From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1FM4bJ-00029b-B2 for qemu-devel@nongnu.org; Wed, 22 Mar 2006 09:46:17 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1FM4bE-00027v-Su for qemu-devel@nongnu.org; Wed, 22 Mar 2006 09:46:16 -0500 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1FM4bE-00027s-NX for qemu-devel@nongnu.org; Wed, 22 Mar 2006 09:46:12 -0500 Received: from [128.84.224.10] (helo=vlsi.csl.cornell.edu) by monty-python.gnu.org with esmtp (Exim 4.52) id 1FM4bc-0000mT-Ep for qemu-devel@nongnu.org; Wed, 22 Mar 2006 09:46:36 -0500 Received: from bell.csl.cornell.edu (bell.csl.cornell.edu [128.84.224.41]) by vlsi.csl.cornell.edu (8.13.4/8.13.4) with ESMTP id k2MEk0D4054816 for ; Wed, 22 Mar 2006 09:46:06 -0500 (EST) Date: Wed, 22 Mar 2006 09:46:00 -0500 (EST) From: Vince Weaver Message-ID: <20060322094132.R10166-100000@bell.csl.cornell.edu> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: [Qemu-devel] dumping processor state after each instruction executed Reply-To: qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Hello, I was wondering if it is possible to insert some code into the translated basic-block in order to dump the processor state to a file after every single instcution? This would be every single executed instruction, (meaning it couldn't be just dump the state once at translation time). I'm trying to use qemu as a frontend to the TAXI tool (http://www.eecs.umich.edu/~vlaovic/L150_vlaovic_s.pdf) while doing some computer architecture work. I've figured out how to add a helper function to the load/store routines to get a memory trace file, but getting an instruction trace is proving to be a bit harder. Thanks for any help, Vince Weaver vince@csl.cornell.edu