Are you running this code on Windows or Linux?
What does vProbeList show?
Thanks for the reply.
I am running this on Redhat ES Linux.
I'm not seeing a command for vProbeList, but I ran vmrun vprobeListProbes and got a list of items.... I do not have internet access from the system in question so I'll just summarize.
Total probes: 42
I do not see curprocname in the list.
Well, I tried this out on another Linux box I have around running Ubuntu 8.10. I have no problems on that machine at all. I'm guessing there is something missing from the Red Hat system, but I have no idea what it is. I am going to reload my main system as Ubuntu to continue testing VProbes instead of fighting with Red Hat.
The LIST command shows the events and global vars. If anything , curprocname would be a global var (second list), but I think it is user defined and not part of the default variables...
What is your plan for Vprobes?
It is more of a learning exercise than anything, but the current idea is to monitor the VM for process launches. We are going to try to monitor for malware introduced through external media (thumb drives, cd, etc.). If it is found an action will be taken... possibly a destroy and revert to snapshot action. Might work, might not.
Sounds pretty cool. Keep us updated.