pmemdump - dump physical memory
$ pmemdump [-r] <offset> <length>
Dump a portion of the physical memory space.
-r
: Dump from /dev/mem with read(2)
instead of doing mmap(2)
on it.$ pmemdump -r 983040 65536
$ pmemdump 983040 65536
The pmemdump utility opens the /dev/mem
file, and gets a mapping by doing mmap(2)
on it.
Using the -r
flag might be useful sometimes, especially when reading from an unaligned reserved physical memory region when trying to mmap(2)
/dev/mem
on the specified offset fails.