Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to get a core dump (or something similar) for a process without actually killing the processes? I have a multithreaded python process running on an embedded system. And I want to be able to get a snapshot of the process under normal conditions (ie with the other processes required to be running), but I don't have enough memory to connect gdb (or run it under gdb) without the python process being the only one running.

I hope this question makes sense.

share|improve this question
If this is only while you're debugging, have you considered something crazy like swap on an NFS file or a network block device? – Gilles Apr 12 '11 at 19:18
up vote 8 down vote accepted

The usual trick is to have something (possibly a signal like SIGUSR1) trigger the program to fork(), then the child calls abort() to make itself dump core.

from os import fork, abort
def onUSR1(sig, frame):
    if os.fork == 0:

and during initialization

from signal import signal, SIGUSR1
from wherever import onUSR1
signal.signal(signal.SIGUSR1, wherever.onUSR1)

Used this way, fork won't consume much extra memory because almost all of the address space will be shared (which is also why this works for generating the core dump).

Once upon a time this trick was used with a program called undump to generate an executable from a core dump to save an image after complex initialization; emacs used to do this to generate a preloaded image from temacs.

share|improve this answer
Interesting. I wish there was a way to do this without modifying the running code (ie being able to do it without setup), but I doubt that's possible. This should be good enough for what we need. – Falmarri Apr 21 '11 at 21:09

You could try using gcore. Is that an option for you?

share|improve this answer
At some point gcore was a stand-alone program but I don't think it's part of the gdb package anymore - however you can run gdb --pid=<PID> and then use it's gcore command to dump a core file. gcore.c is a fairly simple program that is easily googlable if you want something lighter weight. – synthesizerpatel Sep 17 '14 at 19:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.