how do i display/dump process memory on remote pc?

[FireRaven]

hi. i've searched the forums and been looking for a program like this for weeks now.

i'm not asking for a program or where i can find one, i'm asking if anyone has heard of such a program and if it exists what it is called.

i need a program that can display a process memory (perhaps in the form of a hex editor like ollydbg's or softice's dump window).
it's a fullscreen game i'm reading so i need it to work over two computers, tcp,ip,serial anything.

maybe like TSearch but tsearch can only view single values in remote mode and i need a full mem view.

PS: UsaMimi can do it but it's in japanease and the old version gives me errors when trying to connect remote.

cheers all!

[naides]

Perhaps using remote softice/visual softice over TCP may be a way to acomplish what you want.

[FireRaven]

trouble with softice you cant see it in real time, pressing ctrl+d to view it pauses everything.

also with remote softice i have a problem when if you ctrl+d out of softice in siremote, you can't get back in even on breakpoints and have to reset the target pc if attempted.

[disavowed]

Quote:

[Originally Posted by FireRaven]trouble with softice you cant see it in real time, pressing ctrl+d to view it pauses everything.

actually, by having it pause everything, you ARE seeing it in real time. if things weren't paused, then by the time you saw the data it could already be outdated.

you could always just use Remote Desktop or VNC to connect to the remote machine and then use a program on that system for reading the memory locally.

[FireRaven]

no, no. what i'm trying to get is so the target machine is running a fullscreen game, while on the host pc i'm viewing the mem data (at a spacific location) and i'm watching for patterns in the mem data as i do things in the game.

so the mem data would update every 500ms or so.

it's hard (in this case neally impossible) to look for patterns by flashing the softice screen back and forth.

[disavowed]

see my posting here: http://www.woodmann.com/forum/showpost.php?p=26522&postcount=29

[laola]

Have you had a look at the Microsoft WinDbg Tool? It offers remote debugging capabilities - preferrably over Firewire. The speed is really amazing

[o_o]

Quote:

[Originally Posted by laola]Have you had a look at the Microsoft WinDbg Tool? It offers remote debugging capabilities - preferrably over Firewire. The speed is really amazing

Nice i don't know much about firewire and never user windbg remote debugging so what kind of cable you use for that?
It's also possibile over usb?

'-'

[naides]

o_-


You use a firewire ($9.95 at your nearest CompuStore)

[laola]

Go download the package and RTFM It is a free download, but as Microsoft is always rebuilding their web site, better google for "Windbg" and "download"
It just costs you some bucks for the firewire cards (i got mine for like 6 bucks at ebay *g*) and a simple 6-6 Firewire cable (6-6 means the larger 6-pin connector on each side, if you connect a laptop, you will have to use a 6-4 cable in most cases as notebooks usually come with the smaller 4-pin connector due to size considerations - the only difference between (apart from the shape of the connector) is that the 4-pin version does not supply power. The additional two pins of the 6-pin connector just carry GND and +12V). The picture that naides attached shows a 6-4 cable, with the 6-pin connector in the center of the picture.
The interesting thing is that for remote debugging, you disable the firewire port in Windóws completely. The remote debug driver will load at boot time and take care of the firewire port itself

[Aimless]

Alternatively, you may try VIRTUTECH SIMICS...

Have Phun

[o_o]

Well i know my question sound stupid but i thought firewire worked like usb where you need a "special" cable to connect two pc

Btw ty ty for the answer '-'

[laola]

Alas, direct connection without a special linkup eletronic is not the only advantage of Firewire. Technically, Firewire beats USB any time. Unfortunately, big money is pushing the inferior technology again (as always). *sigh*