From 8918b385a033c6d3adc80b77f1df1db0540395f7 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Sun, 13 Nov 2022 15:56:50 +0000 Subject: [PATCH] Windows: Improve nestat error checking Should partially solve #863 --- volatility3/framework/plugins/windows/netstat.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/volatility3/framework/plugins/windows/netstat.py b/volatility3/framework/plugins/windows/netstat.py index f7b285f05..651ca7696 100644 --- a/volatility3/framework/plugins/windows/netstat.py +++ b/volatility3/framework/plugins/windows/netstat.py @@ -427,6 +427,8 @@ class NetStat(interfaces.plugins.PluginInterface, timeliner.TimeLinerInterface): self.config_path) tcpip_module = self.get_tcpip_module(self.context, kernel.layer_name, kernel.symbol_table_name) + if not tcpip_module: + vollog.error("Unable to locate symbols for the memory image's tcpip module") try: tcpip_symbol_table = pdbutil.PDBUtility.symbol_table_from_pdb(