I have a 64 bit hvm guest and I''d like to capture when the execution
switches to kernel mode in the guest. I''ve tried to capture MSR reads
and
writes, but I only see writes to SYSENTER_CS/EIP/ESP registers once,
during initialization I suppose, but I don''t see any reads from these
registers as I''d expect when sysenter is called.
My goal is to capture when the execution jumps to guest kernel space
either through a system call or any other interrupt/exception. Is there a
way I can capture the privilege escalation? I''m mainly looking into
vmx_vmexit_handler, but I''m not even sure if the events I''m
looking for
trigger VMEXITs.
Thanks in advance.
John
_______________________________________________
Xen-users mailing list
Xen-users@lists.xensource.com
http://lists.xensource.com/xen-users
