示例#1
0
 def Data(self):
     if self.Type == "CNAME":
         return self.m("Data").cast("Pointer",
                                    target="UnicodeString").deref()
     elif self.Type == "A":
         return utils.inet_ntop(
             socket.AF_INET, self.obj_vm.read(self.m("Data").obj_offset, 4))
示例#2
0
文件: dns.py 项目: dennisieur/rekall
 def Data(self):
     if self.Type == "CNAME":
         return self.m("Data").cast(
             "Pointer", target="UnicodeString").deref()
     elif self.Type == "A":
         return utils.inet_ntop(
             socket.AF_INET, self.obj_vm.read(self.m("Data").obj_offset, 4))
示例#3
0
 def v(self, vm=None):
     return utils.inet_ntop(socket.AF_INET6, obj.NativeType.v(self))
示例#4
0
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
import socket

from rekall import kb
from rekall import obj
from rekall.plugins.overlays import basic
from rekall.plugins.overlays.windows import pe_vtypes
from rekall_lib import utils


AF_INET = 2
AF_INET6 = 0x17

# String representations of INADDR_ANY and INADDR6_ANY
inaddr_any = utils.inet_ntop(socket.AF_INET, '\0' * 4)
inaddr6_any = utils.inet_ntop(socket.AF_INET6, '\0' * 16)

protos = {
    0:"HOPOPT",
    1:"ICMP",
    2:"IGMP",
    3:"GGP",
    4:"IPv4",
    5:"ST",
    6:"TCP",
    7:"CBT",
    8:"EGP",
    9:"IGP",
    10:"BBN-RCC-MON",
    11:"NVP-II",
示例#5
0
文件: basic.py 项目: scudette/rekall
 def v(self, vm=None):
     return utils.inet_ntop(socket.AF_INET6, obj.NativeType.v(self))
示例#6
0
#
from builtins import object
import socket

from rekall import kb
from rekall import obj
from rekall.plugins.overlays import basic
from rekall.plugins.overlays.windows import pe_vtypes
from rekall_lib import utils


AF_INET = 2
AF_INET6 = 0x17

# String representations of INADDR_ANY and INADDR6_ANY
inaddr_any = utils.inet_ntop(socket.AF_INET, b'\0' * 4)
inaddr6_any = utils.inet_ntop(socket.AF_INET6, b'\0' * 16)

protos = {
    0:"HOPOPT",
    1:"ICMP",
    2:"IGMP",
    3:"GGP",
    4:"IPv4",
    5:"ST",
    6:"TCP",
    7:"CBT",
    8:"EGP",
    9:"IGP",
    10:"BBN-RCC-MON",
    11:"NVP-II",