How to find useful information in the /var/tombstones/ts99?

[Crystal_1]

Hi,

My system crashed yesterday. Somebody suggested checking this file to see if there is any problem with HPMC. I did find ts99 had latest timestamp. But I still don't get it.

Can you tell me how it helps?

Tx, Crystal

[Stefan Farrelly · Accepted solution]

All you need to do is a;

head -10 /var/tombstones/ts99

And if your system did crash with an HPMC it will look like this;

HP-UX lincoln B.11.00 A 9000/800 1867347462

CPU-ID( Model ) = 0xe

----------------- Processor 0 HPMC Information ------------------

Timestamp = Fri Jun 21 10:47:43 GMT 2002 (20:02:06:21:10:47:43)

HPMC Chassis Codes = 0xcbf0 0x5008 0x5408 0x550f 0xcbfb

lincoln:/var/tombstones> head -11 ts99
HP-UX lincoln B.11.00 A 9000/800 1867347462

CPU-ID( Model ) = 0xe

----------------- Processor 0 HPMC Information ------------------

Timestamp = Fri Jun 21 10:47:43 GMT 2002 (20:02:06:21:10:47:43)

HPMC Chassis Codes = 0xcbf0 0x5008 0x5408 0x550f 0xcbfb


The Chassis codes are the important bit. You will need to give these to HP (at the response centre) and they can look up the codes and hopefully tell you exactly why your server crashed and what needs replacing.

You may need to give them all the chassis codes (one line for each cpu you have) in which case do;

grep "HPMC Chassis" /var/tombstones/ts99

[Sanjay_6]

Hi Crystal,

the info lies in the chassis codes in this file. This tells the state of the processor.

You normally send this file to your hardware vendor who decodes the chassis codes and tries to find what happened at the time of crash.

Other than ts99, the crash analysis report of the crash file in /var/adm/crash/crash.x are used to find out the reason for the crash.

Hope this helps.

Regds

[Crystal_1]

Something wired in the file. When I checked the ts99 I got this:

-rw-r--r-- 1 root root 14860 Jun 25 16:35 ts99

(The timestamp is yesterday.)

But when I ran the grep command to search the timestamp inside the file, I got this:
# cat ts99 | grep Timestamp
Timestamp = Tue Oct 3 07:53:09 GMT 2000 (20:00:10:03:07:53:09)
Timestamp = Tue Oct 3 07:53:12 GMT 2000 (20:00:10:03:07:53:12)
Timestamp = Tue Oct 3 07:53:55 GMT 2000 (20:00:10:03:07:53:55)
Timestamp = Tue Oct 3 07:53:09 GMT 2000 (20:00:10:03:07:53:09)
Timestamp = Tue Oct 3 07:53:12 GMT 2000 (20:00:10:03:07:53:12)
Timestamp = Tue Oct 3 07:53:55 GMT 2000 (20:00:10:03:07:53:55)
Timestamp = Tue Oct 3 07:53:10 GMT 2000 (20:00:10:03:07:53:10)
Timestamp = Tue Oct 3 07:53:12 GMT 2000 (20:00:10:03:07:53:12)
Timestamp = Tue Oct 3 07:53:55 GMT 2000 (20:00:10:03:07:53:55)
Timestamp = Tue Oct 3 07:53:09 GMT 2000 (20:00:10:03:07:53:09)
Timestamp = Tue Oct 3 07:53:12 GMT 2000 (20:00:10:03:07:53:12)
Timestamp = Tue Oct 3 07:53:55 GMT 2000 (20:00:10:03:07:53:55)

They are all for 2000. How come?

[Stefan Farrelly]

The 2000 timestamp entries means you have NOT had an HPMC since the year 2000 so your crash wasnt an HPMC.

[PIYUSH D. PATEL]

Hi,

Your crash is not related to HPMC. You should send the files in the /var/adm/crash directory to HP for analysing.

See the entries in this directory, core.1..core.2 and see when these files are created.

Piyush