.: FILE STATUS INFORMATION :. hard links: 1 uid: 500 gid: 500 size: 49152 block size: 4096 block count: 88 last access: Mon Aug 11 20:20:57 2003 last mod: Mon Aug 11 20:19:15 2003 last change: Mon Aug 11 20:19:15 2003 .: ELF HEADER INFORMATION :. capacity: 32 bit (ELFCLASS32) [1] data encoding type: 2's comp, little endian (ELFDATA2LSB) [1] file version: current (EV_CURRENT) [1] OS ABI: Unix System V ABI [0] ABI version: 0 padding bytes: 0 object file type: core file (ET_CORE) [4] architecture: Intel 80386 (EM_NONE) [3] object file version: current (EV_CURRENT) [1] entry point virtual address: 0 program header table file offset: 52 bytes section header table file offset: 0 bytes processor speciffic flags: 0 ELF header size: 52 bytes program header table entry size: 32 bytes program header table entry count: 10 section header table entry count: 0 bytes section header table entry count: 0 bytes section header string table index: 0 .: SEGMENT INFORMATION :. type offset vaddress paddress size(file) size(mem) RWX align ============================================================================ NOTE 0x174 0 0 2028 0 0 0 LOAD 0x1000 0x8048000 0 0 4096 0x5 0x1000 LOAD 0x1000 0x8049000 0 4096 4096 0x6 0x1000 LOAD 0x2000 0x40000000 0 0 86016 0x5 0x1000 LOAD 0x2000 0x40015000 0 4096 4096 0x6 0x1000 LOAD 0x3000 0x40016000 0 4096 4096 0x6 0x1000 LOAD 0x4000 0x42000000 0 0 1236992 0x5 0x1000 LOAD 0x4000 0x4212e000 0 12288 12288 0x6 0x1000 LOAD 0x7000 0x42131000 0 8192 8192 0x6 0x1000 LOAD 0x9000 0xbfffd000 0 12288 12288 0x7 0x1000 .: NOTES INFORMATION :. ### found note section at offset: 0x174 ### --- note 0 at offset 0x174 --- padding: 4 bytes note name size: 5 bytes note description size: 144 bytes note name: CORE note type: PRSTATUS [1] signal number: 8 extra code: 0 errno: 0 current signal: 8 set of pending signals: 0 set of held signals: 0 pid: 16129 ppid: 16129 pgrp: 16129 sid: 16086 user time: 0.0 sec system time: 0.0 sec cumulative user time: 0.0 sec cumulative system time: 0.0 sec bool pr_fpvalid: 0 general purpose registers: ebx: 0x42130a14 ecx: 0x42015554 edx: 0 esi: 0x40015360 edi: 0x8048358 ebp: 0xbfffe068 eax: 0x270f xds: 0x2b xes: 0x2b xfs: 0 xgs: 0x33 orig_eax: 0xffffffff eip: 0x8048318 xcs: 0x23 eflags: 0x10286 esp: 0xbfffe050 xss: 0x2b --- note 1 at offset 0x218 --- padding: 4 bytes note name size: 5 bytes note description size: 124 bytes note name: CORE note type: PRPSINFO [3] numeric process state: char for pr_state: R zombie: nice val: flag 1: 0 uid: 500 gid: 500 pid: 16129 ppid: 16086 pgrp: 16129 sid: 16086 filename or executable: a.out