.As it'll likely be a while before I migrate PIDA to MySQL, I wanted to pass along the following tip for those of you who are hitting the virtual memory consumption limitation when loading larged PIDA databases.
During the pida_dump analysis, select "bb" (basic blocks) instead of "full" analysis. Stalking does not require per-instruction information and there is a drastic reduction in memory usage when falling back from full to bb only. If you are stalking something even larger and are only interested in hit functions, you can further scale back to function only analysis.
As I get more questions from people I will add more tips under this specific topic.
![[+] expand](/imagery/files/soysauce_blueprint.gif){kind=link}