********************************************************************** ** ** ** TEXT FILE LIMITATIONS: ** ** ** ** The text extract for this document does not capture tables very ** ** well, mainly because of the 75-column, monospaced character ** ** limitation. Be aware that large data tables probably will not ** ** wrap properly in this text file. ** ** ** ** In addition, the text extract cannot capture figure images. ** ** You can see only placeholders (captions) for the figures. ** ** ** ** You may see references to italic or bold fonts that are visible ** ** in the original document but not in this text extract. ** ** ** ********************************************************************** ========================================================================= Compaq Crash Analysis Tool User Guide ------------------------------------------------------------------------- The Compaq Crash Analysis Tool User Guide tells you how to use the Compaq Crash Analysis Tool (CCAT) software to analyze crash files on all supported operating systems, including Compaq Tru64 UNIX, OpenVMS/Alpha, and Microsoft Windows NT/2000. September, 2000 Tru64 UNIX Version V4.0 and above OpenVMS/Alpha Version V7.1-2 and above Windows NT Version 4.0 April 2000 Copyright 2000 Compaq Computer Corporation COMPAQ and the Compaq logo Registered in U.S. Patent and Trademark Office. Tru64 and OpenVMS are trademarks of Compaq Information Technologies Group, L.P. Microsoft, Windows, Windows NT, and MS-DOS are trademarks of Microsoft Corporation. Intel is a trademark of Intel Corporation. UNIX is a trademark of The Open Group. All other product names mentioned herein may be trademarks of their respective companies. Confidential computer software. Valid license from Compaq required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. Compaq shall not be liable for technical or editorial errors or omissions contained herein. The information in this document is subject to change without notice. THE INFORMATION IN THIS PUBLICATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. THE ENTIRE RISK ARISING OUT OF THE USE OF THIS INFORMATION REMAINS WITH RECIPIENT. IN NO EVENT SHALL COMPAQ BE LIABLE FOR ANY DIRECT, CONSEQUENTIAL, INCIDENTAL, SPECIAL, PUNITIVE OR OTHER DAMAGES WHATSOEVER (INCLUDING WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION OR LOSS OF BUSINESS INFORMATION), EVEN IF COMPAQ HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. The limited warranties for Compaq products are exclusively set forth in the documentation accompanying such products. Nothing herein should be construed as constituting a further or additional warranty. Compaq service tool software, including associated documentation, is the property of and contains confidential technology of Compaq Computer Corporation. Service customer is hereby licensed to use the software only for activities directly relating to the delivery of, and only during the term of, the applicable services delivered by Compaq or its authorized service provider. Customer may not modify or reverse engineer, remove or transfer the software or make the software or any resultant diagnosis or system management data available to other parties without Compaq's or its authorized service provider's consent. Upon termination of the services, customer will, at Compaq's or its service provider's option, destroy or return the software and associated documentation in its possession. Printed in U.S.A. ========================================================================= ***Contents*** Preface Overview Intended Audience Documentation Conventions Further Information 1 Running CCAT Automatically 1.1 The Automated CCAT Process 1.2 Configuring CCAT To Run Automatically 2 Using the CCAT GUI For Compaq Tru64 UNIX 2.1 CCAT GUI Overview 2.2 Starting the GUI 2.3 Performing a Manual Crash Analysis 2.3.1 Tru64 UNIX Crash Data Parameters 2.3.2 Entering Parameters 2.3.2.1 Selecting And Opening a Crash File 2.3.2.2 Inserting Crash Data Parameters Using Icons 2.3.2.3 Typing In Crash Parameters 2.3.3 Saving the Results File 2.4 Viewing Saved Results Files 2.5 Exiting From the CCAT GUI 3 Using the CCAT GUI For OpenVMS/Alpha 3.1 CCAT GUI Overview 3.2 Starting the GUI 3.3 Performing a Manual Crash Analysis 3.3.1 OpenVMS/Alpha Crash Data Parameters 3.3.2 Entering Parameters 3.3.2.1 Selecting and Opening a Crash File 3.3.2.2 Inserting Crash Parameters Using Icons 3.3.2.3 Typing In Crash Parameters 3.3.3 Saving the Results File 3.4 Viewing Saved Results Files 3.5 Exiting From the CCAT GUI 4 Using the CCAT GUI For Windows NT (Intel) 4.1 CCAT GUI Overview 4.2 Starting the GUI 4.3 Performing a Manual Crash Analysis 4.3.1 Windows NT (Intel) Crash Data Parameters 4.3.2 Entering Parameters 4.3.2.1 Selecting And Opening a Crash File 4.3.2.2 Inserting Crash Data Parameters Using Icons 4.3.2.3 Typing In Crash Parameters 4.3.3 Saving the Results File 4.4 Viewing Saved Results Files 4.5 Exiting From the CCAT GUI 5 Using the CCAT GUI For Windows NT (Alpha) 5.1 CCAT GUI Overview 5.2 Starting the GUI 5.3 Performing a Manual Crash Analysis 5.3.1 Windows NT (Alpha) Crash Data Parameters 5.3.2 Entering Parameters 5.3.2.1 Selecting And Opening a Crash File 5.3.2.2 Inserting Crash Data Parameters Using Icons 5.3.2.3 Typing In Crash Parameters 5.3.3 Saving the Results File 5.4 Viewing Saved Results Files 5.5 Exiting From the CCAT GUI Index  ========================================================================= ***List of Figures*** 2-1 Compaq Crash Analysis Tool Window (Tru64 UNIX) 2-2 File Pull-Down Menu - Select Crash File (Tru64 UNIX) 2-3 CCAT Open Window (Tru64 UNIX) 2-4 CCAT Message Processing Window (Tru64 UNIX) 2-5 Tru64 UNIX CCAT Analysis Results 2-6 Crash Parameter Icons (Tru64 UNIX) 2-7 Document Contents In a Parameter Field (Tru64 UNIX) 2-8 Tru64 UNIX CCAT Date Time Window 2-9 Date Time Pull-Down Menu (Tru64 UNIX) 2-10 Contents Of A Folder (Tru64 UNIX) 2-11 CCAT File Pull-Down Menu - Save Results File As... (Tru64 UNIX) 2-12 CCAT Save Window (Tru64 UNIX) 2-13 File Pull-Down Menu - View Saved Results File... (Tru64 UNIX) 2-14 CCAT View Results File Open Window (Tru64 UNIX) 2-15 Typical CCAT Tru64 UNIX Analysis Results 2-16 Exit CCAT Warning Window (Tru64 UNIX) 3-1 Compaq Crash Analysis Tool Window (OpenVMS/Alpha) 3-2 File Pull-Down Menu - Select Crash File... (OpenVMS/Alpha) 3-3 CCAT Open Window (OpenVMS/Alpha) 3-4 CCAT Message Processing Window (OpenVMS/Alpha) 3-5 OpenVMS/Alpha CCAT Analysis Results 3-6 Crash Parameter Icons (OpenVMS/Alpha) 3-7 Document Contents In a Parameter Field (OpenVMS/Alpha) 3-8 OpenVMS/Alpha CCAT Date Time Window 3-9 Date Time Pull-Down Menu (OpenVMS/Alpha) 3-10 Contents Of a Folder (OpenVMS/Alpha) 3-11 CCAT File Pull-Down Menu - Save Results File As... (OpenVMS/Alpha) 3-12 CCAT Save Window (OpenVMS/Alpha) 3-13 File Pull-Down Menu - View Saved Results File... (OpenVMS/Alpha) 3-14 CCAT View Results File Open Window (OpenVMS/Alpha) 3-15 Typical CCAT OpenVMS/Apha Analysis Results 3-16 Exit CCAT Warning Window (OpenVMS/Alpha) 4-1 Compaq Crash Analysis Tool Window (Windows NT (Intel)) 4-2 File Pull-Down Menu - Select Crash File... (Windows NT (Intel)) 4-3 CCAT Open Window (Windows NT (Intel)) 4-4 CCAT Message Processing Window (Windows NT (Intel)) 4-5 Windows NT (Intel) CCAT Analysis Results 4-6 Crash Parameter Icons (Windows NT (Intel)) 4-7 Document Contents In a Parameter Field (Windows NT (Intel)) 4-8 Contents Of a Folder (Windows NT (Intel)) 4-9 CCAT File Pull-Down Menu - Save Results File As... (Windows NT (Intel)) 4-10 CCAT Save Window (Windows NT (Intel)) 4-11 File Pull-Down Menu - View Saved Results File... (Windows NT (Intel)) 4-12 CCAT View Results File Open Window (Windows NT (Intel)) 4-13 Typical CCAT Windows NT (Intel) Analysis Results 4-14 Exit CCAT Warning Window (Windows NT (Intel)) 5-1 Compaq Crash Analysis Tool Window (Windows NT (Alpha)) 5-2 File Pull-Down Menu - Select Crash File... (Windows NT (Alpha)) 5-3 CCAT Open Window (Windows NT (Alpha)) 5-4 CCAT Message Processing Window (Windows NT (Alpha)) 5-5 Windows NT (Alpha) CCAT Analysis Results 5-6 Parameter Icons (Windows NT (Alpha)) 5-7 Document Contents In a Parameter Field (Windows NT (Alpha)) 5-8 Contents Of a Folder (Windows NT (Alpha))r 5-9 File Pull-Down Menu - Save Results File As... (Windows NT (Alpha)) 5-10 CCAT Save Window (Windows NT (Alpha)) 5-11 File Pull-Down Menu - View Saved Results File... (Windows NT (Alpha)) 5-12 CCAT View Results File Open Window (Windows NT (Alpha)) 5-13 Typical CCAT