【转】How to obtain a core file without restarting an application?

How to obtain a core file without restarting an application?

https://access.redhat.com/solutions/9952

• Red Hat Enterprise Linux

问题

• How to obtain a core file without restarting an application?
• How an application core can be generated when a process is not crashing?
• How to create an application core when process core size is set to 0?

决议

• The gcore command can be used to obtain the core file without causing the application to abort using the following procedure:

  • Ensure that the gdb package is installed.
  • Run the application.

  • Execute the gcore command to generate a core file (like core.pid) from the application in the current directory:

    Raw

    $ gcore (pid of the process)
    

• The core file will be outputted to the present working directory.

• Note :
  • The gcore command runs gdb and attaches to the process, causing the process to enter T status. However, the process should try to continue to run after gdb finishes collecting a core.
  • One point to remember is that with gcore we can't get a coredump of a kernel process. Because kernel processes are immune to system call tracing, ptrace which the gcore command uses. When we issue a gcore to a pid, we are using PTRACE_ATTACH . When a parent process traces a child process, it uses PTRACE_TRACEME. See the man page of ptrace for more details.