From bee3f001b66fa6a9ba9b1e325cb2fa2e273f8ff2 Mon Sep 17 00:00:00 2001 From: Gustavo Moreira Date: Fri, 15 Nov 2024 11:31:30 +1100 Subject: [PATCH] linux: netfilter plugin: Enhance docstring to provide a clearer explanation of 'hooked' --- volatility3/framework/plugins/linux/netfilter.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/volatility3/framework/plugins/linux/netfilter.py b/volatility3/framework/plugins/linux/netfilter.py index 66075f907..b371d5ad2 100644 --- a/volatility3/framework/plugins/linux/netfilter.py +++ b/volatility3/framework/plugins/linux/netfilter.py @@ -174,7 +174,7 @@ class AbstractNetfilter(ABC): priority [int]: Priority hook_ops_hook [int]: Hook address module_name [str]: Linux kernel module name - hooked [bool]: hooked? + hooked [bool]: "True" if the network stack has been hijacked """ for netns, net in self.get_net_namespaces(): for proto_idx, proto_name, hook_idx, hook_name in self._proto_hook_loop():