diff --git a/volatility3/framework/plugins/linux/sockscan.py b/volatility3/framework/plugins/linux/sockscan.py index 9f756ecc9..11ba8c5fb 100644 --- a/volatility3/framework/plugins/linux/sockscan.py +++ b/volatility3/framework/plugins/linux/sockscan.py @@ -11,9 +11,10 @@ from volatility3.framework.renderers import TreeGrid, NotAvailableValue, format_ from volatility3.framework.configuration import requirements from volatility3.framework.interfaces import plugins from volatility3.framework.symbols import linux -from volatility3.plugins.linux import sockstat -from volatility3.framework import symbols, constants +from volatility3.framework import symbols +from volatility3.plugins.linux import lsof, pslist, sockstat from volatility3.framework.layers import scanners +from volatility3.framework.symbols.linux import network vollog = logging.getLogger(__name__) @@ -33,10 +34,19 @@ class Sockscan(plugins.PluginInterface): architectures=["Intel32", "Intel64"], ), requirements.VersionRequirement( - name="SockHandlers", component=sockstat.SockHandlers, version=(1, 0, 0) + name="SockHandlers", component=sockstat.SockHandlers, version=(4, 0, 0) ), requirements.VersionRequirement( - name="linuxutils", component=linux.LinuxUtilities, version=(2, 1, 0) + name="lsof", component=lsof.Lsof, version=(2, 0, 0) + ), + requirements.VersionRequirement( + name="pslist", component=pslist.PsList, version=(4, 0, 0) + ), + requirements.VersionRequirement( + name="linuxutils", component=linux.LinuxUtilities, version=(2, 0, 0) + ), + requirements.VersionRequirement( + name="linux_net", component=network.NetSymbols, version=(1, 0, 0) ), ]