Am Donnerstag, den 04.12.2008, 14:06 -0800 schrieb Castor Fu: > There was a group at IBM (Stefan Schlosser <sschloss@xxxxxxxxxx>) > a few years ago which set up stuff to generate > a elf corefile for a user space process for lcrash. Stefan did that as diploma thesis in our department at IBM. The ugly part was the swap file handling. The swap files had to be saved after a dump in order to access all user space memory. We added the save function in lcrash: lcrash -S <swapdump> to generate a dump-file containing all used swapped out pages of all swap areas. And we added an extra parameter <swapdump> when starting lcrash to analyze the dump: lcrash map.x dump.x kerntypes.x <swapdump> Here the posting on the lkcd mailing list: http://sourceforge.net/mailarchive/message.php?msg_id=OF7160ABF7.B54F4970-ONC1256BCE.004FD0A0-C1256BCE.0054E5BA%40de.ibm.com But the code was never integrated officially in lcrash. Michael -- Crash-utility mailing list Crash-utility@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/crash-utility