Another thing is assuming NIFs are always shared objects you'd see them mapped in /proc/<pid>/maps . Probably worth keeping a copy of proc/maps and possibly one or two other proc things before and after something interesting happens. Jon