Hi, Ryan
Will you try to make a convert tools (from raw memory dump to
Windows fomat dump)? If so, please post it to xen-devel ML.
You can see docs/misc/dump-core-format.txt.
".xen_pages" section is raw memory,
and .xen_p2m or .xen_pfn sections are used
for looking for a memory address we want to see.
You can see them with readelf -x option.
If you want to make a new tools to get a straight dump of physical memory,
it would just do xc_map_foreign_range() from 0 to max_pfn.
Best Regards,
Akio Takebe
>Hello,
>
>This may be more of a developer question. If so, please let me know, and I
>will ask it there instead. I am running Xen 3.1 with a Windows XP HVM, and
>I want to get a straight dump of physical memory. The dump-core command
>adds a lot of ELF cruft, so I commented out the ELF related portions of
>xc_domain_dumpcore_via_callback. However, when I run dump-core, I am still
>getting quite a few more pages in my dump file than I should (nearly 10MB
>worth). Has anyone else attempted to do this, or have any idea of what
>might be the issue? I can understand the utility of having the dump file
>conform to ELF format, but it's also useful to get just the raw memory since
>there are tools out there that can take a Windows physical dump and analyze
>it.
>
>Thanks for the help,
>-Ryan
>
>-------------------------------text/plain-------------------------------
>_______________________________________________
>Xen-users mailing list
>Xen-users@xxxxxxxxxxxxxxxxxxx
>http://lists.xensource.com/xen-users
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
|
Home