ReVirt

http://www.eecs.umich.edu/CoVirt/

ReVirt (part of the CoVirt project) is a complete Linux-on-Linux virtual 
machine with replay capability: you can explore the state of the entire 
virtual machine at any point in the past.  For example, if you discover 
an intruder, you can "go back in time" to see how they broke in, watch 
the exploit in progress, and discover what was compromised. The overhead 
of virtualization and logging is only 15-30%, even for kernel-intensive 
applications.
_______________________________________________
sweetcode mailing list
http://lists.ofb.net/listinfo/sweetcode
http://sweetcode.org/