How to get xen whole-machine dump image and analyse it prepair
来源:互联网 发布:c语言小程序100例 编辑:程序博客网 时间:2024/06/09 21:44
enable kexec
- apply kexec patches to xen source tree. latest patches are available in xen-devel list. (It maybe merged into xen 3.0.3)
install dom0cut
-
prerequirement: libelf, python, binutils
get dom0cut script and libelf wrapper from http://people.valinux.co.jp/~moriwaka/dumpread/ install libelf wrapper
$ wget http://people.valinux.co.jp/~moriwaka/dumpread/libelf-0.3.0.tar.gz
install dom0cut script
$ tar zxf libelf-0.3.0.tar.gz
$ cd libelf-0.3.0
$ sudo python ./setup.py install$ wget http://people.valinux.co.jp/~moriwaka/dumpread/dumpread-20060927.tar.gz
$ tar zxvf dumpread-20060927.tar.gz
prepair xen-syms, vmlinux
-
copy xen executable binary with symbols (when you compile, it is made at xen/xen-syms) and vmlinux used for domain 0
get coredump
load kdump kernel
1. append followings to xen boot args
-
kdump_megabytes=64 kdump_megabytes_base=32
2. on dom0, load kdump kernel, take a dump.
-
This is same as linux kdump usage. http://lse.sourceforge.net/kdump/
get a dump image
-
echo c > /proc/sysrq-trigger
after reboot, copy /proc/vmcore to core file.
-
cp /proc/vmcore /vmcore
analysis
Now dom0cut script eats large memory(about 100-200MB). You should reboot machine before analysis.
extract domain 0 image
-
$ cd dumpread
$ ./dom0cut_x86.py -d/vmcore --target=0 -odom0image -xxen-syms -txen
you maybe need LD_PRELOAD=/usr/local/lib/libelf.so to resolve conflict for distribution's libelf.(same-name different library is contained in Fedora Core or Redhat)
use crash
-
$ crash vmlinux dom0image
extract xen hypervisor image
-
$ cd dumpread
$ ./dom0cut_x86.py -d/vmcore --target=x -oxenimage -xxen-syms -telf
use gdb
$ gdb xen-syms xenimage
- How to get xen whole-machine dump image and analyse it prepair
- How to get local machine name and IP address?
- How to mount a xen image ?
- how to create image file and format it
- how to access virtual machine image
- Working on your thesis: how to get started and how to keep it going?
- Discover Feature Engineering, How to Engineer Features and How to Get Good at It
- Discover Feature Engineering, How to Engineer Features and How to Get Good at It
- Discover Feature Engineering, How to Engineer Features and How to Get Good at It
- Discover Feature Engineering, How to Engineer Features and How to Get Good at It
- Discover Feature Engineering, How to Engineer Features and How to Get Good at It
- how to dump undo header and block
- How to analyse the code
- How to create a PV image for XEN
- How to Get an Android Device Image?
- Get image from URL and save it
- How to get Full Rom Dump / Stock ROM of MT6572 MediaTek Smartphones using SPFT and MTK Droid Root an
- virtual memory layout and how to get it by the correspoinding functuon
- 双核技术资料
- 如何实现Asp与Asp.Net共享Session
- 利用处理程序错误攻击(下)
- DataTable,DataView和DataGrid中一些容易混淆的概念
- 关于一些路由协议的漏洞
- How to get xen whole-machine dump image and analyse it prepair
- 10种对于分布式拒绝服务攻击的应急解决方法
- OICQ 99c版本加密方法研究报告
- 通过电话线远程登录NT网
- rails使用memcache缓存session
- 程序员每天该做的事
- vc6到vc8移植问题及处理
- 用DELPHI实现的一些国内黑客程序技巧
- lighttpd安全认证设置实践