vmitools

1–30 of 660

0 selected

hema Abhijit, levi destin2

10/6/21

Fwd: Stuck with windows offset identification to place in a libvmi config file on KVM Hypervisor

hi can you tell me how you created a windows guest from that wordpress On Thursday, July 26, 2018 at

unread,

Fwd: Stuck with windows offset identification to place in a libvmi config file on KVM Hypervisor

hi can you tell me how you created a windows guest from that wordpress On Thursday, July 26, 2018 at

10/6/21

hinoue, Tamas K Lengyel3

3/25/21

RIP does not advance in mem-event-example

Thanks! This makes sense, and I can see this from some of the other examples. -Jim On Tuesday, March

unread,

RIP does not advance in mem-event-example

Thanks! This makes sense, and I can see this from some of the other examples. -Jim On Tuesday, March

3/25/21

11/4/20

Help me Please!!! Please!!!

I request your help: When I write : virsh list --all It displays the VMs that are running [root @

unread,

Help me Please!!! Please!!!

I request your help: When I write : virsh list --all It displays the VMs that are running [root @

11/4/20

5/21/20

alt2pm requests fail

I'm using drakvuf. I can list processes fine with libvmi but I can't seem to get drakvuf

unread,

alt2pm requests fail

I'm using drakvuf. I can list processes fine with libvmi but I can't seem to get drakvuf

5/21/20

Jan Hoogerbrugge, Tamas K Lengyel4

2/8/20

Wait guest to start until VMI is ready

Check the registers. For arm64 there is no register events implemented like we have for x86 but you

unread,

Wait guest to start until VMI is ready

Check the registers. For arm64 there is no register events implemented like we have for x86 but you

2/8/20

Jan Hoogerbrugge, Tamas K Lengyel2

2/3/20

Page size of memory events

Xen only supports setting mem_access permissions on 4k granularity. There is right now no API that

unread,

Page size of memory events

Xen only supports setting mem_access permissions on 4k granularity. There is right now no API that

2/3/20

Winai Wongthai, … Fanny Dwargee59

1/23/20

Xen domU to domU inspection by libVMI

unread,

Xen domU to domU inspection by libVMI

1/23/20

shp.panha...@gmail.com, … CB Sites15

1/21/20

QEMU error : Domain not found: no domain with matching name 'ubuntu' while running process list example

I always hate dangling questions like this; so to answer the question simply; libvirtd needs to be

unread,

QEMU error : Domain not found: no domain with matching name 'ubuntu' while running process list example

I always hate dangling questions like this; so to answer the question simply; libvirtd needs to be

1/21/20

Jan H., Tamas K Lengyel2

1/21/20

Memory write events where memory is written by backend of a splitted driver

Since the backend doesn't map memory via EPT it won't trigger the EPT based monitor. This is

unread,

Memory write events where memory is written by backend of a splitted driver

Since the backend doesn't map memory via EPT it won't trigger the EPT based monitor. This is

1/21/20

12/28/19

To catch instructions running on VM

Hello All, We have set up one VM (Virtual Machine) (Ubuntu Desktop 16.04) on VMM (virtual-manager)

unread,

To catch instructions running on VM

Hello All, We have set up one VM (Virtual Machine) (Ubuntu Desktop 16.04) on VMM (virtual-manager)

12/28/19

Cesar Reyes, speddoju4

6/24/19

Reading FileName from _FILE_OBJECT structure.

Thanks Cesar!!! On Monday, June 24, 2019 at 3:55:55 PM UTC-4, Cesar Reyes wrote: Update: I was able

unread,

Reading FileName from _FILE_OBJECT structure.

Thanks Cesar!!! On Monday, June 24, 2019 at 3:55:55 PM UTC-4, Cesar Reyes wrote: Update: I was able

6/24/19

6/24/19

How to find File checksum of files running in VM on KVM hypervisor without system call trap

Hello All, Could you please help to find file checksum of file in memory of VM from KVM hypervisor

unread,

How to find File checksum of files running in VM on KVM hypervisor without system call trap

Hello All, Could you please help to find file checksum of file in memory of VM from KVM hypervisor

6/24/19

manch...@gmail.com, Tamas K Lengyel2

2/21/19

LibVMI on ARM32

PRIVCALL traps SMC instructions, not breakpoints. So using gdb in the guest will not trap into the

unread,

LibVMI on ARM32

PRIVCALL traps SMC instructions, not breakpoints. So using gdb in the guest will not trap into the

2/21/19

Patrick Colp, … mathieu...@gmail.com6

11/29/18

Future of LibVMI

On Wed, 2018-11-28 at 13:39 -0800, mathieu...@gmail.com wrote: > Hi Patrick, > > >

unread,

Future of LibVMI

On Wed, 2018-11-28 at 13:39 -0800, mathieu...@gmail.com wrote: > Hi Patrick, > > >

11/29/18

leon....@is.currently.online

6/7/18

Triggering an event inside a Linux Kernel Module

Hello, Over the past few days I've been using libvmi for some VM introspection and establishing a

unread,

Triggering an event inside a Linux Kernel Module

Hello, Over the past few days I've been using libvmi for some VM introspection and establishing a

