-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
echo6 wrote:
Sadly it doesn't.
With the new object code I get:-
root@toshiba:# ./volatility.py pslist -f /dev/sdb
Usage: pslist [options] (see --help)
volatility.py: error: Image file required
Hiya Jon,
That's true, since pslist is an internal module. The internal modules
are still using the old object code, and open files themselves manually,
and so they won't work...
However, the good news is that I've tried the various internal plugins
that we've been converting, and they now seem to run against loopback
devices just fine (thanks to scudette for not using getsize!). 5:)
So I've tested pstree, connections, sockscan2, and they all work fine,
and since the address_space loading code is all the same, you shouldn't
have problems with the others. If you do, please let us know (IRC or
even an issue on the so-far pristine issue tracker!) and we'll try and
get it fixed up! 5:)
Once we've got all the modules moved over to plugins (item 3 on the todo
list), I'm going to go back through the code and remove any unnecessary
functions, and we'll be able to move all the object2 stuff to being just
plain object, and clean-up the namespace (item 1 on the todo list!).
After that (with some documentation as item 7), everything should be in
place for developers to start porting/writing new plugins! 5:)
Hope that sounds good?
Mike 5:)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)
iEYEARECAAYFAkq/8poACgkQu7rWomwgFXqu5gCcD9jORSbde1jf+BpooGqLFyKe
cPQAniOgr+4W80kBdhI84haHxg26/ONN
=sxr1
-----END PGP SIGNATURE-----