Just a quick post today. Here’s the tool I mentioned in a previous blog entry. I slightly modified something, but the concept is still the same. I wanted to add something more, but at the moment it’s only a new line in my to-do list…
I don’t think you need a help for using the tool, it’s pretty stupid.
The code was written in few hours, but now I don’t have the time to test it carefully. For any bug/comment/criticism/whatever feel free to contact me.
September 27, 2007 at 4:00 pm
[...] http://zairon.wordpress.com/2007/09/19/tool-compare-vmware-snapshots/ [...]
October 8, 2007 at 3:56 am
Superb tool! Absolutely fantastic!
January 3, 2008 at 2:23 pm
Found your tool. Great stuff for checking memory changes.
The thing that is missing for me are the file system changes. I tried your tool on the *.vmdk files, but this does not work. Looking at the files with a hex editor gives no useable strings.
Can you help?
January 3, 2008 at 10:56 pm
The tool was designed to work on vmem files only, that’s why you have problems trying with vmdk files. What do you want to do exactly?
January 4, 2008 at 10:17 am
I am looking for a tool that can summerize all changes on a file system that an installation makes.
The idea is to start with a virgin snapshot. Then I want to install the software and take a new snapshot right after that. By comparing the filesystems of the two snapshots, the result is a diff that contains all new installed files.
I hope this gives you enough information.
January 12, 2008 at 1:58 pm
Hi Arthur.
I understand what you want to do but we should know the specific structure of a vmdk file. At the moment I have no idea about it, that’s the problem.
December 25, 2008 at 5:18 pm
Dear Zairon,
Wow, this is amazing program, help me much.
August 6, 2010 at 10:40 pm
Do you have an updated version of the VMWare snapshot program. When I try to run on a VMWare 7.1 snapshot the program crashes. Also I would like to just find all strings not just the onew you filtered on because I don’t know the name of the file I’m looking for.
September 14, 2010 at 8:12 pm
Hi Phil, I don’t have version 7.1 right now… can you tell me more about the crash?
September 21, 2010 at 9:56 am
What about Arthur’s questions?
am looking for a tool that can summerize all changes on a file system that an installation makes.
The idea is to start with a virgin snapshot. Then I want to install the software and take a new snapshot right after that. By comparing the filesystems of the two snapshots, the result is a diff that contains all new installed files.
I hope this gives you enough information.
Are there any tools which can compare file systems on two snapshots taken at different times?
September 27, 2010 at 2:03 pm
Hi, its really nice tool, would appreciate if any one can tell me about other tools that can compare registry, file system and memory than give a difference report between two snapshots.
January 15, 2011 at 1:25 am
This post is great. thank you for sharing these helpful infos. I appreciate your work man
July 5, 2011 at 4:20 pm
Hi,
Need some help regarding the RAM acquisition, when you take the snapshot of the RAM within the VMware, does it only show the processes running for the VMware O/S or does it also include the processes of the source O/S.
I am currenlty working on an the idea to isolate the RAM processes of VMware O/S for further comparison with different tools which change the RAM processes. As I need to develop a baseline which can help me distinguish the virgin RAM processes.
If you have any idea please share. This post really gave me hope to further my research.
Thanks.
November 3, 2011 at 8:08 pm
ComputerForum-Welt ist ein Forum in dem User bei Fragen und Problemen zum Computer austauschen koennen….
[...]Tool: Compare VMware snapshots « My infected computer[...]…