# Lcrash HOWTO

### Andreas Herrman

aherrman@de.ibm.com

Copyright © 2001, 2002 by IBM Deutschland Entwicklung GmbH, IBM Corporation

This document describes lcrash, the Linux crash dump analyzer.

Most commercial UNIX systems have a feature that dumps the real storage to disk in case of a system crash. Afterwards a dump-analysis tool is used to analyze such dumps of the system's memory state at the time of the system crash.

A team at SGI has worked on extensions of the Linux Kernel to provide such a dump feature for GNU/Linux. They called their project Linux Kernel Crash Dumps (LKCD). The analysis tool lcrash (Linux Crash) is a part of LKCD.

Please refer to the LKCD Project Home Page. The LKCD code was released under the GNU General Public License (GPL) and it is available from sourceforge.

This is the first version of the document. It is written in DocBook 4.1. Please let me know if you find any markup and other errors.

Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.1 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts and no Back-Cover Texts. A copy of the license is included in the section entitled "GNU Free Documentation License".

List of Tables
3-1. Default values
3-2. Command Line History
3-3. Command Line Keys
4-1. Overview of lcrash commands
4-2. Classification of lcrash commands

List of Examples
3-1. Starting Lcrash
4-1. base
4-2. deftask
4-3. dis (i386)
4-4. dis (s390)
4-5. dump
4-6. findsym
4-7. help
4-8. history
4-9. mmap
4-10. module
4-11. namelist
4-12. quit
4-13. sizeof
4-14. stat (s390)
4-15. stat (i386)
4-16. strace (s390)
4-17. symtab
4-18. task
4-19. trace
4-20. vtop
4-21. vtop
4-22. walk
4-23. walk
4-24. walk
4-25. whatis

|  | Next
|  | Introduction