trolldbois / python-haystack

Process heap analysis framework - Windows/Linux - record type inference and forensics
http://trolldbois.blogspot.com/search?q=python-haystack
GNU General Public License v3.0
94 stars 33 forks source link

haystack-dump examples don't work #11

Closed dellis23 closed 8 years ago

dellis23 commented 8 years ago

I'm really keen to try this out, but I can't seem to get the examples working. Here's a few variations I've tried:

$ sudo haystack-dump 16873 output.dump
usage: memory_dumper [-h] [--compact] [--type TYPE] pid dumpname
memory_dumper: error: argument dumpname: invalid writeable value: 'output.dump'
$ sudo haystack-dump dump 16873 beaver.dump
usage: memory_dumper [-h] [--compact] [--type TYPE] pid dumpname
memory_dumper: error: argument pid: invalid int value: 'dump'
$ sudo haystack-dump 16873 dump output.dump
usage: memory_dumper [-h] [--compact] [--type TYPE] pid dumpname
memory_dumper: error: argument dumpname: invalid writeable value: 'dump'
$ sudo haystack-dump dump dumps/output.dump
usage: memory_dumper [-h] [--compact] [--type TYPE] pid dumpname
memory_dumper: error: argument pid: invalid int value: 'dump
trolldbois commented 8 years ago

The following should now work: sudo haystack-dump 16873 output.dump

dellis23 commented 8 years ago

Thanks!