Shulou(Shulou.com)06/01 Report--

This article is to share with you the content of the sample analysis of profile done by Centos6.6 system. The editor thinks it is very practical, so share it with you as a reference and follow the editor to have a look.

During this period of time, I used volatiltiy to do the work related to memory analysis. Because I did it on Centos, I needed to make the profile of CentOs. I checked the official website of volatility and other forums without a direct solution. Finally, the method was tried through a variety of methods.

1. The first thing is to install the dwarfdump tool. Generally speaking, CentOs does not have this in the source, so you need to download it yourself.

First install:

Yum install elfutils-devel

Then get the source file of dwarfdump:

Wget' http://www.prevanders.net/libdwarf-20140413.tar.gz'

Enter the folder after decompression

. / configureMake

Then go to the dwarfdump folder

Make install

Dwarfdump has been installed since then

Gmail + may not be installed in 2.CentOs

The method to install grub + is:

Yum install gcc-c++

3. Under the volatility folder, find the linux folder under the tools folder.

Under the volatiltiy/volatility/tools/linux/ directory:

Make

Will generate a file moudle.dwarfdump in dwarfdump format

4. Package the systemmap under the boot folder and the moudle.dwarf generated in step 3 to generate profile

Zip CentOs6.6.zip module.dwarfdump / boot/Systemmap-... .

Systemmap will vary from kernel to kernel

Thank you for reading! This is the end of this article on "sample Analysis of profile done by Centos6.6 system". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, you can share it out for more people to see!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.