This is a guide on how to gather a crash dump on RHEL systems.
First, install the following packages:
# yum install kexec-tools crash kernel-debuginfo kernel-debuginfo-common system-config-kdump
In graphical mode:
# system-config-kdump In the target settings tab:
Select the appropiate Path: and Partition Values.
Click Apply.
Reboot the system.In console mode:
Edit the /boot/grub/menu.lst file:Add “crashkernel=128M” to the kernel line:
kernel /boot/vmlinuz-2.6.32-54.el6.i686 root=/dev/sda3 ro crashkernel=128M
Edit the /boot/grub/menu.lst file:Add “crashkernel=128M” to the kernel line:
kernel /boot/vmlinuz-2.6.32-54.el6.i686 root=/dev/sda3 ro crashkernel=128M
Modify the config file: /etc/kdump.conf
Modify these values for where the core file should be stored:
ext3 /dev/sda4
path /var/core
Save and reboot the system
Capture the core: (This will panic the system and will take a long time to complete)
# echo c > /proc/sysrq-trigger Locate the core:
# ls /var/crash Analyze the core:# crash /var/crash/2012-03-29/vmcore /usr/lib/debug/lib/modules/`uname -r`/vmlinux Available Commands:
crash> sys
crash> bt -a
crash> mod
crash> log
crash> sys