[Crash-utility] Fwd: Redhat 5.11 dump
Ilan Schwarts
ilan84 at gmail.com
Thu Jun 28 05:10:52 UTC 2018
Hey Dave,
Thanks for reaching out and helping !
Thats why I added the verbose and asked about the kernel versions
mismatch, it seems odd.
I request the customer to send the right kernel, hope to get it.
Thank you
On Mon, Jun 25, 2018 at 4:31 PM Dave Anderson <anderson at redhat.com> wrote:
>
>
>
> ----- Original Message -----
> > > Update, If I try to open with command: "crash -d1 ..." I get:
> > > [root at centos511test kernel]# crash -d1 vmcore
> > > /usr/lib/debug/lib/modules/`uname -r`/vmlinux
> > >
> > > crash 5.1.8-3.el5.centos
> > > Copyright (C) 2002-2011 Red Hat, Inc.
> > > Copyright (C) 2004, 2005, 2006 IBM Corporation
> > > Copyright (C) 1999-2006 Hewlett-Packard Co
> > > Copyright (C) 2005, 2006 Fujitsu Limited
> > > Copyright (C) 2006, 2007 VA Linux Systems Japan K.K.
> > > Copyright (C) 2005 NEC Corporation
> > > Copyright (C) 1999, 2002, 2007 Silicon Graphics, Inc.
> > > Copyright (C) 1999, 2000, 2001, 2002 Mission Critical Linux, Inc.
> > > This program is free software, covered by the GNU General Public License,
> > > and you are welcome to change it and/or distribute copies of it under
> > > certain conditions. Enter "help copying" to see the conditions.
> > > This program has absolutely no warranty. Enter "help warranty" for
> > > details.
> > >
> > > compressed kdump: header->utsname.machine: x86_64
> > > diskdump_data:
> > > filename: vmcore
> > > flags: 6 (KDUMP_CMPRS_LOCAL|ERROR_EXCLUDED)
> > > dfd: 3
> > > ofp: 0
> > > machine_type: 62 (EM_X86_64)
> > >
> > > header: 11820fe0
> > > signature: "KDUMP "
> > > header_version: 6
> > > utsname:
> > > sysname: Linux
> > > nodename: lnbrsasp41
> > > release: 3.10.0-693.17.1.el7.x86_64
> > > version: #1 SMP Sun Jan 14 10:36:03 EST 2018
> > > machine: x86_64
> > > domainname: (none)
> > > timestamp:
> > > tv_sec: 5b25ead0
> > > tv_usec: 0
> > > status: 1 (DUMP_HEADER_INCOMPLETED)
> > > block_size: 4096
> > > sub_hdr_size: 1
> > > bitmap_blocks: 1040
> > > max_mapnr: 17039360
> > > total_ram_blocks: 0
> > > device_blocks: 0
> > > written_blocks: 0
> > > current_cpu: 0
> > > nr_cpus: 4
> > > tasks[nr_cpus]: 0
> > > 0
> > > 0
> > > 0
> > >
> > > sub_header: 0 (n/a)
> > >
> > >
> > > Does it mean they gave me bad vmcore ? Why the version in "release" is
> > > release: 3.10.0-693.17.1.el7.x86_64 ?
> > >
> >
> > Looks like it. Not only was the vmcore created from the crash of
> > a rhel7-vintage kernel (3.10.0-693.17.1.el7), the dumpfile also
> > shows that kdump operation failed to complete correctly, as
> > indicated by the DUMP_HEADER_INCOMPLETED flag. That flag would
> > have been removed if the dumpfile creation completed normally.
>
> Just to clarifiy, the DUMP_HEADER_INCOMPLETED flag displayed above is
> incorrect when the "status" field gets translated in crash-5.1.8-3. That
> ancient version of crash was not aware of the change in bit-meaning of
> the status field used by the makedumpfile facility. A value of "1" means
> that the vmcore was compressed using libz:
>
> #define DUMP_DH_COMPRESSED_ZLIB 0x1 /* page is compressed with zlib */
> #define DUMP_DH_COMPRESSED_LZO 0x2 /* page is compressed with lzo */
> #define DUMP_DH_COMPRESSED_SNAPPY 0x4 /* page is compressed with snappy */
> #define DUMP_DH_COMPRESSED_INCOMPLETE 0x8 /* dumpfile is incomplete */
> #define DUMP_DH_EXCLUDED_VMEMMAP 0x10 /* unused vmemmap pages are excluded */
>
> In any case, you have a legitimate RHEL7 vmcore, and as such, it fails as expected
> when trying to use a RHEL5 vmlinux file with it.
