Hello,
I have a dump file produced by makedumpfile with following command:
/sbin/makedumpfile -d 0 -c --message-level 7 /proc/vmcore /tmpd/crashdump-`date
+"%Y%m%d-%H%M"`
When I edit the raw binary, it seems that the first bytes could be mapped to a
disk_dump_header structure.
Is that correct ?
When doing this, all seems to match: signature (KDUMP), header version (6), utsname
content, timestamp.
But not the status: I get 1 (INCOMPLETED), tough I'm able to analyze it with
'crash'.
I was expecting 0 or at least 8, because it should be zlib-compressed.
What am I missing ?
Thanks.
Best regards,
Patrick Agrain