Windows NT (Alpha) Analysis Results 5-14 Exit CCAT Warning Window (Windows NT (Alpha))  ========================================================================= ***List of Tables*** 2-1 Tru64 UNIX Crash Data Parameters 3-1 Open VMS Alpha Crash Data Parameters 4-1 Windows NT (Intel) Crash Data Parameters 5-1 Windows NT (Alpha) Crash Data Parameters  ========================================================================= ***Preface*** Compaq Crash Analysis Tool (CCAT) is a software application that enables Compaq Customer Services engineers and system administrators to analyze operating system crashes. CCAT matches information collected about a crash against a set of operating system-specific rules to determine if the footprint of the collected crash data matches any known crash data footprints for which a solution or corrective action has been found. Use of CCAT greatly reduces customer downtime by shortening the time required to analyze system crashes and eliminates the need for customer site visits. Overview The Compaq Crash Analysis Tool User Guide provides general information about the CCAT software. It also tells you how to access and use the CCAT Graphical User Interface (GUI). The organization of the CCAT User Guide is described in the table below. Chapter ----- Contents ----- Chapter 1 Describes the automated CCAT process Chapter 2 Describes how to use the CCAT GUI for Compaq Tru64 UNIX Chapter 3 Describes how to use the CCAT GUI for OpenVMS/Alpha Chapter 4 Describes how to use the CCAT GUI for Windows NT (Intel) Chapter 5 Describes how to use the CCAT GUI for Windows NT (Alpha) Intended Audience The Compaq Crash Analysis Tool User Guide is intended for use by system administrators and Compaq Customer Services engineers who use the CCAT software on all supported operating systems, including Compaq Tru64 UNIX, OpenVMS/Alpha, and Microsoft Windows NT. Documentation Conventions The following conventions are used in this manual: User Entries Information that should be entered exactly as it appears in the document is shown in bold. System Output Responses from the system are shown in a monospaced font Further Information CCAT is a member of the Web-Based Enterprise Service (WEBES) suite of products. For more information on the other WEBES applications, visit the support web site at the following URL: http://www.support.compaq.com/svctools  ========================================================================= 1 ***Running CCAT Automatically*** This manual tells you how to use Compaq Crash Analysis Tool (CCAT) to process crash files manually. However, CCAT is used most efficiently as an automatic process requiring no input from the user. This chapter describes the automatic operation of CCAT. Topics discussed in this chapter include: - The Automated CCAT Process - Configuring CCAT To Run Automatically 1.1 The Automated CCAT Process ***Note:*** CCAT is only supported on the following operating systems and versions: Tru64 UNIX V4.0 and higher Open VMS/Alpha V7.1 and higher Windows NT V4.0 and up For older versions of these operating systems and Open VMS/VAX, you must use the Crash Analysis Data Collector (CADC) for operating system diagnostics. For more information about installing and using CADC, see the CADC user documentation for your operating system(s). The automated CCAT process begins when a system crashes and consists of the following steps: 1.When the system reboots, a system utility or other software collects data about the cause of the crash and creates a crash file. On Tru64 UNIX systems, the crashdc utility creates the crash file. On OpenVMS/Alpha systems, the Clue utility creates the crash file. On Windows NT systems, you must install the Windows NT version of CADC in order for the crash file to be created. 2.CCAT automatically starts when a system reboots from a crash, and detects that there is a crash file to process. CCAT analyzes the crash file against the local CCAT knowledge base and produces a results file which contains the crash parameters, and may include the possible cause and solution for the system crash. 3.CCAT sends an e-mail message to the system administrator or other specified local addressee containing information about the crash. ***Note:*** In order for CCAT to perform the following functions automatically, DSNlink must be installed and running on the system. 4.CCAT opens a service request containing the crash parameters and the crash data analysis file at the Customer Support Center (CSC) using DSNlink. (If DSNlink is not available, the customer can provide the crash data analysis file to the CSC via email or storage medium (e.g., diskette or tape). 5.The crash is analyzed again when the message containing the crash parameters and the results file arrives at the CSC, in case the CCAT server at the local CSC may have updated rule sets that can provide additional insight into the cause of the crash and problem resolution. 6.The results of the analysis performed at the customer site and at the CSC are entered into the Call Handling System. 7.The CSC monitors open calls in the Call Handling System, and notifies the customer of the final analysis results via email or by means of a call from a crash analysis specialist. 1.2 Configuring CCAT To Run Automatically If you want CCAT to process a footprint automatically and send the footprint and the results to the CSC, you must do the following: - Make sure your system is equipped to generate a footprint when it reboots from a crash. In order for CCAT to determine the cause of a system crash and log a call to the CSC for further analysis, your system must be able to collect information about what was happening at the time of the crash into a crash file, or footprint. This data collection may be done by a utility included with your operating system, or by software you install for that purpose. All OpenVMS/Alpha and Tru64 UNIX operating systems supported by CCAT include system utilities which collect the crash data into a footprint. The Windows NT and Windows 2000 operating systems do not include a utility for collecting crash files. On Windows NT and 2000 systems, you must install the Crash Analysis Data Collector (CADC) software in order for the footprint to be created. For more information about CADC for Windows NT/2000, see the CADC for Windows NT/2000 user documentation. - Make sure your system is equipped to e-mail the footprint, the analysis results, or both to specified e-mail addresses. - Make sure DESTA Director starts and is running before CCAT starts. The WEBES installation modifies your startup procedure so that when your system reboots after a crash, the DESTA Director starts before CCAT. In the unlikely event that the DESTA Director fails to start, CCAT will not start and a communication error message appears. For more information, see the chapter in this manual that pertains to your operating system. - Make CCAT a part of the startup procedure. The WEBES installation modifies your startup procedure so that when your system reboots after a crash, CCAT starts after the DESTA Director. - Make sure DSNlink is installed and running before CCAT starts. For more information, refer to the DSNlink user documentation.  ========================================================================= 2 ***Using the CCAT GUI For Compaq Tru64 UNIX*** This chapter tells you how to use the Compaq Crash Analysis Tool (CCAT) Graphical User Interface (GUI) for Compaq Tru64 UNIX. Topics discussed in this chapter include - CCAT GUI Overview - Starting the GUI - Performing a Manual Crash Analysis - Viewing Saved Results Files - Exiting From the CCAT GUI 2.1 CCAT GUI Overview The CCAT GUI is an interactive tool you can use to analyze crash files manually. It is important to keep in mind that the CCAT GUI is used only for onsite manual tasks. It does not log calls or send crash parameters or results files to the CSC, nor does it send email notification to anyone. The CCAT GUI allows you to perform the following tasks: - Input operating system crash data parameters for a manual CCAT analysis. - Produce and save results files. - View the saved results files. 