[Qemu-discuss] How to read memory dump?

2015-03-09 Thread Binh Q Pham
Hi folks, Could you suggest me a way to extract information from Virtual Machine's memory dump (I used 'pmemsave' to get this memory dump)? Thanks for your help. -Binh

Re: [Qemu-discuss] How to read memory dump?

2015-03-09 Thread Jakob Bohm
On 09/03/2015 17:21, Binh Q Pham wrote: Hi folks, Could you suggest me a way to extract information from Virtual Machine's memory dump (I used 'pmemsave' to get this memory dump)? Thanks for your help. -Binh I read somewhere offline that there is a project called "volatility", which provid

Re: [Qemu-discuss] How to read memory dump?

2015-03-09 Thread Binh Q. Pham
Right, I also found volatility and played with that for a while, but I got problems getting that running. I already reported the problems to volatility, but I will also mention here in case someone has gone through the same problem and knows how to fix: https://github.com/volatilityfoundation/