Hey Dave, Thanks for reaching out and helping ! Thats why I added the verbose and asked about the kernel versions mismatch, it seems odd. I request the customer to send the right kernel, hope to get it. Thank you On Mon, Jun 25, 2018 at 4:31 PM Dave Anderson <anderson@xxxxxxxxxx> wrote: > > > > ----- Original Message ----- > > > Update, If I try to open with command: "crash -d1 ..." I get: > > > [root@centos511test kernel]# crash -d1 vmcore > > > /usr/lib/debug/lib/modules/`uname -r`/vmlinux > > > > > > crash 5.1.8-3.el5.centos > > > Copyright (C) 2002-2011 Red Hat, Inc. > > > Copyright (C) 2004, 2005, 2006 IBM Corporation > > > Copyright (C) 1999-2006 Hewlett-Packard Co > > > Copyright (C) 2005, 2006 Fujitsu Limited > > > Copyright (C) 2006, 2007 VA Linux Systems Japan K.K. > > > Copyright (C) 2005 NEC Corporation > > > Copyright (C) 1999, 2002, 2007 Silicon Graphics, Inc. > > > Copyright (C) 1999, 2000, 2001, 2002 Mission Critical Linux, Inc. > > > This program is free software, covered by the GNU General Public License, > > > and you are welcome to change it and/or distribute copies of it under > > > certain conditions. Enter "help copying" to see the conditions. > > > This program has absolutely no warranty. Enter "help warranty" for > > > details. > > > > > > compressed kdump: header->utsname.machine: x86_64 > > > diskdump_data: > > > filename: vmcore > > > flags: 6 (KDUMP_CMPRS_LOCAL|ERROR_EXCLUDED) > > > dfd: 3 > > > ofp: 0 > > > machine_type: 62 (EM_X86_64) > > > > > > header: 11820fe0 > > > signature: "KDUMP " > > > header_version: 6 > > > utsname: > > > sysname: Linux > > > nodename: lnbrsasp41 > > > release: 3.10.0-693.17.1.el7.x86_64 > > > version: #1 SMP Sun Jan 14 10:36:03 EST 2018 > > > machine: x86_64 > > > domainname: (none) > > > timestamp: > > > tv_sec: 5b25ead0 > > > tv_usec: 0 > > > status: 1 (DUMP_HEADER_INCOMPLETED) > > > block_size: 4096 > > > sub_hdr_size: 1 > > > bitmap_blocks: 1040 > > > max_mapnr: 17039360 > > > total_ram_blocks: 0 > > > device_blocks: 0 > > > written_blocks: 0 > > > current_cpu: 0 > > > nr_cpus: 4 > > > tasks[nr_cpus]: 0 > > > 0 > > > 0 > > > 0 > > > > > > sub_header: 0 (n/a) > > > > > > > > > Does it mean they gave me bad vmcore ? Why the version in "release" is > > > release: 3.10.0-693.17.1.el7.x86_64 ? > > > > > > > Looks like it. Not only was the vmcore created from the crash of > > a rhel7-vintage kernel (3.10.0-693.17.1.el7), the dumpfile also > > shows that kdump operation failed to complete correctly, as > > indicated by the DUMP_HEADER_INCOMPLETED flag. That flag would > > have been removed if the dumpfile creation completed normally. > > Just to clarifiy, the DUMP_HEADER_INCOMPLETED flag displayed above is > incorrect when the "status" field gets translated in crash-5.1.8-3. That > ancient version of crash was not aware of the change in bit-meaning of > the status field used by the makedumpfile facility. A value of "1" means > that the vmcore was compressed using libz: > > #define DUMP_DH_COMPRESSED_ZLIB 0x1 /* page is compressed with zlib */ > #define DUMP_DH_COMPRESSED_LZO 0x2 /* page is compressed with lzo */ > #define DUMP_DH_COMPRESSED_SNAPPY 0x4 /* page is compressed with snappy */ > #define DUMP_DH_COMPRESSED_INCOMPLETE 0x8 /* dumpfile is incomplete */ > #define DUMP_DH_EXCLUDED_VMEMMAP 0x10 /* unused vmemmap pages are excluded */ > > In any case, you have a legitimate RHEL7 