Re: Reversing klogd's EIP Resolution.

2000-09-09 Thread Ralph Corderoy


Hi Keith,

> Your best option is to convert dput+77 back to 8 digit hex and run the
> resulting log through ksymoops.  +77/328 is offset 77, the next label
> that klogd knows about is 328 bytes later, ignore the /328.  AFAIK
> klogd prints offsets in decimal but check the source code of
> sysklogd/ksym.c to be sure.

Many thanks for your answer.  It's `+%x/%d' so the offset is hex, the
size is decimal.


Ralph.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.tux.org/lkml/



Re: Reversing klogd's EIP Resolution.

2000-09-09 Thread Keith Owens

On Sat, 09 Sep 2000 19:20:15 +0100, 
Ralph Corderoy <[EMAIL PROTECTED]> wrote:
>01:52:30 EIP:0010:[dput+77/328] 
>
>I believe I should be able to look up dput in the System.map klogd is
>using, add on the offset, and then look that number up in the real
>System.map.  Is this doable?

Your best option is to convert dput+77 back to 8 digit hex and run the
resulting log through ksymoops.  +77/328 is offset 77, the next label
that klogd knows about is 328 bytes later, ignore the /328.  AFAIK
klogd prints offsets in decimal but check the source code of
sysklogd/ksym.c to be sure.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.tux.org/lkml/



Reversing klogd's EIP Resolution.

2000-09-09 Thread Ralph Corderoy


Hi,

We've a machine that has been suffering Oops over the last few days
after weeks of stability.  I'll post more on that later.  My current
problem is a bunch of Oops that klogd has resolved the addresses on.
Problem is, I've just worked out the machine has /boot/System.map as
the wrong map.

Given

01:52:30 EIP:0010:[dput+77/328] 

I believe I should be able to look up dput in the System.map klogd is
using, add on the offset, and then look that number up in the real
System.map.  Is this doable?

If so, can someone please explain what the `+77/328' indicates above
and what number that means I should add onto the 0xc0130b14 value dput
has in the wrong map.  My background is ARM and PowerPC architectures,
where as this is x86.

Thanks,


Ralph.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.tux.org/lkml/