Re: Help in fixing a issue

[Wei Liu <wei.liu2@citrix.com>]

Add back xen-devel, please use "reply-all" in the future.

And please don't top-post.

On Fri, Feb 05, 2016 at 10:01:57PM +1100, PREETI MISHRA wrote:
> Thanks for the reply,
> 
> actually, I have a virtual machine in which some processes are running. I
> want to analysis their behavior using VMI at xen.
> 

Have you checked out libvmi in this case?

> My tool has two components:i) xen patch running at hypervisor ii) analyzing
> component running at Dom0
> 
> 1. Xen patch is responsible for collecting the system call information of a
> monitored process. It can be syscall no and process id.
>       - how to take this information? //particularly i want to trap any
> execution of monitored programs.
>       - how to store this information in buffer?
>        -how to send alert to my another daemon (analyzing component)
> running in Dom0.

See xentrace / xenanalyze in xen.git.

> 2. On receiving alert, analyzing component perform analysis over the
> collected data.
>       - how to send the buffer information (pid and system call no) to
> analyzing component?
> 

Anyway, I'm not expert on this. I will let other people to have a look.

My gut feeling is that libvmi should be the way to go.

Wei.