{"action":"created","issue":{"url":"https://api.github.com/repos/tklengyel/drakvuf/issues/125","repository_url":"https://api.github.com/repos/tklengyel/drakvuf","labels_url":"https://api.github.com/repos/tklengyel/drakvuf/issues/125/labels{/name}","comments_url":"https://api.github.com/repos/tklengyel/drakvuf/issues/125/comments","events_url":"https://api.github.com/repos/tklengyel/drakvuf/issues/125/events","html_url":"https://github.com/tklengyel/drakvuf/issues/125","id":150695449,"number":125,"title":"Problem in running DRAKVUF","user":{"login":"saaie","id":6352889,"avatar_url":"https://avatars.githubusercontent.com/u/6352889?v=3","gravatar_id":"","url":"https://api.github.com/users/saaie","html_url":"https://github.com/saaie","followers_url":"https://api.github.com/users/saaie/followers","following_url":"https://api.github.com/users/saaie/following{/other_user}","gists_url":"https://api.github.com/users/saaie/gists{/gist_id}","starred_url":"https://api.github.com/users/saaie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/saaie/subscriptions","organizations_url":"https://api.github.com/users/saaie/orgs","repos_url":"https://api.github.com/users/saaie/repos","events_url":"https://api.github.com/users/saaie/events{/privacy}","received_events_url":"https://api.github.com/users/saaie/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2016-04-24T20:05:54Z","updated_at":"2016-04-24T22:06:29Z","closed_at":null,"body":"I followed all steps in drakvuf.com and the installation completed. But i get error with running command below:\r\n`drakvuf -r /root/win7x64.rekall.json -d 1` \r\n------------------------------------------------------------\r\nDRAKVUF v0.2\r\nInit VMI on domID 1 -> win7x64\r\nxc: error: Failed to populate ring pfn\r\n (16 = Device or resource busy): Internal error\r\nVMI_ERROR: vm_event is (or was) active on this domain\r\nVMI_ERROR: Failed to initialize xen events.\r\nFailed to init LibVMI library.\r\n\r\n(process:10810): GLib-CRITICAL **: g_hash_table_destroy: assertion 'hash_table != NULL' failed\r\nVMI_ERROR: Error disabling monitor vm_event ring.\r\nterminate called after throwing an instance of 'int'\r\nAborted (core dumped)\r\n---------------------------------------------------------------\r\nxl info output:\r\n--------------------------xl info-------------------------------------\r\nhost                   : SaenaLab\r\nrelease                : 4.5.1-1-ARCH\r\nversion                : #1 SMP PREEMPT Thu Apr 14 19:19:32 CEST 2016\r\nmachine                : x86_64\r\nnr_cpus                : 8\r\nmax_cpu_id             : 7\r\nnr_nodes               : 1\r\ncores_per_socket       : 4\r\nthreads_per_core       : 2\r\ncpu_mhz                : 2591\r\nhw_caps                : bfebfbff:2c100800:00000000:00007f00:77fafbbf:00000000:00000121:029c6fbf\r\nvirt_caps              : hvm hvm_directio\r\ntotal_memory           : 8087\r\nfree_memory            : 236\r\nsharing_freed_memory   : 0\r\nsharing_used_memory    : 0\r\noutstanding_claims     : 0\r\nfree_cpus              : 0\r\nxen_major              : 4\r\nxen_minor              : 6\r\nxen_extra              : .1\r\nxen_version            : 4.6.1\r\nxen_caps               : xen-3.0-x86_64 xen-3.0-x86_32p hvm-3.0-x86_32 hvm-3.0-x86_32p hvm-3.0-x86_64 \r\nxen_scheduler          : credit\r\nxen_pagesize           : 4096\r\nplatform_params        : virt_start=0xffff800000000000\r\nxen_changeset          : \r\nxen_commandline        : dom0_mem=3600M,max:3600M dom0_max_vcpus=4 dom0_vcpus_pin=true hap_1gb=false hap_2mb=false altp2m=1\r\ncc_compiler            : gcc (GCC) 5.3.0\r\ncc_compile_by          : amin\r\ncc_compile_domain      : \r\ncc_compile_date        : Sun Apr 24 13:11:44 IRDT 2016\r\nxend_config_format     : 4\r\n------------------------------xl info------------------------------------------\r\nI'm using Arch Linux."},"comment":{"url":"https://api.github.com/repos/tklengyel/drakvuf/issues/comments/214046054","html_url":"https://github.com/tklengyel/drakvuf/issues/125#issuecomment-214046054","issue_url":"https://api.github.com/repos/tklengyel/drakvuf/issues/125","id":214046054,"user":{"login":"saaie","id":6352889,"avatar_url":"https://avatars.githubusercontent.com/u/6352889?v=3","gravatar_id":"","url":"https://api.github.com/users/saaie","html_url":"https://github.com/saaie","followers_url":"https://api.github.com/users/saaie/followers","following_url":"https://api.github.com/users/saaie/following{/other_user}","gists_url":"https://api.github.com/users/saaie/gists{/gist_id}","starred_url":"https://api.github.com/users/saaie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/saaie/subscriptions","organizations_url":"https://api.github.com/users/saaie/orgs","repos_url":"https://api.github.com/users/saaie/repos","events_url":"https://api.github.com/users/saaie/events{/privacy}","received_events_url":"https://api.github.com/users/saaie/received_events","type":"User","site_admin":false},"created_at":"2016-04-24T22:06:29Z","updated_at":"2016-04-24T22:06:29Z","body":"Are these usefull?\r\n-----------------------------\r\n(gdb) backtrace full\r\n#0  0x00007ffff61ab2a8 in raise () from /usr/lib/libc.so.6\r\nNo symbol table info available.\r\n#1  0x00007ffff61ac72a in abort () from /usr/lib/libc.so.6\r\nNo symbol table info available.\r\n#2  0x00007ffff67be7cd in __gnu_cxx::__verbose_terminate_handler () at /build/gcc/src/gcc-5-20160209/libstdc++-v3/libsupc++/vterminate.cc:95\r\n        terminating = true\r\n        t = <optimized out>\r\n#3  0x00007ffff67bc636 in __cxxabiv1::__terminate (handler=<optimized out>) at /build/gcc/src/gcc-5-20160209/libstdc++-v3/libsupc++/eh_terminate.cc:47\r\nNo locals.\r\n#4  0x00007ffff67bc681 in std::terminate () at /build/gcc/src/gcc-5-20160209/libstdc++-v3/libsupc++/eh_terminate.cc:57\r\nNo locals.\r\n#5  0x00007ffff67bc898 in __cxxabiv1::__cxa_throw (obj=0x5555557ac1c0, tinfo=0x7ffff6aa3070 <typeinfo for int>, dest=0x0) at /build/gcc/src/gcc-5-20160209/libstdc++-v3/libsupc++/eh_throw.cc:87\r\n        globals = <optimized out>\r\n#6  0x0000555555580910 in drakvuf_c::drakvuf_c (this=<optimized out>, domain=<optimized out>, rekall_profile=<optimized out>, output=<optimized out>, timeout=<optimized out>) at drakvuf.cpp:170\r\nNo locals.\r\n#7  0x00005555555805f6 in main (argc=<optimized out>, argv=<optimized out>) at main.cpp:198\r\n        output = OUTPUT_DEFAULT\r\n        injection_pid = -1\r\n        timeout = 0\r\n        rc = 0\r\n        dump_folder = <optimized out>\r\n        c = <optimized out>\r\n        domain = <optimized out>\r\n        rekall_profile = <optimized out>\r\n        inject_cmd = <optimized out>\r\n        act = <optimized out>\r\n"}}