Accessing kernel symbols (in user-mode)

The SethMeister (consp05@binghamton.edu)
Sun, 30 Mar 1997 08:35:23 -0500


Hi guys,

Please forgive this beginner's question. I would like to view the
contents of kernel symbols while the system is up and running. I thought
all I had to do was look in /proc/ksyms and get the address, open up
/proc/kcore and do an fseek to that address then do a block read into the
variable structure of my choice, but that does not seem to work. I have
seen ALPHAs of a kernel debugger, but I don't think it works with the 2.1.x
releases. I remember seeing something about kernel memory layout changing,
but don't really know if that makes a difference here (I assume the
'context' in which /proc/kcore is 'referenced' is different from the kernel
context)... Can anyone point me to some help in finding the answer?

Thanks,
Seth