..
    generated, remove this comment to keep this file

``sockets.packet``
==================

.. code-block:: console

    $ target-query <path/to/target> -f sockets.packet


.. list-table:: Details
    :widths: 20 80

    * - Module
      - ``dissect.target.plugins.os.unix.linux.sockets.NetSocketPlugin``
    * - Output
      - ``records``

**Module documentation**

Linux volatile net sockets plugin.

**Function documentation**

This plugin yields the packet sockets and available stats associated with them.

Yields PacketSocketRecord with the following fields:

.. code-block:: text

    hostname (string): The target hostname.
    domain (string): The target domain.
    protocol (str): packet.
    protocol_type (str): The canonical name of the captured protocol i.e. ETH_P_ALL.
    socket_type (int): The integer type of the socket (packet).
    sk (int): The socket number.
    iface (int): The interface index of the socket.
    r (int): The number of bytes that have been received by the socket and are waiting to be processed.
    rmem (int): The size of the receive buffer for the socket.
    uid (int): The user ID of the process that created the socket.
    inode (int): The inode associated to the socket.
    pid (int): The pid associated with this socket.
    name (string): The process name associated to this socket.
    cmdline (string): The command line used to start the socket with.
    owner (string): The resolved user ID of the socket.