[panda-users] PANDA IRC

[王一帆]

Hi
Your reply do works and I really appreciate it!
Actually I did some experiment on it and found that it only support virtue machine with 2GB memory.


Here I have got a new problem when trying to use syscalls2 plugin and write a plugin filereadmon(1st attachment).
Compiling it I got the wrong message as follows:


It says that on_NtReadFile_enter_t was not declared in this scope, but it was defined in "syscalls2/gen_syscalls_ext_typedefs.h" and  I have included it.
Thanks in advance!


Evelyn




At 2017-10-24 04:51:09, "Samuele Aicardi" <aicardi at eurecom.fr> wrote:

Hi Evelyn, 


I think you can solve the error by adding the option "-m 512M" to the other ones you specify when you start your replay. 


As far as I know, when you execute a replay you need to specify the same parameters that you used when you took the recording. 


Hope that will be useful. 
Cheers, 


samaicardi




On Oct 23, 2017 13:01, Evelyn <flowergot at 126.com> wrote:

Hi
I’m a new panda user and have got some problems with it. But I can’t access your IRC channel  on Freenode because I’ve been blocked from many foreign website during the time of the 19th CPC National Congress. Also, when following the instructions on github to subscribing to panda-users, I cannot see any captcha to fill out though tired several web browsers such as safari and chrome. 
Here’s the problem，when using the asidstory plugin:


~/TOOLS/build-panda/i386-softmmu$ ./qemu-system-i386 -os windows-32-7 -replay foo -panda osi -panda win7x86intro -panda asidstory:width=180


I got the following messages:
os_type=1 bits=32 os_details=[7]
Adding PANDA argasidstory:width=180.
Initializing plugin osi
OSI grabbing Windows introspection backend.
panda_require: win7x86intro
Initializing plugin win7x86intro
panda_require: wintrospection
Initializing plugin wintrospection
panda_load_plugin: /home/yf/TOOLS/build-panda/i386-softmmu/panda/plugins/panda_win7x86intro.so already loaded
Initializing plugin asidstory
panda_require: osi
panda_load_plugin: /home/yf/TOOLS/build-panda/i386-softmmu/panda/plugins/panda_osi.so already loaded
loading snapshot
qemu-system-i386: Length mismatch: pc.ram: 0x80000000 in != 0x8000000: Invalid argument
qemu-system-i386: error while loading state for instance 0x0 of device 'ram'
Failed to load vmstate
Failed to start replay
The host machine is Ubuntu 14.04 64bit, and virtue machine is windows7 32bit, with 512MB memory. Unfortunately, I cannot visit google as well, so is anyone could help me out? Hope to hear from you!
Best wishes!
Evelyn Wang
Tsinghua University
Beijing, China
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/panda-users/attachments/20171028/17f9457d/attachment-0001.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2017-10-29 10_50_32.png
Type: image/png
Size: 298606 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/panda-users/attachments/20171028/17f9457d/attachment-0002.png
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: filereadmon.cpp
Url: http://mailman.mit.edu/pipermail/panda-users/attachments/20171028/17f9457d/attachment-0001.pl
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot from 2017-10-29 10_50_32.png
Type: image/png
Size: 298606 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/panda-users/attachments/20171028/17f9457d/attachment-0003.png