Re: magic file entry to understand core dumps

Aaron Ucko (
Sat, 20 Jul 1996 15:05:54 -0600 (CST)

>>JM> core: ELF 32-bit LSB core file i386 (386 and up) Version 1
>>He wanted an addition to the magic file to show the program which
>>dumped core, as the a.out entry does. However, a quick check shows
>>that it isn't a simple offset... anyone have better knowledge of the
>Like I said, a cheesy program would be worthwhile...gdb does it, but you
>first have to know the program which cored for gdb to spit out the command

I normally just use "strings core" and look for the probable executable
name...not ideal, but it works.

Aaron Ucko (; finger for PGP public key) | Geek Code
3.1 [for explanation, finger]: GCS/M/S/C d- s+: a18
C++(+++)>++++ UL++>+++ P++(+++) L+++(++++)>+++++ E- W+(-) N++(+) o+ K- w---
O M-@ V-(--) PS++(+++) PE- Y+ PGP(+) t(+) !5 X-- R(-) tv-@ b++(+++) DI+ D--
G++(+++) e>+++++(*) h!>+ r-(--)>+++ y? | "That's right," he said. "We're
philosophers.  We think, therefore we am." -- Terry Pratchett, _Small Gods_