----- Original Message -----
Hi,
Thank you Dave for your time and help.
As suggested, I will update my crash utility first and then go about
analyzing the dump.
>>> I believe that something like this might work?:
>>> $ makedumpfile -c -d 31 -x vmlinux_temp vmcore-old vmcore-new
I tried to use the command you suggested " makedumpfile -c -d 31 -x
vmlinux_temp vmcore vmcore-new " . I got an error message " The kernel
version is not supported.The created dumpfile may be incomplete.
check_release: Can't get the kernel version"
Should I update makedumpfile utility as well? Or just updating crash
will do?
That's a makedumpfile issue -- the message comes from here in makedumpfile.c:
if ((version < OLDEST_VERSION) || (LATEST_VERSION < version)) {
MSG("The kernel version is not supported.\n");
MSG("The created dumpfile may be incomplete.\n");
}
where, at least in the RHEL6 version of makedumpfile (1.3.5), this
is the range:
#define OLDEST_VERSION KERNEL_VERSION(2, 6, 15)/* linux-2.6.15 */
#define LATEST_VERSION KERNEL_VERSION(2, 6, 32)/* linux-2.6.32 */
The upstream version of makedumpfile is now 1.3.7, which bumps LATEST_VERSION:
#define LATEST_VERSION KERNEL_VERSION(2, 6, 36)/* linux-2.6.36 */
But it's a warning message, and your vmcore-new may still be usable.
Dave