Skip to content
trolldbois edited this page Jul 8, 2011 · 3 revisions

Haystack support the simple memdump format.

But haystack-gui will only work with a haystack dump format, as provided by haystack-dump.

The dump file format is a simple tar containing each memory map :

  • content in a file named after it’s start/end addresses ( 0x000700000-0x000800000 )

  • python haystack.model.MemoryMapping object pickled ( 0x000700000-0x000800000.pickled )

Clone this wiki locally