Shachar Shemesh wrote:
Gilad Ben-Yossef wrote:
At least in theory this should work. I say in theory, because I've
been getting an error on my Ubuntu trying to open /proc/$PID/mem by
YMMV:
$ cat /proc/$PID/mem | hexdump -c > before
$ cat /proc/$PID/mem | hexdump -c> after
You can only use /proc/PID/mem if you are already attached to that
process as a debugger.
How interesting. Where is that documented? neither the proc man page or
the relevant kernel documentation file does not mention this.
I'm going to send a patch...
Gilad
--
Gilad Ben-Yossef
Chief Coffee Drinker
Codefidence Ltd.
The code is free, your time isn't.(TM)
Web: http://codefidence.com
Email: [EMAIL PROTECTED]
Office: +972-8-9316883 ext. 201
Fax: +972-8-9316885
Mobile: +972-52-8260388
Q: How many NSA agents does it take to replace a lightbulb?
A: dSva7DrYiY24yeTItKyyogFXD5gRuoRqPNQ9v6WCLLywZPINlu!
