【转】How to obtain a core file without restarting an application?

最新推荐文章于 2025-12-04 21:50:53 发布

转载最新推荐文章于 2025-12-04 21:50:53 发布 · 312 阅读

文章标签：

432 篇文章

订阅专栏

292 篇文章

订阅专栏

117 篇文章

订阅专栏

博客围绕不重启应用获取核心文件展开，提出了在进程未崩溃、进程核心大小设为0时如何生成应用核心的问题。给出决议，可使用gcore命令，按确保相关包安装、运行应用、执行命令的步骤获取核心文件，还指出该命令使用的注意事项。

How to obtain a core file without restarting an application?

The gcore command can be used to obtain the core file without causing the application to abort using the following procedure:
- Ensure that the gdb package is installed.
- Run the application.
- Execute the gcore command to generate a core file (like core.pid) from the application in the current directory:
  
  Raw
```
$ gcore (pid of the process)
```
The core file will be outputted to the present working directory.
Note :
- The gcore command runs gdb and attaches to the process, causing the process to enter T status. However, the process should try to continue to run after gdb finishes collecting a core.
- One point to remember is that with gcore we can't get a coredump of a kernel process. Because kernel processes are immune to system call tracing, ptrace which the gcore command uses. When we issue a gcore to a pid, we are using PTRACE_ATTACH . When a parent process traces a child process, it uses PTRACE_TRACEME. See the man page of ptrace for more details.