Kernel dump analysis made quick and easy!
summary
PyKdump is a Python 3 framework that turns crash/vmcore analysis into scripted checks using APIs like read_struct and read_symbol, and can run crash commands via execute_crash_command. Ready-made tools (xportshow, scsishow, dmshow, nfsshow, hanginfo) extract networking, SCSI/LVM, multipath and hang data and flag heuristics. A real case shows LVM and device-map resolution in under a second where manual inspection takes hours; binaries are available on SourceForge and the framework tolerates kernel structure changes with member_size checks.
AI-written summary · about
chapters (34)
- 0:00Introduction
- 1:15What is VM core analysis
- 2:35Crash Utility
- 7:16Crash Extensions
- 8:02EPP
- 9:32Features
- 10:24Other features
- 11:35Python framework design
- 12:48Dereference chain
- 13:46Python kdump API
- 14:57Python crash command
- 16:21Read su rid structure API call
- 18:33Print
- 19:08Execute Crash
- 21:38Elevator
- 22:35MemberSize
- 24:01Exception Handling
- 25:31Exports
- 27:21Project page
- 29:06Panic
- 29:39PS List
- 30:04Context
- 31:30Manual analysis
- 32:10Review programs
- 32:51LVM output
- 33:26Basic tricks
- 34:14Demo
- 37:00Commands
- 37:52Error handling
- 40:14Why cant we
- 43:50Scuzzy commands
- 45:17NFS commands
- 46:00Feedback
- 46:51Reinitializing
related talks
43mEfficient and Practical Capturing of Crash Data on Embedded Systems
37mPracticing Linux Crash/Panic Issue on Production and Cloud Server: Using Kdump + Crash
13mRamdump for Trusted VMs: Efficient Crash Debugging Without Reboot Device
45mModernizing the kdump dump tools
34mPostmortem Debugging with Coresight
20mDebugging RISC-V Kernel Crashes: KDUMP, vmcore, and Crash Utility Enhancements
26mStateless Linux Kernel Crashdumps
52mLinux Kernel Debugging: Going Beyond Printk Messages