Preparing for analyzing a dump

To analyze your dump with crash, additional files are required.

If you need to send your dump for analysis, it might be good to include these additional files with the dump file. Your distribution typically provides the additional files in RPMs.

To begin analyzing a Red Hat® Enterprise Linux® 8.5 dump with crash, this file (as a minimum) is required:
  • vmlinux (full): Contains addresses of kernel symbols and datatype debug information
If you need to send your dump for analysis, include the RPMs shown in Table 1.
Table 1 lists RPMs that contain important files for debugging kernel dumps with crash.
Table 1. Red Hat Enterprise Linux 8.5 debug files, paths, and RPMs
Debug files File system path RPM
vmlinux (full) /usr/lib/debug/lib/modules/<version>.el8.s390x/vmlinux kernel-debuginfo-<version>.el8.s390x.rpm
vmlinux.decompressor (full) /usr/lib/debug/lib/modules/<version>.el8.s390x/vmlinux.decompressor kernel-debuginfo-<version>.el8.s390x.rpm
modules (text) /lib/modules/<version>.el8.s390x/kernel/ kernel-core-<version>.el8.s390x.rpm
and
kernel-modules-<version>.el8.s390x.rpm
modules (debug) /usr/lib/debug/lib/modules/<version>.el8.s390x/kernel/ kernel-debuginfo-<version>.el8.s390x.rpm
debug source /usr/src/debug/kernel-<version>.el8/linux-<version>.el8.s390x/ kernel-debuginfo-common-s390x-<version>.el8.s390x.rpm
trace events /usr/lib/debug/usr/lib64/traceevent/plugins/ perf-debuginfo-<version>.el8.s390x.rpm
  • Files that contain the addresses of kernel symbols are named (text).
  • Files that contain the corresponding datatype debug information are named (debug).
  • Files that contain both are named (full).