smem-map

• Linux application

• Relies on /proc/<pid>/maps for memory locations

• Will also do an exhaustive search of all memory

• Relies on /proc/<pid>/mem for access to memory

• Repeatedly polls the memory locations

• Eliminates data that changes

• smem-map <pid> <output.map>

• Results in a memory map of a process’s static data in memory

• http://sourceforge.net/projects/smem-map/