kcrash(1M)
kcrash --
large memory crash command
Synopsis
kcrash [ -w ] [ -k ] dumpfile [ namelist ]
Description
The kcrash command, similar to the
crash(1M)
command, examines system crash dumps.
The kcrash command interface is
based on the enhanced kernel debugger (see
ekdb(1M)).
All commands accepted by the enhanced kernel debugger
can be used identically in
kcrash,
with the following exceptions:
-
I/O commands (such as in, out, and so
on) do not work.
-
Execution commands (go, tr, and so on) do not work.
-
Multiprocessor commands (gos, ss,
cpu, and so on) do not work.
-
Instruction and memory breakpoint commands do not work.
Use the -w option if you want to use commands that modify
memory (actually modify the crash dump file).
Use the -k option if you want to use kcrash on a running
system. If you want to do this specify dumpfile
as /dev/mem.
The following commands are only available in kcrash. (They are
not available in
ekdb(1M)):
- < filename
-
- << filename
-
Read and execute commands from the given file.
Note that these commands are
used with the kernel debugger.
- ! shell-command
-
- !! shell-command
-
Executes the given shell command.
- q
-
- qq
-
- quit
-
Quits kcrash.
Files
/etc/crash/crash.* crash dumps
/etc/crash/macros/* macros that are useful for kernel debugging
/stand/unix default namelist
References
crash(1M),
kdb(1M),
ekdb(1M).
30 January 1998
© 1998 The Santa Cruz Operation, Inc. All rights reserved.