>
> Dave
>
>
> >
> > Dave
> >
> >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > ---------- Forwarded message ---------
> > > From: Ilan Schwarts <ilan84 at gmail.com>
> > > Date: Sun, Jun 24, 2018 at 4:00 PM
> > > Subject: Redhat 5.11 dump
> > > To: <crash-utility at redhat.com>
> > >
> > >
> > > Hi,
> > > A production machine with Red Hat Enterprise Linux Server release 5.11
> > > (Tikanga) kernel 2.6.18-431.el5 crashed.
> > > I received vmcore, Since I dont have access to machine, and I need to
> > > open the vmcore to analyze the dump, I have downloaded CentOS 5.11,
> > > since centos 5.11 is EOL, I downloaded the 2.6.18-431.el5 kernel
> > > manually, with debuginfo and debuginfo-common and installed them, so
> > > far - seems ok.
> > >
> > > I am trying to get call stack of the dump time, i get error:
> > > [root at centos511test kernel]# crash vmcore
> > > /usr/lib/debug/lib/modules/`uname -r`/vmlinux
> > >
> > > crash 5.1.8-3.el5.centos
> > > Copyright (C) 2002-2011 Red Hat, Inc.
> > > Copyright (C) 2004, 2005, 2006 IBM Corporation
> > > Copyright (C) 1999-2006 Hewlett-Packard Co
> > > Copyright (C) 2005, 2006 Fujitsu Limited
> > > Copyright (C) 2006, 2007 VA Linux Systems Japan K.K.
> > > Copyright (C) 2005 NEC Corporation
> > > Copyright (C) 1999, 2002, 2007 Silicon Graphics, Inc.
> > > Copyright (C) 1999, 2000, 2001, 2002 Mission Critical Linux, Inc.
> > > This program is free software, covered by the GNU General Public License,
> > > and you are welcome to change it and/or distribute copies of it under
> > > certain conditions. Enter "help copying" to see the conditions.
> > > This program has absolutely no warranty. Enter "help warranty" for
> > > details.
> > >
> > > GNU gdb (GDB) 7.0
> > > Copyright (C) 2009 Free Software Foundation, Inc.
> > > License GPLv3+: GNU GPL version 3 or later
> > > <http://gnu.org/licenses/gpl.html>
> > > This is free software: you are free to change and redistribute it.
> > > There is NO WARRANTY, to the extent permitted by law. Type "show copying"
> > > and "show warranty" for details.
> > > This GDB was configured as "x86_64-unknown-linux-gnu"...
> > >
> > > crash: page excluded: kernel virtual address: ffffffff804d3ae0 type:
> > > "possible"
> > > WARNING: cannot read cpu_possible_map
> > > crash: page excluded: kernel virtual address: ffffffff804735e0 type:
> > > "present"
> > > WARNING: cannot read cpu_present_map
> > > crash: page excluded: kernel virtual address: ffffffff8046e260 type:
> > > "online"
> > > WARNING: cannot read cpu_online_map
> > > crash: page excluded: kernel virtual address: ffffffff80475210 type:
> > > "xtime"
> > > [root at centos511test kernel]#
> > >
> > > Any thoughts ? how can I continue ?
> > >
> > > Thanks alot
> > >
> > >
> > > --
> > >
> > >
> > > -
> > > Ilan Schwarts
> > >
> > > --
> > > Crash-utility mailing list
> > > Crash-utility at redhat.com
> > > https://www.redhat.com/mailman/listinfo/crash-utility
> > >
> > >
> >
> > --
> > Crash-utility mailing list
> > Crash-utility at redhat.com
> > https://www.redhat.com/mailman/listinfo/crash-utility
> >
>
> --
> Crash-utility mailing list
> Crash-utility at redhat.com
> https://www.redhat.com/mailman/listinfo/crash-utility
--
-
Ilan Schwarts
More information about the Crash-utility
mailing list