vmcore, and as such, it fails as expected > when trying to use a RHEL5 vmlinux file with it. > > Dave > > > > > > Dave > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ---------- Forwarded message --------- > > > From: Ilan Schwarts <ilan84@xxxxxxxxx> > > > Date: Sun, Jun 24, 2018 at 4:00 PM > > > Subject: Redhat 5.11 dump > > > To: <crash-utility@xxxxxxxxxx> > > > > > > > > > Hi, > > > A production machine with Red Hat Enterprise Linux Server release 5.11 > > > (Tikanga) kernel 2.6.18-431.el5 crashed. > > > I received vmcore, Since I dont have access to machine, and I need to > > > open the vmcore to analyze the dump, I have downloaded CentOS 5.11, > > > since centos 5.11 is EOL, I downloaded the 2.6.18-431.el5 kernel > > > manually, with debuginfo and debuginfo-common and installed them, so > > > far - seems ok. > > > > > > I am trying to get call stack of the dump time, i get error: > > > [root@centos511test kernel]# crash vmcore > > > /usr/lib/debug/lib/modules/`uname -r`/vmlinux > > > > > > crash 5.1.8-3.el5.centos > > > Copyright (C) 2002-2011 Red Hat, Inc. > > > Copyright (C) 2004, 2005, 2006 IBM Corporation > > > Copyright (C) 1999-2006 Hewlett-Packard Co > > > Copyright (C) 2005, 2006 Fujitsu Limited > > > Copyright (C) 2006, 2007 VA Linux Systems Japan K.K. > > > Copyright (C) 2005 NEC Corporation > > > Copyright (C) 1999, 2002, 2007 Silicon Graphics, Inc. > > > Copyright (C) 1999, 2000, 2001, 2002 Mission Critical Linux, Inc. > > > This program is free software, covered by the GNU General Public License, > > > and you are welcome to change it and/or distribute copies of it under > > > certain conditions. Enter "help copying" to see the conditions. > > > This program has absolutely no warranty. Enter "help warranty" for > > > details. > > > > > > GNU gdb (GDB) 7.0 > > > Copyright (C) 2009 Free Software Foundation, Inc. > > > License GPLv3+: GNU GPL version 3 or later > > > <http://gnu.org/licenses/gpl.html> > > > This is free software: you are free to change and redistribute it. > > > There is NO WARRANTY, to the extent permitted by law. Type "show copying" > > > and "show warranty" for details. > > > This GDB was configured as "x86_64-unknown-linux-gnu"... > > > > > > crash: page excluded: kernel virtual address: ffffffff804d3ae0 type: > > > "possible" > > > WARNING: cannot read cpu_possible_map > > > crash: page excluded: kernel virtual address: ffffffff804735e0 type: > > > "present" > > > WARNING: cannot read cpu_present_map > > > crash: page excluded: kernel virtual address: ffffffff8046e260 type: > > > "online" > > > WARNING: cannot read cpu_online_map > > > crash: page excluded: kernel virtual address: ffffffff80475210 type: > > > "xtime" > > > [root@centos511test kernel]# > > > > > > Any thoughts ? how can I continue ? > > > > > > Thanks alot > > > > > > > > > -- > > > > > > > > > - > > > Ilan Schwarts > > > > > > -- > > > Crash-utility mailing list > > > Crash-utility@xxxxxxxxxx > > > https://www.redhat.com/mailman/listinfo/crash-utility > > > > > > > > > > -- > > Crash-utility mailing list > > Crash-utility@xxxxxxxxxx > > https://www.redhat.com/mailman/listinfo/crash-utility > > > > -- > Crash-utility mailing list > Crash-utility@xxxxxxxxxx > https://www.redhat.com/mailman/listinfo/crash-utility -- - Ilan Schwarts -- Crash-utility mailing list Crash-utility@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/crash-utility