2.2 Starting the GUI To start the CCAT GUI, enter the following command: /usr/sbin/ccat gui The DESTA Director must be running before you start the CCAT GUI. Ordinarily, the WEBES Common Components installation configures your startup procedure so that the DESTA Director starts every time your system reboots. If the DESTA Director fails to start at system startup, when you try to start the CCAT GUI the following error message appears: If you see this error message, execute the following command: /usr/sbin/desta start You can use the following command to confirm that the DESTA Director started. ps -ef | grep desta_exec If the DESTA Director is running, the system will display multiple instances of the desta_exec process. When CCAT starts as it should, the Compaq Crash Analysis Tool (CCAT) window appears, as shown in Figure 2-1. Figure 2-1 Compaq Crash Analysis Tool Window (Tru64 UNIX) Note the horizontal scroll bar at the bottom of the upper right-hand frame of the CCAT window. You can resize the CCAT window to best suit your needs and the size of your monitor. Use the scroll bar to view information in the crash data parameter fields that falls outside the frame area. 2.3 Performing a Manual Crash Analysis To analyze a crash manually, you must enter the parameters from the crash data file into the fields in the CCAT window. 2.3.1 Tru64 UNIX Crash Data Parameters The Tru64 UNIX crash data parameters and what they mean are listed in Table 2-1. Table 2-1 Tru64 UNIX Crash Data Parameters Parameter ----- Explanation ----- OS Version The version number of the failed operating system Architecture The hardware architecture (e.g., alpha) Panic String A brief description of why the system crashed Stack Trace A list of the functions the system was executing when it crashed, with the ending line of code for each Crash Time The time of the system crash Up Time How long the system that crashed had been running since the last reboot Host Name The node on which the crash occurred Firmware Revision The machine hardware type of the failed CPU System String The System Information String, e.g., AlphaServer 4100 5/400 4MB Number of CPUs The number of CPUs available to the system Physical Memory The memory in megabytes Panic CPU The CPU that caused the system to crash Available CPUs The CPUs that are currently being used Virtual Address The virtual address that caused a kernel memory fault, and subsequent system crash (valid for kernel memory fault panics only) Faulting PC The PC on which the fault occurred Exception Frame Pointer A pointer to the exception frame that contains register information about the state of the failed CPU (valid prior to V4.0 only) PC/I Module The Program Counter/Instruction at the time of the trap or exception that led to the system crash (valid prior to V4.0 only) Return Address The address of the instruction immediately prior to the trap or exception that led to the system crash (valid prior to V4.0 only) 2.3.2 Entering Parameters You can enter crash data parameters in any of the following ways: - Select and open a crash file. - Click on an icon on the left side of the CCAT window. - Type the parameter in the field on the right side of the CCAT window. ***Note:*** To edit the contents of a parameter field, click on the field and use the arrow and Backspace keys to remove unwanted characters. Do not click on the Clear button. The Clear button clears all of the parameter fields. 2.3.2.1 Selecting And Opening a Crash File To populate the crash data parameter fields by selecting and opening a crash file, follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 2-2. Figure 2-2 File Pull-Down Menu - Select Crash File (Tru64 UNIX) 2.Click on Select Crash File.... The Open window appears. By default, crash files are written to the /usr/opt/compaq/svctools/ccat/data directory. The Open window displays a list of the files in this directory. If you store crash files in another directory, use the pull-down menu in the Look in: field to navigate to the directory where the crash files are stored. 3.Click on the crash file you want to analyze, as shown in Figure 2-3. The name of the file you select appears in the File name: field. Figure 2-3 CCAT Open Window (Tru64 UNIX) 4.Click on Open. The CCAT Message Processing window appears, telling you that the crash file is being analyzed, as shown in Figure 2-4. Figure 2-4 CCAT Message Processing Window (Tru64 UNIX) During analysis, CCAT populates the parameter fields. When analysis is complete, the results appear in the CCAT Results frame at the bottom of the CCAT window, as shown in Figure 2-5. (Note that the CCAT Results frame has been vertically resized for purposes of the illustration.) Figure 2-5 Tru64 UNIX CCAT Analysis Results ***Note:*** When the results file is displayed in the CCAT Results frame, the two frames at the top of the CCAT window may be grayed out. To display the contents of these frames, click on the operating system tab. 2.3.2.2 Inserting Crash Data Parameters Using Icons If you do not have access to the crash data file, you may have to enter the parameters manually from another source, for example, a hard copy of a portion of the crash file or a mail message containing the parameters. In this case, you may be able to populate the parameter fields by clicking on the icons in the upper left-hand frame of the CCAT window. Each icon in the list of parameters on the left side of the CCAT window indicates that possible values may exist that you can click on to populate a parameter field. These values are read from a file each time you open CCAT. The two kinds of icons displayed are document icons and folder icons. The document icon is shown next to the Crash Time parameter in Figure 2-6. The folder icon always has a button next to it. The folder icon is shown next to the Panic String parameter in Figure 2-6. Figure 2-6 Crash Parameter Icons (Tru64 UNIX) In most cases, when you click on a document icon, the contents of the document are inserted into the corresponding parameter field, as shown in Figure 2-7. Figure 2-7 Document Contents In a Parameter Field (Tru64 UNIX) The exception to clicking on a document icon and having the contents inserted into the parameter field is the case of the Crash Time. When you click on the Crash Time document icon, the Compaq Tru64 UNIX CCAT DateTime window appears, as shown in Figure 2-8. Figure 2-8 Tru64 UNIX CCAT Date Time Window Each field in the Compaq Tru64 UNIX CCAT DateTime window has a pull-down menu you can use to enter information about the date and time of the crash. For example, the pull-down menu for the Month field is shown in Figure 2-9. Figure 2-9 Date Time Pull-Down Menu (Tru64 UNIX) Find the date and time of the crash in the crash data file, and click on the appropriate option on each of the pull-down menus to enter the day, month, year, hour, minute, second, and millisecond of the crash. When all fields are populated, click on Apply to populate the parameter field on the right side of the CCAT window. When you click on the button next to a folder icon, the contents of the folder are displayed, as shown in Figure 2-10. Figure 2-10 Contents Of A Folder (Tru64 UNIX) A folder may contain subfolders or documents. Click on the button next to the folder icon which contains the information you want until the document containing that information is displayed. Then click on the document icon to populate the corresponding parameter field on the right side of the CCAT window. The crash data file may not contain all of the parameters listed in the CCAT window. When the crash data file does not contain a parameter, leave the tilde (~) in the field to indicate that the parameter is not available. Once you have entered all the crash data parameters available to you, click on the Apply button on the right side of the CCAT window to start the crash analysis. When CCAT has completed the crash analysis, the results are displayed in the frame at the bottom of the CCAT window. You can resize the window and use the scroll bar to view the results. 