From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
	id 1IPrdW-0001eI-Kn
	for qemu-devel@nongnu.org; Mon, 27 Aug 2007 23:21:02 -0400
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
	id 1IPrdW-0001e6-6r
	for qemu-devel@nongnu.org; Mon, 27 Aug 2007 23:21:02 -0400
Received: from [199.232.76.173] (helo=monty-python.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43) id 1IPrdW-0001e3-30
	for qemu-devel@nongnu.org; Mon, 27 Aug 2007 23:21:02 -0400
Received: from sark4.cc.gatech.edu ([130.207.7.19])
	by monty-python.gnu.org with esmtp (Exim 4.60)
	(envelope-from <weijp@cc.gatech.edu>) id 1IPrdV-00032k-Oy
	for qemu-devel@nongnu.org; Mon, 27 Aug 2007 23:21:01 -0400
Received: from gaia2.cc.gatech.edu (gaia2.cc.gatech.edu [130.207.3.15])
	by sark4.cc.gatech.edu (8.13.6/8.12.8) with ESMTP id l7S3L1Dh012638
	for <qemu-devel@nongnu.org>; Mon, 27 Aug 2007 23:21:01 -0400 (EDT)
Received: from localhost (weijp@localhost)
	by gaia2.cc.gatech.edu (8.13.6/8.12.8) with ESMTP id l7S3L18e003506
	for <qemu-devel@nongnu.org>; Mon, 27 Aug 2007 23:21:01 -0400 (EDT)
Date: Mon, 27 Aug 2007 23:21:01 -0400 (EDT)
From: Jinpeng Wei <weijp@cc.gatech.edu>
Message-ID: <Pine.GSO.4.58.0708272319170.2425@gaia2.cc.gatech.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: [Qemu-devel] How to modify QEMU to capture memory operations of the
	guest OS?
Reply-To: qemu-devel@nongnu.org
List-Id: qemu-devel.nongnu.org
List-Unsubscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/pipermail/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: qemu-devel@nongnu.org

Hi All,

I am wondering if it is possible to modify QEMU source code such that I
can log the memory operations by a guest OS. According to QEMU
documentation, it has a compiled code piece for each instruction of the
guest OS (or the simulated CPU?). Where is each instruction read and
replaced with the pre-compiled code? Is it in dyngen.c?  I read dyngen.c
but can not figure out how the replacement is done. Can anybody shed light
on this process as well as how the logging could be done?

Many thanks,
Jinpeng

-------------------------------
Jinpeng Wei
Ph.D. student
College of Computing
Georgia Institute of Technology
Atlanta, GA 30332-0280
http://www.cc.gatech.edu/~weijp