dissect.target.plugins.os.unix.linux.netstat

Module Contents

Classes

NetstatPlugin

Linux volatile netstat plugin.

Attributes

NETSTAT_HEADER
NETSTAT_TEMPLATE

dissect.target.plugins.os.unix.linux.netstat.NETSTAT_HEADER = Multiline-String

Show Value

"""Active Internet connections (only servers)
Proto       Recv-Q    Send-Q     Local Address      Foreign Address     State        User        Inode   PID/Program name   Command"""

dissect.target.plugins.os.unix.linux.netstat.NETSTAT_TEMPLATE = '{protocol:<12}{receive_queue:<10}{transmit_queue:<11}{local_addr:<19}{remote_addr:<20}{state:<13...

class dissect.target.plugins.os.unix.linux.netstat.NetstatPlugin(target: dissect.target.target.Target)

Bases: dissect.target.plugin.Plugin

Linux volatile netstat plugin.

check_compatible() → None

Perform a compatibility check with the target.

This function should return None if the plugin is compatible with the current target (self.target). For example, check if a certain file exists. Otherwise it should raise an UnsupportedPluginError.

Raises:

UnsupportedPluginError – If the plugin could not be loaded.

netstat() → collections.abc.Iterator[str]

This plugin mimics the output netstat -tunelwap would generate on a Linux machine.