[Gllug] Memory scanning

Nix nix at esperi.org.uk
Mon Sep 6 06:44:39 UTC 2010


On 4 Sep 2010, Richard Jones spake thusly:

> On Sat, Sep 04, 2010 at 09:21:51PM +0100, James Courtier-Dutton wrote:
>> On 4 September 2010 15:49, Richard Jones <rich at annexia.org> wrote:
>> >
>> > It's possible, though not simple, to do this from the hypervisor.  I
>> > have written programs which scan the kernel for its version, look at
>> > the process table and so on, and from there it's possible to scan the
>> > executable pages of any process running of interest to you.  I did it
>> > via this libvirt API:
>> 
>> May I have a copy of that program?
>
> Sure.  Be aware of the license.

Also, note the *language*, although this shouldn't have been too
terribly much of a surprise ;)
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list