----- Original Message ----- > > > > I can't run crash on the live system > > Vsles11-1:/usr/src/linux # crash -d8 vmlinux > > > crash 5.0.1 > Copyright (C) 2002-2010 Red Hat, Inc. > Copyright (C) 2004, 2005, 2006 IBM Corporation > Copyright (C) 1999-2006 Hewlett-Packard Co > Copyright (C) 2005, 2006 Fujitsu Limited > Copyright (C) 2006, 2007 VA Linux Systems Japan K.K. > Copyright (C) 2005 NEC Corporation > Copyright (C) 1999, 2002, 2007 Silicon Graphics, Inc. > Copyright (C) 1999, 2000, 2001, 2002 Mission Critical Linux, Inc. > This program is free software, covered by the GNU General Public > License, > and you are welcome to change it and/or distribute copies of it under > certain conditions. Enter "help copying" to see the conditions. > This program has absolutely no warranty. Enter "help warranty" for > details. > > get_live_memory_source: /dev/mem > WARNING: vmlinux and /proc/version do not match! > > WARNING: /proc/version indicates kernel version: 2.6.32.12-0.7-xen > > crash: please use the vmlinux file for that kernel version, or try using > the System.map for that kernel version as an additional argument. If you can't run crash on the live system, then you can't run it on a crash dump. For both the live system, and the dumpfile, you need either: (1) the original debuginfo-full vmlinux file for kernel 2.6.32.12-0.7-xen, or if that doesn't exist, (2) a rebuilt 2.6.32.12-0.7-xen debuginfo-full vmlinux kernel along with the *original* 2.6.32.12-0.7-xen System.map file Then you should be able to run on both the live system and with the dumpfile: $ crash vmlinux System.map $ crash vmlinux System.map dumpfile Dave -- Crash-utility mailing list Crash-utility@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/crash-utility