How can I search the memory state of an process in Linux? Specifically I wish to identify certain regions of interest, and peek at them at regular intervals, possibly occasionally poking new values.
I suspect an answer may involve calls to ptrace(), and reading /proc/[pid]/mem, but need more to go on.
I’ve developed some code for the requested functionality.
The module memutil provides process memory region iteration, and python or C memory reading with assistance from the ptrace module, and readmem executable.
If there is any questions, or requests for standalone tools, just ask.