|
L tramadol ultram nux Crash HOWTONorman Pattennepatten@us.ibm.com2002-01-30 tramadol ultram evision History tramadol ultram Revision 1.0 2002-01-30 tramadol ultram Revised by: NM Initial release. tramadol ultram T tramadol ultram is document describes the installation and usage of the L tramadol ultram CD (Linux KernelCrash Dump) package.--------------------- tramadol ultram -------------------------------------------------------Ta tramadol ultram le of Contents1. Introduction 1.1. Copyright and Licen tramadol ultram e 2. How LKCD Works 2.1. What You Need 3. In tramadol ultram tallation of lkcd 3.1. Installing From Source Code tramadol ultram .2. Building and Installing LKCD Utilities 3.3. What G tramadol ultram ts Installed 3.4. Installing LKCD Utilities From RPM tramadol ultram 3.5. Patching the Kernel 3.6. Build and Install the K tramadol ultram rnel 4. Setup, Test, and Running crash 4.1. Setti tramadol ultram g up crash dump 4.2. Testing crash 4.3. Running cra tramadol ultram h -------------------------------------------------- tramadol ultram --------------------------1. IntroductionThe LKCD (Linux tramadol ultram ernel Crash Dump) project is a set of kernel patches andu tramadol ultram ilities to allow a copy of the kernel memory to be saved tramadol ultram n the event of akernel panic. The saved kernel image make tramadol ultram forensics on the kernel panicpossible with utilities inc tramadol ultram uded in the package. Most commercial Unixoperating system tramadol ultram come with similar crash utilities, but this package isfa tramadol ultram rly new to Linux and has to be added on manually. The LKC tramadol ultram utility is notdesigned to gather helpful information in tramadol ultram he case of a hardware caused panicor a segment violation. tramadol ultram The complete LKCD package is available for downloadat [ht tramadol ultram p://lkcd.sourceforge.net/] http://lkcd.sourceforge.net/.- tramadol ultram --------------------------------------------------------- tramadol ultram -----------------1.1. Copyright and LicenseThis document tramadol ultram s copyrighted (c) 2002 by Norman Patten. Permission is gr tramadol ultram ntedto copy, distribute and/or modify this document under tramadol ultram the terms of the GNUFree Documentation License, Version 1 tramadol ultram 1 or any later version published by theFree Software Foun tramadol ultram ation; with no Invariant Sections, with no Front-CoverTex tramadol ultram s, and with no Back-Cover Texts. A copy of the license is tramadol ultram available at[http://www.gnu.org/copyleft/fdl.html] http:/ tramadol ultram www.gnu.org/copyleft/fdl.html.Linux is a registered trade tramadol ultram ark of Linus Torvalds . lkcd is distributed underthe copy tramadol ultram ight of Silicon Graphics Inc.Send feedback to nepatten@us tramadol ultram ibm.com.------------------------------------------------- tramadol ultram ---------------------------2. How LKCD WorksWhen a kernel tramadol ultram encounters certain errors it calls the "panic" function w tramadol ultram ichresults from a unrecoverable error. This panic results tramadol ultram in LKCD initiating akernel dump where kernel memory is co tramadol ultram ied out to the pre-designated dumparea. The dump device i tramadol ultram configured as primary swap by default. The kernel isnot tramadol ultram ompletely functional at this point, but there is enough f tramadol ultram nctionality tocopy memory to disk. After dump finishes copying memory to disk, the systemre-boots. When the system boots back up, it checks for a new crash dump. If anew crash dump is found it is copied from the dump location to the filesystem, "/var/log/dump" directory by default. After copying the image, thesystem continues to boot normally and forensics can be performed at a laterdate.-----------------------------------------------------------------------------2.1. What You Needlkcd-kernelxxx.diff file for patching the kernel. The kernel versionsupported will change routinely. lkcdutils-xx.src.rpm - this is the utilitiessource and scripts you will need to setup and read a crash. At the time ofthis writing there is a i386 binary rpm available from [http://lkcd.sourceforge.net/] lkcd.sourceforge.net, but you will still need thepatches for the startup scripts fr
|
