Re: Re: Re: [Vol-users] KVM and Memory Dump
Juerg Haefliger
7 Oct
2013
7 Oct
'13
1:45 a.m.
On Fri, Oct 4, 2013 at 4:28 PM, <chris-2012(a)arcor.de> wrote:
Let me know how that works for you.
...Juerg
I'm not
sure whether your current libvirt version supports kvm dump well.
However, there is another method. If you LibVirt supports QMP command, try
:
virsh qemu-monitor-command [your vm name]'{ "execute":
"pmemsave",
"arguments": { "val": 0, "size": [the memory size of the
vm, in KB],
"filename": "[/path/of/the/dump]" } }'
I'll give this a try. Now I've googled a bit more and have found lqs2mem. This is
what I've been looking for. I'm curious if I can analyze the images. Chris
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users