在Linux上搜索进程的内存 [英] Searching a process' memory on Linux

问题描述

如何在Linux中搜索进程的内存状态?具体来说，我希望确定某些感兴趣的区域，并定期查看它们，有时可能会拨出新的价值.

How can I search the memory state of an process in Linux? Specifically I wish to identify certain regions of interest, and peek at them at regular intervals, possibly occasionally poking new values.

我怀疑答案可能涉及到 ptrace()，并阅读/proc/[pid]/mem ，但还需要继续.

I suspect an answer may involve calls to ptrace(), and reading /proc/[pid]/mem, but need more to go on.

推荐答案

我已经为请求的功能开发了一些代码.

I've developed some code for the requested functionality.

模块 memutil 提供了流程内存区域迭代，并在 readmem 可执行文件.

The module memutil provides process memory region iteration, and python or C memory reading with assistance from the ptrace module, and readmem executable.

如果有任何疑问或要求使用独立工具，请问.

If there is any questions, or requests for standalone tools, just ask.

这篇关于在Linux上搜索进程的内存的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！