spender-sandbox / cuckoo-modified

Modified edition of cuckoo
395 stars 178 forks source link

how to customize process monitoring? #410

Open william-vu opened 7 years ago

william-vu commented 7 years ago

Hi, Currently I want to modify process monitoring mechanism in Cuckoo so that I will be able to capture the amount of data sent and received by a process while is running. One way to do this is to parse the pcap file, however, I would like to do this at the system level. Could you please give me a pointer to start? Thanks