Hi, I have a SuSE SLES11 vmcore with xen and tried to read the osrelease from the vmcore with # crash --osrelease vmcore unknown The problem is that there are two notes in the vmcore starting with "VMCOREINFO": Elf64_Nhdr: n_namesz: 11 ("VMCOREINFO") n_descsz: 1384 n_type: 0 (unused) OSRELEASE=3.0.101-63-xen ... Elf64_Nhdr: n_namesz: 15 ("VMCOREINFO_XEN") n_descsz: 4068 n_type: 0 (unused) ... In the function dump_Elf64_Nhdr() I found: vmcoreinfo = STRNEQ(buf, "VMCOREINFO"); But because the "VMCOREINFO_XEN" ist the second one in the file it wins! When using vmcoreinfo = STREQ(buf, "VMCOREINFO"); all is fine and I get: # crash --osrelease vmcore 3.0.101-63-xen So my question is: why is STRNEQ() used? Thanks! Dietmar. -- Company details: http://ts.fujitsu.com/imprint.html -- Crash-utility mailing list Crash-utility@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/crash-utility