Back To Course Home
Accelerated Linux Core Dump Analysis
0% completed
Getting Started
What Is This Course About?
Fundamentals of Core Dump Analysis
Virtual Memory and Memory DumpsThe Role of ThreadsExceptionsCollecting User Process Core DumpsOverview of the x64 DisassemblyPattern-Oriented Diagnostic AnalysisQuiz: Fundamentals of Core Dump Analysis
Using GDB With Multi-Threaded Applications
GDB: An OverviewUse GDB with a Multi-Threaded Application IUse GDB with a Multi-Threaded Application IICore Dump Analysis ChallengeQuiz: Using GDB With Multi-Threaded Applications
Null Pointer Patterns and External Debugging Information
Detect NULL Pointer Exceptions Due to DataDetect NULL Pointer Exceptions Due to CodeUse External Debugging InformationThe NULL Pointer (Data and Code) Analysis PatternsQuiz: NULL Pointer Patterns and External Debugging Information
Spiking Threads
Identify Spiking ThreadsSpiking Thread Analysis PatternQuiz: Spiking Threads
Heap Corruption
Identify Heap CorruptionDynamic Memory Corruption PatternQuiz: Heap Corruption
Stack Corruption and Overflow
Identify Stack CorruptionIdentify Stack OverflowLocal Buffer Overflow (User Space) and Stack Overflow PatternsQuiz: Stack Corruption and Overflow
Active Threads
Identify Active ThreadsDivide-by-Zero PatternQuiz: Active Threads
Runtime Exceptions and Execution Residues
Identify Runtime Exceptions and Execution ResiduesPatterns AnalysisQuiz: Runtime Exceptions and Execution Residues
Heap Errors
Identify Heap LeaksIdentify Heap Contention ErrorsCritical Region PatternQuiz: Heap Errors
Deadlocks
Identify DeadlocksQuiz: Deadlocks
Post-processing
Dump Memory for Post-ProcessingQuiz: Post-processing
Kernel Dump Analysis with Crash
Overview and Required Tools
Examine Normal Kernel Dumps
Examine Problematic Kernel Dumps
Examine Problems With Kernel Threads
Identify Spiking Kernel Threads
Identify Kernel Stack Overflow and Boundaries
Quiz: Kernel Dump Analysis with Crash
Wrapping Up
FAQsConclusion
Appendix
How to Install GDB and Crash on a Local DeviceMore Analysis Patterns: Paratext and Lateral Damage

Examine Normal Kernel Dumps

Learn how to navigate a normal kernel dump.

We'll cover the following
  • Loading the core dump
  • Identifying the current thread
  • Seeking help
  • Examining kernel message buffer
  • Checking memory, computer, and network info
  • Listing all processes
  • Listing CPU queues
  • Selecting tasks
  • Examining the stack trace
  • Examining the virtual memory layout
  • Listing opened files
  • Dumping memory contents as pointers
  • Verifying the return address
  • Listing backtrace of every PID
  • Exploring individual tasks
  • Try it out

In this lesson, we will learn how to navigate through a normal kernel dump using crash.

Loading the core dump

Get hands-on with 1400+ tech skills courses.