[Lunar-commits] CVS: moonbase/utils/memdump BUILD, NONE, 1.1 DEPENDS, NONE, 1.1 DETAILS, NONE, 1.1

Florin Braescu florin at lunar-linux.org
Tue Aug 17 16:40:22 GMT 2004


Update of /var/cvs/lunar/moonbase/utils/memdump
In directory dbguin.lunar-linux.org:/tmp/cvs-serv26806

Added Files:
	BUILD DEPENDS DETAILS 
Log Message:
a memory dump utility. contributed by v3rt1g0.

--- NEW FILE: BUILD ---
(
  cd $SOURCE_DIRECTORY &&
  sedit "s/CFLAGS\t=/CFLAGS\t= $CFLAGS -I. \$(XFLAGS) \$(DEFS)/" Makefile &&
  make &&
  prepare_install &&
  mv memdump $MODULE_PREFIX/bin &&
  mv memdump.1 $MODULE_PREFIX/share/man/man1
) > $C_FIFO 2>&1

--- NEW FILE: DEPENDS ---
depends grep &&
depends sed

--- NEW FILE: DETAILS ---
          MODULE=memdump
         VERSION=1.0
          SOURCE=$MODULE-$VERSION.tar.gz
SOURCE_DIRECTORY=$BUILD_DIRECTORY/$MODULE-$VERSION
      SOURCE_URL=http://www.porcupine.org/forensics/$SOURCE
        WEB_SITE=http://www.porcupine.org/forensics
         ENTERED=20040817
	 UPDATED=20040817
           SHORT="The memory dump utility from The Coroner's Toolkit (TCT)"

cat << EOF
This is a memory dummper for UNIX-like systems.  It is part of The
Coroner's Toolkit (TCT), which is a collection of programs by Dan 
Farmer & Wietse Venema for a post-mortem analysis of a UNIX system
after break-in.

To dump physical memory: 
    memdump | nc host port
    memdump | openssl s_client -connect host:port

For best results send output off-host over the network. Writing to 
file risks clobbering all the memory in the file system cache. Use 
netcat, stunnel, or openssl, depending on your requirements.
EOF



More information about the Lunar-commits mailing list