{"id":154,"date":"2022-05-16T13:38:20","date_gmt":"2022-05-16T17:38:20","guid":{"rendered":"https:\/\/nobrandsan.com\/wordpress\/?p=154"},"modified":"2022-05-16T13:42:24","modified_gmt":"2022-05-16T17:42:24","slug":"esx-host-dump-file-diagnostics-assessment","status":"publish","type":"post","link":"https:\/\/nobrandsan.com\/wordpress\/index.php\/2022\/05\/16\/esx-host-dump-file-diagnostics-assessment\/","title":{"rendered":"ESX Host dump file diagnostics \/ assessment"},"content":{"rendered":"\n<p><strong>PSOD\u00a0<\/strong>is a fatal crash of VMware ESX\/ESXi hosts which kills all active Virtual Machines. A diagnostic screen with white type on a purple background.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/external-content.duckduckgo.com\/iu\/?u=https%3A%2F%2Fjangari-ntk.github.io%2Fimages%2F2020-09-06%2FESXi-PSOD-NMI.png&amp;f=1&amp;nofb=1\" alt=\"\u3010Part.2\u3011Advanced Troubleshooting of VMware ESXi Server 6.x for vSphere ...\"\/><\/figure>\n\n\n\n<p>This PSOD is also generating a DUMP file, so that the Administrators can drill down the Issue and carry out a proper RCA.<\/p>\n\n\n\n<p>Before jumping into the DUMP file analysis, it is always recommended to analyze the\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/docs.vmware.com\/en\/VMware-vSphere\/6.7\/com.vmware.vsphere.monitoring.doc\/GUID-832A2618-6B11-4A28-9672-93296DA931D0.html\" target=\"_blank\"><strong>ESXi log files<\/strong><\/a>;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>VMkernel summary \u2013&nbsp;\/var\/log\/vmksummary.log<\/strong><\/li><li><strong>ESXi host agent log \u2013&nbsp;\/var\/log\/hostd.log<\/strong><\/li><\/ul>\n\n\n\n<p>By reading the above log files, we can identify whether a DUMP file has been generated or not.<\/p>\n\n\n\n<p>If a DUMP file has been generated, we can start ding some additional analysis.<\/p>\n\n\n\n<p><strong>Step 01:<\/strong><\/p>\n\n\n\n<p>Get the host up and running, login to the host through SSH (with Putty).<\/p>\n\n\n\n<p>Then go to the core directory. The core directory is the location where your PSOD is stored at (<em>cd var\/core<\/em>).<\/p>\n\n\n\n<p>You can list the PSODs (dumps) with the\u00a0<em>ls<\/em>\u00a0command.<\/p>\n\n\n\n<p><strong>Step 02:<\/strong><\/p>\n\n\n\n<p>Upon confirmation a dump exists, you can start downloading the file to your workstation.<\/p>\n\n\n\n<p>I tend to used\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/winscp.net\/eng\/download.php\" target=\"_blank\"><strong>WinSCP<\/strong><\/a> in Windows clients and the baked in SCP command in Linux.<\/p>\n\n\n\n<p>browse to \u00a0<em>\/var\/core<\/em>\u00a0path and copy the latest DUMP file (vmkernel-zdump.#).<\/p>\n\n\n\n<p><strong>Step 03:<\/strong><\/p>\n\n\n\n<p>Once you are done with downloading the DUMP file, open the file using vi or\u00a0<a rel=\"noreferrer noopener\" href=\"https:\/\/notepad-plus-plus.org\/\" target=\"_blank\">Notepad++<\/a><\/p>\n\n\n\n<p>Then search for the keyword <strong>@BlueScreen\u00a0<\/strong><\/p>\n\n\n\n<p><strong>Step 04:<\/strong><\/p>\n\n\n\n<p>Take a note of the error and search it on the&nbsp;<a href=\"https:\/\/kb.vmware.com\/s\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>VMware Knowledge Base<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>PSOD\u00a0is a fatal crash of VMware ESX\/ESXi hosts which kills all active Virtual Machines. A diagnostic screen with white type on a purple background. This PSOD is also generating a DUMP file, so that the Administrators can drill down the Issue and carry out a proper RCA. Before jumping into the DUMP file analysis, it&hellip;&nbsp;<a href=\"https:\/\/nobrandsan.com\/wordpress\/index.php\/2022\/05\/16\/esx-host-dump-file-diagnostics-assessment\/\" class=\"\" rel=\"bookmark\">Read More &raquo;<span class=\"screen-reader-text\">ESX Host dump file diagnostics \/ assessment<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"categories":[1],"tags":[4],"class_list":["post-154","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-vmware"],"_links":{"self":[{"href":"https:\/\/nobrandsan.com\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nobrandsan.com\/wordpress\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nobrandsan.com\/wordpress\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nobrandsan.com\/wordpress\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nobrandsan.com\/wordpress\/index.php\/wp-json\/wp\/v2\/comments?post=154"}],"version-history":[{"count":2,"href":"https:\/\/nobrandsan.com\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/154\/revisions"}],"predecessor-version":[{"id":157,"href":"https:\/\/nobrandsan.com\/wordpress\/index.php\/wp-json\/wp\/v2\/posts\/154\/revisions\/157"}],"wp:attachment":[{"href":"https:\/\/nobrandsan.com\/wordpress\/index.php\/wp-json\/wp\/v2\/media?parent=154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nobrandsan.com\/wordpress\/index.php\/wp-json\/wp\/v2\/categories?post=154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nobrandsan.com\/wordpress\/index.php\/wp-json\/wp\/v2\/tags?post=154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}