elf core dump - reading NT_PRPSINFO

[Mulyadi Santosa]

Hi :)

On Fri, Jan 20, 2012 at 13:57, Fredrick <fjohnber at zoho.com> wrote:
> Hi,
>
> $ readelf -n core

is that "core" a core dump?

> Does anyone know how to read this NT_PRPSINFO ?
> Is hexdump the only way to decode this?
> Are there any tools to dump this data ?

if it is indeed core dump, I think simply pass it to gdb, e.g:
gdb <program elf binary> <the above core name>
and start playing with it e.g dumping stack trace.

NB: IMHO NT_PRPSINFO is just a section that describes the VMAs of the
crashed program. Quite likely an ELF documentation will mention about
it. Try googling...
-- 
regards,

Mulyadi Santosa
Freelance Linux trainer and consultant

blog: the-hydra.blogspot.com
training: mulyaditraining.blogspot.com