>Sorry, for some funny reason (mailing list software/mail server) I'm not getting hilbert's replies. But Andrew provided great answers. >Reading memory is usually done through /proc/<pid>/mem these days, as it is fastest. > >Reading registers for each thread is done by ptrace. > > regards, > > Andrew Dinn I totally get it . This is very helpful for me. Thanks.