Comments (5)
Probably an improvement to the memory or file modules.
from mig.
Do you have an easy way to "reproduce" this case so I can see how the Memory module can understand this?
from mig.
Run perl -e "sleep(900);" &
, identify the pid of the process, then lsof PERLPID
. You'll see something like:
perl 96 root cwd DIR 253,1 4096 131073 /
perl 96 root rtd DIR 253,1 4096 131073 /
perl 96 root txt REG 253,1 11400 138558 /usr/bin/perl
perl 96 root mem REG 253,1 11376 132717 /usr/lib64/libfreebl3.so
perl 96 root mem REG 253,1 2107760 132678 /usr/lib64/libc-2.17.so
perl 96 root mem REG 253,1 141616 132874 /usr/lib64/libpthread-2.17.so
perl 96 root mem REG 253,1 14608 132946 /usr/lib64/libutil-2.17.so
perl 96 root mem REG 253,1 40816 132692 /usr/lib64/libcrypt-2.17.so
perl 96 root mem REG 253,1 1141552 132793 /usr/lib64/libm-2.17.so
perl 96 root mem REG 253,1 19512 132702 /usr/lib64/libdl-2.17.so
perl 96 root mem REG 253,1 113320 132818 /usr/lib64/libnsl-2.17.so
perl 96 root mem REG 253,1 110808 132881 /usr/lib64/libresolv-2.17.so
perl 96 root mem REG 253,1 1643224 262880 /usr/lib64/perl5/CORE/libperl.so
perl 96 root mem REG 253,1 164336 132654 /usr/lib64/ld-2.17.so
perl 96 root 0u CHR 136,1 0t0 4 /1
perl 96 root 1u CHR 136,1 0t0 4 /1
perl 96 root 2u CHR 136,1 0t0 4 /1
Copy /usr/lib64/perl5/CORE/libperl.so
to a temporary location, rm it, then copy it back.
lsof will show:
perl 96 root DEL REG 253,1 262880 /usr/lib64/perl5/CORE/libperl.so
Notice the DEL.
from mig.
If you move the file, it will appear in both lsof and masche with the new path.
If you delete the file it will appear in masche with (deleted) after its name, for example:
00400000-005a5000 r-xp 00000000 08:12 3019538 /tmp/perl2 (deleted)
So you can run for example:
listlibs -r="^.* (deleted)$" to see all the processes that have a deleted file mapped to memory, or -r="^.*.so (deleted)$" to limit it to .so files
from mig.
@mvanotti: Would you mind adding a section on how to search for deleted libraries to the cheatsheet and the memory module doc ?
from mig.
Related Issues (20)
- Implement API endpoint for documentation retrieval
- Implement API endpoint to retrieve module documentation
- Implement API endpoint for creating an action
- Implement API endpoint to dispatch a created action to the MIG API
- Implement API endpoint to check the status of a dispatched action
- Implement an action dispatch service
- Implement an action management service
- Implement API endpoints for action retrieval and adding signatures
- Deprecate mig.ninja namespace
- Feature Request: Get mig to parse ps -u output for processes run by specific usernames
- Client daemon fails to build with Yara module support
- Add options for gathering LLDP information via the netstat module HOT 2
- x509 Module HOT 1
- Kubernetes agent deployment
- Move all documentation over to markdown HOT 5
- Results count should indicate from how many systems
- SystemD unit file doesn't get updated when a new agent is installed
- Email address in Makefile is <noreply@> rather than something useful
- CODE_OF_CONDUCT.md file missing
- Ownership Transfer HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from mig.