Error attaching to VM, exiting

pfohjo / nitro

KVM-based virtual machine introspection for malware analysis

GNU General Public License v3.0

26 stars 8 forks source link

Error attaching to VM, exiting #2

Open allewwaly opened 9 years ago

allewwaly commented 9 years ago

When I run nitro with parameters of qemu pid number and guest ram file name in /tmp/hugetlbfs, it output error like "Error attaching to VM, exiting". After tracing back the error, I found the function kvm_ioctl(KVM_NITRO_ATTACH_VM, &creator) in libnitro.c returns errno 22 which means the parameters are wrong. So I believe the problem comes form the parameter "KVM_NITRO_ATTACK_VM" which is defined in nitro.h as _IOW(KVMIO, 0xE1, pid_t). Would you please check that? Thanks

yujokang commented 8 years ago

I see the error when I forget to to install the customized KVM module, which is needed for performing the system call interception. Once I installed it, it started working. It's a separate project, at https://github.com/pfohjo/nitro-kmod_build.git. And when you're done, make sure you have all virtual machines down before running the load_mods script.