GUI Usage

You need to have a process memory dump :

$ sudo haystack-dump dump 26725 dumps/myssh.dump

Then you can open it in the GUI :

$ haystack-gui # ( and Ctrl-O , click click)
$ haystack-gui --dumpfile dumps/myssh.dump

You can the search a structure into that memory mapping ( [heap] for now ). You have to import your extensions before that ( try sslsnoop.ctypes_openssh ) to have them listed in the search dialog.

Import extension module by using the (Ctrl-M) Tools menu.