3.4.5. Dumping process memory with gcore

Procedure

1. Identify the process id (pid). Use tools such as ps, pgrep, and top:

   $ ps -C some-program

2. Dump the memory of this process:

   $ gcore -o filename pid

   This creates a file filename and dumps the process memory in it. While the memory is being dumped, the execution of the process is halted.

3. After the core dump is finished, the process resumes normal execution.

4. Create an SOS report to provide additional information about the system:

   # sosreport

   This creates a tar archive containing information about your system, such as copies of configuration files.

5. Transfer the program’s executable file, core dump, and the SOS report to the computer where the debugging will take place.
6. Optional: Remove the core dump and SOS report after transferring them, to free up disk space.