Re: [Question] Intercept CR3 access in EPT

2012-10-08 Thread R
Hi, Actually, I know that disabling EPT would work. But thank U anyway. What I interesting in is why would it fail when EPT is enable. Thank U for answering. 2012/10/9 Marcelo Tosatti : > On Mon, Oct 08, 2012 at 04:15:57PM +0800, R wrote: >> Hi, >> >> I am a student. And my teacher told me to mo

Re: [Question] Intercept CR3 access in EPT

2012-10-08 Thread Marcelo Tosatti
On Mon, Oct 08, 2012 at 04:15:57PM +0800, R wrote: > Hi, > > I am a student. And my teacher told me to monitor every process in guest. > So, I try to intercept every Cr3 access. However, if kvm is loaded > with EPT enable, Acesses to Cr3 would not cause VM-exit. Disable EPT by loading kvm-intel