Linux Memory Kung Foo

Matthew Frederico mfrederico at gmail.com
Fri Feb 4 09:05:37 MST 2005


On Fri, 4 Feb 2005 08:28:37 -0700, Josh Coates <jcoates at archive.org> wrote:
> 
> >I was thinking something like strace that I could attach to the
> >process, and look at all the memory segments of that running process..
> 
> if i understand you correctly, the process is no longer running and is no
> longer in the process table.
> 
> if this is the case, i believe you are pretty much hosed.  the memory
> associated with the process is probably on some queue somewhere waiting to
> be recycled, and i am not aware of any way to access arbitrary physical
> memory pages - though in the future you could hack the kernel to provide a
> relatively simple syscall that would allow you to do this - but that won't
> help you in your current situation.  :-(

The process is still running.  I'm getting some results with GDB and
the dump memory command ... now I just have to find the right memory
segment!


-- 
-- Matthew Frederico
http://www.ultrize.com



More information about the PLUG mailing list