2.3.2.3 Typing In Crash Parameters The information you access by clicking on the icons on the left side of the CCAT window may not include one or more of the crash parameters in the crash data file. In this case, you must manually enter the crash parameters. To enter a crash parameter manually, click on the appropriate field and type the parameter exactly as it appears in the crash data file. ***Note:*** When you are entering crash parameters manually, it is important to remember the following: Crash data information is case sensitive. CCAT does not automatically zero-fill. For example, if you are entering the crash parameter "00000005" you must type in the seven zeroes. CCAT does not interpret "5" as "00000005." You can also use the Cut and Paste functions to copy information from an electronic file, for example, an email message, to the parameter fields. If you make a mistake or need to edit the contents of a parameter field, click on the field and use the arrow and Backspace keys to remove unwanted characters. Do not click on the Clear button. The Clear button clears all of the parameter fields. The crash data file may not contain all of the parameters listed in the CCAT window. When the crash data file does not contain a parameter, leave the tilde (~) in the field to indicate that the parameter is not available. Once you have entered all the crash data parameters available to you, click on the Apply button on the right side of the CCAT window to start the crash analysis. When CCAT has completed the crash analysis, the results file is displayed in the frame at the bottom of the CCAT window. You can resize the window and use the scroll bar to view the file. 2.3.3 Saving the Results File You may want to save the results file to view again later. To save the results file, make sure the file is still displayed in the frame at the bottom of the CCAT window. Then follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 2-11. Figure 2-11 CCAT File Pull-Down Menu - Save Results File As... (Tru64 UNIX) 2.Click on Save Results File As.... The Save window appears, as shown in Figure 2-12. Figure 2-12 CCAT Save Window (Tru64 UNIX) 3.Enter the name you want to assign to the saved results file in the File name: field and click on Save. ***Note:*** When you open the Save window, the Look In: field shows the default directory in which the results file will be saved. This default directory is usually /usr/opt/compaq/svctools/ccat/data. To save the file to another directory, click on the Look In: field and use the pull-down menu that appears to navigate to another directory. 2.4 Viewing Saved Results Files You can use the CCAT GUI to view results files you have saved. To view a results file, follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 2-13. Figure 2-13 File Pull-Down Menu - View Saved Results File... (Tru64 UNIX) 2.Click on View Saved Results File.... The Open window appears. ***Note:*** The Open window displays the files in the default directory in which results files are normally saved, usually /usr/opt/compaq/svctools/ccat/data. If the results files are saved in another directory, click on the Look In: field and use the pull-down menu that appears to navigate to the other directory. 3.Click on the results file you want to display. The name of the file you selected appears in the File name: field, as shown in Figure 2-14. Figure 2-14 CCAT View Results File Open Window (Tru64 UNIX) 4.Click on Open. CCAT displays the results file in the CCAT Results frame at the bottom of the CCAT window, as shown in Figure 2-15. (Note that the CCAT Results frame has been vertically resized for purposes of the illustration.) Figure 2-15 Typical CCAT Tru64 UNIX Analysis Results 2.5 Exiting From the CCAT GUI To exit from the CCAT GUI, click on File in the upper left-hand corner of the CCAT window to display the pull-down menu, and then click on Exit. A CCAT Warning message window appears, telling you that the communication interface has been shut down, as shown in Figure 2-16. This warning message window is normal and does not indicate a problem. Figure 2-16 Exit CCAT Warning Window (Tru64 UNIX) Click on OK to exit from CCAT.  ========================================================================= 3 ***Using the CCAT GUI For OpenVMS/Alpha*** This chapter tells you how to use the Compaq Crash Analysis Tool (CCAT) Graphical User Interface (GUI) for OpenVMS/Alpha. Topics discussed in this chapter include - CCAT GUI Overview - Starting the GUI - Performing a Manual Crash Analysis - Viewing Saved Results Files - Typical CCAT OpenVMS/Apha Analysis Results 3.1 CCAT GUI Overview The CCAT GUI is an interactive tool you can use to analyze crash files manually. It is important to keep in mind that the CCAT GUI is used only for onsite manual tasks. It does not log calls or send crash parameters or results files to the CSC, nor does it send email notification to anyone. The CCAT GUI allows you to perform the following tasks: - Input operating system crash data parameters for a manual CCAT analysis. - Produce and save results files. - View the saved results files. 3.2 Starting the GUI ***Note:*** Before you start the CCAT GUI, make sure your user account page file quota is set to at least 300,000 blocks. To start the CCAT GUI, enter the following command: $@SVCTOOLS_HOME:[BIN]CCAT GUI The DESTA Director must be running before you start the CCAT GUI. Ordinarily, the WEBES Common Components installation configures your startup procedure so that the DESTA Director starts every time your system reboots. If the DESTA Director fails to start at system startup, when you try to start the CCAT GUI the following error message appears: If you see this error message, execute the following command: $DESTA START You can use the SHOW PROCESS command to confirm that the DESTA Director started. If the DESTA Director is running, the results of the SHOW PROCESS command will display a DESTA Director process. When CCAT starts as it should, the Compaq Crash Analysis Tool (CCAT) window appears, as shown in Figure 3-1. Figure 3-1 Compaq Crash Analysis Tool Window (OpenVMS/Alpha) Note the horizontal scroll bar at the bottom of the upper right-hand frame of the CCAT window. You can resize the window to best suit your needs and the size of your monitor. Use the scroll bar to view information that falls outside the window area. 3.3 Performing a Manual Crash Analysis To analyze a crash manually, you must enter the parameters from the crash data file into the fields in the CCAT window. 3.3.1 OpenVMS/Alpha Crash Data Parameters The OpenVMS/Alpha crash data parameters and what they mean are listed in Table 3-1. Table 3-1 Open VMS Alpha Crash Data Parameters Parameter ----- Explanation ----- OS Version The version number of the failed operating system Crash Time The date and time the system crash occurred Bugcheck The type of diagnostic check logged by the operating system Host Name The node on which the crash occurred CPU Type The model number of the failed CPU Process Name The name of the process active at the time of the crash Image Name The name of the image being executed at the time of the crash Signal Array The Signal Array count. The Signal Array contains the exception code, zero or more exception parameters, the PC, and the PSL. Condition Code The symbolic value assigned to the specific condition Reason Mask The longword mask Virtual Address The virtual address the failing instruction tried to reference Exception PC The instruction whose attempted execution resulted in the unexpected executive or kernel mode exception Exception PSL Processor Status Longword (PSL) at the time of the exception Module Name The name of the failed module Module Offset The offset of the failed module Instruction The failing instruction corresponding to the exception PC Map Module The name of the map module in use when the crash occurred Map Offset The beginning memory location where the map module driver resides 3.3.2 Entering Parameters You can enter a crash data parameter in any of the following ways: - Select and open a crash file. - Click on an icon on the left side of the CCAT window. - Type the parameter in the field on the right side of the CCAT window. ***Note:*** To edit the contents of a parameter field, click on the field and use the arrow and Backspace keys to remove unwanted characters. Do not click on the Clear button. The Clear button clears all of the parameter fields. 3.3.2.1 Selecting and Opening a Crash File To populate the crash data parameter fields by selecting and opening a crash file, follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 3-2. Figure 3-2 File Pull-Down Menu - Select Crash File... (OpenVMS/Alpha) 2.Click on Select Crash File.... The Open window appears. By default, crash files are written to the SVCTOOLS_HOME:[CCAT.DATA] directory. The Open window displays a list of the files in this directory. If you store crash files in another directory, use the pull-down menu in the Look in: field to navigate to the directory where the crash files are stored. 