Re: How to read kernel dumps

Guilhem Lavaux (ylavaux@pratique.fr)
Sun, 23 Mar 1997 14:28:28 +0100

Jay Schulist wrote:
>
> Hello,
> Could someone please tell me what I need to be able to read a kernel
> dump?
> For example when I when I boot my machine it hangs and prints me a bunch
>
> of error codes, but little of it is human readable. It seems like there
> should be a program or something to decifer these so I can tell where
> the
> error is.
>
> If I am still not clear in the above, he is the last line that prints to
>
> the screen before the machine hangs:
> code: 8b 2d 58 00 00 83 c4 04 83 fd 01 75 0b 89 f2 66 83 c2 03
> I want to know how to interpert this and the other messages that the
> kernel prints out before this.

There are two ways to make this more readable:
* use the latest klogd program which archives all kernel messages: if
he can, he detects automaticaly these messages and show in the
output file where the kernel hangs
* use the ksymoops program distributed with the kernel source. With
him, you have to catch all the latest the kernel give you:
it begins with EIP: .... and ends with Code: ....
You execute ksymoops with the symbols file: for example /System.map
and write to stdin these lines.

Regards.

Guilhem.

-- 
-----------------------------------|
|   /-\  LAVAUX Yves & Guilhem     |
|  /   \       /-\                 |
|-/     \     /   \   /------------|
|        \   /     \-/             |
|         \-/  ylavaux@pratique.fr |
-----------------------------------|