Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support address-only tracing formats #1

Open
guye1296 opened this issue Apr 21, 2021 · 2 comments
Open

Support address-only tracing formats #1

guye1296 opened this issue Apr 21, 2021 · 2 comments
Labels
enhancement New feature or request
Milestone

Comments

@guye1296
Copy link

First of all, awesome project!

It would be very helpful if you can add support for additional, more basic, tracing formats.
In many cases a collection of execution addresses is available but not the registers / memory.

If would be awesome if you could add support for a module + offset format like lighthouse (or additional formats as described here).

@gaasedelen
Copy link
Owner

Sure, this sounds reasonable.

Since Tenet traces are 'lossy' as is, you can just output an trace containing eip=... or rip=... and it should just work without any putting any other registers/mem in the trace. Try it!

I can certainly add 'mod+off' support, and it makes sense when dealing with something as simple as an instruction trace. I have to be at least a little bit more careful with how I translate or represent 'mod+off' in the views for a more standard trace though. I think that's probably one of the main reasons I didn't try to get it into the initial release.

@gaasedelen gaasedelen added the enhancement New feature or request label Apr 21, 2021
@gaasedelen gaasedelen added this to the v0.2.0 milestone Apr 21, 2021
@ViRb3
Copy link

ViRb3 commented May 5, 2021

Just as a note, x64dbg can be easily used to produce an address-only trace file and it works great:

image

Make sure that the base address (i.e. +0x180000000) matches that of IDA. Of course, it is just as easy to add more register information if necessary.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants