<div style="line-height:1.7;color:#000000;font-size:14px;font-family:Arial"><div>Hi</div><div>Your reply do works and I really appreciate it!</div><div>Actually I did some experiment on it and found that it only support virtue machine with 2GB memory.</div><div><br></div><div>Here I have got a new problem when trying to use syscalls2 plugin and write a plugin filereadmon(1st attachment).</div><div>Compiling it I got the wrong message as follows:</div><img src="cid:5c0e4a49$3$15f661375ac$Coremail$flowergot$126.com" orgwidth="1441" orgheight="1011" data-image="1" style="width: 773px; height: 542px;"><br><div>It says that on_NtReadFile_enter_t was not declared in this scope, but it was defined in "syscalls2/gen_syscalls_ext_typedefs.h" and I have included it.</div><div>Thanks in advance!</div><div><br></div><div>Evelyn</div><br><br><div style="position:relative;zoom:1"></div><div id="divNeteaseMailCard"></div><br>At 2017-10-24 04:51:09, "Samuele Aicardi" <aicardi@eurecom.fr> wrote:<br> <blockquote id="isReplyContent" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid"><div dir="auto"><div>Hi Evelyn, </div><div dir="auto"><br></div><div dir="auto">I think you can solve the error by adding the option "-m 512M" to the other ones you specify when you start your replay. </div><div dir="auto"><br></div><div dir="auto">As far as I know, when you execute a replay you need to specify the same parameters that you used when you took the recording. </div><div dir="auto"><br></div><div dir="auto">Hope that will be useful. </div><div dir="auto">Cheers, </div><div dir="auto"><br></div><div dir="auto">samaicardi</div><div dir="auto"><br></div><div dir="auto"><div dir="auto"><br><div class="elided-text">On Oct 23, 2017 13:01, Evelyn <<a href="mailto:flowergot@126.com">flowergot@126.com</a>> wrote:<br><blockquote style="margin:0 0 0 0.8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">Hi<div><span style="white-space:pre"> </span>I’m a new panda user and have got some problems with it. But I can’t access your <span style="background-color:rgb( 255 , 255 , 255 )">IRC channel on Freenode because I’ve been blocked from many foreign website during the time of the </span><span style="color:rgb( 68 , 68 , 68 );font-family:'arial';background-color:rgb( 255 , 255 , 255 )">19th CPC National Congress. Also, when following the instructions on github to subscribing to panda-users, I cannot see any </span><span style="background-color:rgb( 255 , 255 , 255 )"><font color="#444444" face="Arial">captcha to fill out though tired several web browsers such as safari and chrome. </font></span></div><div><span style="background-color:rgb( 255 , 255 , 255 )"><font color="#444444" face="Arial"><span style="white-space:pre"> </span>Here’s the problem，when using the </font></span>asidstory plugin:</div><div><span style="line-height:90%;text-indent:-0.25in;font-size:12pt;font-family:'calibri'"><br></span></div><div><span style="line-height:90%;text-indent:-0.25in;font-size:12pt;font-family:'calibri'">~/TOOLS/build-panda/i386-softmmu$
./qemu-system-i386 -</span><span style="line-height:90%;text-indent:-0.25in;font-size:12pt;font-family:'calibri'">os</span><span style="line-height:90%;text-indent:-0.25in;font-size:12pt;font-family:'calibri'"> windows-32-7 -replay foo</span><span style="line-height:90%;text-indent:-0.25in;font-size:12pt;font-family:'calibri'"> -panda </span><span style="line-height:90%;text-indent:-0.25in;font-size:12pt;font-family:'calibri'">osi</span><span style="line-height:90%;text-indent:-0.25in;font-size:12pt;font-family:'calibri'"> -panda win7x86intro -panda </span><span style="line-height:90%;text-indent:-0.25in;font-size:12pt;font-family:'calibri'">asidstory:width</span><span style="line-height:90%;text-indent:-0.25in;font-size:12pt;font-family:'calibri'">=180</span></div><div><br></div><div style="text-indent:-24px"><span style="white-space:pre"> </span>I got the following messages:</div>
<div style="margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed">os_type<span style="line-height:90%;font-size:12pt;font-family:'calibri'">=1 bits=32 </span><span style="line-height:90%;font-size:12pt;font-family:'calibri'">os_details</span><span style="line-height:90%;font-size:12pt;font-family:'calibri'">=[7]</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">Adding
PANDA </span><span style="font-size:12pt;font-family:'calibri'">arg</span><span style="font-size:12pt;font-family:'calibri'"> </span><span style="font-size:12pt;font-family:'calibri'">asidstory:width</span><span style="font-size:12pt;font-family:'calibri'">=180.</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">Initializing
plugin </span><span style="font-size:12pt;font-family:'calibri'">osi</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">OSI
grabbing Windows introspection backend.</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">panda_require</span><span style="font-size:12pt;font-family:'calibri'">: win7x86intro</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">Initializing
plugin win7x86intro</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">panda_require</span><span style="font-size:12pt;font-family:'calibri'">: </span><span style="font-size:12pt;font-family:'calibri'">wintrospection</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">Initializing
plugin </span><span style="font-size:12pt;font-family:'calibri'">wintrospection</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">panda_load_plugin</span><span style="font-size:12pt;font-family:'calibri'">: /home/</span><span style="font-size:12pt;font-family:'calibri'">yf</span><span style="font-size:12pt;font-family:'calibri'">/TOOLS/build-panda/i386-softmmu/panda/plugins/panda_win7x86intro.so
already loaded</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">Initializing
plugin </span><span style="font-size:12pt;font-family:'calibri'">asidstory</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">panda_require</span><span style="font-size:12pt;font-family:'calibri'">: </span><span style="font-size:12pt;font-family:'calibri'">osi</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">panda_load_plugin</span><span style="font-size:12pt;font-family:'calibri'">: /home/</span><span style="font-size:12pt;font-family:'calibri'">yf</span><span style="font-size:12pt;font-family:'calibri'">/TOOLS/build-panda/i386-softmmu/panda/plugins/</span><span style="font-size:12pt;font-family:'calibri'">panda_osi.so</span><span style="font-size:12pt;font-family:'calibri'"> already loaded</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">loading
snapshot</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">qemu-system-i386</span><span style="font-size:12pt;font-family:'calibri';color:red">: Length mismatch: </span><span style="font-size:12pt;font-family:'calibri';color:red">pc.ram</span><span style="font-size:12pt;font-family:'calibri';color:red">: 0x80000000 in != 0x8000000: Invalid
argument</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">qemu-system-i386:
error while loading state for instance 0x0 of device 'ram'</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">Failed
to load </span><span style="font-size:12pt;font-family:'calibri'">vmstate</span></div>
<div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="font-size:12pt;font-family:'calibri'">Failed
to start replay</span></div><div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed"><span style="white-space:pre"> </span>The host machine is Ubuntu 14.04 64bit, and virtue machine is windows7 32bit, with 512MB memory. Unfortunately, I cannot visit google as well, so is anyone could help me out? Hope to hear from you!</div><div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed">Best wishes!</div><div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed">Evelyn Wang</div><div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed">Tsinghua University</div><div style="line-height:90%;margin-top:10pt;margin-bottom:0pt;margin-left:0.25in;text-indent:-0.25in;direction:ltr;unicode-bidi:embed">Beijing, China</div>
</div></blockquote></div><br></div></div></div></blockquote></div><br><br><span title="neteasefooter"><div id="netease_mail_footer"><div style="border-top:#CCC 1px solid;padding:10px 5px;font-size:17px;color:#777;line-height:22px"><a href="http://you.163.com/item/detail?id=1165011&from=web_gg_mail_jiaobiao_9" target="_blank" style="color:#3366FF;text-decoration:none">【网易自营|30天无忧退货】仅售同款价1/4！MUJI制造商“2017秋冬舒适家居拖鞋系列”限时仅34.9元>> </a>
</div></div></span>