A little late to the game but if you need to configure kdump for the future: I think the path directive designates a path from the partition or file system designated. By default this is the root FS. If you have a separate partition in /etc/fstab for /var it will obfuscate the crash directory when … Read more
To check top 20 largest consumer of physical memory (resident set size). crash> ps -G | sed ‘s/>//g’ | sort -k 8,8 -n | awk ‘$8 ~ /[0-9]/{ $8 = $8/1024″ MB”; print }’ | tail -20 To check the number of hugepages. crash> p -d nr_huge_pages Update: A) crash dump was captured from following … Read more
xenpci.sys (EJBPV XenPCI Driver (Checked Build), James Harper) (Checked Build) is a huge red flag. You absolutely should not be using “checked” builds of anything in production. If your hosting company loaded this driver for you, then they absolutely made a mistake. Checked builds include extraneous symbols and extra error checking that aid developers. They … Read more
If you have crashkernel/kdump installed and enabled, you should be able to examine the crashed kernel with relative easy using the crash utility. For example, presuming that you crashed kernel dumps are saved under /var/crash: crash /var/crash/2009-07-17-10\:36/vmcore /usr/lib/debug/lib/modules/uname -r/vmlinux. Give a look here and here for added details.
I’ll share more widely the great answer given by @n-st: NUL bytes in the syslog are a common effect of a crash that prevented the system from cleanly syncing and unmounting the filesystem. They don’t give an indication of what actually triggered the crash. Indeed, I have often seen that behavior after a server crash: … Read more
This is caused by a livelock when ntpd calls adjtimex(2) to tell the kernel to insert a leap second. See lkml posting http://lkml.indiana.edu/hypermail/linux/kernel/1203.1/04598.html Red Hat should also be updating their KB article as well. https://access.redhat.com/knowledge/articles/15145 UPDATE: Red Hat has a second KB article just for this issue here: https://access.redhat.com/knowledge/solutions/154713 – the previous article is for … Read more