[daily][ulimit][coredump] 快速简单粗暴的用coredump调试

http://www.cnblogs.com/hugetong/p/6898608.html

一个程序挂掉了, 怎么办?  启动coredump

写一个脚本:

[root@T185 ~]# cat /etc/a.sh
ulimit -c
cd /data/coredump/
/root/a.out
cd -
[root@T185 ~]# 

ulimit -c 的参数单位是512byte, 乘以204800就是100MB.

默认在那个目录启动, 就在那个目录存在coredump, 所以就cd一下.

当然配置参数也是可以的, 但是我不会. 大概就是下面这样干:

原文地址: http://www.cppblog.com/kongque/archive/2011/03/07/141262.aspx

) 默认情况下，core dump生成的文件名为core，而且就在程序当前目录下。新的core会覆盖已存在的core。通过修改/proc/sys/kernel/core_uses_pid文件，可以将进程的pid作为作为扩展名，生成的core文件格式为core.xxx，其中xxx即为pid

) 通过修改/proc/sys/kernel/core_pattern可以控制core文件保存位置和文件格式。例如：将所有的core文件生成到/corefile目录下，文件名的格式为core-命令名-pid-时间戳. echo "/corefile/core-%e-%p-%t" > /proc/sys/kernel/core_pattern

生成的core dump却不见了, 是为什么?

是这个服务删掉的: abrtd

[root@localhost ~]# cat /proc/sys/kernel/core_pattern
|/usr/libexec/abrt-hook-ccpp %s %c %p %u %g %t e

[root@localhost ~]# service abrtd status
abrtd (pid  ) is running...
[root@localhost ~]# service abrtd stop
Stopping abrt daemon:                                      [  OK  ]

[root@localhost ~]# tail -n  /var/log/messages |grep abrt
Sep  :: localhost abrtd: Corrupted or bad directory /var/spool/abrt/ccpp----::-, deleting
Sep  :: localhost abrtd: Directory 'ccpp-2017-09-28-15:25:58-15980' creation detected
Sep  :: localhost abrt[]: Saved core dump of pid  (/opt/scorpion/KingKong/KingKong/KingKong) to /var/spool/abrt/ccpp----::- ( bytes)
Sep  :: localhost abrtd: Executable '/opt/scorpion/KingKong/KingKong/KingKong' doesn't belong to any package
Sep  :: localhost abrtd: 'post-create' on '/var/spool/abrt/ccpp-2017-09-28-15:25:58-15980' exited with
Sep  :: localhost abrtd: Corrupted or bad directory /var/spool/abrt/ccpp----::-, deleting
Sep  :: localhost abrtd: Got signal , exiting
Sep  :: localhost abrt[]: abrtd is not running. If it crashed, /proc/sys/kernel/core_pattern contains a stale value, consider resetting it to 'core'
Sep  :: localhost abrt[]: Saved core dump of pid  to /data/coredump/core. ( bytes)
[root@localhost ~]# 

参考:　https://ephrain.net/linux-abrt-%E7%94%A2%E7%94%9F%E7%9A%84-core-dump-%E4%B8%8D%E8%A6%8B%E4%BA%86%EF%BC%9F/