[Gllug] Memory scanning
Richard Jones
rich at annexia.org
Sat Sep 4 22:21:52 UTC 2010
On Sat, Sep 04, 2010 at 09:21:51PM +0100, James Courtier-Dutton wrote:
> On 4 September 2010 15:49, Richard Jones <rich at annexia.org> wrote:
> >
> > It's possible, though not simple, to do this from the hypervisor. I
> > have written programs which scan the kernel for its version, look at
> > the process table and so on, and from there it's possible to scan the
> > executable pages of any process running of interest to you. I did it
> > via this libvirt API:
> >
>
> May I have a copy of that program?
Sure. Be aware of the license.
http://git.annexia.org/?p=virt-mem.git;a=summary
Rich.
--
Richard Jones
Red Hat
--
Gllug mailing list - Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug
More information about the GLLUG
mailing list