This article provides the steps to determine if a crash occurred and how to locate the crash dump file on platforms running the nfx-3 software package (Junos OS Release 18.1R1 or later).

Crashes or core dumps may occur either at the system level or from the host. For crashes or core dumps at the system level, check the location of the core file with the following:

root@s13-28> show system core-dumps 
/var/crash/*core*: No such file or directory
/var/tmp/*core*: No such file or directory
/var/tmp/pics/*core*: No such file or directory
/var/crash/kernel.*: No such file or directory
/var/jails/rest-api/tmp/*core*: No such file or directory
/tftpboot/corefiles/*core*: No such file or directory

For crashes that occur on the host, check a host crash with the following:

root> show vmhost crash
-rw-r--r-- 1 root root 4168176 Jul 19 15:03 local-node.dcpfe.14803.1563548578.core.tgz
-rw-r--r-- 1 root root 4172246 Jul 19 15:03 local-node.dcpfe.15079.1563548590.core.tgz
-rw-r--r-- 1 root root 4170590 Jul 19 15:03 local-node.dcpfe.15205.1563548602.core.tgz

To transfer the crash files from the operational prompt, use the command request vmhost file-copy crash from-jnode <crash file> to-vjunos /var/public/ <crash file> .

request vmhost file-copy crash from-jnode local-node.dcpfe.15205.1563548602.core.tgz to-vjunos /var/public/local-node.dcpfe.15205.1563548602.core.tgz

For more details, refer to request vmhost file-copy .

To transfer the crash file off of the NFX device, SCP or SFTP the crash file, for example, /var/public/local-node.dcpfe.15205.1563548602.core.tgz .

2021-07-16: Enhanced the article to include both system level and host level crashes and core dumps; made other minor modifications