[Lunar-commits]
CVS: moonbase/utils/memdump BUILD, NONE, 1.1 DEPENDS,
NONE, 1.1 DETAILS, NONE, 1.1
Florin Braescu
florin at lunar-linux.org
Tue Aug 17 16:40:22 GMT 2004
Update of /var/cvs/lunar/moonbase/utils/memdump
In directory dbguin.lunar-linux.org:/tmp/cvs-serv26806
Added Files:
BUILD DEPENDS DETAILS
Log Message:
a memory dump utility. contributed by v3rt1g0.
--- NEW FILE: BUILD ---
(
cd $SOURCE_DIRECTORY &&
sedit "s/CFLAGS\t=/CFLAGS\t= $CFLAGS -I. \$(XFLAGS) \$(DEFS)/" Makefile &&
make &&
prepare_install &&
mv memdump $MODULE_PREFIX/bin &&
mv memdump.1 $MODULE_PREFIX/share/man/man1
) > $C_FIFO 2>&1
--- NEW FILE: DEPENDS ---
depends grep &&
depends sed
--- NEW FILE: DETAILS ---
MODULE=memdump
VERSION=1.0
SOURCE=$MODULE-$VERSION.tar.gz
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$MODULE-$VERSION
SOURCE_URL=http://www.porcupine.org/forensics/$SOURCE
WEB_SITE=http://www.porcupine.org/forensics
ENTERED=20040817
UPDATED=20040817
SHORT="The memory dump utility from The Coroner's Toolkit (TCT)"
cat << EOF
This is a memory dummper for UNIX-like systems. It is part of The
Coroner's Toolkit (TCT), which is a collection of programs by Dan
Farmer & Wietse Venema for a post-mortem analysis of a UNIX system
after break-in.
To dump physical memory:
memdump | nc host port
memdump | openssl s_client -connect host:port
For best results send output off-host over the network. Writing to
file risks clobbering all the memory in the file system cache. Use
netcat, stunnel, or openssl, depending on your requirements.
EOF
More information about the Lunar-commits
mailing list