10:33 p.m.
WARNING : volatility.obj : NoneObject as string: Pointer Owner invalid
I saw some people also having the same issues, but I am not seeing the fix anywhere.
Suggestions?
8:37 a.m.
Hi Ryan,
I'm running Xubuntu 14.04 and I can't seem to replicate the problem.
I run the latest version of volatility from github, updating via:
$ cd path/to/volatility
$ git pull origin
And always worth a clean up after a pull. Within the volatility folder:
$ make clean
Then run the netscan plugin:
$ python vol.py --profile=Win7SP1x64 -f path/to/memory.raw netscan
Volatility Foundation Volatility Framework 2.4
Offset(P) Proto LocalAddr ForeignAddr State
PID Owner Created
0x1e479900 UDPv4 192.168.56.101:137 *:* 4
System 2014-03-23 21:02:19 UTC+0000
0x1e479ec0 UDPv4 192.168.56.101:138 *:* 4
System 2014-03-23 21:02:19 UTC+0000
0x1e49c640 UDPv4 0.0.0.0:0 *:* 720
svchost.exe 2014-03-23 21:02:19 UTC+0000
--SNIP--
Let us know how you get on,
Adam
On Sat Dec 27 2014 at 03:20:03 Gibson, Ryan <gryan(a)qualcomm.com> wrote:
WARNING : volatility.obj : NoneObject as string:
Pointer Owner
invalid
I saw some people also having the same issues, but I am not seeing the
fix anywhere. Suggestions?
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
9:48 a.m.
Hey Ryan,
This happens as netscan is scanning for potentially freed structures.
This means as the validation happens some members will be invalid, hence
the warning, and/or that some members of a structure may be valid while
others have been overwritten. These structures can still have useful
data though so we print as much valid information as we can get.
If you see this message only a couple times when running a plugin then
you can ignore it, especially in the *scan plugins.
Thanks,
Andrew (@attrc)
On 12/23/2014 09:33 PM, Gibson, Ryan wrote:
WARNING : volatility.obj : NoneObject as string:
Pointer Owner invalid
I saw some people also having the same issues, but I am not seeing the
fix anywhere. Suggestions?
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
3603
days inactive
3613
days old
vol-users@lists.volatilityfoundation.org
2 comments
3 participants
participants (3)
-
Andrew Case -
Bridgey theGeek -
Gibson, Ryan