kcrash(1M)


kcrash -- large memory crash command

Synopsis

kcrash [ -w ] [ -k ] dumpfile [ namelist ]

Description

The kcrash command, similar to the crash(1M) command, examines system crash dumps. The kcrash command interface is based on the enhanced kernel debugger (see ekdb(1M)). All commands accepted by the enhanced kernel debugger can be used identically in kcrash, with the following exceptions: Use the -w option if you want to use commands that modify memory (actually modify the crash dump file).

Use the -k option if you want to use kcrash on a running system. If you want to do this specify dumpfile as /dev/mem.

The following commands are only available in kcrash. (They are not available in ekdb(1M)):

< filename

<< filename
Read and execute commands from the given file. Note that these commands are used with the kernel debugger.

! shell-command

!! shell-command
Executes the given shell command.

q

qq

quit
Quits kcrash.

Files

/etc/crash/crash.* crash dumps
/etc/crash/macros/* macros that are useful for kernel debugging
/stand/unix default namelist

References

crash(1M), kdb(1M), ekdb(1M).


30 January 1998
© 1998 The Santa Cruz Operation, Inc. All rights reserved.