KDUMPID(1)

✨ KDUMPID ✨

okay bestie, gather round, because this little cutie is about to become your fave πŸ’– it's a General Commands Manual page, and it's literally called kdumpid β€” a tool to identify kernel memory dumps πŸ‘‘


πŸŽ€ NAME πŸŽ€

kdumpid β€” a tool to identify kernel memory dumps. yes that's the whole vibe. she identifies. she slays. πŸ’…


πŸ¦‹ SYNOPSIS πŸ¦‹

kdumpid [-v] <dumpfile>

🌸 DESCRIPTION 🌸

so here's the tea: kdumpid gives you a fast and reliable method to figure out the most important info about some mystery kernel crash dump you just found lying around. we're talking the architecture, the kernel release, all the juicy essentials. think of it as, like, a file utility but specifically for kernel dumps. it's giving forensics girlie. πŸ”

At present, kdumpid can read:

  • LKCD files
  • DISKDUMP/KDUMP files
  • ELF dumps (including support for both Xen Dom0 and DomU πŸ‘―)

and these architectures are fully supported, no crumbs left:

  • x86
  • x86-64
  • ppc
  • ppc64
  • s390
  • s390x

Other architectures may still produce some output if the information can be found in the file header β€” so like, no promises, but she'll try her best πŸ₯Ί


πŸ’… OPERATION πŸ’…

By default, kdumpid will print the kernel dump's format, architecture and version. that's the bare minimum and honestly? still iconic.


✨ OPTIONS ✨

  • -v β€” Try to extract and print additional information from the memory dump, such as: the machine type, the full kernel banner string and the kernel configuration flavor. basically the deluxe edition, the director's cut, the extra extra πŸ“

πŸ”₯ SEE ALSO πŸ”₯

go read those too, iykyk πŸ“š


πŸ‘‘ AUTHOR πŸ‘‘

KdumpID was written by Petr Tesarik. thank you for your service, king 🫢


and that's the whole page, bestie!! this version dropped on 4 Nov 2011 and it lives under the name KDUMPID(1) in the General Commands Manual β€” periodt πŸ’–βœ¨

πŸ“¦ where this page comes from