AIX: How to determine which application created the OS core file
Article Number: 256 | Rating: Unrated | Last Updated: Mon, Jun 11, 2018 10:19 AM
# /usr/sbin/lquerypv -h /path/to/core 6b0 64
The output of this command is neat, clean and easy to read.
Here is an example:
# lquerypv -h core 6b0 64
000006B0 7FFFFFFF FFFFFFFF 7FFFFFFF FFFFFFFF …………….
000006C0 00000000 000007D0 7FFFFFFF FFFFFFFF …………….
000006D0 00120000 1312C9C0 00000000 00000017 …………….
000006E0 6E657473 63617065 5F616978 34000000 netscape_aix4…
000006F0 00000000 00000000 00000000 00000000 …………….
00000700 00000000 00000000 00000000 00000ADB …………….
00000710 00000000 000008BF 00000000 00000A1E …………….
The executable is located between the pipes on the right hand side of the output. In this case, the core was generated by Netscape.
(or)
strings corefilename |grep _=