> > Ooh. Many routers (Cisco, Morningstar, etc) have the option to do a
> > crash dump via tftp. This has the advantage that its easily supported, and
> > the protocol is very simple. Would this be a reasonable approach? E.g.
> > dump /proc/kcore via tftp to a specified host.
>
> I think that would be a nice idea. Just needs someone to implement it ;)
Well... Imagine me wanting to crack your machine. So I'll sit on same
subnet, and make it crash. (Crash is easier than crack ;-). I'll make
your machine load shadow into memory. And then, I'll just listen.
Pavel
PS: But yes, in case we really need coredumps, this is probably the
good way to do it.
PS/2: If someone is interested, I've patch for magic sysrq keys to
work over network, including dmesg-like dump.
-- I'm really pavel@atrey.karlin.mff.cuni.cz. Pavel Look at http://atrey.karlin.mff.cuni.cz/~pavel/ ;-).