3.Click on the crash file you want to analyze, as shown in Figure 3-3. The name of the file you select appears in the File name: field. Figure 3-3 CCAT Open Window (OpenVMS/Alpha) 4.Click on Open. The CCAT Message Processing window appears, telling you that the crash file is being analyzed, as shown in Figure 3-4. Figure 3-4 CCAT Message Processing Window (OpenVMS/Alpha) During analysis, CCAT populates the parameter fields. When analysis is complete, the results appear in the CCAT Results frame at the bottom of the CCAT window, as shown in Figure 3-5. (Note that the CCAT Results frame has been vertically resized for purposes of the illustration.) Figure 3-5 OpenVMS/Alpha CCAT Analysis Results ***Note:*** When the analysis results are displayed in the CCAT Results frame, the two frames at the top of the CCAT window may be grayed out. To display the contents of these frames, click on the operating system tab. 3.3.2.2 Inserting Crash Parameters Using Icons If you do not have access to the crash data file, you may have to enter the parameters manually from another source, for example, a hard copy of a portion of the crash file or a mail message containing the parameters. In this case, you may be able to populate the parameter fields by clicking on the icons in the upper left-hand frame of the CCAT window. Each icon in the list of parameters on the left side of the CCAT window indicates that possible values may exist that you can click on to populate a parameter field. These values are read from a file each time you open CCAT. The two kinds of icons displayed are document icons and folder icons. The document icon is shown next to the Crash Time parameter in Figure 3-6. The folder icon always has a button next to it. The folder icon is shown next to the OS Version parameter in Figure 3-6. Figure 3-6 Crash Parameter Icons (OpenVMS/Alpha) In most cases, when you click on a document icon the contents of the document are inserted into the corresponding parameter field, as shown in Figure 3-7. Figure 3-7 Document Contents In a Parameter Field (OpenVMS/Alpha) The exception to clicking on a document icon and having the contents inserted into the parameter field is the case of the Crash Time. When you click on the Crash Time icon, the openvms/alpha CCAT Date Time window appears, as shown in Figure 3-8. Figure 3-8 OpenVMS/Alpha CCAT Date Time Window Each field in the openvms/alpha CCAT Date Time window has a pull-down menu you can use to enter information about the date and time of the crash. For example, the pull-down menu for the Month field is shown in Figure 3-9. Figure 3-9 Date Time Pull-Down Menu (OpenVMS/Alpha) Find the date and time of the crash in the crash data file, and click on the appropriate option on each of the pull-down menus to enter the day, month, year, hour, minute, second, and millisecond of the crash. When all fields are populated, click on Apply to populate the parameter field on the right side of the CCAT window. When you click on the button next to a folder icon, the contents of the folder are displayed, as shown in Figure 3-10. Figure 3-10 Contents Of a Folder (OpenVMS/Alpha) A folder may contain subfolders or documents. Click on the button next to the folder icon which contains the information you want until the document containing that information is displayed. Then click on the document icon to populate the corresponding parameter field on the right side of the CCAT window. The crash data file may not contain all of the parameters listed in the CCAT window. When the crash data file does not contain a parameter, leave the tilde (~) in the field to indicate that the parameter is not available. Once you have entered all the crash data parameters available to you, click on the Apply button on the right side of the CCAT window to start the crash analysis. When CCAT has completed the crash analysis, the results are displayed in the frame at the bottom of the CCAT window. You can resize the window and use the scroll bar to view the results. 3.3.2.3 Typing In Crash Parameters The information you access by clicking on the icons on the left side of the CCAT window may not include one or more of the crash parameters in the crash data file. In this case, you must manually enter the crash parameters. To enter a crash parameter manually, click on the appropriate field and type the parameter exactly as it appears in the crash data file. ***Note:*** When you are entering crash parameters manually, it is important to remember the following: Crash data information is case sensitive. CCAT does not automatically zero-fill. For example, if you are entering the crash parameter "00000005" you must type in the seven zeroes. CCAT does not interpret "5" as "00000005." You can also use the Cut and Paste functions to copy information from an electronic file, for example, an email message, to the parameter fields. If you make a mistake or need to edit the contents of a parameter field, click on the field and use the arrow and Backspace keys to remove unwanted characters. (Be aware that, due to Java issues on the OpenVMS platform, the Backspace key deletes the character to the right of the cursor.) Do not click on the Clear button. The Clear button clears all of the parameter fields. The crash data file may not contain all of the parameters listed in the CCAT window. When the crash data file does not contain a parameter, leave the tilde (~) in the field to indicate that the parameter is not available. Once you have entered all the crash data parameters available to you, click on the Apply button on the right side of the CCAT window to start the crash analysis. When CCAT has completed the crash analysis, the results file is displayed in the frame at the bottom of the CCAT window. You can resize the window and use the scroll bar to view the file. 3.3.3 Saving the Results File You may want to save the results file to view again later. To save the results file, make sure the file is still displayed in the frame at the bottom of the CCAT window. Then follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 3-11. Figure 3-11 CCAT File Pull-Down Menu - Save Results File As... (OpenVMS/Alpha) 2.Click on Save Results File As.... The Save window appears, as shown in Figure 3-12. Figure 3-12 CCAT Save Window (OpenVMS/Alpha) 3.Enter the name you want to assign to the saved results file in the File name: field and click on Save. ***Note:*** When you open the Save window, the Look In: field shows the default directory where the file will be saved. This default directory is usually SVCTOOLS_HOME:[CCAT.DATA]. To save the file to another directory, click on the Look In: field and use the pull-down menu that appears to navigate to another directory. 3.4 Viewing Saved Results Files You can use the CCAT GUI to view results files you have saved. To view a results file, follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 3-13. Figure 3-13 File Pull-Down Menu - View Saved Results File... (OpenVMS/Alpha) 2.Click on View Saved Results File... The Open window appears. ***Note:*** The Open window displays the files in the default directory in which results files are normally saved, usually SVCTOOLS_HOME:[CCAT.DATA]. If the results files are saved in another directory, click on the Look In: field and use the pull-down menu that appears to navigate to the other directory. 3.Click on the results file you want to display. The name of the file you selected appears in the File name: field, as shown in Figure 3-14. Figure 3-14 CCAT View Results File Open Window (OpenVMS/Alpha) 4.Click on Open. CCAT displays the file in the CCAT Results frame at the bottom of the CCAT window as shown in Figure 3-15. (Note that the frame has been vertically resized for purposes of the illustration.) Figure 3-15 Typical CCAT OpenVMS/Apha Analysis Results 3.5 Exiting From the CCAT GUI To exit from the CCAT GUI, click on File in the upper left-hand corner of the CCAT window to display the pull-down menu, and then click on Exit. A CCAT Warning message window appears, telling you that the communication interface has been shut down, as shown in Figure 3-16. This warning message window is normal and does not indicate a problem. Figure 3-16 Exit CCAT Warning Window (OpenVMS/Alpha) Click on OK to exit from CCAT.  ========================================================================= 4 ***Using the CCAT GUI For Windows NT (Intel)*** This chapter tells you how to use the Compaq Crash Analysis Tool (CCAT) Graphical User Interface (GUI) for Windows NT (Intel). Topics discussed in this chapter include - CCAT GUI Overview - Starting the GUI - Performing a Manual Crash Analysis - Viewing Saved Results Files - Exiting From the CCAT GUI 4.1 CCAT GUI Overview The CCAT Graphical User Interface (GUI) is an interactive tool you can use to analyze crash files manually. It is important to keep in mind that the CCAT GUI is used only for onsite manual tasks. It does not log calls or send crash parameters or results files to the CSC, nor does it send email notification to anyone. The CCAT GUI allows you to perform the following tasks: - Input operating system crash data parameters for a manual CCAT analysis. - Produce and save results files. - View the saved results files. 