ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

When trying to start kdump the procedure fails as the OS cannot find the sisfim or sisips kernel modules in the kernel tree.

book

Article ID: 161671

calendar_today

Updated On:

Products

Critical System Protection

Issue/Introduction

 

No module sisfim or sisips found for kernel, Failed to run mkdumprd

Rebuilding /boot/initrd-2.6.32-358.2.1.el6.x86_64kdump.img

No module sisfim found for kernel 2.6.32-358.2.1.el6.x86_64, aborting.

Failed to run mkdumprd

Starting kdump:                                            [FAILED]

# man mkdumprd

# vi /etc/sysconfig/kdump

# service kdump start

Detected change(s) the following file(s):

 

  /etc/kdump.conf

Rebuilding /boot/initrd-2.6.32-358.2.1.el6.x86_64kdump.img

No module sisips found for kernel 2.6.32-358.2.1.el6.x86_64, aborting.

Failed to run mkdumprd

Starting kdump:      

Cause

The problem is that initrd doesn't know how to find our modules as they live outside the /lib/modules kernel tree.  

Resolution

To workaround this issue, create a symlink in the kernel tree to the sisfim and/or sisips drivers.  

 

# ln -s /opt/Symantec/scspagent/IDS/driver/sisfim.ko /lib/modules/`uname -r`/kernel/drivers/sisfim.ko

# ln -s /opt/Symantec/scspagent/IPS/driver/sisips.ko /lib/modules/`uname -r`/kernel/drivers/sisips.ko

 

Then start the kdump service  (service kdump start).


Applies To

Linux/Unix