Re: [Xen-users] xm dump-core and an XP HVM

[Akio Takebe <takebe_akio@xxxxxxxxxxxxxx>]

Hi, Ryan

Will you try to make a convert tools (from raw memory dump to
Windows fomat dump)? If so, please post it to xen-devel ML.

You can see docs/misc/dump-core-format.txt.
".xen_pages" section is raw memory,
and .xen_p2m or .xen_pfn sections are used
for looking for a memory address we want to see.

You can see them with readelf -x option.

If you want to make a new tools to get a straight dump of physical memory,
it would just do xc_map_foreign_range() from 0 to max_pfn.

Best Regards,

Akio Takebe

>Hello,
>
>This may be more of a developer question.  If so, please let me know, and I
>will ask it there instead.  I am running Xen 3.1 with a Windows XP HVM, and
>I want to get a straight dump of physical memory.  The dump-core command
>adds a lot of ELF cruft, so I commented out the ELF related portions of
>xc_domain_dumpcore_via_callback.  However, when I run dump-core, I am still
>getting quite a few more pages in my dump file than I should (nearly 10MB
>worth).  Has anyone else attempted to do this, or have any idea of what
>might be the issue?  I can understand the utility of having the dump file
>conform to ELF format, but it's also useful to get just the raw memory since
>there are tools out there that can take a Windows physical dump and analyze
>it.
>
>Thanks for the help,
>-Ryan
>
>-------------------------------text/plain-------------------------------
>_______________________________________________
>Xen-users mailing list
>Xen-users@xxxxxxxxxxxxxxxxxxx
>http://lists.xensource.com/xen-users


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users