From mboxrd@z Thu Jan  1 00:00:00 1970
From: Muhammed Aydin <maydin.work@gmail.com>
Subject: Re: Xen interfaces / hooks
Date: Wed, 21 Dec 2011 16:40:59 +0000
Message-ID: <CALF+9DEP5-Tb9NTzzwFF8WiWMmGQ2mTJ7vdp+adde0tYejRgGQ@mail.gmail.com>
References: <CALF+9DFCeYu2E1xBuHOW4n_7J9kz0H4Ngv1BY_Rn8d-SwDb3VA@mail.gmail.com>
	<1324475220.7877.32.camel@zakaz.uk.xensource.com>
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0953533349817179592=="
Return-path: <xen-devel-bounces@lists.xensource.com>
In-Reply-To: <1324475220.7877.32.camel@zakaz.uk.xensource.com>
List-Unsubscribe: <http://lists.xensource.com/mailman/options/xen-devel>,
	<mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xensource.com>
List-Help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-Subscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
Sender: xen-devel-bounces@lists.xensource.com
Errors-To: xen-devel-bounces@lists.xensource.com
To: Ian Campbell <Ian.Campbell@citrix.com>
Cc: "xen-devel@lists.xensource.com" <xen-devel@lists.xensource.com>
List-Id: xen-devel@lists.xenproject.org

--===============0953533349817179592==
Content-Type: multipart/alternative; boundary=0016364c7adf411c8704b49cd93a

--0016364c7adf411c8704b49cd93a
Content-Type: text/plain; charset=ISO-8859-1

Hi Ian,

Thanks for the response.

> Perhaps if you explain your actual end goal you can be better advised.

What we are planning to do is to insert some code which can automatically
utilise some instructions from forensics investigation tools (such as a
command line tools like Sleuthkit), and to do this automatically upon
starting up and shutdown / suspension of a virtual machine running on the
Xen hypervisor in order to aid forensic investigations. Nothing complicated
being added but we need to know exactly where we would need to put these
commands.

My understanding is that because this would be performed on the domain U
guest operating systems this change would need to be at the hypervisor
level rather than the dom 0. Could you advise on how to go about this
please? What I have been looking for is anything which could help me to do
this to Xen, such as a tutorial or a guide, and couldn't find anything.

All the best,

Muhammed

--0016364c7adf411c8704b49cd93a
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi Ian,<br><br>Thanks for the response.<br><br>&gt; Perhaps if you explain =
your actual end goal you can be better advised.<br><br>What we are planning=
 to do is to insert some code which can automatically utilise some instruct=
ions from forensics investigation tools (such as a command line tools like =
Sleuthkit), and to do this automatically upon starting up and shutdown / su=
spension of a virtual machine running on the Xen hypervisor in order to aid=
 forensic investigations. Nothing complicated being added but we need to kn=
ow exactly where we would need to put these commands.<br>
<br>My understanding is that because this would be performed on the domain =
U guest operating systems this change would need to be at the hypervisor le=
vel rather than the dom 0. Could you advise on how to go about this please?=
 What I have been looking for is anything which could help me to do this to=
 Xen, such as a tutorial or a guide, and couldn&#39;t find anything. <br>
<br>All the best,<br><br>Muhammed<br>
<br><br>

--0016364c7adf411c8704b49cd93a--


--===============0953533349817179592==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel

--===============0953533349817179592==--