I recently had a task which involved kernel patching. Actually, i had to write a patch, which could change TCP packets on the fly, which were sent by the program I've written recently. As i used the BackTrack 3 on VMWare while writing the program, i decided to replace the original kernel image with the new one, patched. It was done successfully.

Anyway, the thing i came across is that i couldn't find the original kernel binary of backtrack 3. Where does it boot from, as the /boot directory has been empty by default, and searching the whole system for kernel didn't succeed. After installing new kernel, some features were gone ( well that's quite understandable ). I'm just curious, where the original kernel is hidden ?

Thank you in advance.