Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!wuarchive!sdd.hp.com!elroy.jpl.nasa.gov!ames!xn.ll.mit.edu!ll.mit.edu!news
From: tadams@llex.ll.mit.edu ( Tony Adams)
Newsgroups: comp.unix.wizards
Subject: Kernel post-mortem core dump examination
Message-ID: <1991Mar22.161716.2344@ll.mit.edu>
Date: 22 Mar 91 16:17:16 GMT
Sender: news@ll.mit.edu
Organization: MIT Lincoln Laboratory
Lines: 18




machine: SUN 3E (SUNOS 4.03) with source code.

During post-mortem examination of kernel core dumps, what is the
most user level context, for a target process, that can be
reconstructed??

Its easy to switch process context via "pid$<setproc". Then from
there its easy to determine the user level register values by
following "u.u_ar0".

Subject to what was in-core at the time of the dump, are there
any "canned" ways to locate and examine the target processes
text, data and stack pages?

Any help is appreciated.