[Vol-users] KVM and Memory Dump

Bryan D. Payne bdpayne at acm.org
Tue Oct 8 12:11:56 CDT 2013


>
>
> With libvmi I would get continuous updates?
>>
>
> The feature I refereed to, however, is still under development.
>

Just to add a little clarity around this.  Yes, you can continuously
monitor memory (and registers) via LibVMI today with either KVM or Xen.
 The work that Guanglin is referring to will improve the KVM support by
significantly improving its performance (today LibVMI+KVM is somewhat slow,
whereas LibVMI+Xen is very fast).

Either way, if you just need a single snapshot from a moment in time, then
the other tools discussed in this thread may be a better fit.

Cheers,
-bryan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.volatilityfoundation.org/pipermail/vol-users/attachments/20131008/6c5d3a58/attachment.html


More information about the Vol-users mailing list