[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Memory snapshot

On 10/31/06, Arun Babu <arunbabu.n@xxxxxxxxx> wrote: 
Hi,
 We have /proc/[pid]/maps or pmap for displaying the memory  mapping for  a
particular process.
 Do we have a way to see the snap shot of what is currently in the memory?(a
total snapshot!)
 (say 0x... to 0x... shared library,
0x... to 0x... process i, etc..)


Exmap "... allows you to examine a complex system of processes and
determine the effective memory usage of each process, mapped file, ELF
section and ELF symbol, which can be helpful in memory optimisation
work."

http://www.berthels.co.uk/exmap/

Here's a paper, along with a kernel module, that can also do what you
have asked about.
The module is for a 2.4 kernel.

http://www.usenix.org/event/usenix05/tech/freenix/full_papers/movall/movall_html/index.html

A paper concerning RAM forensics on Linux, along with some Perl scripts.

http://cisr.nps.edu/downloads/theses/06thesis_urrea.pdf

There's also this gmemusage, which might be interesting to look at.
Debian has a package with patches for the 2.6 kernel.

http://oss.sgi.com/projects/gmemusage/
http://packages.debian.org/unstable/utils/gmemusage

And statifier is a neat tool that manipulates executable and its libraries
in ways you might find interesting.  It uses gdb to grab a snapshot of
a process and all of its libraries and creates a new executable.

http://statifier.sf.net

--
Andrew Shewmaker

--
Kernelnewbies: Help each other learn about the Linux kernel.
Archive:       http://mail.nl.linux.org/kernelnewbies/
FAQ:           http://kernelnewbies.org/faq/