ksanchezcld / volatility

Automatically exported from code.google.com/p/volatility
GNU General Public License v2.0
1 stars 0 forks source link

Sockets plugin makes Volatility very angry #202

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
When running the sockets plugin on an x86 Windows 7 RTM memory image, the 
framework gets unresponsive and my whole system bogs down. I have to kill the 
Volatility process to get control back.

Doing some digging, the framework is parsing a list of objects which it is 
building into an array. On other images the size of this list/Array is 
something like 0x1f. On the system in question the framework is attempting to 
create an Array based on a list of size 0x1b4f0a0. I'm not sure where this 
value is coming from, but it's my prime suspect as to what's going wrong.

I am using the /trunk code, r1340, on OS X, with Python 2.7.2.

Original issue reported on code.google.com by jessekornblum on 2 Feb 2012 at 1:39

GoogleCodeExporter commented 9 years ago
Please see Issue 201. 

Original comment by michael.hale@gmail.com on 2 Feb 2012 at 1:43