Path to this page:
./
wip/memdump,
Memory dumper for UNIX-like systems
Branch: CURRENT,
Version: 1.01,
Package name: memdump-1.01,
Maintainer: pkgsrc-usersWhat can you expect to find in a system memory dump? Bits from the
operating system, from running processes, and from every file and
directory that has been accessed recently. Depending on the operating
system you may even find some information from deleted files and
exited processes, although that information tends to be short-lived.
To dump physical memory:
memdump | nc host port
memdump | openssl s_client -connect host:port
For best results send output off-host over the network. Writing to
file risks clobbering all the memory in the file system cache. Use
netcat, stunnel, or openssl, depending on your requirements.
With the exception of Linux, dumping UNIX system memory is a tricky
business because /dev/mem has holes that one has to carefully skip
around in order not to read nonsense or even miss information.
This software was tested on Linux, Solaris, FreeBSD, OpenBSD, and
is distributed under the IBM Public License.
Required to build:[
pkgtools/cwrappers]
Master sites:
RMD160: 437585744012de5c6f88743c05428ca9bc9cf9b1
Filesize: 12.415 KB
Version history: (Expand)
- (2024-09-19) Package has been reborn
- (2024-09-15) Package deleted from pkgsrc
- (2023-02-13) Package has been reborn
- (2020-09-29) Package has been reborn
- (2020-09-29) Package deleted from pkgsrc
- (2020-01-02) Package has been reborn
CVS history: (Expand)