4.2 Starting the GUI To start the CCAT GUI, execute the following command: Start\Programs\Compaq Service Tools\Compaq Crash Analysis Tool\Compaq Crash Analysis Tool The DESTA Director must be running before you start the CCAT GUI. Ordinarily, the WEBES Common Components installation configures your startup procedure so that the DESTA Director starts every time your system reboots. If the DESTA Director fails to start at system startup, when you try to start the CCAT GUI the following error message appears: If you see this error message, execute the following command: Start\Programs\Compaq Service Tools\Web Based Enterprise Service\Start Director You can use the Windows Task Manager to confirm that the DESTA Director started. If the DESTA Director is running, Task Manager will display two instances of the DESTA_exec.exe image. When CCAT starts as it should, the Compaq Crash Analysis Tool (CCAT) window appears, as shown in Figure 4-1. Figure 4-1 Compaq Crash Analysis Tool Window (Windows NT (Intel)) Note the horizontal scroll bar at the bottom of the upper right-hand portion of the CCAT window. You can resize the window to best suit your needs and the size of your monitor. Use the scroll bar to view information in the crash data parameter fields which falls outside the window area. 4.3 Performing a Manual Crash Analysis To analyze a crash manually, you must enter the parameters from the crash data file into the fields in the CCAT window. 4.3.1 Windows NT (Intel) Crash Data Parameters The Windows NT (Intel) crash data parameters and what they mean are listed in Table 4-1. Table 4-1 Windows NT (Intel) Crash Data Parameters Parameter ----- Explanation ----- OS Version The version number of the failed Windows NT (Intel) operating system Minor Version The NT build number (for NT 4.0, 1381) Service Pack The number of the Service Pack installed on the failed machine Machine Image Type "intel" BugCheckCode The number of the stop that occurred, which can be used to determine what trap occurred BugCheckParam #1 The four parameters normally included with the BugCheckCode that give clues to the nature of the BugCheckCode BugCheckParam #2 BugCheckParam #3 BugCheckParam #4 Failing Module The name of the driver that failed Failing Module Offset The offset of the failed driver Failing Module Timestamp The date and time the failed driver was built Crash Process Name The name of the process that was running when the system crashed Failing Routine The name of the failing routine Failing Routine Offset The failing address location within the failing routine, offset from the start of the routine Pool Information The address within a Page or NonPage pool, depending on the stopcode Canonical Stopcode Parameter 1 Address or status register variables (see the Kanalyze documentation for more information) Canonical Stopcode Parameter 2 Canonical Stopcode Parameter 3 Canonical Stopcode Parameter 4 Keyword 1 Items on the stack that point to the cause of the failure (see the Kanalyze documentation for more information) Keyword 2 Keyword 3 Keyword 4 Driver List The Driver Name, Driver Load Address, Driver Size and Driver Date. These values are derived from the failing address information contained in the Bugcheck Parameter fields. Which Bugcheck Parameter field you use depends on the Bugcheck Code. The Driver List corresponds to the driver base address when compared to the address of the Stopcode. Stack Trace A list of the functions the system was executing when it crashed, with the ending line of code for each Call Site List Addresses taken from the Stack Trace used to identify failing areas 4.3.2 Entering Parameters You can enter a crash data parameter in any one of the following ways: - Select and open a crash file. - Click on an icon on the left side of the CCAT window. - Type the parameter in the field on the right side of the CCAT window. ***Note:*** To edit the contents of a parameter field, click on the field and use the arrow and Backspace keys to remove unwanted characters. Do not click on the Clear button. The Clear button clears all of the parameter fields. 4.3.2.1 Selecting And Opening a Crash File To populate the crash data parameter fields by selecting and opening a crash file, follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 4-2. Figure 4-2 File Pull-Down Menu - Select Crash File... (Windows NT (Intel)) 2.Click on Select Crash File.... The Open window appears. By default, crash files are written to the C:\Program Files\Compaq\svctools\ccat\data directory. The Open window displays a list of the files in this directory. If you store crash files in another directory, use the pull-down menu in the Look in: field to navigate to the directory where the crash files are stored. 3.Click on the crash file you want to analyze, as shown in Figure 4-3. The name of the file you select appears in the File name: field. Figure 4-3 CCAT Open Window (Windows NT (Intel)) 4.Click on Open. The CCAT Message Processing window appears, telling you that the crash file is being analyzed, as shown in Figure 4-4. Figure 4-4 CCAT Message Processing Window (Windows NT (Intel)) During analysis, CCAT populates the parameter fields. When analysis is complete, the results file appears in the CCAT Results frame at the bottom of the CCAT window, as shown in Figure 4-5. (Note that the illustration shows the entire screen. Depending on the size of your monitor, you may have to use the scroll bars in each frame to view all of the information on the screen.) Figure 4-5 Windows NT (Intel) CCAT Analysis Results ***Note:*** When the results file is displayed in the CCAT Results frame, the two frames at the top of the CCAT window may be grayed out. To display the contents of these frames, click on the operating system tab. 4.3.2.2 Inserting Crash Data Parameters Using Icons If you do not have access to the crash data file, you may have to enter the parameters manually from another source, for example, a hard copy of a portion of the crash file or a mail message containing the parameters. In this case, you may be able to populate the parameter fields by clicking on the icons in the upper left-hand frame of the CCAT window. Each icon in the list of parameters on the left side of the CCAT window indicates that possible values may exist that you can click on to populate a parameter field. These values are read from a file each time you open CCAT. The two kinds of icons displayed are document icons and folder icons. The document icon is shown next to the i386 parameter in Figure 4-6. The folder icon always has a button next to it. The folder icon is shown next to the i386<->i386 parameter in Figure 4-6. Figure 4-6 Crash Parameter Icons (Windows NT (Intel)) When you click on a document icon, the contents of the document are inserted into the corresponding parameter field, as shown in Figure 4-7. Figure 4-7 Document Contents In a Parameter Field (Windows NT (Intel)) When you click on the button next to a folder icon, the contents of the folder are displayed, as shown in Figure 4-8. Figure 4-8 Contents Of a Folder (Windows NT (Intel)) A folder may contain subfolders or documents. Click on the button next to the folder icon which contains the information you want until the document containing that information is displayed. Then click on the document icon to populate the corresponding parameter field on the right side of the CCAT window. The crash data file may not contain all of the parameters listed in the CCAT window. When the crash data file does not contain a parameter, leave the tilde (~) in the field to indicate that the parameter is not available. Once you have entered all the crash data parameters available to you, click on the Apply button on the right side of the CCAT window to start the crash analysis. When CCAT has completed the crash analysis, the results are displayed in the frame at the bottom of the CCAT window. You can resize the window and use the scroll bar to view the results. 