[Vol-users] KVM and Memory Dump

Juerg Haefliger juergh at gmail.com
Mon Oct 7 00:45:34 CDT 2013


On Fri, Oct 4, 2013 at 4:28 PM,  <chris-2012 at arcor.de> wrote:
>  > I'm not sure whether your current libvirt version supports kvm dump well.
>>
>> However, there is another method. If you LibVirt supports QMP command, try
>> :
>> virsh qemu-monitor-command [your vm name]'{ "execute": "pmemsave",
>> "arguments": { "val": 0, "size": [the memory size of the vm, in KB],
>> "filename": "[/path/of/the/dump]" } }'
>
> I'll give this a try. Now I've googled a bit more and have found lqs2mem. This is what I've been looking for. I'm curious if I can analyze the images.

Let me know how that works for you.

...Juerg


> Chris
> _______________________________________________
> Vol-users mailing list
> Vol-users at volatilityfoundation.org
> http://lists.volatilityfoundation.org/mailman/listinfo/vol-users


More information about the Vol-users mailing list