6/7/18

Benjamin Taubmann, Tamas K Lengyel2

5/16/18

Linux Meltdown Patches and different DTB values

Yes, please feel free to open a PR with the fix. Tamas On Wed, May 16, 2018, 01:54 'Benjamin

unread,

Linux Meltdown Patches and different DTB values

Yes, please feel free to open a PR with the fix. Tamas On Wed, May 16, 2018, 01:54 'Benjamin

5/16/18

3/29/18

LibVMI Initialization Fails with KVM Patch

Wanted to add some information so it can save some time for others. Following message appeared

unread,

LibVMI Initialization Fails with KVM Patch

Wanted to add some information so it can save some time for others. Following message appeared

3/29/18

Junya Gao, Tamas K Lengyel2

3/14/18

vmi_read_addr_va returns VMI_FAILURE

My first thought was that he section might simply not be loaded into memory when you are doing the

unread,

vmi_read_addr_va returns VMI_FAILURE

My first thought was that he section might simply not be loaded into memory when you are doing the

3/14/18

Manohar Reddy, … Patrick Colp7

3/1/18

Help needed for getting started with libvmi

Based on your dom0 `ip addr` output it looks like your wireless device (wlp6s0) is the one connected

unread,

Help needed for getting started with libvmi

Based on your dom0 `ip addr` output it looks like your wireless device (wlp6s0) is the one connected

3/1/18

Benjamin Taubmann, Tamas K Lengyel2

2/19/18

Hi Benjamin, you might want to dust off this patch: https://lists.xenproject.org/archives/html/xen-

unread,

Hi Benjamin, you might want to dust off this patch: https://lists.xenproject.org/archives/html/xen-

2/19/18

rishiesh bhide, Tamas K Lengyel2

2/13/18

drakvuf performance query

Yes, that's expected. The majority of the overhead doesn't usually come from the callback

unread,

drakvuf performance query

Yes, that's expected. The majority of the overhead doesn't usually come from the callback

2/13/18

Muhammad Umair, Tamas K Lengyel3

2/10/18

drakvuf halts vm

Issue opened: https://github.com/tklengyel/drakvuf/issues/341 On Tuesday, 6 February 2018 23:36:53

unread,

drakvuf halts vm

Issue opened: https://github.com/tklengyel/drakvuf/issues/341 On Tuesday, 6 February 2018 23:36:53

2/10/18

manch...@gmail.com

1/14/18

vmi_get_va_pages does not return all pages

Hi, I want to catch VMI_MEMACCESS_X events to all pages of a process. I planned on doing so by

unread,

vmi_get_va_pages does not return all pages

Hi, I want to catch VMI_MEMACCESS_X events to all pages of a process. I planned on doing so by

1/14/18

1/14/18

vmi-win-guid fail to retrieve windows kernel in xen

Hi, I am new to xen and libvmi. I have install xen and libvmi in ubuntu 16.04. I have create dedicate

unread,

vmi-win-guid fail to retrieve windows kernel in xen

Hi, I am new to xen and libvmi. I have install xen and libvmi in ubuntu 16.04. I have create dedicate

1/14/18

Sofia Belikovetsky, … hitchar...@gmail.com13

12/10/17

Write APIs are not working on KVM

Hi, Using the QEMU 2.8 is the right way :) The solution that Tamas has suggested and added to the

unread,

Write APIs are not working on KVM

Hi, Using the QEMU 2.8 is the right way :) The solution that Tamas has suggested and added to the

12/10/17

hakim, Tamas K Lengyel4

12/5/17

Windows File Tracing

I would suggest you review the WRK to check how those system calls actually are being used. On Tue,

unread,

Windows File Tracing

I would suggest you review the WRK to check how those system calls actually are being used. On Tue,

12/5/17

takad...@gmail.com

11/2/17

getting large dump when running dump-memory example

Hello, While running dump-memory binary on win7 x64 (Xen vm) with 2 GB ram, I'm getting 4 GB dump

unread,

getting large dump when running dump-memory example

Hello, While running dump-memory binary on win7 x64 (Xen vm) with 2 GB ram, I'm getting 4 GB dump

11/2/17

Valerio Aimale, … Hardik Gohel5

11/2/17

New QEMU 2.4.0.1 patch for libvmi to work with qemu/kvm VMs

Hello I am trying to install kvm patch but it shows above error. Libvirt version is 1.3.1, libyajl.s0

unread,

New QEMU 2.4.0.1 patch for libvmi to work with qemu/kvm VMs

Hello I am trying to install kvm patch but it shows above error. Libvirt version is 1.3.1, libyajl.s0

11/2/17

Stewart Sentanoe

11/2/17

vmi_translate_uv2p returns 0

Hey All, So basically, I want to set a breakpoint which required the physical address so I use

unread,

vmi_translate_uv2p returns 0

Hey All, So basically, I want to set a breakpoint which required the physical address so I use

11/2/17

Youness Zougar, … Tamas K Lengyel8

10/16/17

Failed to enable vm_event

There should be none as long as you didn't enable XSM when you compiled Xen. With Xen 4.9 XSM is

unread,

Failed to enable vm_event

There should be none as long as you didn't enable XSM when you compiled Xen. With Xen 4.9 XSM is

10/16/17

Search

Clear search

Close search

Google apps

Main menu