6:08 p.m.
Perhaps I'm off target here. I know that I was successfully obtaining
open ports and IP addresses from my memory dumps before. But I haven't
seen any output from the connections module or sockets for the last
while.
I have compared the results using the same image file, in
Memoryze/Audit Viewer and am getting the correct network info.
I'm wondering if this is a result of SP3? Or have I missed something.
Thanks.
Doug C.
2:48 a.m.
On Thu, Feb 19, 2009 at 8:08 AM, Doug Collins <cplcollins(a)gmail.com> wrote:
Perhaps I'm off target here. I know that I was
successfully obtaining
open ports and IP addresses from my memory dumps before. But I haven't
seen any output from the connections module or sockets for the last
while.
I got similar problem here, as I reported few days back: "sockets" and
"connections" commands dont work for me: they output nothing at all.
Actually these commands all work *well* on the sample images
(xp-laptop-*: a lot of open sockets and connections are reported), but
not on the image i created myself (using mdd and win32dd).
I tried with XP-SP2 and XP-SP3, and got the same problems.
Any idea how to fix this?
Thanks,
Jun
5747
days inactive
5748
days old
vol-users@lists.volatilityfoundation.org
1 comments
2 participants
participants (2)
-
Doug Collins -
Jun Koi