Ralph wrote: >.. > # gcore 3202 > warning: The current VSYSCALL page code requires an existing execuitable. > Use "add-symbol-file-from-memory" to load the VSYSCALL page by hand > > I got a dump about 8M but searching for a couple of words I know to be in the > text found nothing.
The warning message is ok, it means there are no symbols-to-code without additional info. You don't care about debugging. 8M doesn't _sound_ quite big enough (but it may be) -- are you sure 3202 is the right binary? There may be a shellscript launcher that runs the real program called something like mozilla-bin(?). Maybe you dumped the shellscript. Or maybe there's a child binary to the main program? if you run ps afx that gives a treelike display, from which you can find the sequence from shell launcher to main mozilla program to child programs if any. You probably want the program at the end of the branch. How are you searching. I might try grep "known string" core.3202 and if that works strings core.3202 | grep -30 "known string" to get (say) 30 text lines before and after the match. If you get this far, checkout greps -B and -A options .. grep -B10 -A50 .. (or similar) might be useful. Regards, ..jim -- [email protected] http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list
