[Qemu-devel] how to monitor memery access upon QEMU

[Qemu-devel] how to monitor memery access upon QEMU

[LIU Limin]

[-- Attachment #1: Type: text/plain, Size: 387 bytes --]

 Hi all, 

 

     I'm running a Windows XP under Qemu, and I need to monitor the
memory accesses of the XP system. Do you have any advices about how to
do this? Are there any specifications or developer documentations about
Qemu which can do this job? Or are there any APIs Qemu provides that can
make this happen? Thanks for help :)

 

Best regards,

 

Limin

 


[-- Attachment #2: Type: text/html, Size: 2701 bytes --]

Re: [Qemu-devel] how to monitor memery access upon QEMU

[Mulyadi Santosa]

Hi..

On Sat, Nov 8, 2008 at 7:31 AM, LIU Limin <liminliu@smu.edu.sg> wrote:
>  Hi all,
>
>
>
>      I'm running a Windows XP under Qemu, and I need to monitor the memory
> accesses of the XP system. Do you have any advices about how to do this? Are
> there any specifications or developer documentations about Qemu which can do
> this job? Or are there any APIs Qemu provides that can make this happen?

probably this doesn't directly answer your question, but you may check
http://www.few.vu.nl/argos/. In short, it's a project to capture every
register, memory and I/O access. The main goal is to analyze zero day
attack, but I believe it could serve another goal as well..

regards,

Mulyadi.

RE: [Qemu-devel] how to monitor memery access upon QEMU

[LIU Limin]

Hi, 
  Thanks for your help, I'll check it and see what I can do :)

Best regards,
Limin

-----Original Message-----
From: qemu-devel-bounces+liminliu=smu.edu.sg@nongnu.org [mailto:qemu-devel-bounces+liminliu=smu.edu.sg@nongnu.org] On Behalf Of Mulyadi Santosa
Sent: 2008年11月8日 22:51
To: qemu-devel@nongnu.org
Subject: Re: [Qemu-devel] how to monitor memery access upon QEMU

Hi..

On Sat, Nov 8, 2008 at 7:31 AM, LIU Limin <liminliu@smu.edu.sg> wrote:
>  Hi all,
>
>
>
>      I'm running a Windows XP under Qemu, and I need to monitor the memory
> accesses of the XP system. Do you have any advices about how to do this? Are
> there any specifications or developer documentations about Qemu which can do
> this job? Or are there any APIs Qemu provides that can make this happen?

probably this doesn't directly answer your question, but you may check
http://www.few.vu.nl/argos/. In short, it's a project to capture every
register, memory and I/O access. The main goal is to analyze zero day
attack, but I believe it could serve another goal as well..

regards,

Mulyadi.

Re: [Qemu-devel] how to monitor memery access upon QEMU

[Stuart Brady]

On Sat, Nov 08, 2008 at 09:50:39PM +0700, Mulyadi Santosa wrote:
> probably this doesn't directly answer your question, but you may check
> http://www.few.vu.nl/argos/. In short, it's a project to capture every
> register, memory and I/O access. The main goal is to analyze zero day
> attack, but I believe it could serve another goal as well..

Hrm, I wonder if it'd be possible to use a modified QEMU to avoid
problems such as the recent Linux ftrace bug (i.e. the bug that bricked
a number of Intel e1000e cards).

(Or perhaps that sort of testing is nothing new...)
-- 
Stuart Brady

[Qemu-devel] how to monitor memery access upon QEMU

[LIU Limin]

[-- Attachment #1: Type: text/plain, Size: 389 bytes --]

 Hi all, 

 

     I'm running a Windows XP under Qemu, and I need to monitor the
memory accesses of the XP system. Do you have any advices about how to
do this? Are there any specifications or developer documentations about
Qemu which can do this job? Or are there any APIs Qemu provides that can
make this happen? Thanks for help :)

 

Best regards,

 

Limin

 



[-- Attachment #2: Type: text/html, Size: 3419 bytes --]