How to use the crash tool to analyze a Linux kernel crash dump file

Source: Internet
Author: User
Keywords Linux kernel crashes dump files
Tags aliyun analysis basic command line debug debugging default file

Firstly, this paper introduces the basic concept and installation method of crash, then introduces how to use crash tool to analyze kernel crash dump file, including the usage of various common debugging commands, and finally demonstrates the powerful function of crash by several real cases encountered in practical work. In this article, both the detailed tool use method, but also has the rich actual http://www.aliyun.com/zixun/aggregation/7734.html "" > case analysis, I believe you will certainly benefit after reading.

What is crash

As mentioned earlier, when the Linux system kernel crashes, you can collect memory before the kernel crashes by kdump, and generate a dump file Vmcore. The kernel developer can diagnose the cause of the kernel crash by analyzing the Vmcore file, thus making code improvements for the operating system. So crash is a widely used kernel crash dump file analysis tool, master the use of crash skills, for positioning problems have a very important role.

Prerequisites for using crash

Because crash is used to debug dump files for kernel crashes, using crash requires that you rely on the following conditions:

1. The kernel image file Vmlinux must specify the-G parameter at compile time with debug information.

2. A memory crash dump file (such as Vmcore) is required or real-time system memory that can be accessed via mem or/dev/crash. If the crash command line does not specify a dump file, crash uses real-time system memory by default, which requires root permissions.

3. Crash supported platform processors include: x86, compatible, IA64, PPC64, ARM, s390, s390x (there are also some crash versions that support Alpha and 32-bit PowerPC, but support for both platforms does not guarantee long-term maintenance).

4. Crash supports 2.2.5-15 (including) later Linux kernel versions. As the Linux kernel is updated, crash is also being upgraded to accommodate the new kernel.

Crash Installation Guide

To debug a kernel dump file using crash, you need to install the crash tool and the kernel debug packet. There is a slight difference in the name of the different distribution installation package, and only the RHEL and SLES distributions are listed here as follows:

Table 1. Crash tools and kernel debug packs

System version crash tool name kernel debugging information Pack RHEL6.2 crash Kernel-debuginfo-common
Kernel-debuginfo sles11sp2 Crash Kernel-default-debuginfo
Kernel-ppc64-debuginfo

Take RHEL as an example, the steps for installing crash and kernel debug packets are as follows:

RPM-IVH crash-5.1.8-1.el6.ppc64.rpm RPM-IVH kernel-debuginfo-common-ppc64-2.6.32-220.el6.ppc64.rpm RPM-IVH kernel-debuginfo-2.6.32-220.el6.ppc64.rpm

Start crash

Startup parameter Description

To debug a dump file with crash, you need to enter two parameters at the command line: Debug kernel and dump file, where dump file is the name of the kernel dump file, and the debug kernel is installed by the kernel debug packet, with a slightly different distribution name to RHEL and SLES as examples:

Rhel6.2:/usr/lib/debug/lib/modules/2.6.32-220.el6.ppc64/vmlinux sles11sp2:/usr/lib/debug/boot/ Vmlinux-3.0.13-0.27-ppc64.debug

Using Crash-h or man crash, you can view a range of options supported by crash, which are illustrated in the following examples:

-H: Print help information

-D: Set debug level

-S: Use/BOOT/SYSTEM.MAP as the default mapping file

-S: Do not display version, initial debugging information, etc., go directly to the command line

-I file: Automatically run the command in file after startup, and then accept user input

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.