From owner-freebsd-questions@FreeBSD.ORG Thu Jun 8 10:04:10 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 810CB16C0DB for ; Thu, 8 Jun 2006 08:02:45 +0000 (UTC) (envelope-from tofik@oxygen.az) Received: from mail.azerin.com (mail.azerin.com [212.47.128.23]) by mx1.FreeBSD.org (Postfix) with SMTP id 5EF7043D45 for ; Thu, 8 Jun 2006 08:02:44 +0000 (GMT) (envelope-from tofik@oxygen.az) Received: (qmail 45406 invoked from network); 8 Jun 2006 08:03:04 -0000 X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on ml350.azerin.com X-Spam-Level: X-Spam-Status: No, score=-2.4 required=5.0 tests=AWL,BAYES_00, UNPARSEABLE_RELAY autolearn=ham version=3.1.1 Received: from qmail by qscan (mail filter); 8 Jun 2006 08:03:04 +0000 Received: from unknown (HELO ?212.47.129.5?) (212.47.129.5) by mail.azerin.com with SMTP; 8 Jun 2006 08:03:04 -0000 Message-ID: <4487D99F.103@oxygen.az> Date: Thu, 08 Jun 2006 11:02:39 +0300 From: Tofik Suleymanov User-Agent: Thunderbird 1.5.0.2 (X11/20060425) MIME-Version: 1.0 To: James Riendeau References: <4486A111.6020300@oxygen.az> <4486EFC8.6080601@oxygen.az> <4549C3E0-B98D-4648-9C7E-C3E8823D8B94@wisc.edu> <79C8EF08-A97C-4061-927C-1506DFA6FA6A@wisc.edu> In-Reply-To: <79C8EF08-A97C-4061-927C-1506DFA6FA6A@wisc.edu> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Tofik Suleymanov , freebsd-questions@freebsd.org Subject: Re: reading process memory X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Jun 2006 10:04:17 -0000 James Riendeau wrote: > I'm going to anticipate your next question, and say that if you're not > the parent, you will have to "attach" to the process. How that's > done? I don't know, probably through a system call to ptrace or > writing to the procfs ctl directory. I'm speaking through erudite > knowledge rather than any real experience working with procfs. > > -james > > > Continue reading this thread and you will see, that you are right. In order to read/write process memory we need to use either ptrace(2) system call or procfs. Thanks for all useful thoughts! Sincerely, Tofik Suleymanov