4.3.2.3 Typing In Crash Parameters The information you access by clicking on the icons on the left side of the CCAT window may not include one or more of the crash parameters in the crash data file. In this case, you must manually enter the crash parameters. To enter a crash parameter manually, click on the appropriate field and type the parameter exactly as it appears in the crash data file. ***Note:*** When you are entering crash parameters manually, it is important to remember the following: Crash data information is case sensitive. CCAT does not automatically zero-fill. For example, if you are entering the crash parameter "00000005" you must type in the seven zeroes. CCAT does not interpret "5" as "00000005." You can also use the Cut and Paste functions to copy information from an electronic file, for example, an email message, to the parameter fields. If you make a mistake or need to edit the contents of a parameter field, click on the field and use the arrow and Backspace keys to remove unwanted characters. Do not click on the Clear button. The Clear button clears all of the parameter fields. The crash data file may not contain all of the parameters listed in the CCAT window. When the crash data file does not contain a parameter, leave the tilde (~) in the field to indicate that the parameter is not available. Once you have entered all the crash data parameters available to you, click on the Apply button on the right side of the CCAT window to start the crash analysis. When CCAT has completed the crash analysis, the results file is displayed in the frame at the bottom of the CCAT window. You can resize the window and use the scroll bar to view the file. 4.3.3 Saving the Results File You may want to save the results file to view again later. To save the results file, make sure the file is still displayed in the frame at the bottom of the CCAT window. Then follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 4-9. Figure 4-9 CCAT File Pull-Down Menu - Save Results File As... (Windows NT (Intel)) 2.Click on Save Results File As... The Save window appears, as shown in Figure 4-10. Figure 4-10 CCAT Save Window (Windows NT (Intel)) 3.Enter the name you want to assign to the saved results file in the File name: field and click on Save. ***Note:*** When you open the Save window, the Look In: field shows the default directory where the file will be saved. This default directory is usually C:\Program Files\Compaq\svctools\ccat\data. To save the file to another directory, click on the Look In: field and use the pulldown menu that appears to navigate to another directory. 4.4 Viewing Saved Results Files You can use the CCAT GUI to view results files you have saved. To view a saved results file, follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 4-11. Figure 4-11 File Pull-Down Menu - View Saved Results File... (Windows NT (Intel)) 2.Click on View Saved Results File.... The Open window appears. ***Note:*** The Open window displays the files in the default directory where results files are normally saved, C:\Program Files\Compaq\svctools\ccat\data. If the results files are saved in another directory, click on the Look In: field and use the pull-down menu that appears to navigate to the other directory. 3.Click on the results file you want to display. The name of the file you selected appears in the File name: field, as shown in Figure 4-12. Figure 4-12 CCAT View Results File Open Window (Windows NT (Intel)) 4.Click on Open. CCAT displays the results file in the CCAT Results frame at the bottom of the CCAT window, as shown in Figure 4-13. (Note that the CCAT Results frame has been vertically resized for purposes of the illustration.) Figure 4-13 Typical CCAT Windows NT (Intel) Analysis Results 4.5 Exiting From the CCAT GUI To exit from the CCAT GUI, click on File in the upper left-hand corner of the CCAT window to display the pull-down menu, and then click on Exit. A CCAT Warning message window appears, telling you that the communication interface has been shut down, as shown in Figure 4-14. This warning message window is normal and does not indicate a problem. Figure 4-14 Exit CCAT Warning Window (Windows NT (Intel)) Click on OK to exit from CCAT.  ========================================================================= 5 ***Using the CCAT GUI For Windows NT (Alpha)*** This chapter tells you how to use the Compaq Crash Analysis Tool (CCAT) Graphical User Interface (GUI) for Windows NT (Alpha). Topics discussed in this chapter include - CCAT GUI Overview - Starting the GUI - Performing a Manual Crash Analysis - Viewing Saved Results Files - Exiting From the CCAT GUI 5.1 CCAT GUI Overview The CCAT Graphical User Interface (GUI) is an interactive tool you can use to analyze crash files manually. It is important to keep in mind that the CCAT GUI is used only for onsite manual tasks. It does not log calls or send crash parameters or results files to the CSC, nor does it send email notification to anyone. The CCAT GUI allows you to perform the following tasks: - Input operating system crash data parameters for a manual CCAT analysis. - Produce and save results files. - View the saved results files. 5.2 Starting the GUI To start the CCAT GUI, execute the following command: Start\Programs\Compaq Service Tools\Compaq Crash Analysis Tool\Compaq Crash Analysis Tool The DESTA Director must be running before you start the CCAT GUI. Ordinarily, the WEBES Common Components installation configures your startup procedure so that the DESTA Director starts every time your system reboots. If the DESTA Director fails to start at system startup, when you try to start the CCAT GUI the following error message appears: If you see this error message, execute the following command: Start\Programs\Compaq Service Tools\Web Based Enterprise Service\Start Director You can use the Windows Task Manager to confirm that the DESTA Director started. If the DESTA Director is running, Task Manager will display two instances of the DESTA_exec.exe image. When CCAT starts as it should, the Compaq Crash Analysis Tool (CCAT) window appears, as shown in Figure 5-1. Figure 5-1 Compaq Crash Analysis Tool Window (Windows NT (Alpha)) Note the horizontal scroll bar at the bottom of the upper right-hand portion of the CCAT window. You can resize the window to best suit your needs and the size of your monitor. Use the scroll bar to view information in the crash data parameter fields which falls outside the window area. 5.3 Performing a Manual Crash Analysis To analyze a crash manually, you must enter the parameters from the crash data file into the fields in the CCAT window. 5.3.1 Windows NT (Alpha) Crash Data Parameters The crash data parameters and what they mean are listed in Table 5-1. Table 5-1 Windows NT (Alpha) Crash Data Parameters Parameter ----- Explanation ----- OS Version The version number of the failed Windows NT operating system Minor Version The NT build number (for NT 4.0, 1381) Service Pack The number of the service pack installed on the failed Windows NT operating system Machine Image Type "alpha" or "intel" BugCheckCode The number of the stop that occurred, which can be used to determine what trap occurred BugCheckParam #1 The four parameters normally included with the BugCheckCode that give clues to the nature of the BugCheckCode BugCheckParam #2 BugCheckParam #3 BugCheckParam #4 Return PC The address of the next instruction in the calling program to be executed after the current called procedure completes its task Failing Module The name of the driver that failed Failing Module Timestamp The date and time the failed driver was built Failing Module Offset The offset of the failed module Crash Process Name The name of the process that was running at the time of the crash 5.3.2 Entering Parameters You can enter a crash data parameter in any one of the following ways: - Select and open a crash file. - Click on an icon on the left side of the CCAT window. - Type the parameter in the field on the right side of the CCAT window. ***Note:*** To edit the contents of a parameter field, click on the field and use the arrow and Backspace keys to remove unwanted characters. Do not click on the Clear button. The Clear button clears all of the parameter fields. 5.3.2.1 Selecting And Opening a Crash File To populate the crash data parameter fields by selecting and opening a crash file, follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 5-2. Figure 5-2 File Pull-Down Menu - Select Crash File... (Windows NT (Alpha)) 2.Click on Select Crash File.... The Open window appears. By default, crash files are written to the C:\Program Files\Compaq\svctools\ccat\data directory. The Open window displays a list of the files in this directory. If you store crash files in another directory, use the pull-down menu in the Look in: field to navigate to the directory where the crash files are stored. 