From mboxrd@z Thu Jan 1 00:00:00 1970 From: ZelluX Subject: Implementing keystroke logger in VMM Date: Fri, 15 Jan 2010 20:20:19 +0800 Message-ID: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0108085819==" Return-path: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xensource.com Errors-To: xen-devel-bounces@lists.xensource.com To: xen-devel@lists.xensource.com List-Id: xen-devel@lists.xenproject.org --===============0108085819== Content-Type: multipart/alternative; boundary=000e0cd154aaedd995047d330665 --000e0cd154aaedd995047d330665 Content-Type: text/plain; charset=ISO-8859-1 Hi, all I want to sniffer keystrokes in Xen and filter some special characters before Domain 0 gets the keystrokes. It seems first I need to write a simple keyboard driver in Xen, and when an interrupt comes in, check whether it is keyboard interrupt. If it is a keyboard interrupt, get the data by inb instruction, and do some logging and filtering work, then pass the interrupt again to Domain 0. So my question is, after Xen calls inb to fetch the character, will Domain 0 be able to fetch the character again? If not, is it possible for Xen to fake a same character interrupt? Many thanks. -- Best regards, Wang Yuanxuan Parallel Processing Institute, Fudan University --000e0cd154aaedd995047d330665 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi, all

I want to sniffer keystrokes in Xen and filter s= ome special characters before Domain 0 gets the keystrokes. It seems first = I need to write a simple keyboard driver in Xen, and when an interrupt come= s in, check whether it is keyboard interrupt. If =A0it is a keyboard interr= upt, get the data by inb instruction, and do some logging and filtering wor= k, then pass the interrupt again to Domain 0.

So my question is, after Xen calls inb to fetch the cha= racter, will Domain 0 be able to fetch the character again? If not, is it p= ossible for Xen to fake a same character interrupt?=A0

Many thanks.

--
Best regards,
Wang Yuanxua= n
Parallel Processing Institute, Fudan University
--000e0cd154aaedd995047d330665-- --===============0108085819== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel --===============0108085819==--