Examining Memory

From: Bill Touchstone (billtouch_at_N.O.S.P.A.M.att.net)
Date: 05/04/05 

Date: Wed, 4 May 2005 06:23:47 GMT

I have a need to examine sections of live memory from the command line. I
know there are two ways to access memory: /dev/mem and /proc/kcore. I need
help understanding the difference between them (if any) and how to access
this memory.

In one development group, we had a program (exa) that you could specify exa
addr,size and it would dump in whatever format yoiu asked (hex - bin - dec -
char or a mix). Does that ring a bell with anyone? I am working on a kernel
that doesn't have a symbol table but I only need to locate some variables in
my module/driver.

I am only going after kernel memory - not user memory so I don't need to be
concerned with virt to phys stuff.

Thanks!
Bill

Relevant Pages

  • Re: speed up calculation suggestions
    ... case accessing a direct access memory should have the same speed ... Most modern processors have a relatively small amount of cache memory ... in memory owing to the column major order in Fortran (or the row major ...
    (comp.lang.fortran)
  • Re: data security erase of memory and swap?
    ... > My question for Linux is whether applications that pass sensitive data ... > leftover data in memory or swap. ... Your fallacy is that someone can access memory or swap. ...
    (comp.os.linux.development.system)
  • Re: ClamAV execusion died without error messages
    ... appeared in the section for "kernel log messages" in daily email message for ... access memory that it never allocated (i.e., ... Your hardware is buggy and memory bits are flipping by accident ...
    (freebsd-questions)
  • Re: Reading at any memory location.
    ... You ussually allocate same memory then use use it...around this parts... ... You can't access memory in the range 0-64k because you don't have any ... range (for example the lpClassName parameter of the CreateWindow function). ... We are wrapping code betweenw try/catch ...
    (microsoft.public.win32.programmer.kernel)
  • Re: i486 emu in mainline?
    ... > verify_areawhen we need to access memory, ... access (it's not a chunk of kernel memory). ... send the line "unsubscribe linux-kernel" in ...
    (Linux-Kernel)