[Gllug] Memory scanning

Richard Jones rich at annexia.org
Sat Sep 4 22:21:52 UTC 2010


On Sat, Sep 04, 2010 at 09:21:51PM +0100, James Courtier-Dutton wrote:
> On 4 September 2010 15:49, Richard Jones <rich at annexia.org> wrote:
> >
> > It's possible, though not simple, to do this from the hypervisor.  I
> > have written programs which scan the kernel for its version, look at
> > the process table and so on, and from there it's possible to scan the
> > executable pages of any process running of interest to you.  I did it
> > via this libvirt API:
> >
> 
> May I have a copy of that program?

Sure.  Be aware of the license.

http://git.annexia.org/?p=virt-mem.git;a=summary

Rich.

-- 
Richard Jones
Red Hat
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list