[Gllug] Memory scanning

Richard Jones rich at annexia.org
Sat Sep 4 22:21:52 UTC 2010

On Sat, Sep 04, 2010 at 09:21:51PM +0100, James Courtier-Dutton wrote:
> On 4 September 2010 15:49, Richard Jones <rich at annexia.org> wrote:
> >
> > It's possible, though not simple, to do this from the hypervisor.  I
> > have written programs which scan the kernel for its version, look at
> > the process table and so on, and from there it's possible to scan the
> > executable pages of any process running of interest to you.  I did it
> > via this libvirt API:
> >
> May I have a copy of that program?

Sure.  Be aware of the license.



Richard Jones
Red Hat
Gllug mailing list  -  Gllug at gllug.org.uk

More information about the GLLUG mailing list