DOC HOME SITE MAP MAN PAGES GNU INFO SEARCH PRINT BOOK
 
Troubleshooting system-level problems

Examining a memory dump with crash(1M)

The crash(1M) command provides a great deal of information that is useful when implementing drivers or doing other kernel development, and requires a good understanding of UNIX system internals to take full advantage of the information provided. The notes in this section enable you to get some basic information about a system panic from the crash output.

To run crash on the saved memory dump, issue a command similar to the following. This command assumes that the kernel being examined is the default in /stand/unix and that dump image was saved to /dumpfile when the system was rebooted:

/etc/crash -d /dumpfile -w /tmp/crash.out

The -w option saves the crash output to a file for examination.

This example uses a different kernel than the default (or one that was copied from another system):

/etc/crash -d /dumpfile -n /unix.test -w /tmp/crash.out


NOTE: If you are checking a dump for a kernel other than /stand/unix, you must include the filename on the command line using the -n option. This ensures that the symbol table information is loaded so that the memory image can be accessed.


Next topic: Studying a panic
Previous topic: Saving a system dump while in multi-user state

© 2004 The SCO Group, Inc. All rights reserved.
UnixWare 7 Release 7.1.4 - 22 April 2004