How to use "trace" command in tracecap

98 views
Skip to first unread message

2965...@qq.com

unread,
Jun 25, 2012, 9:03:45 AM6/25/12
to BitBlaze User Discussion group
I want to use 'trace' command to record, when i use 'tracebyname'
command, it work normally, but it output 'invalid char in expression'
when i use 'trace'. is there anyone who can tell me how to use trace
command. Detail as follow:
(qemu) guest_ps
0 cr3=0x00000000 <kernel>
304 cr3=0x024bc000 smss.exe
464 cr3=0x037a9000 csrss.exe
504 cr3=0x03eef000 winlogon.exe
556 cr3=0x04467000 services.exe
572 cr3=0x044f9000 lsass.exe
728 cr3=0x050fe000 svchost.exe
788 cr3=0x06640000 wuauclt.exe
796 cr3=0x055fb000 svchost.exe
932 cr3=0x05fc1000 svchost.exe
1180 cr3=0x00ea2000 svchost.exe
1192 cr3=0x03425000 alg.exe
1216 cr3=0x0078a000 explorer.exe
1224 cr3=0x0021c000 conime.exe
1228 cr3=0x016a9000 svchost.exe
1264 cr3=0x0011e000 logon.scr
1440 cr3=0x04553000 spoolsv.exe
1700 cr3=0x0569b000 wuauclt.exe
1844 cr3=0x031d3000 ctfmon.exe
(qemu) trace 1228 /home/jiao/3
invalid char in expression

Alex Bazhanyuk

unread,
Jun 26, 2012, 2:14:28 PM6/26/12
to bitblaz...@googlegroups.com

try: (qemu) trace 1228 "/home/jiao/3"

Thanks,
Alex
--
Thanks,
Alex


roddam bramhini

unread,
May 10, 2013, 2:45:36 AM5/10/13
to bitblaz...@googlegroups.com
hi everyone,
when i am giving (qemu) trace 958 "/tmp/foo.trace", i am getting unknown command: trace
can anyone help me. it will be more useful for me.
thanks in advance
Reply all
Reply to author
Forward
0 new messages