From: Sean McLinden <mclinden@informed.net>
To: Stefan Hajnoczi <stefanha@gmail.com>
Cc: kvm@vger.kernel.org
Subject: Re: Searching the swapfile of a kvm/qemu image
Date: Tue, 5 Apr 2016 10:43:10 -0400 (EDT) [thread overview]
Message-ID: <1453027346.117091459867390154.JavaMail.root@mail.informed.net> (raw)
In-Reply-To: <20160405100813.GF2015@stefanha-x1.localdomain>
I am searching for (possibly) meaningful strings.
This is a shot-in-the-dark kinda of effort.
Thanks!
Sean
----- Original Message -----
From: "Stefan Hajnoczi" <stefanha@gmail.com>
To: "Sean McLinden" <mclinden@informed.net>
Cc: kvm@vger.kernel.org
Sent: Tuesday, April 5, 2016 6:08:13 AM GMT -05:00 US/Canada Eastern
Subject: Re: Searching the swapfile of a kvm/qemu image
On Mon, Apr 04, 2016 at 11:53:45PM -0400, Sean McLinden wrote:
> I am wondering if there are any serious downsides to doing a string search of a running KVM/QEMU swap partition on the host? I understand that mounting the OS (Linux) file systems can be a problem, but what about the swap partition of a live guest?
Keep in mind that the contents of the swap partition can change at any
time. I don't know the details of the swap on-disk layout, but if you
need to read from multiple non-contiguous sectors you have a race
condition where you might read part old and part new contents.
What are you trying to achieve?
Stefan
--
NOTICE of CONFIDENTIALITY and DISCLAIMER
This transmission, including attachments, is confidential. It may also be privileged or otherwise protected by work product immunity or other legal rules. If you have received it by mistake, please let us know by e-mail to the sender, only, and delete it from your system; you may not copy this message or disclose its contents to anyone.
Unless expressly noted, above, this communication does not reflect an intention by the sender to conduct a transaction or make any agreement by electronic means. Nothing contained in this transmission shall constitute a contract or electronic signature under the ESIGN, any version of the UETA, or any other statute governing electronic transactions.
If this transmission contains advice, the advice is based on instructions in relation to, and is provided to the addressee in connection with, the matter mentioned above. Responsibility is not accepted for reliance upon it by any other person or for any other purpose.
prev parent reply other threads:[~2016-04-05 10:48 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-04-05 3:53 Searching the swapfile of a kvm/qemu image Sean McLinden
2016-04-05 10:08 ` Stefan Hajnoczi
2016-04-05 14:43 ` Sean McLinden [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1453027346.117091459867390154.JavaMail.root@mail.informed.net \
--to=mclinden@informed.net \
--cc=kvm@vger.kernel.org \
--cc=stefanha@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).