On Thu, Oct 13, 2005 at 01:07:41PM -0400, Dave Anderson wrote:
> Neil Horman wrote:
>
> > Hey all-
> >         If I have a RHEL4 crash dump taken from an AMD x86_64 machine, should I
> > be able to examine that vmcore using crash-4.0.1 on a RHEL4 box running on EM64T
> > hardware?  I would have assumed that I would be able to, but I keep getting file
> > format errors when trying to read the core.
> > Neil
> >
>
> Yes, it should.  What's the output look like?
>
Here it is.  About the only things that stand out to is that the PARTIAL_DUMP
flag is set in the ELF header.  I wouldn't think a partial dump would have
produced this error message however, since the ELF and program headers are all
still in tact.
Neil

crash 4.0-2.6
Copyright (C) 2002, 2003, 2004, 2005  Red Hat, Inc.
Copyright (C) 2004, 2005  IBM Corporation
Copyright (C) 1999-2005  Hewlett-Packard Co
Copyright (C) 1999, 2002  Silicon Graphics, Inc.
Copyright (C) 1999, 2000, 2001, 2002  Mission Critical Linux, Inc.
This program is free software, covered by the GNU General Public License,
and you are welcome to change it and/or distribute copies of it under
certain conditions.  Enter "help copying" to see the conditions.
This program has absolutely no warranty.  Enter "help warranty" for details.

vmcore_data:
                  flags: 19 (NETDUMP_LOCAL|NETDUMP_ELF64|PARTIAL_DUMP)
                   ndfd: 3
                    ofp: 3a20c2d8c0
            header_size: 4096
   num_pt_load_segments: 2
     pt_load_segment[0]:
            file_offset: 1000
             phys_start: 0
               phys_end: e0000000
     pt_load_segment[1]:
            file_offset: e0001000
             phys_start: 100000000
               phys_end: 120000000
             elf_header: 901c70
                  elf32: 0
                notes32: 0
                 load32: 0
                  elf64: 901c70
                notes64: 901cb0
                 load64: 901ce8
            nt_prstatus: 901d58
            nt_prpsinfo: 901eb8
          nt_taskstruct: 901f50
            task_struct: 10041f697f0
              page_size: 4096
           switch_stack: 0
     num_prstatus_notes: 1
     nt_prstatus_percpu: 0000000000901d58

Elf64_Ehdr:
                e_ident: \177ELF
      e_ident[EI_CLASS]: 2 (ELFCLASS64)
       e_ident[EI_DATA]: 1 (ELFDATA2LSB)
    e_ident[EI_VERSION]: 1 (EV_CURRENT)
      e_ident[EI_OSABI]: 0 (ELFOSABI_SYSV)
 e_ident[EI_ABIVERSION]: 0
                 e_type: 4 (ET_CORE)
              e_machine: 62 (EM_X86_64)
              e_version: 1 (EV_CURRENT)
                e_entry: 0
                e_phoff: 40
                e_shoff: 0
                e_flags: 0
               e_ehsize: 40
            e_phentsize: 38
                e_phnum: 3
            e_shentsize: 0
                e_shnum: 0
             e_shstrndx: 0
Elf64_Phdr:
                 p_type: 4 (PT_NOTE)
               p_offset: 232 (e8)
                p_vaddr: 0
                p_paddr: 0
               p_filesz: 556 (22c)
                p_memsz: 0 (0)
                p_flags: 0 ()
                p_align: 0
Elf64_Phdr:
                 p_type: 1 (PT_LOAD)
               p_offset: 4096 (1000)
                p_vaddr: 10000000000
                p_paddr: 0
               p_filesz: 3758096384 (e0000000)
                p_memsz: 3758096384 (e0000000)
                p_flags: 7 (PF_X|PF_W|PF_R)
                p_align: 4096
Elf64_Phdr:
                 p_type: 1 (PT_LOAD)
               p_offset: 3758100480 (e0001000)
                p_vaddr: 10100000000
                p_paddr: 100000000
               p_filesz: 536870912 (20000000)
                p_memsz: 536870912 (20000000)
                p_flags: 7 (PF_X|PF_W|PF_R)
                p_align: 4096
Elf64_Nhdr:
               n_namesz: 4 ("CORE")
               n_descsz: 336
                 n_type: 1 (NT_PRSTATUS)
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000003 0000007fbffffad0
                         000001011fada244 0000000000000004
                         00000000000001c7 000001011fada240
                         0000000000000246 0000007fbffff201
                         0000007fbffff760 0000007fbffff508
                         000001011fada370 0000007fbffff201
                         0000000000000004 0000010111a49ef8
                         000001011fada244 ffffffffffffffff
                         ffffffff80177cf8 0000000000000010
                         0000000000010202 0000010111a49ea0
                         0000000000000018 0000002a9589fb00
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
Elf64_Nhdr:
               n_namesz: 4 ("CORE")
               n_descsz: 136
                 n_type: 3 (NT_PRPSINFO)
                         0000000000005200 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000 0078756e696c6d76
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000 0000000000000000
                         0000000000000000
Elf64_Nhdr:
               n_namesz: 4 ("CORE")
               n_descsz: 16
                 n_type: 4 (NT_TASKSTRUCT)
                         0000010041f697f0 0000000000000000
Elf64_Nhdr:
               n_namesz: 4 ("CORE")
               n_descsz: 4
                 n_type: 70000001 (NT_DISKDUMP)
                         00000001
crash: /boot/vmlinuz-2.6.9-22.ELsmp: not a supported file format

Usage:
  crash [-h [opt]][-v][-s][-i file][-d num] [-S] [mapfile] [namelist] [dumpfile]

Enter "crash -h" for details.

Use the vmlinux file (with an 'x').

Dave
 

 
> Dave
>
>
> >
> > --
> > /***************************************************
> >  *Neil Horman
> >  *Software Engineer
> >  *Red Hat, Inc.
> >  *nhorman@redhat.com
> >  *gpg keyid: 1024D / 0x92A74FA1
> >  *http://pgp.mit.edu
> >  ***************************************************/
> >
> > --
> > Crash-utility mailing list
> > Crash-utility@redhat.com
> > https://www.redhat.com/mailman/listinfo/crash-utility
>
> --
> Crash-utility mailing list
> Crash-utility@redhat.com
> https://www.redhat.com/mailman/listinfo/crash-utility

--
/***************************************************
 *Neil Horman
 *Software Engineer
 *Red Hat, Inc.
 *nhorman@redhat.com
 *gpg keyid: 1024D / 0x92A74FA1
 *http://pgp.mit.edu
 ***************************************************/

--
Crash-utility mailing list
Crash-utility@redhat.com
https://www.redhat.com/mailman/listinfo/crash-utility