WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-06 17:57:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Parameterized generator

Browse Source
This commit is contained in:
Gustavo Moreira
2021-12-14 16:52:47 +11:00
parent b4bcdd0856
commit 8af7422928
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility3/framework/plugins/linux/sockstat.py
+8 -5
View File
@@ -333,14 +333,13 @@ class Sockstat(plugins.PluginInterface):
netns_id = net.proc_inum if net.has_member("proc_inum") else net.ns.inum
yield task, netns_id, fd_num, family, sock_type, protocol, sock_fields
def _generator(self):
pids = self.config.get('pids')
def _generator(self, pids, netns_arg, symbol_table):
filter_func = lsof.pslist.PsList.create_pid_filter(pids)
socket_generator = self.list_sockets(self.context, symbol_table, filter_func=filter_func)
tasks_per_sock = {}
socket_generator = self.list_sockets(self.context, self.config['kernel'], filter_func=filter_func)
for task, netns, fd_num, family, sock_type, protocol, sock_fields in socket_generator:
if self.config['netns'] and self.config['netns'] != netns:
if netns_arg and netns_arg != netns:
continue
sock, sock_stat, extended = sock_fields
@@ -367,6 +366,10 @@ class Sockstat(plugins.PluginInterface):
yield (0, fields)
def run(self):
pids = self.config.get('pids')
netns = self.config['netns']
symbol_table = self.config['kernel']
tree_grid_args = [("NetNS", int),
("Family", str),
("Type", str),
@@ -376,4 +379,4 @@ class Sockstat(plugins.PluginInterface):
("State", str),
("Tasks", str)]
return renderers.TreeGrid(tree_grid_args, self._generator())
return renderers.TreeGrid(tree_grid_args, self._generator(pids, netns, symbol_table))