3.Click on the crash file you want to analyze, as shown in Figure 5-3. The name of the file you select appears in the File name: field. Figure 5-3 CCAT Open Window (Windows NT (Alpha)) 4.Click on Open. The CCAT Message Processing window appears, telling you that the crash file is being analyzed, as shown in Figure 5-4. Figure 5-4 CCAT Message Processing Window (Windows NT (Alpha)) During analysis, CCAT populates the parameter fields. When analysis is complete, the results appear in the CCAT Results frame at the bottom of the CCAT window, as shown in Figure 5-5. (Note that the CCAT Results frame has been vertically resized for purposes of the illustration.) Figure 5-5 Windows NT (Alpha) CCAT Analysis Results ***Note:*** When the results file is displayed in the CCAT Results frame, the two frames at the top of the CCAT window may be grayed out. To display the contents of these frames, click on the operating system tab. 5.3.2.2 Inserting Crash Data Parameters Using Icons If you do not have access to the crash data file, you may have to enter the parameters manually from another source, for example, a hard copy of a portion of the crash file or a mail message containing the parameters. In this case, you may be able to populate the parameter fields by clicking on the icons in the upper left-hand frame of the CCAT window. Each icon in the list of parameters on the left side of the CCAT window indicates that possible values may exist that you can click on to populate a parameter field. These values are read from a file each time you open CCAT. The two kinds of icons displayed are document icons and folder icons. The document icon is shown next to the alpha parameter in Figure 5-6. The folder icon always has a button next to it. The folder icon is shown next to the alpha<->alpha parameter in Figure 5-6. Figure 5-6 Parameter Icons (Windows NT (Alpha)) When you click on a document icon, the contents of the document are inserted into the corresponding parameter field, as shown in Figure 5-7. Figure 5-7 Document Contents In a Parameter Field (Windows NT (Alpha)) When you click on the button next to a folder icon, the contents of the folder are displayed, as shown in Figure 5-8. Figure 5-8 Contents Of a Folder (Windows NT (Alpha))r A folder may contain subfolders or documents. Click on the folder icon which contains the information you want until the document containing that information is displayed. Then click on the document icon to populate the corresponding parameter field on the right side of the CCAT window. The crash data file may not contain all of the parameters listed in the CCAT window. When the crash data file does not contain a parameter, leave the tilde (~) in the field to indicate that the parameter is not available. Once you have entered all the crash data parameters available to you, click on the Apply button on the right side of the CCAT window to start the crash analysis. When CCAT has completed the crash analysis, the results are displayed in the frame at the bottom of the CCAT window. You can resize the window and use the scroll bar to view the results. 5.3.2.3 Typing In Crash Parameters The information you access by clicking on the icons on the left side of the CCAT window may not include one or more of the crash parameters in the crash data file. In this case, you must manually enter the crash parameters. To enter a crash parameter manually, click on the appropriate field and type the parameter exactly as it appears in the crash data file. ***Note:*** When you are entering crash parameters manually, it is important to remember the following: Crash data information is case sensitive. CCAT does not automatically zero-fill. For example, if you are entering the crash parameter "00000005" you must type in the seven zeroes. CCAT does not interpret "5" as "00000005." You can also use the Cut and Paste functions to copy information from an electronic file, for example, an email message, to the parameter fields. If you make a mistake or need to edit the contents of a parameter field, click on the field and use the arrow and Backspace keys to remove unwanted characters. Do not click on the Clear button. The Clear button clears all of the parameter fields. The crash data file may not contain all of the parameters listed in the CCAT window. When the crash data file does not contain a parameter, leave the tilde (~) in the field to indicate that the parameter is not available. Once you have entered all the crash data parameters available to you, click on the Apply button on the right side of the CCAT window to start the crash analysis. When CCAT has completed the crash analysis, the results file is displayed in the frame at the bottom of the CCAT window. You can resize the window and use the scroll bar to view the file. 5.3.3 Saving the Results File You may want to save the results file to view again later. To save the results file, make sure the file is still displayed in the frame at the bottom of the CCAT window. Then follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 5-9. Figure 5-9 File Pull-Down Menu - Save Results File As... (Windows NT (Alpha)) 2.Click on Save Results File As... The Save window appears, as shown in Figure 5-10. Figure 5-10 CCAT Save Window (Windows NT (Alpha)) 3.Enter the name you want to assign to the saved results file in the File name: field and click on Save. ***Note:*** When you open the Save window, the Look In: field shows the default directory where the file will be saved. This default directory is usually C:\Program Files \Compaq\svctools\ccat\data. To save the file to another directory, click on the Look In: field and use the pulldown menu that appears to navigate to another directory. 5.4 Viewing Saved Results Files You can use the CCAT GUI to view results files you have saved. To view a saved results file, follow these steps: 1.Click on File in the upper left corner of the CCAT window. A pull-down menu appears, as shown in Figure 5-11. Figure 5-11 File Pull-Down Menu - View Saved Results File... (Windows NT (Alpha)) 2.Click on View Saved Results File.... The Open window appears. ***Note:*** The Open window displays the files in the default directory in which results files are normally saved, C:\Program Files\Compaq\svctools\ccat\data. If the results files are saved in another directory, click on the Look In: field and use the pull-down menu that appears to navigate to the other directory. 3.Click on the results file you want to display. The name of the file you selected appears in the File name: field, as shown in Figure 5-12. Figure 5-12 CCAT View Results File Open Window (Windows NT (Alpha)) 4.Click on Open. CCAT displays the results file in the CCAT Results frame at the bottom of the CCAT window, as shown in Figure 5-13. (Note that the CCAT Results frame has been vertically resized for purposes of the illustration.) Figure 5-13 Typical CCAT Windows NT (Alpha) Analysis Results 5.5 Exiting From the CCAT GUI To exit from the CCAT GUI, click on File in the upper left-hand corner of the CCAT window to display the pull-down menu, and then click on Exit. A CCAT Warning message window appears, telling you that the communication interface has been shut down, as shown in Figure 5-14. This warning message window is normal and does not indicate a problem. Figure 5-14 Exit CCAT Warning Window (Windows NT (Alpha)) Click on OK to exit from CCAT.  ========================================================================= ***Index*** ********************************************************************** ** ** ** A NOTE ABOUT THE INDEX: ** ** ** ** Because of different font spacing and layout, the page count and ** ** configuration of this text extract varies from the original ** ** print version of the document. This process also prevents the ** ** text extract from accurately mapping the page numbers shown in ** ** the original index to the desired page in the text extract. ** ** ** ** To find information in this text file, open the file in a text ** ** editor and use a search command to find the desired word. (In ** ** fact, this technique generally provides a more thorough series ** ** of hits than the author's original index.) ** ** ** **********************************************************************