No ranges dumped (0 byte file)? about lime HOT 9 CLOSED

Does your module version of Lime have the timeout option? If this is the case, try setting it to 0 in order to avoid problems with slow memory reads.

from lime.

from lime.

Are you using the latest version of the LiME source?

from lime.

from lime.

Hey @Manouchehri can you tell us more about your environment? Kernel version? Can you double check "/mnt/ext/" is writable?

from lime.

@pagabuc /mnt/ext/ is writeable, other programs can write to it. (The dump file is created, but it's empty; I don't think that could happen if it was read-only.)

Kernel is 2.6.x, PPC.

from lime.

mmm, can you put this debug print:
DBG("0x%016llx - 0x%016llx : NAME = %s", p->start, p->end, p->name);
at the beginning of this loop ?
From your log it seems it never gets inside..

from lime.

Having the exact same problem,

Oracle linux 5.8, kernel: 2.6.18-308.0.0.0.1.el5xen x86_64

Works fine in my VM, but on another target system:

[LiME] Parameters
[LiME] PATH: /tmp/test
[LiME] DIO: 0
[LiME] FORMAT: lime
[LiME] LOCALHOSTONLY: 0
[LiME] DIGEST:
[LiME] Initializing Dump...
[LiME] Direct IO Disabled
[LiME] Memory Dump Complete...

Will update with DBG suggestion and report back

EDIT: Output
[LiME] Parameters
[LiME] PATH: /tmp/test
[LiME] DIO: 0
[LiME] FORMAT: lime
[LiME] LOCALHOSTONLY: 0
[LiME] DIGEST:
[LiME] Initializing Dump...
[LiME] Direct IO Disabled
[LiME] inside loop: 0x00000000000a0000 - 0x00000000000bffff : NAME = Video RAM area
[LiME] Memory Dump Complete...

EDIT:

Update,

/proc/iomem is empty except for Video RAM Area

Is there a way to generate these mappings or modify LiME to grab the addresses another way?

from lime.

That's odd. LiME grabs the address by parsing the same structures as the /proc/iomem driver. I haven't come across a system that has the behavior that you describe. Any idea why it might be the case?

Is it possible that the system might be compromised and this is an anti-acquisition mechanism?

from lime.