From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
	id 1Kyp9B-0008N3-Cc
	for qemu-devel@nongnu.org; Sat, 08 Nov 2008 09:50:45 -0500
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
	id 1Kyp99-0008Mi-84
	for qemu-devel@nongnu.org; Sat, 08 Nov 2008 09:50:44 -0500
Received: from [199.232.76.173] (port=45271 helo=monty-python.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43) id 1Kyp99-0008Me-36
	for qemu-devel@nongnu.org; Sat, 08 Nov 2008 09:50:43 -0500
Received: from ti-out-0910.google.com ([209.85.142.190]:31515)
	by monty-python.gnu.org with esmtp (Exim 4.60)
	(envelope-from <mulyadi.santosa@gmail.com>) id 1Kyp99-0003pJ-00
	for qemu-devel@nongnu.org; Sat, 08 Nov 2008 09:50:43 -0500
Received: by ti-out-0910.google.com with SMTP id y6so1129512tia.18
	for <qemu-devel@nongnu.org>; Sat, 08 Nov 2008 06:50:39 -0800 (PST)
Message-ID: <f284c33d0811080650o2346b2efm6ce711af40ec07fb@mail.gmail.com>
Date: Sat, 8 Nov 2008 21:50:39 +0700
From: "Mulyadi Santosa" <mulyadi.santosa@gmail.com>
Subject: Re: [Qemu-devel] how to monitor memery access upon QEMU
In-Reply-To: <D124563F69CB874EAE1239D4D32161E39EF575@EX01.staff.smu.edu.sg>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <D124563F69CB874EAE1239D4D32161E39EF575@EX01.staff.smu.edu.sg>
Reply-To: qemu-devel@nongnu.org
List-Id: qemu-devel.nongnu.org
List-Unsubscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/pipermail/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: qemu-devel@nongnu.org

Hi..

On Sat, Nov 8, 2008 at 7:31 AM, LIU Limin <liminliu@smu.edu.sg> wrote:
>  Hi all,
>
>
>
>      I'm running a Windows XP under Qemu, and I need to monitor the memory
> accesses of the XP system. Do you have any advices about how to do this? Are
> there any specifications or developer documentations about Qemu which can do
> this job? Or are there any APIs Qemu provides that can make this happen?

probably this doesn't directly answer your question, but you may check
http://www.few.vu.nl/argos/. In short, it's a project to capture every
register, memory and I/O access. The main goal is to analyze zero day
attack, but I believe it could serve another goal as well..

regards,

Mulyadi.