gcore —
get core images of running
process
gcore |
[-f] [-k]
[-c core]
[executable] pid |
The gcore utility creates a core image of
the specified process, suitable for use with
gdb(1) (ports/devel/gdb). By default,
the core is written to the file
“core.<pid>”. The process
identifier, pid, must be given on the command
line.
The following options are available:
-c
- Write the core file to the specified file instead of
“core.<pid>”.
-f
- Dumps all available segments, excluding only malformed and undumpable
segments. Unlike the default invocation, this flag dumps mappings of
devices which may invalidate the state of device transactions or trigger
other unexpected behavior. As a result, this flag should only be used when
the behavior of the application and any devices it has mapped is fully
understood and any side effects can be controlled or tolerated.
-k
- Use the
ptrace(2)
PT_COREDUMP kernel
facility to write the core dump, instead of reading the process' memory
and constructing the dump file in gcore itself.
This is faster, and the dump is written by the same kernel code that
writes core dumps upon fatal signals.
- core.<pid>
- the core image
A gcore utility appeared in
4.2BSD.
Because of the
ptrace(2) usage gcore may not work
with processes which are actively being investigated with
truss(1) or
gdb(1) (ports/devel/gdb).
Additionally, interruptable sleeps may exit with EINTR.
The gcore utility is not compatible with
the original 4.2BSD version.