Check live Virtual Address to Physical Address mappings
Mulyadi Santosa
mulyadi.santosa at gmail.com
Fri Apr 19 05:46:20 EDT 2013
On Fri, Apr 19, 2013 at 3:47 PM, Shraddha Kamat <sh2008ka at gmail.com> wrote:
> I want to see live Virtual Addr. to Physical Addr. mappings for a
> process. is it possible to see such mappings ( for e.g. under /proc
> etc ..).
Hi...
I am not really sure, but try to check Volatility tool. It is a
forensic tool actually, and one of its functionality is able to check
process mapping and dump the content.
Hopefully I still recall about this thing correctly...
--
regards,
Mulyadi Santosa
Freelance Linux trainer and consultant
blog: the-hydra.blogspot.com
training: mulyaditraining.blogspot.com
More information about the Kernelnewbies
mailing list