search

puffyCid / artemis

A cross platform forensic parser written in Rust!
MIT License
59 stars 6 forks source link

Support for collecting active network connections #108

Open puffyCid opened 5 months ago

puffyCid commented 5 months ago

What new feature do you think would be cool to add to artemis? Artemis currently does not support collecting active network connections. It would be really cool if an user could collect network connections and associated process information. (similar to netstat)

Describe the solution you'd like Collect active network connections

Additional context Since active network connections only exist in memory, we will need to use OS APIs to collect them. The ideal solution is to find a Rust crate that supports collecting network connections on Windows, macOS, and Linux

puffyCid commented 1 month ago

https://github.com/GyulyVGC/listeners could be an interesting library that could provide this functionality. however, right now it only supports processes listening for TCP connections