Search AIX for core file, omitting /proc

Posted on 2009-04-02
Medium Priority
Last Modified: 2013-11-17
I have a daily script that does miscellaneous operator takes, one being located application core files with the following command:
# find / -type f -name core

It does find the files, however it frequently reports:
find: 0652-023 Cannot open file /proc/44502.
find: 0652-023 Cannot open file /proc/145546.
find: 0652-023 Cannot open file /proc/156628.
find: 0652-023 Cannot open file /proc/156998.

I have tried the following command with no success:
# find / -type f '/proc' -prune -o -name core
find: 0652-009 There is a missing conjunction

Any ideas ??
Question by:hdgh
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 68

Accepted Solution

woolmilkporc earned 375 total points
ID: 24052478

there are three possibilities:

1) use GNU grep, which is contained in the AIX toolbox:


(search for 'grep' in the alphabetic list)

and issue after installing it:

/opt/freeware/bin/find / -name core   -not \( -path /proc/* \)  


2) use this workaround

find $(df | grep -v Filesystem | awk '{print $9}' |grep -v "/proc") -xdev -type f -name core


3) simply redirect stderr to /dev/null to get rid of the messages:

find / -type f -name core 2>/dev/null

There is no way to exclude a directory with AIX find.



Expert Comment

ID: 24055589
Basically, the proc file system is not meant to be searched.
It is provided for compatibility to other UNIX (Linux) operating systems.
It does not actually exist on disk (except maybe some times in swap space).
So what you have is structure to access RAM for the kernel.
As users and processes come and go, files are created and deleted in this structure at a rapid pace.
So what is happening is that the files existed when the list for the directory was created and removed before find got to examine the file.
Answer is to stop searching the file system. You will not find any file you are looking for in this structure.

To demonstrate the symptom in your question.

# find . -print |grep etc | grep services
find: 0652-023 Cannot open file ./proc/110738.
find: 0652-023 Cannot open file ./proc/127194.
find: 0652-023 Cannot open file ./proc/94646.
find: 0652-023 Cannot open file ./proc/115172.
find: 0652-023 Cannot open file ./proc/233770.
find: 0652-023 Cannot open file ./proc/242018.
find: 0652-023 Cannot open file ./proc/311794.
find: 0652-023 Cannot open file ./proc/340404.
find: 0652-023 Cannot open file ./proc/389538.

To eliminate the symptom in your question.

# find . -print -fstype jfs |grep etc|grep services

man page excerpt from man find:

      -fstype Type
            Evaluates to the value True if the file system to which the file belongs is of the specified
            type, where the Type variable has a value of jfs (journaled file system) or nfs (network file

If you are interested in further reading, the following link will get you to a discussion of the /proc file structure.

Open: Files Reference > System Files > /proc

Contains state information about processes and threads in the system.

   #include <sys/procfs.h>
The /proc file system provides access to the state of each active process and thread in the system. The name of each entry in the /proc file system is a decimal number corresponding to the process ID. These entries are subdirectories and the owner of each is determined by the user ID of the process. Access to the process state is provided by additional files contained within each subdirectory. Except where otherwise specified, the term /proc file is meant to refer to a non-directory file within the hierarchy rooted at /proc. The owner of each file is determined by the user ID of the process.

The various /proc directory, file, and field names contain the term lwp (light weight process). This term refers to a kernel thread. The /proc files do not refer to user space pthreads. While the operating system does not use the term lwp to describe its threads, it is used in the /proc file system for compatibility with other UNIX operating systems.
LVL 68

Expert Comment

ID: 24057522
OK, perfect hint from robertfwoods, but consider the actual fstype you are running. I strongly assume that it's jfs2!
Check the types of your FSs by issuing 'mount' and looking at the 4th column.
If it's actually jfs2, use
find / -type f -fstype jfs2 -name core

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Expert Comment

ID: 24058489
I usually use one of 2 solutions. hide stderr or looking selectively.

I have seen that woolmilkporc has already given them respecively in
wkr3 and (very elegant) in wrkr2.

Futhermore the time that the system loose to find inside /proc is little.

Hiding stderr, can hide also errors that can be useful to see.
I try to give a different application for xdev qualifier. (it prevents to "traverse" filesystem)

In your script you can define a routine and call it for fs that you think important

find $1 -xdev -name core
Find /
Find /var
Find /yourfs

LVL 68

Expert Comment

ID: 24117356
Hi again,
just back from a short spring break I re-read my first comment: Of course, in alternative 1, I meant to say "use GNU find" and not "grep". Sorry!



Author Closing Comment

ID: 31565883
I ended up ust redirecting stderr since the machine is procduction and I have to just through too much red tape (i know....it's just gnu find) just to get the change mgmt board to approve the install.

Thanks for your help !!!

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you do backups in the Solaris Operating System, the file system must be inactive. Otherwise, the output may be inconsistent. A file system is inactive when it's unmounted or it's write-locked by the operating system. Although the fssnap utility…
This tech tip describes how to install the Solaris Operating System from a tape backup that was created using the Solaris flash archive utility. I have used this procedure on the Solaris 8 and 9 OS, and it shoudl also work well on the Solaris 10 rel…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question