AIX Tip of the Week

AIX Tip of the Week: Identifying the Origin of "core" Files

Audience: Systems Administrators

Date: January 12, 2001

When an application core dumps, a "core" file is placed in the current directory. Core files are often a symptom of a problem that needs attention. You can determine which application caused the "core" file going to the directory where the core file is located and running the command:

$ lquerypv -h core 6b0 64

The name of the application causing the core file is listed in the section on the right. In the sample output below, the "ftpd" application caused the core file.

000006B0   7FFFFFFF FFFFFFFF 7FFFFFFF FFFFFFFF  |................|
000006C0   00000000 000007D0 7FFFFFFF FFFFFFFF  |................|
000006D0   00170000 53245A2C 00000000 00000015  |....S$Z,........|
000006E0   66747064 00000000 00000000 00000000  |ftpd............|
000006F0   00000000 00000000 00000000 00000000  |................|
00000700   00000000 00000000 00000000 000000CF  |................|
00000710   00000000 00000020 00000000 000000BE  |....... ........|  

In addition, AIX can be configured to detect when core files are created and mail a message to root, alerting root that an application has failed. The instructions for setting this up are in a README file in the /usr/samples/findcore directory. These programs are delivered with the bos.sysmgt.serv_aid fileset.

w3.ibm.com About IBM Help Search Feedback www.ibm.com

Bruce Spencer,
baspence@us.ibm.com

January 12, 2001