PANIC! UNIX System Crash Dump Analysis Handbook (Bk/CD-ROM)

The primary purpose of this chapter was to provide information on how Interprocess Communication works. IPC doesn't often appear in core dumps, but when it does, nobody seems to have a clear understanding of how things should look. The information in this chapter should help you to recognize the functions, identify variables , and verify the contents. Remember, analyzing crashes is usually devoted to identifying things that are wrong. To do that, you need to know what's right, what is legal, and the interactions and relationships between the pieces.