Memory accesses of OS processes

[moussaba]

Good Day,

I would like to gather statistics on memory accesses for processes under a vm, things like number of memory read, writes, time of occurence for specific processes in a VM. Does vprobe have events and mechanisms allowing me to gather this information? I am interested on gathering this data for both linux and windows.

Thank you.

[fixitchris]

Yes, did you watch the video? http://www.vmwarevideos.com/vmware-videoes-workstation-vprobes-record-replay-and-debugging

[moussaba]

I did watch the video, but the metrics I am interested in are apparently not directly supported by vprobe. Memory reads or writes are supported for specific addresses. In other words, you can use GUEST_READ or GUEST_WRITE:address to trigger an event. I am interested in watching a range of addresses where any reads or writes are recorded would trigger an event. A VMware engineer has already replied saying this is not supported. I am trying to find ways around this limitation as the maximum number probes per VM is currently 32.

[fixitchris]

I see what you are looking for... When I was first introduced to Vprobes, I was also under the impression that I could somehow use vprobes as a 'passive debugger'. This would have been awesome. Plus, the 32probe limit is another issue.

Have you verified that wildcards are not supported in linear addresses?