From 5e549b2d9204b106c5acdf3248ceba3ef5503cb9 Mon Sep 17 00:00:00 2001 From: eve Date: Thu, 24 Apr 2025 09:10:51 +0100 Subject: [PATCH] Linux: update sockstat requirements --- .../framework/plugins/linux/sockscan.py | 18 ++++++++++++++---- 1 file changed, 14 insertions(+), 4 deletions(-) diff --git a/volatility3/framework/plugins/linux/sockscan.py b/volatility3/framework/plugins/linux/sockscan.py index 9f756ecc9..11ba8c5fb 100644 --- a/volatility3/framework/plugins/linux/sockscan.py +++ b/volatility3/framework/plugins/linux/sockscan.py @@ -11,9 +11,10 @@ from volatility3.framework.renderers import TreeGrid, NotAvailableValue, format_ from volatility3.framework.configuration import requirements from volatility3.framework.interfaces import plugins from volatility3.framework.symbols import linux -from volatility3.plugins.linux import sockstat -from volatility3.framework import symbols, constants +from volatility3.framework import symbols +from volatility3.plugins.linux import lsof, pslist, sockstat from volatility3.framework.layers import scanners +from volatility3.framework.symbols.linux import network vollog = logging.getLogger(__name__) @@ -33,10 +34,19 @@ class Sockscan(plugins.PluginInterface): architectures=["Intel32", "Intel64"], ), requirements.VersionRequirement( - name="SockHandlers", component=sockstat.SockHandlers, version=(1, 0, 0) + name="SockHandlers", component=sockstat.SockHandlers, version=(4, 0, 0) ), requirements.VersionRequirement( - name="linuxutils", component=linux.LinuxUtilities, version=(2, 1, 0) + name="lsof", component=lsof.Lsof, version=(2, 0, 0) + ), + requirements.VersionRequirement( + name="pslist", component=pslist.PsList, version=(4, 0, 0) + ), + requirements.VersionRequirement( + name="linuxutils", component=linux.LinuxUtilities, version=(2, 0, 0) + ), + requirements.VersionRequirement( + name="linux_net", component=network.NetSymbols, version=(1, 0, 0) ), ]