When trying to start kdump the procedure fails as the OS cannot find the sisfim or sisips kernel modules in the kernel tree.

Products

• Critical System Protection

Issue/Introduction

 

No module sisfim or sisips found for kernel, Failed to run mkdumprd

Rebuilding /boot/initrd-2.6.32-358.2.1.el6.x86_64kdump.img

No module sisfim found for kernel 2.6.32-358.2.1.el6.x86_64, aborting.

Failed to run mkdumprd

Starting kdump:                                            [FAILED]

# man mkdumprd

# vi /etc/sysconfig/kdump

# service kdump start

Detected change(s) the following file(s):

 

  /etc/kdump.conf

Rebuilding /boot/initrd-2.6.32-358.2.1.el6.x86_64kdump.img

No module sisips found for kernel 2.6.32-358.2.1.el6.x86_64, aborting.

Failed to run mkdumprd

Starting kdump:      

Cause

The problem is that initrd doesn't know how to find our modules as they live outside the /lib/modules kernel tree.  

Resolution

To workaround this issue, create a symlink in the kernel tree to the sisfim and/or sisips drivers.  

 

# ln -s /opt/Symantec/scspagent/IDS/driver/sisfim.ko /lib/modules/`uname -r`/kernel/drivers/sisfim.ko

# ln -s /opt/Symantec/scspagent/IPS/driver/sisips.ko /lib/modules/`uname -r`/kernel/drivers/sisips.ko

 

Then start the kdump service  (service kdump start).

Applies To

Linux/Unix