-
Notifications
You must be signed in to change notification settings - Fork 3
print_PID_libraries
print_PID_libraries.exe - list files loaded into memory by a PID
print_PID_libraries.exe <PID>
print_PID_libraries.exe will resolve the symbolic links, if any, found in /proc/PID/map_files/ to determine what files has mapped into memory.
If you don't pass an argument to print_PID_libraries.exe, you'll know. If you don't pass a number, you'll know. If the PID you choose doesn't exist, you'll know. If there are no files, you'll know. If you don't have permissions to access a file, print_PID_libraries.exe will suggest you use 'sudo'.
Output will resolve the PID into its cmdline argument. It will also list a unique list of files that have been mapped into memory.
If you experience errors and wish to see more ERROR output, uncomment the "HARKLE_DEBUG" MACRO in "Latissimus_Dorsi/3-Internals/Harklerror.h", build with Make, and run it again.
git clone https://github.com/hark130/Latissimus_Dorsi.git
cd Latissimus_Dorsi
make print_PID_libraries
$ sudo ./print_PID_libraries.exe 4476
Parsing /proc/4476/ (/usr/sbin/cupsd)
Files loaded by /proc/4476/:
/usr/sbin/cupsd
/lib/x86_64-linux-gnu/libnss_files-2.23.so
[...snip...]
/lib/x86_64-linux-gnu/ld-2.23.so
/lib/x86_64-linux-gnu/libsystemd.so.0.14.0