Preparing for analyzing a dump
To analyze your dump with crash, additional files are required.
If you need to send your dump for analysis, it might be good to include these additional files with the dump file. Your distribution typically provides the additional files in RPMs.
To begin analyzing a Red Hat® Enterprise Linux®
8.5 dump with crash, this
file (as a minimum) is required:
- vmlinux (full): Contains addresses of kernel symbols and datatype debug information
Table 1 lists RPMs that contain important files
for debugging kernel dumps with crash.
Debug files | File system path | RPM |
---|---|---|
vmlinux (full) | /usr/lib/debug/lib/modules/<version>.el8.s390x/vmlinux | kernel-debuginfo-<version>.el8.s390x.rpm |
vmlinux.decompressor (full) | /usr/lib/debug/lib/modules/<version>.el8.s390x/vmlinux.decompressor | kernel-debuginfo-<version>.el8.s390x.rpm |
modules (text) | /lib/modules/<version>.el8.s390x/kernel/ | kernel-core-<version>.el8.s390x.rpm and kernel-modules-<version>.el8.s390x.rpm |
modules (debug) | /usr/lib/debug/lib/modules/<version>.el8.s390x/kernel/ | kernel-debuginfo-<version>.el8.s390x.rpm |
debug source | /usr/src/debug/kernel-<version>.el8/linux-<version>.el8.s390x/ | kernel-debuginfo-common-s390x-<version>.el8.s390x.rpm |
trace events | /usr/lib/debug/usr/lib64/traceevent/plugins/ | perf-debuginfo-<version>.el8.s390x.rpm |
- Files that contain the addresses of kernel symbols are named (text).
- Files that contain the corresponding datatype debug information are named (debug).
- Files that contain both are named (full).