of:

 $ crash -d8 linux-2.6.32.12-0.7/vmlinux /var/crash/2012-02-08-14\:13/vmcore

there will be a plethora of debug output that can help determine the 
problem.

Dave