memdump

memdump dumps the content of the physical memory. The memory might contain something useful.

Note: Send the output of this tool over the network (ex. netcat) to avoid disrupting the filesystem cache memory.

Usage

Usage: memdump [options]

Option	Description
-b read_buffer_size	(default 0, use the system page size)
-k	Dump kernel memory instead of physical memory
-m map_file	Print memory map
-p memory_page_size	(default 0, use the system page size)
-s memory_dump-size	(default 0, dump all memory)
-v	Verbose mode for debugging