27e3a9be   
   XPost: comp.os.linux.development.apps, comp.unix.programmer, alt.comp.linux   
   From: ian-news@hotmail.com   
      
   S Claus wrote:   
   > On Feb 8, 10:49 am, Ian Collins  wrote:   
   >> S Claus wrote:   
   >>> Hi all   
   >>> I am looking for a book or course (or even a website) from where to   
   >>> learn the skills to analyze Unix/Linux core dumps.   
   >> Core dumps or crash dumps?  Core dumps are simply debugged with your   
   >> favourite debugger.   
   >>   
   Please don't quote sigs, thanks.   
   >   
   > Thanks for pointing that out Ian.   
   >   
   > There we see how much I have to learn:-P   
   >   
   > Actually I think I thought that core dumps would look like crash dumps   
   > -or the other way around- in any case that it would require the same   
   > skills for both. So in my mind I had indeed mixed them.   
   >   
   > But I take from your reply that they do not look the same - crash   
   > dumps require more skills to analyze than core dumps?   
      
   Oh yes, a core dump is produced when an application crashes, so if you   
   have the source, they are relatively straightforward to analyses.   
      
   A crash dump is produced when the kernel panics, so you have to have   
   some understanding of the kernel (and it's debugger if it differs form   
   application's).  Crash dumps can be huge (I forced one today that was   
   over 4GB) and are best analysed with specialised tools.   
      
   --   
   Ian Collins   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)