[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] observing VM actions
From: |
Alexander Binun |
Subject: |
[Qemu-devel] observing VM actions |
Date: |
Thu, 24 Oct 2013 12:54:47 +0300 (IDT) |
I am trying to observe the memory/disk/network accesses done by a VM. The
resulting log can be used to decide whether a VM initiates a malicious action
(because , say, it runs a malicious software).
On Thu 24 Oct 11:49 2013 Stefan Hajnoczi wrote:
> On Thu, Oct 24, 2013 at 10:23 AM, Alexander Binun <address@hidden> wrote:
> > As for sniffing the traffic between VMs - I have yet one idea and I would
> > appreciate your feedback.
> [...]
> > That is, a sniffer in the Linux should be put at a kernel driver that makes
> > physical memory available to user space.
>
> I'm not sure what you are trying to do. Can you describe your goal?
>
> Depending on what you are trying to observe, there may already be
> sniffing or tracing mechanisms available.
>
> Stefan
>
- [Qemu-devel] sniffing traffic between VMs, Alexander Binun, 2013/10/07
- Re: [Qemu-devel] sniffing traffic between VMs, Stefan Hajnoczi, 2013/10/10
- [Qemu-devel] kvm binary is deprecated, Alexander Binun, 2013/10/10
- Re: [Qemu-devel] kvm binary is deprecated, Stefan Hajnoczi, 2013/10/11
- Re: [Qemu-devel] kvm binary is deprecated, Alexander Binun, 2013/10/12
- Re: [Qemu-devel] kvm binary is deprecated, Stefan Hajnoczi, 2013/10/14
- Re: [Qemu-devel] kvm binary is deprecated, Alexander Binun, 2013/10/14
- Re: [Qemu-devel] kvm binary is deprecated, Stefan Hajnoczi, 2013/10/14
- [Qemu-devel] kvm binary is deprecated - solved!, Alexander Binun, 2013/10/24
- Re: [Qemu-devel] kvm binary is deprecated - solved!, Stefan Hajnoczi, 2013/10/24
- [Qemu-devel] observing VM actions,
Alexander Binun <=