`dissect.etl`¶

Subpackages¶

Submodules¶

Package Contents¶

Classes¶

`ETL`	The main interface when controlling an ETL file.
`Buffer`

class dissect.etl.ETL(fh: BinaryIO)¶

The main interface when controlling an ETL file.

fh¶

first_buffer¶

buffer_header¶

trace_header¶

logfile_header¶

pointer_size¶

is_64bit¶

start_time¶

buffer_size¶

start¶

end¶

buffer(index: int) → Buffer¶: Reads a specific buffer into memory.

buffers() → Iterable[Buffer]¶

__iter__() → Iterable[Event]¶

calculate_timestamp(time_delta: int) → datetime.datetime¶

get_filetime_for_event(time_delta: int) → int¶

class dissect.etl.Buffer(etl: ETL, offset: int)¶

fh¶

etl¶

offset¶

property header: dissect.etl.utils.c_etl_headers.BufferHeader¶

property size: int¶

property data: memoryview¶

property data_offset: int¶

property filled_bytes: int¶

property next_buffer: int¶

__iter__() → Iterable[EventRecord]¶

read_record(offset: int) → EventRecord¶: Parse a record from a given offset inside a buffer.

open() → BinaryIO¶

exception dissect.etl.Error¶

Bases: Exception

Common base class for all non-exit exceptions.

exception dissect.etl.ExtendedDataItemException¶

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.InvalidBufferError¶

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.InvalidHeaderError¶

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.InvalidHookIdException¶

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.InvalidMarkerError¶

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.InvalidRecordError¶

Bases: Error

Common base class for all non-exit exceptions.

exception dissect.etl.ManifestNotFoundError¶

Bases: Error

Common base class for all non-exit exceptions.